D-Link DWC-1000, Reference Manual

Page 1: ...Wireless Controller CLI Reference Guide DWC 1000 Ver 1 01 Building Networks for People Business Wireless Solution...

Page 2: ...CLI Reference Guide Wireless Controller D Link Corporation Copyright 2011 http www dlink com...

Page 3: ...particular purpose The manufacturer reserves the right to revise this publication and to make changes from time to time in the content hereof without obligation of the manufacturer to notify any pers...

Page 4: ...ands used in CLI 17 6 1 WLAN Management 17 6 2 System 22 6 3 Net 22 6 4 VPN 24 6 5 Security 25 6 6 RADIUS 26 6 7 Help 26 Chapter 7 Configuration commands 27 7 1 License Activation commands 27 7 2 Glob...

Page 5: ...el configure 47 8 24 wlan global snmp_trap configure 47 8 25 wlan global configure 47 8 26 wlan peer_controller configure 48 8 27 wlan peer_controller push_configuration ipaddr 49 8 28 wlan wids_secur...

Page 6: ...tem group access_control_ip add 64 9 33 system group access_control_ip delete ltrow_id 64 Chapter 10 Configuration commands UTIL 65 10 1 util system_check ping ltip_address 65 10 2 util system_check d...

Page 7: ...cp reserved_ip delete ltmac_address 73 12 6 net Option dhcpc configure 73 12 7 net dmz configure 73 12 8 net dmz dhcp reserved_ip configure ltmac_address 74 12 9 net dmz dhcp reserved_ip delete ltmac_...

Page 8: ...ult route ltip_address 107 12 51 net tahi add route ltip_address ltgw 107 12 52 net tahi del route ltip_address ltgw 108 12 53 net tahi ipv6 Alias Add LAN ltip6_address 108 12 54 net tahi ipv6 Alias D...

Page 9: ...cies ltrow_id 120 13 33 vpn sslvpn users users ip_policies configure ltrow_id 121 13 34 vpn sslvpn users users ip_policies delete ltrow_id 121 13 35 vpn sslvpn users users delete ltrow_id 121 13 36 vp...

Page 10: ...dit ltrow_id 137 14 32 security mac_filter source delete ltrow_id 137 14 33 security ip_or_mac_binding add 137 14 34 security ip_or_mac_binding edit ltrow_id 138 14 35 security ip_or_mac_binding delet...

Page 11: ...Wireless Controller CLI Reference Guide 9 17 2 License activate ltactivationKey 143...

Page 12: ...the system and should be used only by those users who are familiar with CLI based configuration Note that the following features in the DWC 1000 wireless controller cannot be managed by the CLI Firmw...

Page 13: ...11 Chapter 2 Accessing the CLI The CLI can be accessed by logging in with the same user credentials as used to access the web browser based UI Welcome to the DWC 1000 Command Line Interface D Link DW...

Page 14: ...o completes syntax checks then executes a command If there is a syntax error then offending part of the command line will be highlighted and explained space Auto completes or if the command is already...

Page 15: ...troller CLI Reference Guide 13 3 5 ESCAPE SEQUENCES Substitute the last command line N Substitute the Nth command line absolute as per history command N Substitute the command line entered N lines bef...

Page 16: ...nds Configuration commands 4 2 Configration commands are sub divided into the following WLAN System Utilities UTIL QoS Networking net Virtual Private Area Network VPN Security History RADUIS License A...

Page 17: ...Wireless Controller CLI Reference Guide 15 SNMP configration Peer Controller configuration WIDS configuration AP Validation Configuration Country Configuration Wireless switch configuration...

Page 18: ...t Exit this session help Display an overview of the CLI syntax top Return to the default mode reboot Reboot the system history Display the current session s command line history Number of commands in...

Page 19: ...abase Display LocalOUI Database 12 show wlan ap_management discovery status Display Discovery parameters 13 show wlan ap_management discovery ip_list Display IP Poll discovery list 14 show wlan ap_man...

