Alcatel Lucent Command Line Interface Reference Guide, Version 3.4.1Feb. 09 AOS W V3.4.1 Commandline Guide
AOS-W_v3.4.1_Commandline_Reference_Guide
User Manual:
Open the PDF directly: View PDF .
Page Count: 1222
Reference Guide
AOS-W 3.4.1
Command Line Interface
Copyright
© 2009 Alcatel-Lucent. All rights reserved.
Specifications in this manual are subject to change without notice.
Originated in the USA.
AOS-W, Alcatel 4308, Alcatel 4324, Alcatel 6000, Alcatel 41, Alcatel 60/61/65, Alcatel 70, and Alcatel 80 are trademarks of
Alcatel-Lucent in the United States and certain other countries.
Any other trademarks appearing in this manual are the property of their respective companies.
Legal Notice
The use of Alcatel-Lucent switching platforms and software, by all individuals or corporations, to terminate Cisco or Nortel VPN client
devices constitutes complete acceptance of liability by that individual or corporation for this action and indemnifies, in full, AlcatelLucent from any and all legal actions that might be taken against it with respect to infringement of copyright on behalf of Cisco Systems
or Nortel Networks."
www.alcatel-lucent.com
26801 West Agoura Road
Calabasas, CA 91301
AOS-W 3.4.1 Command Line Interface | Reference Guide
0510624-01 | October 2009
Introduction
The AOS-W command line interface (CLI) allows you to configure and manage Alcatel-Lucent switches.
The CLI is accessible from a local console connected to the serial port on the switches or through a
Telnet or Secure Shell (SSH) session from a remote management console or workstation.
NOTE
Telnet access is disabled by default on Alcatel-Lucent switches. To enable Telnet access, enter the telnet cli
command from a serial connection or an SSH session, or in the WebUI navigate to the Configuration >
Management > General page.
What’s New In AOS-W 3.4.1
The following commands have been added in the AOS-W 3.4.1 Command Line Interface.
Command
Description
aaa authentication
stateful-dot1x
This command configures 802.1x authentication for clients on non-AlcatelLucent APs.
aaa authentication
stateful-ntlm
This command configures stateful NT LAN Manager (NTLM) authentication.
aaa authentication
wispr
This command configures WISPr authentication with an ISP’s WISPr RADIUS
server.
aaa authenticationserver windows
This command configures a windows server for stateful-NTLM
authentication.
apconnect
This command instructs a mesh point to connect to a new parent.
clear
This command clears various settings and values from your running
configuration.
lacp group
Configure the per-port specific Link Aggregation Control Protocol (LACP).
lacp port-priority
Configure the LACP port priority.
lacp system-priority
Configure the LACP system priority.
lacp timeout
Configure the timeout period for the LACP session.
show lacp
View the LACP configuration status.
show lacp sys-id
View the LACP system ID information
Modified Commands
The following commands were modified in AOS-W 3.4.1.
Command
Parameter Change
aaa profile
License requirements changed in AOS-W 3.4.1, so the sipauthentication-role parameter now requires the Policy Enforced Firewall
license instead of the Voice Services Module license required in earlier
versions
AOS-W 3.4.1 Command Line Interface | Reference Guide
Introduction | 3
Command
Parameter Change
ap-name
License requirements changed in AOS-W 3.4.1, so the voip-cac-profile
parameter now requires the Policy Enforced Firewall license instead of the
Voice Services Module license required in earlier versions.
interface fastethernet |
gigabitethernet, interface
port-channel, interface
range
A new parameter, trusted {vlan }, sets a range of VLANs to be
trusted. All VLANs not in the range are by default untrusted.
snmp-server
A new parameter, engine-id has been added. This parameter set the
SNMP server engine ID in Hexidecimal.
show ap mesh neighbors
If you include the new optional names parameter, the Portal column in the
output of this command will show AP names, (where available) rather than
BSSIDs.
vlan
A new parameter, vlan range has been added. Lets the user add mulitple
VLAN IDs at once on the switch.
wlan ssid-profile
New parameters, a-beacon-rate and g-beacon-rate have been added to
this command. Sets the beacon rate for 802.11a/g and should be used for
for the Distributed Antenna System (DAS) only.
