Ruckus SZ™ 100 And VSZ E™ Command Line Interface Reference Guide For SmartZone 3.5 Smart Zone (GA) (SZ100/v SZ E) Sz100Vsze 35 CLIGuide20170410

SmartZone 3.5 (GA) Command Line Interface Reference Guide (SZ100/vSZ-E) Sz100Vsze-35-CLIGuide20170410

2017-04-25

User Manual: Ruckus SmartZone 3.5 (GA) Command Line Interface Reference Guide (SZ100/vSZ-E)

Open the PDF directly: View PDF PDF.
Page Count: 381 [warning: Documents this large are best viewed by clicking the View PDF Link!]

Ruckus Wireless
SmartZone 100 and Virtual SmartZone
Essentials
Command Line Interface Reference Guide for
SmartZone 3.5
Part Number 800-71293-001
Published April 2017
www.ruckuswireless.com
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 2
Copyright Notice and Proprietary Information
Copyright © 2017. Ruckus Wireless, Inc. All rights reserved.
No part of this documentation may be used, reproduced, transmitted, or translated, in any form or by any means,
electronic, mechanical, manual, optical, or otherwise, without prior written permission of Ruckus Wireless, Inc.
(“Ruckus”), or as expressly provided by under license from Ruckus.
Destination Control Statement
Technical data contained in this publication may be subject to the export control laws of the United States of America.
Disclosure to nationals of other countries contrary to United States law is prohibited. It is the readers responsibility to
determine the applicable regulations and to comply with them.
Disclaimer
THIS DOCUMENTATION AND ALL INFORMATION CONTAINED HEREIN (“MATERIAL”) IS PROVIDED FOR GENERAL
INFORMATION PURPOSES ONLY. RUCKUS AND ITS LICENSORS MAKE NO WARRANTY OF ANY KIND, EXPRESS
OR IMPLIED, WITH REGARD TO THE MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
OF MERCHANTABILITY, NON-INFRINGEMENT AND FITNESS FOR A PARTICULAR PURPOSE, OR THAT THE
MATERIAL IS ERROR-FREE, ACCURATE OR RELIABLE. RUCKUS RESERVES THE RIGHT TO MAKE CHANGES OR
UPDATES TO THE MATERIAL AT ANY TIME.
Limitation of Liability
IN NO EVENT SHALL RUCKUS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL OR CONSEQUEN-
TIAL DAMAGES, OR DAMAGES FOR LOSS OF PROFITS, REVENUE, DATA OR USE, INCURRED BY YOU OR ANY
THIRD PARTY, WHETHER IN AN ACTION IN CONTRACT OR TORT, ARISING FROM YOUR ACCESS TO, OR USE
OF, THE MATERIAL.
Trademarks
Ruckus Wireless, Ruckus, the bark logo, ZoneFlex, FlexMaster, ZoneDirector, SmartMesh, Channelfly, Smartcell,
Dynamic PSK, and Simply Better Wireless are trademarks of Ruckus Wireless, Inc. in the United States and other
countries. All other product or company names may be trademarks of their respective owners.
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 3
Contents
About This Guide
Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Documentation Feedback. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
1 Introduction to the Controller Command Line Interface
Overview of the Controller Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Accessing the Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
What You Will Need . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Connect the Administrative Computer to the Controller. . . . . . . . . . . . . . . . . . . . . . . 16
Start and Configure the SSH Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Using SSH Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Using Serial Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Log On to CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
2 Configuration Commands (a - d)
config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
ad-service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
admin-radius. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
ap. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
ap-auto-approve. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
ap-auto-tagging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
ap-cert-check. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
ap-certificate-reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
ap-control-mgmt-tos . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
ap-heartbeat. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
app-denial-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
app-port-mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
cert-store . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
changepassword . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
clock. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
cluster-ip-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 4
cluster-name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
cluster-redundancy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
dns-server-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
do. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
dp-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
3 Configuration Commands (e-r)
encrypt-mac-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
encrypt-zone-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
eth-port-validate-one-trunk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
event db-persistence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
event email . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
event snmp-notification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
event-email . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
event-threshold. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
ftp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
ftp-test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
identity-provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
ip control-nat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
ip name-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
ip name-server-ipv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
ip route-ipv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
ipsec-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
lbs-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
ldap-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
license cloud. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
license export . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
license import . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
license local . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
license sync-now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 5
lineman. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
localdb-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
logging console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
lwapp2scg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
mgmt-acl . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
no ad-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
no admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
no admin-radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
no ap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
no ap auto-approve . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
no ap auto-tagging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
no ap-cert-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
no ap-control-mgmt-tos . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
no ap-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
no block-client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
no bonjour-fencing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
no bonjour-fencing-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
no bonjour-gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
no bonjour-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
no cert-store. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
no control-plane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
no data-plane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
no device-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
no diffserv. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
no dns-server-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
no dp-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
no encrypt-mac-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
no encrypt-zone-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
no ethernet-port-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
no event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
no ftp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
no guest-access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
no hotspot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
no hotspot20-venue-profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
no hotspot20-wlan-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
no identity-provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
no interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
no ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
no ipsec-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 6
no l2-acl . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
no lbs-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
no ldap-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
no lineman . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
no logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
no oauth-service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
no operator-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
no osu-portal-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
no outbound firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142