Page 20: ...2 Distributed Tunnel statistics for AP 47 show wlan ap_conf macaddr dist_tunnel_status ltmacaddr Display L2 Distributed Tunnel status for AP 48 show wlan ap_conf macaddr failure_status ltmacaddr Displ...

Page 21: ...tunnel ltmacaddr Display associated client L2 Distributed Tunnel information 82 show wlan client macaddr neighbor_ap ltmacaddr Display status parameters of neighbor AP seen by client 83 show wlan cli...

Page 22: ...r_switch configuration receive_status Display status for configuration received froma peer sw itch 117 show wlan peer_switch configuration request_status Display status for a peer sw itch configuratio...

Page 23: ...ocation Display all device location parameters 155 show wlan device_location status Display all device location parameters 156 show wlan device_location ap Display all AP Triangulation Location Table...

Page 24: ...y Display logging facility configuration 6 show systemlogging ipv4 7 show systemlogging ipv4 setup Display logging configuration 8 show systemlogging ipv6 9 show systemlogging ipv6 setup Display ipv6...

Page 25: ...et Ip_Alias show Ip Alias server details 30 show net Ip_Alias server show Ip Alias configuration details 31 show net Ip_Alias server setup Display net Intel_Amt server setup 32 show net mode 33 show n...

Page 26: ...ve the description of all the show commands in the branch vpn which is as follows Sl No Command Name Purpose 1 show vpn l2tp show l2tp server details 2 show vpn l2tp server show l2tp server details 3...

Page 27: ...ication rules configuration 6 show security application_rules status Display application rules status 7 show security firewallcustom_service 8 show security firewallcustom_service setup Display Custom...

Page 28: ...as follows Sl No Command Name Purpose 1 radius configure ltradius_server RADIUS configuration mode 2 radius delete ltradius_server Delete a RADIUS configuration mode 6 7 Help The command help at the C...

Page 29: ...figuration commands in the branch reboot which is as follows Sl No Command Name Purpose 1 reboot Reboot the system The command exit at the CLI prompt would give the description of all the configuratio...

Page 30: ...sjumbo_frame jumbo frame setup 29 systemsw itch_settingspower_saving configure pow er saving configuration mode 30 systemsw itch_settingsjumbo_frame configure jumbo frame configuration mode 31 systemt...

Page 31: ...kping ltip_address Ping an Internet Address 4 util system_checkdns_lookup ltdns To retrieve the IP address of a Web FTP Mail or any other Server on the Internet 5 util system_checktraceroute ltip_addr...

Page 32: ...dscp remarking 23 qos lan cos to dscp remarking disable disables cos to dscp remarking 24 qos lan cos to dscp remarking status Display status of cos to dscp remarking 25 qos lan cos to dscp remarking...

Page 33: ...net ddns Option1 DDNS setup 6 net ddns Option2 DDNS setup 7 net ddns Option1 configure DDNS configuration mode 8 net ddns Option2 configure DDNS configuration mode 9 net lan dhcp DHCP setup 10 net lan...

Page 34: ...ion mode 54 net Option Option2 ipv4 configure ipv4 Option Option2 configuration mode 55 net Option Option mode configuration mode 56 net Option mode Option mode configuration mode 57 net Option mode c...

Page 35: ...ress add ipv6 default route on lan interface 101 net tahi delete default route delete ipv6 default route on lan interface 102 net tahi add route ltip_address ltgw add ipv6 route on lan interface 103 n...

Page 36: ...configure Upnp configuration mode 7 7 VPN configuration commands The command vpn at the CLI prompt would give the description of all the configuration commands in the branch vpn which is as follows Sl...

Page 37: ...users domains edit ltrow_id Users domain configuration mode 43 vpn sslvpn users domains delete ltrow_id Users domain delete mode 44 vpn sslvpn users groups add Users groups configuration mode 45 vpn s...

