AOS 6.4.x CLI Reference Guide 1507985106powerconnect W 3200 Guide7 En Us
User Manual: DELL POWERCONNECT W-3200 pdf | FreeUserManuals.com
Open the PDF directly: View PDF 
.
Page Count: 2371
Reference Guide
Dell Networking W-Series
ArubaOS 6.4.x
Command-Line Interface
Copyright Information
© 2015 Aruba Networks, Inc. Aruba Networks trademarks include
, Aruba Networks®, Aruba
®
Wireless Networks , the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management
System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc.
All rights reserved. Specifications in this manual are subject to change without notice.
Originated in the USA. All other trademarks are the property of their respective owners.
Open Source Code
Certain Aruba products include Open Source software code developed by third parties, including software code
subject to the GNU General Public License (GPL), GNU Lesser General Public License (LGPL), or other Open
Source Licenses. Includes software from Litech Systems Design. The IF-MAP client library copyright 2011
Infoblox, Inc. All rights reserved. This product includes software developed by Lars Fenneberg, et al. The Open
Source code used can be found at this site:
arubanetworks.com/open_source
Legal Notice
The use of Aruba Networks, Inc. switching platforms and software, by all individuals or corporations, to
terminate other vendors’ VPN client devices constitutes complete acceptance of liability by that individual or
corporation for this action and indemnifies, in full, Aruba Networks, Inc. from any and all legal actions that
might be taken against it with respect to infringement of copyright on behalf of those vendors.
0511698-00v1 | April 2015
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The ArubaOS Command-Line Interface
The Dell Networking W-Series ArubaOS 6.4.x command-line interface (CLI) allows you to configure and manage
Dell controllers. The CLI is accessible from a local console connected to the serial port on the controllers or
through a Telnet or Secure Shell (SSH) session from a remote management console or workstation.
Telnet access is disabled by default. To enable Telnet access, enter the telnet CLI command from a serial connection
or an SSH session, or in the WebUI navigate to the Configuration > Management > General page.
What's New In ArubaOS 6.4.x
This section lists the commands introduced, modified, or deprecated in ArubaOS 6.4.x.
Commands in ArubaOS 6.4.3.0
New Commands
The following commands are introduced in ArubaOS 6.4.3.0:
Command
Description
aaa auth-survivability
This command configures authentication survivability on a controller.
amon msg-buffer-size
This command modifies the AMON packet size on the controller.
clear aaa auth-survivabilitycache
This command, introduced with this release, allows you to clear the
data stored in the local Survival Server cache
crypto_local isakmp disableipcomp
This command disables IP compression on the master controller.
disable-whitelist-sync
This command disables whitelist synchronization with local or Cloud
Services Controller on the master controller.
ip access-list route
This command configures an access control list (ACL) for policy-based
packet routing.
ip nexthop-list
A next hop IP is the IP address of an adjacent router or device with
layer-2 connectivity to the controller. Use this command to configure
a next hop list, providing redundancy for the next hop devices by
forwarding the traffic to a backup next hop device in case of failures.
ip probe
This command configures WAN health-check ping-probes for
measuring WAN availability and latency.
pan-options
This command configures options to integrate a branch controller
with a Palo Alto Networks (PAN) firewall
Dell Networking W-Series ArubaOS 6.4.x| User Guide
The ArubaOS Command-Line Interface | 3
Command
Description
routing-policy-map
This command associates a routing access control list (ACL) with a
user role.
show ap debug radar-logs
Displays the latest four RADAR event logs from the AP.
show ap debug radio-info
Displays the Wi-Fi radio debug logs from the AP driver.
show auth-survivability
This command displays the auth-survivability parameters that are
configured in the local controller.
show branch
Shows configuration and DHCP address settings on a branch
controller.
show branch-config-group
The output of this command shows configuration settings for a
branch config group.
show branch-dhcp-pool
The output of this command shows a summary of DHCP pool
information for branch controllers.
show ip nexthop-list
Display nexthop list settings for policy-based routing.
show local-userdb-branch
The output of this command lists the MAC address and assigned
branch config group for branch controllers associated with that
master.
show log arm-user-debug
This command displays a user's ARM debug logs.
show pan-gp
This command displays Palo Alto Networks portal or gateway settings
on a branch or local controller.
show pan-options
This command displays configured options to integrate a branch
controller with a Palo Alto Networks (PAN) firewall.
show wlan anyspot-profile
The output of this command displays configuration settings for a
WLAN anyspot profile.
wlan anyspot-profile
This command configures the anyspot client probe suppression
feature, which decreases network traffic by suppressing probe
requests from clients attempting to locate and connect to other
known networks.