no proxy-aaa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142
no report. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142
no role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
no sci-profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
no snmp-notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
no snmp-v2-community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
no snmp-v3-user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146
no snmp-v2-community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146
no snmp-v3-user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
no subpackages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
no user-agent-blacklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
no user-group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
no user-role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
no user-traffic-profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
no vlan-pooling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
no web-authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
no wlan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
no wlan-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
no wlan-scheduler . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152
no zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152
northbound-authtype . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
northbound-portal. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
ntp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
oauth-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
operator-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
outbound-firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158
proxy-aaa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
rebalance-aps. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
rks-gre . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 7
role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169
4 Configuration Commands (s-z)
sci-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172
sci-setting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174
sms-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175
smtp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176
snmp-notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
snmp-v2-community. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
snmp-v3-user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181
soft-gre. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
subpackages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186
support-admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187
syslog-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188
user-agent-blacklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191
user-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193
user-role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
user-traffic-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196
vlan-pooling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200
zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201
zone-template. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275
5 Debug Commands
debug. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278
ap-subnet-discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278
apcli . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279
data-plane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 280
diagnostic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281
do. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283
dp-customized-config. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283
end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284
exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284
export log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285
help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285
no ap-subnet-discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286
no dp-customized-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286
no output-format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287
no save. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287
no schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 8
no screen-pagination . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288
no strict-wfa-compliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289
no sha1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289
no tlsv1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290
no web-backdoor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290
no web-debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291
output-format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291
reindex-elasticsearch-all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 292
screen-pagination . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 292
sha1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293
show ap-subnet-discovery-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294
show dp-customized-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294
show sha1-state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295
show strict-wfa-compliance-state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295
show tlsv1-state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 296
strict-wfa-compliance-state. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 296
tlsv1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297
6Setup Commands
rbd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298
rbddump. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298
setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300
7Show Commands
show admin-activity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304
show alarm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305
show ap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305
show ap-certificate-status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 306
show ap-stats. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 306
show backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310
show backup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310
show backup-config-state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311
show backup-network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311
show backup-schedule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 312
show backup-state. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 312
show backup-upgrade-state. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313
show client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313
show clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314
show cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 315
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 9
show cluster-node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 315
show cluster-state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316
show control-plane-stats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316
show counter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318
show cpuinfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 319
show dhcp-relay-stats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 320
show diskinfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 320
show event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321
show history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321
show interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 322
show ip. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323
show license. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 324
show logs-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 325
SZ100# show logs-filter client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 325
show md-stats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 326
show meminfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 327
show ntp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 328
show radius-proxy-stats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 328
show report-result. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329
show rogue-aps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330
show run cluster-redundancy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331
show running-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331
show run sci-profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336
show run sci-setting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 337
show run user-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 337
show run zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 338
show run zone-template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339
show service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339
show upgrade-history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 340
show upgrade-state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 341
show version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 341
show zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342
8 System Commands
?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 344
backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345
backup config. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345
backup network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 346
backup schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 346
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 10