Page 38: ...lipv4 disable ltrow_id Firew allIPV4 Rules configuration mode 21 security firewallipv4 delete ltrow_id Firew allIPV4 Rules configuration mode 22 security firewallipv4 move ltrow_id Firew allIPV4 Rule...

Page 39: ...w ords configuration setup 56 security website_filter content_filtering configure content filtering configuration mode 57 security website_filter approved_urls add trusted domains configuration mode 5...

Page 40: ...w lan ap management rf management configuration mode 13 w lan ap_management poll_list configure w lan ap management poll list configuration mode 14 w lan ap_management poll_list delete_ip_address ipa...

Page 41: ...w ids_security client configure w lan w ids_security client configuration mode 49 w lan w lan_global_setting Wireless Global Configuration 50 w lan w lan_global_setting ap_validation Configure the AP...

Page 42: ...security mode Stand Alone AP Security Mode 13 w ired mode Configure the stand alone AP expected w ired netw orkmode stand alone AP expected w ired network mode 14 radio1 sentry Configure fixed radio...

Page 43: ...1b g n pow er Configure a fixed transmit pow er for the radio range of pow er perventage 8 4 wlan ap_management ap_database delete macaddr S No CommandName Description Type and Description 1 macaddr w...

Page 44: ...ach part is in the range 0 255 8 8 wlan ap_management poll_list delete_vlan_list id S No CommandName Description Type and Description 1 id w lan ap management poll list delete an vlanid Unsigned integ...

Page 45: ...base delete ouival S No CommandName Description Type and Description 1 ouival w lan ap management ap database delete an oui value String 8 13 wlan ap_profile add profileid S No CommandName Description...

Page 46: ...le ID w ireless radio interface 2 save Save AP profile radio settings 3 exit Save AP profile radio settings and exit current mode 4 cancel Roll back AP profile radio settings changes 5 mode Configure...

Page 47: ...meters or Station EDCA parameters 7 edca_queue Select w hich EDCA queue to configure background best effort video voice EDCA Parameters 8 aifs Configure the Arbitration Inter frame Spacing time Unsign...

Page 48: ...e override of Netw orkRADIUS configuration Boolean choice 8 20 wlan client add macaddr S No CommandName Description Type and Description 1 macaddr w lan client configuration mode MAC address AA BB CC...

Page 49: ...Type and Description 1 save Save SNMP Trap settings 2 exit Save SNMP Trap settings and exit current mode 3 cancel Roll back SNMP Trap settings changes 4 ap_failure Enable Disable SNMP traps for AP ass...

Page 50: ...ck peer controller configuration changes 3 exit Save peer controller configuration changes and current mode 4 enable_global Enable Disable global configuration push to peer sw itches Boolean choice 5...

Page 51: ...r APs detected w ith no SSID Boolean choice 10 managed_ap_ssid_invalid Enable or disable Rogue reporting for managed AP s detected w ith an invalid SSID Boolean choice 11 managed_ssid_secu_bad Enable...

Page 52: ...uth Configure the De Authentication Requests Threshold Interval Unsigned integer 16 threshold_value_deauth Configure the De Authentication Requests Threshold Value Unsigned integer 17 threshold_value_...

Page 53: ...ntry configure S No CommandName Description Type and Description 1 save Save country configuration changes 2 cancel Roll back country configuration changes 3 exit Save country configuration changes an...

Page 54: ...n accepted Pkts logs Enable Disable Boolean choice 11 dmz_Option_drop_pac ket_logs dmz to Option dropped Pkts logs Enable Disable Boolean choice 12 dmz_lan_accept_pack et_logs dmz to lan accepted Pkts...

Page 55: ...and Syslog messages String 5 email_logs_enable Set w hether or not systememails scheduled logs Boolean choice 6 email_server Set options for emailing of logs String 7 return_email Set email address SM...