Modified Commands
The following commands are modified in ArubaOS 6.4.3.0:
4 | The ArubaOS Command-Line Interface
Dell Networking W-Series ArubaOS 6.4.x | User Guide
Command
Description
aaa profile
The max-ip parameter is introduced.
aaa authentication-server
radius
The following parameters are introduced:
activate
l
cppm
l
enable-radsec
l
radsec-client-cert-name
l
radsec-port
l
radsec-trusted-cacert-name
l
radsec-trusted-servercert-name
The sync parameter is introduced.
airgroup
The policy parameter is introduced.
airgroupservice
The autoassociate parameter is introduced.
ap system-profile
The following new parameters are introduced:
clear
l
ap-arp-attack-protection
l
mcast-aggr
l
mcast-aggr-allowed-vlan
l
ap-usb-power-override
l
shell-passwd
l
bkup-band
l
bkup-mode
l
bkup-password
l
ble-token
l
ble-url
l
The clear counter tunnel interface limit was changed from
2147483647 to 16777215.
l
The cli-policy all sub-parameter is introduced under the
airgroup parameter.
l
The global-credits statistics parameter is introduced.
l
The port-channel sub-parameter is introduced under the
counters parameter.
cp-bandwidth-contract
The unit of bandwidth contract traffic rate changed from Mbps or
Kbps to pps. The range for pps is 1–64000.
interface fastethernet |
gigabitethernet
l
The bw-contract parameter is introduced
l
The bpduguard, point-to-point, and vlan parameters are
introduced as part of spanning-tree.
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The ArubaOS Command-Line Interface | 5
Command
Description
interface port-channel
The description parameter is introduced.
interface tunnel
l
The tunnel interface limit is changed from 2147483647 to
16777215.
l
The option is introduced as part of the
tunnel destination parameter.
l
The option is introduced as part of the tunnel keepalive
parameter.
l
The access-group parameter is introduced to associate
the interface with an ACL.
l
For the option-82 parameter, the ap-name [essid] subparameter is introduced.
interface vlan
ip route
show aaa authenticationserver radius
show aaa debug
The [] parameters is introduced, which supports
routing using a next-hop list.
The following parameters are introduced:
l
enable-radsec
l
radsec-client-cert-name
l
radsec-port
l
radsec-trusted-cacert-name
l
radsec-trusted-servercert-name
The following parameters are introduced:
l
age
l
role
The dev-id-cache sub-parameter is moved under the age parameter.
show ap active
The Q flag is introduced in the output of this command.
show ap arm client-match
history
The following parameters are introduced as part of this command
output:
l
Station
l
Status/Roam Time/Mode
l
Signal
l
Band
l
Radio BSSID
l
AP Name
Additionally, the advanced parameter is introduced.
show ap arm client-match
summary
6 | The ArubaOS Command-Line Interface
The following parameters are introduced as part of this command
output:
Dell Networking W-Series ArubaOS 6.4.x | User Guide
Command
show ap arm client-match
unsupported
Description
l
VHT Steer Moves
l
Moves
l
11v Moves
The following parameters are introduced as part of this command
output:
l
Unsteerable Flags
l
Expiry Time
l
Total steers/successful
show ap arm neighbors
CLI Help text is introduced before the output table.
show ap arm scan-times
The following parameters are introduced under Group Scan Times:
show ap arm virtual-beaconreport
l
channels
l
assign-time (ms)
l
scans-attempted
l
scans-rejected
l
scan-deferred
l
group-width
l
timer-tick
The following parameters are introduced as part of this command
output:
l
Active Voice
l
Steerable
l
Dual-Network Capable
l
VHT-Capable
l
EIRP
show ap bss-table
The n-anyspot forwarding-mode flag is introduced.
show ap virtual-beaconreport
The following parameters are introduced as part of this command
output:
l
Steer attempts/success
l
Consecutive (Fails/BTM Rej/BTM Timeouts)
l
Client Device Type
l
Current State
l
Client Supported Channels
l
ESSID
l
Add Time
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The ArubaOS Command-Line Interface | 7
Command
Description
l
EIRP
l
Flag
l
Active Media Sessions
Additionally, the all parameter is introduced.
show ap wired stats
This command now displays results for both campus and Remote
access points.
show cp-bwcontracts
The CP bw contracts table now lists the traffic rate in
packets/second instead of bits/second.
show datapath
The following changes were introduced:
l
The compression parameter displays datapath compression
statistics. By default, the combined statistics for all CPUs are
shown.
l
The output of the show datapath session command now
supports the r flag,which indicates that the session was routed
through a nexthop device defined by a nexthop-list. For more
information, see ip nexthop-list.
l
The output of the show datapath cp-bwm command now
displays the rate in pps.
show ip ospf
The tunnel ID limit is changed from 2147483647 to 16777215.
show interface vlan
The DHCP Option-82 AP name and ESSID are configured on this
Interface parameter is introduced.
show port stats
The PC # (port-channel) value is introduced under the Port column.
show port status
Following values are introduced:
l
The PC# (port-channel) value is introduced under the PortMode
column.
l
The PC (port-channel) value is introduced under the PortType
column.
l
Speed and Duplex columns are introduced.
show spantree
The BpduGuard field is introduced as part of this command output.
show ucc call-info cdrs
The UCC-Band, MOS, and MOS-Band fields are introduced as part of
the show ucc call-info cdrs command output.