About this Guide
This guide describes the AOS-W command syntax. The commands in this guide are listed alphabetically.
The following information is provided for each command:
z
Command Syntax—The complete syntax of the command.
z
Description—A brief description of the command.
z
Syntax—A description of the command parameters, including license requirements for specific
parameters if needed. The applicable ranges and default values, if any, are also included.
z
Usage Guidelines—Information to help you use the command, including: prerequisites, prohibitions,
and related commands.
z
Example—An example of how to use the command.
z
Command History—The version of AOS-W in which the command was first introduced.
Modifications and changes to the command are also noted
z
Command Information—This table describes any licensing requirements, command modes and
platforms for which this command is applicable. For more information about available licenses, see
the “Managing Software Feature Licenses” chapter in the AOS-W User Guide.
Connecting to the Switch
This section describes how to connect to the switch to use the CLI.
Serial Port Connection
The serial port is located on the front panel of the switch. Connect a terminal or PC/workstation
running a terminal emulation program to the serial port on the switch to use the CLI. Configure your
terminal or terminal emulation program to use the following communication settings.
4 | Introduction
Baud Rate
Data Bits
Parity
Stop Bits
Flow Control
9600
8
None
1
None
AOS-W 3.4.1 Command Line Interface | Reference Guide
Telnet or SSH Connection
Telnet or SSH access requires that you configure an IP address and a default gateway on the switch and
connect the switch to your network. This is typically performed when you run the Initial Setup on the
switch, as described in the Alcatel-Lucent Quick Start Guide. In certain deployments, you can also
configure a loopback address for the switch; see the “Deploying a Basic Alcatel-Lucent User-Centric
System” chapter in the AOS-W User Guide for more information.
Configuration changes on Master Switches
Some commands can only be issued when connected to a master switch. If you make a configuration
change on a master switch, all connected local switches will subsequently update their configurations
as well. You can manually synchronize all of the switches at any time by saving the configuration on the
master switch.
CLI Access
When you connect to the switch using the CLI, the system displays its host name followed by the login
prompt. Log in using the admin user account and the password you entered during the Initial Setup on
the switch (the password displays as asterisks). For example:
(host)
User: admin
Password: *****
When you are logged in, the user mode CLI prompt displays. For example:
(host) >
User mode provides only limited access for basic operational testing such as running ping and
traceroute.
Certain management functions are available in enable (also called “privileged”) mode. To move from
user mode to enable mode requires you to enter an additional password that you entered during the
Initial Setup (the password displays as asterisks). For example:
(host) > enable
Password: ******
When you are in enable mode, the > prompt changes to a pound sign (#):
(host) #
Configuration commands are available in config mode. Move from enable mode to config mode by
entering configure terminal at the # prompt:
(host) # configure terminal
Enter Configuration commands, one per line. End with CNTL/Z
When you are in basic config mode, (config) appears before the # prompt:
(host) (config) #
NOTE
There are several other sub- command modes that allow users to configure individual interfaces,
subinterfaces, loopback addresses, GRE tunnels and cellular profiles. For details on the prompts and the
available commands for each of these modes, see Appendix A: Command Modes on page 1219.
Command Help
You can use the question mark (?) to view various types of command help.
AOS-W 3.4.1 Command Line Interface | Reference Guide
Introduction | 5
When typed at the beginning of a line, the question mark lists all the commands available in your
current mode or sub-mode. A brief explanation follows each command. For example:
(host) > ?
enable
logout
ping
traceroute
Turn on Privileged commands
Exit this session. Any unsaved changes are lost.
Send ICMP echo packets to a specified IP address.
Trace route to specified IP address.
When typed at the end of a possible command or abbreviation, the question mark lists the commands
that match (if any). For example:
(host) > c?
clear
clock
configure
copy
Clear configuration
Configure the system clock
Configuration Commands
Copy Files
If more than one item is shown, type more of the keyword characters to distinguish your choice.