Page 56: ...et Syslog facility syslog server facility ID types 36 syslog_server server_name3 enable Boolean Choice Y N Boolean choice 37 syslog_server server_name3 name Set Syslog server IP address AAA BBB CCC DD...

Page 57: ...e 0 255 58 syslog_server server_name8 severity Set Syslog severity syslog server severity types 59 syslog_server server_name8 facility Set Syslog facility syslog server facility ID types 9 4 system lo...

Page 58: ...access you want to allow Unsigned integer 6 from_address Set the starting IP in case of range and the IP to be allow ed accessin case of granting access to a particular machine IP address AAA BBB CCC...

Page 59: ...the authentication negotiation snmpv3uers list privacy algorithm type 8 authentication_passwo rd shared authentication password with the SNMPv3 user String 9 privacy_password shared privacy password...

Page 60: ...s in the range 0 255 6 subnet_mask The netw orkmaskused to determine the list of allow ed SNMP managers To allow any IP on the netw orkto manager the device enter 255 255 255 0 For a specific host ent...

Page 61: ...w hether to use systemdefault NTP servers Boolean choice 8 ntp_server1 Set NTP server 1 String 9 ntp_server2 Set NTP server 2 String 10 ntp_year Set year for the date Year 11 ntp_month Set month for t...

Page 62: ...9 18 system usb usb1 configure S No CommandName Description Type and Description 1 save Save Configurable OPTION settings 2 exit Save configurable OPTION settings and exit current mode 3 cancel Roll b...

Page 63: ...e numeric codes SSLVPN 0 Admin 3 Guest 4 L2TP 7 PPTP 8 Local 9 CaptivePortal 10 String 7 grouptimeOut Enter the time out for group Unsigned integer 9 22 system group edit ltrow_id S No Command Name De...

Page 64: ...hanges 3 exit Save systemuser configuration changes and exit current mode 4 cancel Roll back systemuser configuration changes 5 username Enter the username here String 6 FirstName Enter the user s fir...

Page 65: ...ock period Unsigned integer 9 deny_login deny login Boolean choice 10 deny_login_Option deny login Option Boolean choice 11 allow _login_from_defined_ips login fromip Boolean choice 12 allow _login_fr...

Page 66: ...access controlip configuration changes 4 group_id group id Unsigned integer 5 address_type address type source address type for users ip policy 6 source_address Set the source address IP address AAA B...

Page 67: ...Description 1 ltip_address display all the routers present between the destination IP address and this router String 10 4 util system_check capturePackets start ltinterface S No CommandName Descriptio...

Page 68: ...me Compute and checkMD5 message digest String 10 8 util copy ltfileName1 ltfileName2 S No CommandName Description Type and Description 1 ltfileName1 ltfileName2 Copy the Files String String 10 9 util...

Page 69: ...n 20 lan queue management show queue management configuation show 21 lan queue scheduling algo configure queue scheduling algo 22 lan queue scheduling algo set set the queue scheduling algorithm in th...

Page 70: ...nfigures trustmode cos based qos on lan 10 lan trustmode dscp enable configures trustmode as dscp qos on lan 11 lan cos map show show the cos map for the for LAN 12 lan cos map configure configure cos...

Page 71: ...S No CommandName Description 1 ltcosValue ltdscpValue configures cos to dscp remarking 11 8 qos option bandwidth set ltwanInterface ltupStreamBW ltdownStreamBW S No CommandName Description Type and D...

Page 72: ...ers and no or empty space or 11 13 qos option traffic selector add port ltlanPort ltservice ltbwProfile S No CommandName Description Type and Description 1 ltlanPort ltservice ltbwProfile add a traffi...

Page 73: ...elector del lttrafficSelectorId S No CommandName Description 1 lttrafficSelectorId delete a traffic selectorfor option 11 17 qos lan queue scheduling algo set ltsched algo S No CommandName Description...