Following changes are made as part of the show ucc call-info cdrs
cid command output:
8 | The ArubaOS Command-Line Interface
l
Moved the UCC Score, Client Health, MOS parameters from the
CDR-Basic section to the Call Samples section heading.
l
Added a new Call Sample(per 60 secs) section heading. This
section displays the properties of media session like IP, port,
Dell Networking W-Series ArubaOS 6.4.x | User Guide
Command
Description
codec, DSCP, and WMM values.
l
Renamed the CDRS-Detail section heading to WLAN QualityDetails.
l
Added a new End-to-End Quality-Details section heading. This
section displays the MOS, MOS band, delay, jitter, packet loss
values.
l
Under the Call Samples section heading, added the MOS, MOSBand, End-to-End Delay(ms/Jitter(ms)/PktLoss(%) fields.
Following changes are made as part of the show ucc call-info cdrs
detail command output:
show ucc client-info
l
Removed the Src Port, Dest Port, Codec, DSCP, Orig DSCP,
WMM-AC, Orig WMM-AC fields.
l
Merged the Delay(msec), Jitter(msec), and Packet Loss (%)
fields to WLAN Delay(ms)/Jitter(ms)/PktLoss(%).
l
Added the MOS, MOS-Band, End-to-End Delay(ms)/Jitter(ms)
/PktLoss(%) fields.
Following changes are made as part of the show ucc client-info
details command output:
l
Renamed the Client Status Details section heading to Client
Status Details(Average) and removed the Avg word from all field
headings.
l
Added the Client Name field.
l
Merged the Avg Delay(msec), Avg Jitter(msec), and Avg Packet
Loss (%) fields to WLAN Delay(ms)/Jitter(ms)/PktLoss(%).
l
Added the End-to-End Delay(ms)/Jitter(ms)/PktLoss(%) field.
l
Renamed the Num CAC Denied field to CAC Denied.
Following changes are made as part of the show ucc client-info sta
command output:
l
Under the Station Report section heading, added the Client
Name field. Removed the UCC-Score and Client Health fields.
l
Under the Active Calls section heading, added the UCC-Band,
MOS, and MOS-Band fields.
l
Under the Call History section heading, added the UCC-Band,
MOS, and MOS-Band fields.
show ucc trace-buffer
The InCallQuality Update value is added under the Call Status
field.
show user-table
The detail sub-parameter is introduced as part of the ip parameter.
show vrrp
The holdtime parameter is introduced.
show whitelist-db cpsec
The ap-group and ap-name parameters were introduced as part of
this command output.
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The ArubaOS Command-Line Interface | 9
Command
Description
show whitelist-db cpsecstatus
The Whitelist-sync is enabled parameter is introduced as part of
the command output.
tunnel-group
The tunnel ID limit is changed from 2147483647 to 16777215.
voice real-time-config
The default value is changed to enabled.
vrrp
The holdtime parameter is introduced.
whitelist-db cpsec add
The ap-group and ap-name parameters are introduced.
whitelist-db cpsec modify
The ap-group and ap-name parameters are introduced.
wlan virtual-ap
The wan-operation parameter is introduced.
Commands in ArubaOS 6.4.2.5
Modified Commands
The following commands are modified in ArubaOS 6.4.2.5:
Command
Description
aaa authentication-server
radius
The cppm parameter is introduced.
firewall
The optimize-dad-frames parameter is introduced.
show aaa authenticationserver radius
The CPPM credentials parameter is introduced.
show firewall
The Optimize Duplicate Address Detection frames parameter is
introduced.
show running-config
The default dot1x high-watermark and dot1x low-watermark
values were removed from the show running-config command.
show web-server
The Enable bypass captive portal landing page parameter is
introduced.
tar
The show dot1x watermark history is added as part of the
techsupport.log file.
web-server profile
The bypass-cp-landing-page parameter is introduced.
10 | The ArubaOS Command-Line Interface
Dell Networking W-Series ArubaOS 6.4.x | User Guide
Commands in ArubaOS 6.4.2.4
Modified Commands
The following commands are modified in ArubaOS 6.4.2.4:
Command
show dot1x watermark
Description
The table parameter is introduced.
Commands in ArubaOS 6.4.2.3
Modified Commands
The following commands are modified in ArubaOS 6.4.2.3:
Command
ids general-profile
Description
The following parameters are introduced:
l
packet-snr-threshold
l
frame-types-for-rssi
l
max-monitored-stations
l
max-unassociated-stations
rf arm-profile
The cm-dot11v parameter is introduced.
show ids general-profile
The following parameters are introduced as part of this command
output:
l
Packet SNR Threshold
l
Frame Types for RSSI calculation
l
Max Monitored Stations
l
Max Unassociated Stations
show tunnel-group
The Type parameter is introduced as part of this command output.
show web-server
The profile and statistics parameters were introduced.
tunnel-group
The mode parameter is introduced.
web-server profile
The web-server command is renamed to web-server profile.