However, if only one item is listed, the keyword or abbreviation is valid and you can press tab or the
spacebar to advance to the next keyword.
When typed in place of a parameter, the question mark lists the available options. For example:
(host) # write ?
erase
file
memory
terminal
Erase
Write
Write
Write
and start from scratch
to a file in the file system
to memory
to terminal
The indicates that the command can be entered without additional parameters. Any other
parameters are optional.
Command Completion
To make command input easier, you can usually abbreviate each key word in the command. You need
type only enough of each keyword to distinguish it from similar commands. For example:
(host) # configure terminal
could also be entered as:
(host) # con t
Three characters (con) represent the shortest abbreviation allowed for configure. Typing only c or co
would not work because there are other commands (like copy) which also begin with those letters. The
configure command is the only one that begins with con.
As you type, you can press the spacebar or tab to move to the next keyword. The system then attempts
to expand the abbreviation for you. If there is only one command keyword that matches the
abbreviation, it is filled in for you automatically. If the abbreviation is too vague (too few characters),
the cursor does not advance and you must type more characters or use the help feature to list the
matching commands.
Deleting Configuration Settings
Use the no command to delete or negate previously-entered configurations or parameters.
z
To view a list of no commands, type no at the enable or config prompt followed by the question
mark. For example:
(host) (config) # no?
6 | Introduction
AOS-W 3.4.1 Command Line Interface | Reference Guide
z
To delete a configuration, use the no form of a configuration command. For example, the following
command removes a configured user role:
(host) (config) # no user-role
z
To negate a specific configured parameter, use the no parameter within the command. For example,
the following commands delete the DSCP priority map for a priority map configuration:
(host) (config) # priority-map
(host) (config-priority-map) # no dscp priority high
Saving Configuration Changes
Each Alcatel-Lucent switch contains two different types of configuration images.
z
The running config holds the current switch configuration, including all pending changes which
have yet to be saved. To view the running-config, use the following command:
(host) # show running-config
z
The startup config holds the configuration which will be used the next time the switch is rebooted.
It contains all the options last saved using the write memory command. To view the startup-config,
use the following command:
(host) # show startup-config
When you make configuration changes via the CLI, those changes affect the current running
configuration only. If the changes are not saved, they will be lost after the switch reboots. To save your
configuration changes so they are retained in the startup configuration after the switch reboots, use the
following command in enable mode:
(host) # write memory
Saving Configuration...
Saved Configuration
Both the startup and running configurations can also be saved to a file or sent to a TFTP server for
backup or transfer to another system.
AOS-W 3.4.1 Command Line Interface | Reference Guide
Introduction | 7
Commands That Reset the Switch or AP
If you use the CLI to modify a currently provisioned and running radio profile, those changes take place
immediately; you do not reboot the switch or the AP for the changes to affect the current running
configuration. Certain commands, however, automatically force the switch or AP to reboot. You may
want to consider current network loads and conditions before issuing these commands, as they may
cause a momentary disruption in service as the unit resets. Note also that changing the lms-ip
parameter the in an AP system profile associated with an AP group will cause all APs in that AP group
to reboot.
Commands that reset an AP
Commands that reset a switch
z
ap-regroup
z
reload
z
ap-rename
z
reload-peer-sc
z
apboot
z
apflash
z
provision-ap reprovision
z
ap wired-ap-profile
forward-mode {bridge|splittunnel|tunnel}
z
wlan virtual-ap {aaa-profile
|forward-mode {bridge|splittunnel|tunnel}|ssid-profile
|vlan ...}
z
ap system-profile
{bootstrap-threshold |lmsip |master-ip }
z
wlan ssid-profile {batteryboost|deny-bcast|essid|opmode|strictsvp|wepkey1 |wepkey2
|wepkey3 |wepkey4
|weptxkey
|wmm|wmm-be-dscp |wmm-bk-dscp
|wmm-ts-min-inact-int
|wmm-vi-dscp