Page 74: ...ion changes and exit current mode 3 cancel Roll back DDNS configuration changes 4 enable Enable or disable Dyndns to provide Dynamic DNS service Boolean choice 5 hostname Set Hostname String 6 usernam...

Page 75: ...reserved ip entry MAC address AA BB CC DD EE FF w here each part is in the range 00 FF 12 6 net Option dhcpc configure S No CommandName Description Type and Description 1 save Save dhcpc configuratio...

Page 76: ...Relay gatew ay server IP address AAA BBB CCC DDD w here each part is in the range 0 255 14 dns_proxy_enable Set DNS proxy Enable Disable Boolean choice 15 enable_ldap Enable Disable LDAP Server Info I...

Page 77: ...n the range 0 255 6 static subnet_mask Set systemLANsubnet mask IP address AAA BBB CCC DDD w here each part is in the range 0 255 7 dhcp Configure DHCP Settings 8 dhcp mode Set dhcp mode dhcpv4 modes...

Page 78: ...apping 2 host_name Set Host Name String 32 dns host_name mapping 2 ipaddress Set Host Name IP address AAA BBB CCC DDD w here each part is in the range 0 255 33 dns host_name mapping 3 host_name Set Ho...

Page 79: ...dns_type dns server type dhcpv6 dns server types 13 dhcp primary_dns primary dns server IP address abcd abcd abcd abcd abcd abcd abcd abcd where each part is in the range 0 9A Fa f 14 dhcp secondary_d...

Page 80: ...host_Address IntelAmt option Host Address String 7 Internal_Address IntelAmt intenal Address IP address AAA BBB CCC DDD w here each part is in the range 0 255 12 16 net intel_Amt_Reflector configure S...

Page 81: ...mode 4 Interface Select the Interface for the Ip Aliasing OPTION interface type 5 Ip_Address Ip Address forip Aliasing IP address AAA BBB CCC DDD w here each part is in the range 0 255 6 Subnet_Mask S...

Page 82: ...3 cancel Roll back isatap tunnel configuration changes 4 subnet_prefix This is the 64 bit subnet prefix that is assigned to the logical ISATAP subnet for this intranet String 5 end_point_type This is...

Page 83: ...options STATIC DHCP Client PPPoE PPTP L2TP Russian PPTP Russian L2TP Japanese Multiple PPPoE ISP Types 5 dhcpc If ISP Type selected is DHCPC this field gives you options to configure DHCPC credentials...

Page 84: ...username to authenticate String 22 pppoe password Enter the passw ord to authenticate String 23 pppoe service Enter the passw ord to authenticate String 24 pppoe authOpt Enter the Auth Option to auth...

Page 85: ...y assigned by the ISP to make a connection w ith the ISP server IP address AAA BBB CCC DDD w here each part is in the range 0 255 44 pptp server_address IP address of the PPTP server if applicable IP...

Page 86: ...Enter No and give valid static IP address Boolean choice 64 russ_pptp get_dns_from_isp Enter Yes to get dns dynamically from ISP if you have not been assigned any static IP address The ISP w illautoma...

Page 87: ...ess IP address AAA BBB CCC DDD w here each part is in the range 0 255 83 l2tp secondary_dns Valid secondary DNS Server IP Address IP address AAA BBB CCC DDD w here each part is in the range 0 255 84 l...

Page 88: ...onfigure the primary pppoe profile 105 japanese_pppoe primary_profile username Enter the username to authenticate String 106 japanese_pppoe primary_profile password Enter the passw ord to authenticate...

Page 89: ...tically assign an DNS address to the router using PPPOE netw orkprotocol Otherwise Enter No and give valid static dns addresses Boolean choice 125 japanese_pppoe secondary_profile primary_dns Valid pr...

Page 90: ...each part is in the range 00 FF 11 dhcpc hostname Enter the hostname String 12 static If ISP Type selected is STATIC this field gives you options to configure STATIC credentials 13 static ip_address...