The following parameters are introduced:
l
tlsv1.1
l
tlsv1.2
Deprecated Commands
The following commands are deprecated in ArubaOS 6.4.2.3:
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The ArubaOS Command-Line Interface | 11
Command
web-server profile
Description
The sslv3 sub-parameter is deprecated.
Commands in ArubaOS 6.4.2.0
New Commands
The following commands are introduced in ArubaOS 6.4.2.0:
Command
Description
ap-lacp-striping-ip
This command defines an AP LACP LMS map information profile that
maps a GRE striping IP address to an existing LMS-IP address,
allowing W-AP220 Series and W-AP270 Series AP to form a tunnel to a
backup controller in the event of a controller failover.
kernel coredump
This command enables the controller to capture the snapshot of the
working memory of the control plane when the control plane has
terminated abnormally.
show web-cc
This command display information about web content (web-cc)
classification settings, category and reputation types, classification
statistics and bandwidth contracts.
web-cc
This command defines global bandwidth contracts for HTTP traffic
matching a predefined web content category or reputation type.
Modified Commands
The following commands are modified in ArubaOS 6.4.2.0:
Command
Description
ap-rename
The service-tag parameter is introduced to identify an AP with its
service tag.
ap-regroup
The service-tag parameter is introduced to identify an AP with its
service tag.
ap system-profile
l
The gre-striping-ip parameter is deprecated. GRE striping IP
settings are defined using the ap-lacp-striping-ip command.
l
The system-message-frequency parameter now accepts a value
in the range of 1-3600 seconds.
l
The web-cc cache and web-cc stats parameters are introduced,
to clear the web content classification category cache and
statistics.
l
The datapath web-cc parameter is introduced, to clear datapath
web content classification statistics.
clear
12 | The ArubaOS Command-Line Interface
Dell Networking W-Series ArubaOS 6.4.x | User Guide
Command
firewall
Description
l
The web-cc parameter is introduced. This parameter enables web
content classification for all HTTP traffic. Once enabled, ArubaOS
enforces ACLs and bandwidth policies associated with web content
categories or reputation levels.
l
The web-cc-cache-miss-drop parameter is introduced. Issue this
command to allow the controller to drop any packets that do not
match any web content category or reputation levels in the
controller's internal web content cache.
ip access-list session
The web-cc-category and web-cc-reputation parameters are
introduced. Use these parameters to define a session ACL for traffic
matching a web content category or reputation level.
provision-ap
The service-tag parameter was introduced under reprovision
parameter.
rf dot11g-radio-profile
The very-high-throughput-rates-enable parameter is introduced.
This command enables very high throughput (VHT) rates on the 2.4
GHz band through the addition of VHT Modulation and Coding
Scheme values 8 and 9, providing 256-QAM modulation and encoding
that allows for 600 Mbit/sec performance over 802.11n networks. VHT
rates are supported on W-AP220 Series access points on both 20 and
40 MHz channels.
show ap database
The output of this command can display:
l
an s flag to indicate that the AP is enabled with a striping IP
address.
l
the service tag of an AP.
show ap debug lacp
If a GRE striping IP address is configured in the ap-lacp-striping-ip
profile, the output of this command displays the GRE striping IP
address.
show ap debug systemstatus
The format of the System Status Script output is changed to the
following:
function-name(line-num): new-total-drops/total-drops newpriority-drops/total-priority-drops
Example: wlc_dotxstatus(40576): 5034/3231117 4272/1907873
This change helps to determine if priority (voice or video) frames are
dropped from the AP Wi-Fi driver drop-list.
NOTE: The System Status Script is displayed for W-AP200 Series and
W-AP220 Series access points only.
show ap details
The output of this command can display the service tag of an AP.
show datapath
l
The session web-cc parameter is introduced. This command
displays web-content category information about the session.
l
The web-cc parameter is introduced. This command parameter
displays web-content classification table information, including the
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The ArubaOS Command-Line Interface | 13
Command
Description
web content category ID, reputation score, and URL.
show firewall
The following parameters are introduced as part of this command
output:
l
Web Content Classification
l
Web Content Cache Miss Drop
show provisioning-ap-list
The output of this command can display the service tag of an AP.
user-role
l
The web-cc-category and web-cc-reputation parameters are
introduced. Use these parameters to create a user role that
applies a bandwidth contract to the specified web content
category or reputation level.
l
The web-cc disable parameter is introduced to disable web
content classification for this particular user-role.
wlan ssid-profile
The description of the multicast-rate parameter is changed to
denote the rate for video multicast frames.
Deprecated Commands
The following commands are deprecated in ArubaOS 6.4.2.0:
Command
ap system-profile
Description
The gre-striping-ip parameter is deprecated. GRE striping IP
settings are defined using the ap-lacp-striping-ip command.
Commands in ArubaOS 6.4.1.0
New Commands
The following commands are introduced in ArubaOS 6.4.1.0:
Command
Description
ap regulatory activate
This command activates a specified Regulatory Cert and pushes it
to APs associated to the controller.
ap regulatory reset
This commanded deactivates and clears the currently activated
Regulatory Cert from APs associated to the controller.
file syncing profile
This command is used to configure the file syncing profile on the
controller.
show ap regulatory
This command displays the currently active Regulatory Cert on the
controller.
14 | The ArubaOS Command-Line Interface
Dell Networking W-Series ArubaOS 6.4.x | User Guide
Command
Description
show file syncing profile
This command displays the file syncing configuration on the
controller.
Modified Commands
The following commands are modified in ArubaOS 6.4.1.0:
Command
Description
aaa profile
The user-idle-timeout parameter now accepts a value of 0.
airgroup
l
The Chromecast service is renamed to DIAL.
l
The googlecast service is introduced.
firewall
ipv6 firewall
rf arm-profile
show airgroup status
show airgroupservice
show ap arm client-match
restriction-table
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The following new sub-parameters are introduced:
l
arp
l
grat-arp
The valid range for the following parameters is changed to <116384>:
l
ping
l
session
l
tcp-syn
The default values for the following parameters are changed:
l
cm-band-g-max-signal
l
cm-sticky-snr
l
cm-sticky-min-signal
l
cm-lb-client-thresh
l
The Chromecast service is renamed to DIAL.
l
The googlecast service is introduced.
l
The Chromecast service is renamed to DIAL.
l
The googlecast service is introduced.
Following parameters are introduced as part of this command
ouput:
l
PS deauth
l
Probe(home/scan/bc_ssid)
l
Auth(home/scan)
l
Radio Bssid
The ArubaOS Command-Line Interface | 15
Command
Description
The following parameters are modified as part of this command
output:
show ap blacklist-clients
show datapath
l
Time last restricted
l
Restricted(Cur/Last)
l
Time since last restricted
The following reason codes are introduced:
l
ARP-attack
l
gratuitous-ARP-attack
The following parameters are introduced as part of the show
datapath frame command output:
l
Excessive ARP Requests
l
Excessive Gratuitous ARP Requests
The acl id parameter has been added. This command
displays acl-id related information. The acl {[ap-name | ip-addr ] name type } command retrieves ACL related details from an access
point using the access point's name or ip-address.
show firewall
The following parameters are introduced as part of this command
output:
l
Blacklist Grat ARP attack client
l
Blacklist ARP attack client
l
Monitor ARP attack
l
Monitor Gratuitous ARP attack
show switches
The regulatory parameter was added.
show whitelist-db cpsec
The following new parameters are introduced as part of this
command output:
show whitelist-db rap
user-role
16 | The ArubaOS Command-Line Interface
l
cert-type
l
page
l
start
l
state
The following new parameters are introduced as part of this
command output:
l
apgroup
l
apname
l
fullname
The check-for-accounting parameter is introduced as part of this
command ouput.
Dell Networking W-Series ArubaOS 6.4.x | User Guide
Commands in ArubaOS 6.4.0.0
New Commands
The following commands are introduced in the ArubaOS 6.4.0.0:
Command
Description
airgroup static mdns-record
This command enables an administrator to add mDNS static
records to cache using the following methods:
Group mDNS static records
Individual mDNS static records
app lync traffic-control
This command creates a traffic control profile that allows the
controller to recognize and prioritize a specific type of Lync traffic
in order to apply QoS through the Lync Application Layer Gateway
(ALG).
dpi
This command configures Deep-Packet Inspection and the global
bandwidth contract for an application or application category for
the AppRF feature.
iap trusted-branch-db
This command configures an IAP-VPN branch as trusted.
pan active-profile
This command activates a configured PAN profile.
pan profile
This command is used to configure a PAN profile.
show aaa load-balance statistics
This command displays the load balancing statistics for RADIUS
servers.
show lldp interface
This command displays the LLDP interfaces information.
show lldp neighbor
This command displays information about LLDP peers.
show lldp statistics
This command displays the LLDP statistics information.
show iap detailed-table
This command displays the details of all the branches terminating
at the controller.
show pan active-profile
This command displays the currently active PAN profile.
show pan-options
This command displays all configured PAN profiles.
show pan state
This command displays the current status of associated PAN
firewalls.
show pan statistics
This command displays PAN profile statistics.
show sso idp-profile
This command displays the configured SSO IDP profiles.