Page 91: ...the router using PPPOE netw orkprotocol OtherwiseEnter No and give valid static IP address Boolean choice 31 pppoe static_ip Valid IP Address IP address AAA BBB CCC DDD w here each part is in the rang...

Page 92: ...address MAC address AA BB CC DD EE FF w here each part is in the range 00 FF 52 russ_pptp If ISP Type selected is Russian dual access PPTP this field gives you options to configure credentials 53 russ...

Page 93: ...address assigned by the ISP to make a connection w ith the ISP server IP address AAA BBB CCC DDD w here each part is in the range 0 255 75 l2tp server_address IP address of the L2TP server if applica...

Page 94: ...mask IP address AAA BBB CCC DDD w here each part is in the range 0 255 96 russ_l2tp gatew ay Gatew ay assigned by the ISP to make a connection w ith the ISP server IP address AAA BBB CCC DDD w here ea...

Page 95: ...0 255 114 japanese_pppoe primary_profile get_ip_from_isp Enter Yes to get IP dynamically from ISP if you have not been assigned any static IP address The ISP w ill automatically assign an IP address t...

Page 96: ...nge 00 FF 12 27 net Option mode configure S No CommandName Description Type and Description 1 save Save Option mode configuration changes 2 cancel Roll back ipv4 Option configuration changes 3 exit Sa...

Page 97: ...er failover_method Select the Fail Over detection method 24 rollover failover_method type Select the Fail Over detection method Types of Faillover Detection methods 25 rollover failover_method dns 26...

Page 98: ...current mode 3 cancel Roll back Configurable Option settings changes 4 port_name Select the configurable port type OPTION interface type 12 30 net Option Option1 ipv6 configure S No CommandName Descr...

Page 99: ...Server IP Address IP address abcd abcd abcd abcd abcd abcd a bcd abcd w here each part is in the range 0 9A Fa f 12 31 net Optionn Option2 ipv6 configure S No CommandName Description Type and Descript...

Page 100: ...n changes and exit current mode 4 cancel Roll back configuration changes 5 enable Enable Disable OSPFv2 for a particular interface Boolean choice 6 area Give the area to w hich the interface belongs U...

Page 101: ...ue seconds on the specified interface This value must be the same for all routers attached to a common netw ork The default value is 10 seconds Unsigned integer 8 dead_interval The number of seconds t...

Page 102: ...art is in the range 0 255 13 NetMask Set subnet mask IP address AAA BBB CCC DDD w here each part is in the range 0 255 14 GetDnsFromIspEnable Enable Disable GetDnsFromIsp Boolean choice 15 PrimaryDns...

Page 103: ...Available Service service type 6 Local_Gatew ay local gatew ay type OPTION interface type 7 Source_Netw ork source netw orktype firew allrule address type 8 Destination_Netw ork destination netw orkty...

Page 104: ...protocol_binding disable ltrow_id S No CommandName Description Type and Description 1 ltrow_id protocol_binding rules configuration mode Unsigned integer 2 save Save Protocol Binding rules configurat...

Page 105: ...he Destiation user IP address AAA BBB CCC DDD w here each part is in the range 0 255 12 41 net radvd configure S No CommandName Description Type and Description 1 save Save radvd configuration changes...

Page 106: ...h the requesting router is allow ed to use the prefix Unsigned integer 12 43 net radvd pool edit ltrow_id S No Command Name Description Type and Description 1 ltrow_id radvd Pool configuration mode Un...

Page 107: ...inute in the format MM 00 59 16 first_key valid_fromsecond second in w hich md5 authentication key validity starts Second in the format SS 00 59 17 first_key valid_to First MD5 Key is Not Valid After...

Page 108: ...40 second_key valid_to second second in w hich md5 authentication key validity ends Second in the format SS 00 59 12 46 net routing static ipv4 configure ltname S No CommandName Description Type and D...