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The ArubaOS Command-Line Interface | 17
Command
Description
show ucc call-info cdrs
This command displays the Call Detailed Report (CDR) statistics for
Unified Communication and Collaboration (UCC).
show ucc client-info
This command displays the UCC client status and CDR statistics.
show ucc configuration
This command displays the UCC configuration in the controller.
show ucc statistics
This command displays the UCC call statistics in the controller.
show ucc trace-buffer
This command displays the UCC call message trace buffer for
Lync, SCCP, and SIP ALGs. Events such as establishing voice, video,
desktop sharing, and file transfer are recorded.
sso idp-profile
This command creates an SSO profile.
wlan hotspot advertisementprofile
This command configures a WLAN advertisement profile for an
802.11u public access service provider.
wlan hotspot anqp-3gpp-nwkprofile
This profile defines information for a 3rd Generation Partnership
Project (3GPP) Cellular Network for hotspots that have roaming
relationships with cellular operators.
wlan hotspot anqp-domainname-profile
This command defines the domain name to be sent in an Access
Network Query Protocol (ANQP) information element in a Generic
Advertisement Service (GAS) query response.
wlan hotspot anqp-ip-addr-availprofile
This command defines available IP address types to be sent in a
Access network Query Protocol (ANQP) information element in a
Generic Advertisement Service (GAS) query response.
wlan hotspot anqp-nai-realmprofile
This command defines a Network Access Identifier (NAI) realm
whose information can be sent as an Access network Query
Protocol (ANQP) information element in a Generic Advertisement
Service (GAS) query response.
wlan hotspot anqp-nwk-authprofile
This command configures an ANQP Network Authentication profile
to define authentication type being used by the hotspot network.
wlan hotspot anqp-roam-consprofile
This command configures the Roaming Consortium OI information
to be sent in an Access network Query Protocol (ANQP)
information element in a Generic Advertisement Service (GAS)
query response.
wlan hotspot anqp-venue-nameprofile
This command defines venue information be sent in an Access
network Query Protocol (ANQP) information element in a Generic
Advertisement Service (GAS) query response.
wlan hotspot h2qp-conncapability-profile
This command defines a Hotspot 2.0 Query Protocol (H2QP) profile
that advertises hotspot protocol and port capabilities.
18 | The ArubaOS Command-Line Interface
Dell Networking W-Series ArubaOS 6.4.x | User Guide
Command
Description
wlan hotspot h2qp-op-cl-profile
This command defines a Hotspot 2.0 Query Protocol (H2QP) profile
that defines the Operating Class to be sent in the ANQP IE.
wlan hotspot h2qp-operatorfriendly-name-profile
This command defines a Hotspot 2.0 Query Protocol (H2QP)
operator-friendly name profile. The operator-friendly name
configured in this profile is a free-form text field that can identify
the operator and also something about the location.
wlan hotspot h2qp-wan-metricsprofile
This command creates a Hotspot 2.0 Query Protocol (H2QP)
profile that specifies the hotspot WAN status and link metrics.
wlan hotspot hs2-profile
This command configures a hotspot profile for an 802.11u public
access service provider.
Modified Commands
The following commands are modified in ArubaOS 6.4.0.0:
Command
Description
airgroup
The dlna and mdns parameters are introduced.
aaa authentication captiveportal
The url-hash-key parameter is introduced.
aaa authentication-server
radius
The called-station-id parameter is introduced.
aaa authentication via authprofile
The pan-integration parameter is introduced.
aaa authentication vpn
The pan-integration parameter is introduced.
aaa profile
The multiple-server-accounting and download-role parameters
are introduced.
The pan-integration parameter is introduced.
aaa server-group
The load-balance parameter is introduced.
clear
The lldp parameter is introduced.
The Server and User options are introduced under airgroup
parameter.
crypto dynamic-map
The disable/enable parameters are introduced.
crypto isakmp policy
The disable/enable and no parameters are introduced.
firewall
The following parameters are added:
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The ArubaOS Command-Line Interface | 19
Command
ha
Description
l
allow-stun
l
dpi
l
stall-crash
The following parameters are introduced to support the high
availability inter-controller heartbeat, controller oversubscription
and state synchronization features.
l
heartbeat:
l
heartbeat-interval
l
heartbeat-threshold
l
over-subscription
l
pre-shared-key
l
state-sync
interface fastethernet |
gigabitethernet
The lldp parameter is introduced.
interface vlan
The dhcp parameter for configuring dynamic host configuration
protocol for IPv6 is introduced.
interface tunnel
Tunnel destination ipv6, tunnel mode gre ipv6, tunnel source
ipv6, parameters are introduced.
ip access-list session
The redirect parameter is introduced under action. The app, and
appcategory parameters are introduced under service.
ip igmp
The ssm-range parameter is introduced.
ipv6 mld
The ssm-range parameter is introduced.
ipv6 route
The vlan parameter is introduced.
ntp server
The IPv6 parameter is introduced.
show aaa authentication-server
radius
The called-station-id parameter is introduced as part of this
command output.
show airgroup
The dlna and mdns parameters are introduced as part of the
following command outputs:
l
show airgroup blocked-queries
l
show airgroup blocked-service-id
l
show airgroup internal-state statistics
The dlna, mdns , and verbose parameters are introduced as part
of the following command outputs:
20 | The ArubaOS Command-Line Interface
Dell Networking W-Series ArubaOS 6.4.x | User Guide
Command
Description
l
show airgroupservice
l
show airgroup servers
l
show airgroup users
The dlna, mdns , and static parameters are introduced as part of
the show airgroup cache entries command output.
show airgroupservice
The dlna, mdns, and verbose parameters are introduced as part
of this command output.
show app lync traffic-control
The profile-name parameter is introduced as part of this
command output.
show datapath
The following parameters are introduced as part of this command
output:
l
dpi
l
session dpi
l
session ipv6 dpi
l
session session-id dpi
show ipv6 interface
The tunnel parameter is introduced as part of this command
output.
show ipv6 mld config
The ssm-range parameter is introduced as part of this command
output.
show ipv6 mld group
The mode and age parameters are introduced.
show ntp peer
The IPv6 parameter is introduced.
show ntp servers
Flags indicating the status of the server, are introduced.
show ntp status
The following parameters are introduced as part of this command
output:
Dell Networking W-Series ArubaOS 6.4.x | User Guide
l
time since restart
l
packets received
l
packets processed
l
current version
l
previous version
l
declined
l
access denied
l
bad length or format
l
bad authentication
l
rate exceeded
The ArubaOS Command-Line Interface | 21
Command
show voice real-time-analysis
Description
The following new parameters are introduced as part of this
command output:
l
Jitter(D)(usec)
l
UCC Score
show vrrp
The ipv6, stats, and summary parameters are introduced as part
of this command output.
snmp-server
The IPv6 parameter is introduced.
user-role
The following parameters are introduced:
l
bandwidth-contract app
l
bandwidth-contract appcategory
l
bandwidth-contract exclude
l
traffic-control-profile
l
sso
vrrp
The IPv6 parameter is introduced.
web-server profile
The idp-certificate parameter is introduced.
wlan ssid-profile
l
The mfp-capable and mfp-required parameters are added.
l
The eapol-rate-opt parameter is enabled by default.
Deprecated Commands
The following commands are deprecated in ArubaOS 6.4.0.0:
Command
Description
app lync traffic-control
(deprecated)
This command is deprecated and replaced by app lync trafficcontrol .
interface tunnel
The checksum parameter is deprecated.
show voice real-time-analysis
The following parameters are deprecated as part of this command
output:
22 | The ArubaOS Command-Line Interface
l
Jitter(U)(msec)
l
rvalue(U)
l
Pkt-loss(U)(%)
l
Delay(U)(usec)
l
Jitter(D)(msec)
l
rvalue(D)
Dell Networking W-Series ArubaOS 6.4.x | User Guide
About this Guide
This guide describes the Dell Networking W-Series ArubaOS 6.4.x command syntax. The commands in this
guide are listed alphabetically.
The following information is provided for each command:
l
Command Syntax—The complete syntax of the command.
l
Description—A brief description of the command.
l
Syntax—A description of the command parameters, including license requirements for specific parameters
if needed. The applicable ranges and default values, if any, are also included.
l
Usage Guidelines—Information to help you use the command, including: prerequisites, prohibitions, and
related commands.
l
Example—An example of how to use the command.
l
Command History—The version of ArubaOS in which the command was first introduced. Modifications and
changes to the command are also noted.
l
Command Information—This table describes any licensing requirements, command modes and platforms
for which this command is applicable. For more information about available licenses, see the Licenses
chapter of the Dell Networking W-Series ArubaOS 6.4.x User Guide.
Connecting to the Controller
This section describes how to connect to the controller to use the CLI.
Serial Port Connection
The serial port is located on the front panel of the controller. Connect a terminal or PC/workstation running a
terminal emulation program to the serial port on the controller to use the CLI. Configure your terminal or
terminal emulation program to use the following communication settings.
Baud Rate
9600
Data Bits
8
Parity
None
Stop Bits
Flow Control
1
None
The Dell W-7200 Series controller supports baud rates between 9600 and 115200.
Telnet or SSH Connection
Telnet or SSH access requires that you configure an IP address and a default gateway on the controller and
connect the controller to your network. This is typically performed when you run the Initial Setup on the
controller, as described in the Dell Networking W-Series ArubaOS 6.4.x Quick Start Guide. In certain deployments,
you can also configure a loopback address for the controller; see interface loopback on page 473 for more
information.
Configuration changes on Master Controllers
Some commands can only be issued when connected to a master controller. If you make a configuration
change on a master controller, all connected local controllers will subsequently update their configurations as
well. You can manually synchronize all of the controllers at any time by saving the configuration on the master
controller.
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The ArubaOS Command-Line Interface | 23
CLI Access
When you connect to the controller using the CLI, the system displays its host name followed by the login
prompt. Log in using the admin user account and the password you entered during the Initial Setup on the
controller (the password displays as asterisks). For example:
(host)
User: admin
Password: *****
When you are logged in, the user mode CLI prompt displays. For example:
(host) >
User mode provides only limited access for basic operational testing such as running ping and traceroute.