Page 109: ...ctive IPV6 route Boolean choice 12 48 net routing static ipv4 delete ltname S No CommandName Description Type and Description 1 ltname Delete a specific route String 12 49 net routing static ipv6 dele...

Page 110: ...tahi ipv6 Alias Del LAN ltip6_address S No CommandName Description Type and Description 1 ltip6_address Delete an ipv6 address fromLAN interface IP address abcd abcd abcd abcd abcd abcd abcd abcd w he...

Page 111: ...add ipv6 route on lan interface IP address abcd abcd abcd abcd abcd abcd abcd abcd w here each part is in the range 0 9A Fa f 12 60 net upnp configure S No CommandName Description Type and Descriptio...

Page 112: ...authentication Boolean choice 9 EnableMSChapChap enable MSchap authentication Boolean choice 10 MSChapv2Enable enable MSChapv2Enable authentication Boolean choice 11 l2tpSecretKeyEnable L2TP Enanle s...

Page 113: ...ress AAA BBB CCC DDD w here each part is in the range 0 255 7 end_address PPTP server ending IP address IP address AAA BBB CCC DDD w here each part is in the range 0 255 8 pap_enable PPTP server PAP a...

Page 114: ...signed integer 2 save Save portal settings 3 exit Save portal settings and exit current mode 4 cancel Roll back portal settings changes 5 portal_name Specify the portalname String Max 128 characters a...

Page 115: ...r 13 10 vpn sslvpn portforwarding appconfig delete ltrow_id S No CommandName Description Type and Description 1 ltrow_id Delete an application configuration rule Unsigned integer 13 11 vpn sslvpn port...

Page 116: ...ngs 3 exit Save sslvpn resource settings and exit current mode 4 cancel Roll back sslvpn resource settingschanges 5 resource_name resource name String Max 128 characters and no or empty space or 6 obj...

Page 117: ...type service type sslvpn resource 13 resource_name resource name String Max 128 characters and no or empty space or 14 policy_permission policy permission sslvpn policy type 15 icmp_block block icmp s...

Page 118: ...Boolean choice 5 dns_suffix dns suffix String 6 primary_dns primary dns server IP address AAA BBB CCC DDD w here each part is in the range 0 255 7 secondary_dns secondary dns server IP address AAA BB...

Page 119: ...2 Specify the authentication server IP address AAA BBB CCC DDD w here each part is in the range 0 255 9 authentication_server 3 Specify the authentication server IP address AAA BBB CCC DDD w here each...

Page 120: ...value Unsigned integer 12 retries Specify the max retries Unsigned integer 13 authentication_secret Enter the secret key String 14 authentication_secret2 Enter the secret key String 15 w orkgroup Spec...

Page 121: ...e idle timeout for the group idle timeout value for user 13 28 vpn sslvpn users groups delete ltrow_id S No CommandName Description Type and Description 1 ltrow_id Users group delete mode Unsigned int...

Page 122: ...ogin_policies ltrow_id S No CommandName Description Type and Description 1 ltrow_id Users login policy configuration mode Unsigned integer 2 save Save users login policy configuration changes 3 exit S...

Page 123: ...ress add ip address Boolean choice 7 source_address_type Set the source address type source address type for users ip policy 8 source_address Set the source address IP address AAA BBB CCC DDD w here e...

Page 124: ...rollover Boolean choice 17 general_protocol Setting protocolesp or ah IPsec VPN Protocol 18 general_enable_dhcp enable disable dhcp Boolean choice 19 general_local_netw ork_type Select the IP addresse...

Page 125: ...tegrity key for ESP w ith Integrity mode for the inbound policy and depends on the algorithm chosen String 42 manual_authentication_key_out This is the integrity key for ESP w ith Integrity mode for t...

Page 126: ...ication String 65 auto_phase2_sa_lifetime vpn auto policy phase2 configure 66 auto_phase2_sa_lifetime seconds Setting IKE SA lifetime in seconds Unsigned integer 67 auto_phase2_sa_lifetime bytes Setti...