Certain management functions are available in enable (also called “privileged”) mode. To move from user mode
to enable mode requires you to enter an additional password that you entered during the Initial Setup (the
password displays as asterisks). For example:
(host) > enable
Password: ******
When you are in enable mode, the > prompt changes to a pound sign (#):
(host) #
Configuration commands are available in config mode. Move from enable mode to config mode by entering
configure terminal at the # prompt:
(host) # configure terminal
Enter Configuration commands, one per line. End with CNTL/Z
When you are in basic config mode, (config) appears before the # prompt:
(host) (config) #
There are several other sub- command modes that allow users to configure individual interfaces, subinterfaces,
loopback addresses, GRE tunnels and cellular profiles. For details on the prompts and the available commands for
each of these modes, see Appendix A: Command Modes on page 2370.
Command Help
You can use the question mark (?) to view various types of command help.
When typed at the beginning of a line, the question mark lists all the commands available in your current mode
or sub-mode. A brief explanation follows each command. For example:
(host) > ?
enable
logout
ping
traceroute
Turn on Privileged commands
Exit this session. Any unsaved changes are lost.
Send ICMP echo packets to a specified IP address.
Trace route to specified IP address.
When typed at the end of a possible command or abbreviation, the question mark lists the commands that
match (if any). For example:
(host) > c?
clear
clock
configure
copy
Clear configuration
Configure the system clock
Configuration Commands
Copy Files
24 | The ArubaOS Command-Line Interface
Dell Networking W-Series ArubaOS 6.4.x | User Guide
If more than one item is shown, type more of the keyword characters to distinguish your choice. However, if
only one item is listed, the keyword or abbreviation is valid and you can press tab or the spacebar to advance
to the next keyword.
When typed in place of a parameter, the question mark lists the available options. For example:
(host) # write ?
erase
file
memory
terminal
Erase
Write
Write
Write
and start from scratch
to a file in the file system
to memory
to terminal
The indicates that the command can be entered without additional parameters. Any other parameters are
optional.
Command Completion
To make command input easier, you can usually abbreviate each key word in the command. You need type
only enough of each keyword to distinguish it from similar commands. For example:
(host) # configure terminal
could also be entered as:
(host) # con t
Three characters (con) represent the shortest abbreviation allowed for configure. Typing only c or co would
not work because there are other commands (like copy) which also begin with those letters. The configure
command is the only one that begins with con.
As you type, you can press the spacebar or tab to move to the next keyword. The system then attempts to
expand the abbreviation for you. If there is only one command keyword that matches the abbreviation, it is
filled in for you automatically. If the abbreviation is too vague (too few characters), the cursor does not
advance and you must type more characters or use the help feature to list the matching commands.
Deleting Configuration Settings
Use the no command to delete or negate previously-entered configurations or parameters.
l
To view a list of no commands, type no at the enable or config prompt followed by the question mark. For
example:
(host) (config) # no?
l
To delete a configuration, use the no form of a configuration command. For example, the following
command removes a configured user role:
(host) (config) # no user-role
l
To negate a specific configured parameter, use the no parameter within the command. For example, the
following commands delete the DSCP priority map for a priority map configuration:
(host) (config) # priority-map
(host) (config-priority-map) # no dscp priority high
Saving Configuration Changes
Each Dell controller contains two different types of configuration images.
l
The running-config holds the current controller configuration, including all pending changes which have yet
to be saved. To view the running-config, use the following command:
(host) # show running-config
Dell Networking W-Series ArubaOS 6.4.x | User Guide
The ArubaOS Command-Line Interface | 25
l
The startup config holds the configuration which will be used the next time the controller is rebooted. It
contains all the options last saved using the write memory command. To view the startup-config, use the
following command:
(host) # show startup-config
When you make configuration changes via the CLI, those changes affect the current running configuration
only. If the changes are not saved, they will be lost after the controller reboots. To save your configuration
changes so they are retained in the startup configuration after the controller reboots, use the following
command in enable mode:
(host) # write memory
Saving Configuration...
Saved Configuration
Both the startup and running configurations can also be saved to a file or sent to a TFTP server for backup or
transfer to another system.
Commands That Reset the Controller or AP
If you use the CLI to modify a currently provisioned and running radio profile, those changes take place
immediately; you do not reboot the controller or the AP for the changes to affect the current running
configuration. Certain commands, however, automatically force the controller or AP to reboot. You may want
to consider current network loads and conditions before issuing these commands, as they may cause a
momentary disruption in service as the unit resets. Note also that changing the lms-ip parameter in an AP
system profile associated with an AP group will cause all APs in that AP group to reboot.
Table 1: Reset Commands
Commands that Reset an AP
l
ap-regroup
l
ap-rename
l
apboot
l
provision-ap
l
ap wired-ap-profile forward-mode {bridge|splittunnel|tunnel}
l
wlan virtual-ap {aaa-profile |forward-mode {tunnel|bridge|splittunnel|decrypt-tunnel} |ssid-profile |vlan
...}
l
ap system-profile {bootstrap-threshold
|lms-ip |}
l
wlan ssid-profile {battery-boost|denybcast|essid|opmode|strict-svp |wepkey1
|wepkey2 |wepkey3 |wepkey4
|weptxkey |wmm |wmm-be-dscp |wmm-bk-dscp |wmm-ts-min-inactint |wmm-vi-dscp