Page 127: ...13 40 vpn ipsec policy connect ltname S No CommandName Description Type and Description 1 ltname connect a vpn tunnel String 13 41 vpn ipsec policy drop ltname S No CommandName Description Type and De...

Page 128: ...ts Enable or Disable Multicast packets on Internet Ports Boolean choice 10 synflood_dectect_rate Configure the Syn flood Detect Rate range of packets sent per second in dos attack types 11 echostorm_f...

Page 129: ...Save application rules rules configuration changes and exit current mode 4 cancel Roll back application rules configuration changes 5 name Name of the rule String 6 enable_rule specify whetherto enab...

Page 130: ...m services configuration changesand exit current mode 4 cancel Roll back customservices configuration changes 5 name Name of the service for which a rule is to be added String 6 protocol Protocol type...

Page 131: ...AAA BBB CCC DDD w here each part is in the range 0 255 18 source_address_end IP of the Source user IP address AAA BBB CCC DDD w here each part is in the range 0 255 19 destination_address_start IP of...

Page 132: ...ch a rule is to be added custom name should already be added into custom service String 11 service service_normal Name of the service for which a rule is to be added service type 12 action Action to b...

Page 133: ...rew allIPV4 rules configuration mode Unsigned integer 14 13 security firewall ipv4 disable ltrow_id S No CommandName Description Type and Description 1 ltrow_id Firew allIPV4 Rules configuration mode...

Page 134: ...r which a rule is to be added custom name should already be added into custom service String 8 service service_normal Name of the service for which a rule is to be added service type 9 action Action t...

Page 135: ...10 source_address _type Type of the source user firew allrule address type 11 destination_add ress_type Type of the destination user firew allrule address type 12 log Log Alw ays or Never firew allrul...

Page 136: ...Roll back IPV6 rule reordering changes 5 position New position for the rule Unsigned integer 14 23 security firewall ipv6 default_outbound_policy ltdefault_outbound_policy S No CommandName Descriptio...

Page 137: ...days all select all days for schedule days Boolean choice 7 days monday select all days for schedule days Boolean choice 8 days tuesday select all days for schedule days Boolean choice 9 days w ednes...

Page 138: ...13 days saturday select all days for schedule days Boolean choice 14 days sunday select all days for schedule days Boolean choice 15 time_of_day scheduled time of day 16 time_of_day all_enable type of...

Page 139: ...save Save source mac filter configuration changes 3 exit Save source mac filter configuration changes and exit current mode 4 cancel Roll back source mac filter configuration changes 5 address enter m...

Page 140: ...e each part is in the range 00 FF 7 ip_address enter ip address to w hich policies willbe applied IP address AAA BBB CCC DDD w here each part is in the range 0 255 8 log_dropped_packets Specify loggin...

Page 141: ...ter approved_urls add S No CommandName Description Type and Description 1 save Save trusted domains configuration changes 2 exit Save trusted domains configuration changes and exit current mode 3 canc...

Page 142: ...Save blocked keyw ordsconfiguration changes 3 exit Save blocked keyw ordsconfiguration changesand exit current mode 4 cancel Roll back blocked keyw ords configuration changes 5 blocked_keyw ord enter...

Page 143: ...4 cancel Roll back configuration changes 5 radius server Set RADIUS server IP address IP address AAA BBB CCC DDD w here each part is in the range 0 255 6 authentication port Set RADIUS server port Por...

Page 144: ...er CLI Reference Guide 142 Chapter 16 Configuration commands HISTORY 16 1 history ltlimit S No CommandName Description Type and Description 1 ltlimit Display the current session scommand line history...

Page 145: ...icenses configured on the device 2 activate Activate a license on the device 17 2 License activate ltactivationKey S No CommandName Description Type and Description 1 ltactivationKey activate a licens...

Page 146: ...Wireless Controller CLI Reference Guide 144...