backup-upgrade. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347
cluster in-service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348
config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348
copy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349
copy ap-certificate-request . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 350
copy backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 350
copy backup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351
copy backup-network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351
copy client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 352
copy report-result . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 353
copy ftp-url . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 353
delete backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
delete backup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
delete backup-network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355
delete client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355
diagnostic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 356
enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359
enable <new password>. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359
exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 360
help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 360
logout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 361
log-diagnostic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 361
no service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362
patches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362
ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 363
ping6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364
reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365
reload ap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365
reload now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 366
remote ap-cli . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 366
restore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367
restore config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367
restore local . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 368
restore network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 368
service restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369
service start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369
set-factory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 370
shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 372
shutdown now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 372
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 11
snapshot disk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 373
traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 373
traceroute6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 375
upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376
upload ap-certificate-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376
Index
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 12
About This Guide
This SmartZone™ (SZ) 100 and Virtual SmartZone Essentials (vSZ-E) Command
Line Interface Reference Guide contains the syntaxes and commands for config-
uring and managing the SZ-100/vSZ-E (collectively referred to as “the controller”
throughout this guide) from the command line interface.
This guide is written for service operators and system administrators who are
responsible for managing, configuring, and troubleshooting Ruckus Wireless
devices. Consequently, it assumes a basic working knowledge of local area
networks, wireless networking, and wireless devices.
NOTE If release notes are shipped with your product and the information there
differs from the information in this guide, follow the instructions in the release notes.
Most user guides and release notes are available in Adobe Acrobat Reader Portable
Document Format (PDF) or HTML on the Ruckus Wireless Support Web site at
https://support.ruckuswireless.com/contact-us.
Document Conventions
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 13
Document Conventions
Table 1 and Table 2 list the text and notice conventions that are used throughout
this guide.
Related Documentation
For a complete list of documents that accompany this release, refer to the Release
Notes.
Table 1. Text conventions
Convention Description Example
monospace Represents information as it
appears on screen
[Device name]>
monospace bold Represents information that
you enter
[Device name]> set
ipaddr 10.0.0.12
default font bold Keyboard keys, software
buttons, and field names
On the Start menu, click All
Programs.
italics Screen or page names Click Advanced Settings.
The Advanced Settings page
appears.
Table 2. Notice conventions
Notice Type Description
NOTE Information that describes important features or instructions
CAUTION! Information that alerts you to potential loss of data or potential
damage to an application, system, or device
WARNING! Information that alerts you to potential personal injury
Documentation Feedback
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 14
Documentation Feedback
Ruckus Wireless is interested in improving its documentation and welcomes your
comments and suggestions. You can email your comments to Ruckus Wireless at:
docs@ruckuswireless.com
When contacting us, please include the following information:
Document title
Document part number (on the cover page)
Page number (if appropriate)
For example:
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5
Part number: 800-71293-001
Page 88
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 15
1
Introduction to the Controller
Command Line Interface
In this chapter:
Overview of the Controller Command Line Interface
Accessing the Command Line Interface
Overview of the Controller Command Line Interface
What You Will Need
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 16
Overview of the Controller Command Line
Interface
The Controller command line interface (CLI) is a software tool that enables you to
configure and manage the controller. Using the command line interface, you can
issue commands from an operating system prompt, such as the Microsoft Windows
command prompt or a Linux operating system terminal. Each command performs
a specific action for configuring device settings or returning information about the
status of a specific device feature.
Accessing the Command Line Interface
The controller has a built-in command line interface (CLI) that you can use to
configure controller settings and manage access points. This section describes the
requirements and the procedure for accessing the controller’s CLI.
What You Will Need
To access the controller CLI, you will need the following:
1A computer that you want to designate as administrative computer
2A network connection to the controller (if you want to use an SSH connection)
or an RS-232 serial to RJ45 cable (if you want to use a serial connection)
3An SSH (secure shell) client
Connect the Administrative Computer to the Controller
Connect the administrative computer to the controller either through the network
or directly using an RS-232 serial to RJ45 cable.
1If you want to use an SSH connection, connect the administrative computer to
the same subnet or broadcast domain as the Management (Web) interface of
the controller.
2If you want to use a serial connection, make sure that both the administrative
computer and the controller are both powered on. And then, do the following:
Connect the RJ45 end of the cable to the port labeled |O|O| (console port)
on the controller. See Figure 1 for the location of the console port.
Connect the RS-232 end of the cable to a COM port on the administrative
computer.
Accessing the Command Line Interface
Start and Configure the SSH Client
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 17
Figure 1. Location of console port
Start and Configure the SSH Client
Before starting this procedure, make sure that the SSH client is already installed on
the administrative computer.
NOTE: The following procedure describes how to use PuTTY, a free and open
source telnet/SSH client, to access the controller CLI. If you are using a different
SSH client, the procedure may be slightly different (although the connection settings
should be the same). For more information on PuTTY, visit www.putty.org.
See the following sections depending on your connection method:
Using SSH Connection
Using Serial Connection
Accessing the Command Line Interface
Start and Configure the SSH Client
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 18
Using SSH Connection
If you have connected the administrative computer to the same subnet or broadcast
domain as the Management (Web) interface of the controller, follow these steps to
start and configure the SSH client.
1Start PuTTY. The PuTTY configuration dialog box appears, showing the Session
screen as seen in Figure 2.
2In Connection type, select SSH.
Figure 2. Selecting SSH as a connection type
3Enter the IP address of the Management (Web) interface of the controller in the
Host Name (or IP address) field as seen in Figure 2.
4Click Open. The PuTTY console appears and displays the login prompt. See
Figure 6.
Accessing the Command Line Interface
Start and Configure the SSH Client
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 19
Using Serial Connection
If you have connected the administrative computer to the console port on the
controller using an RS-232 serial to RJ45 cable, follow these steps to start and
configure the SSH client.
1Start PuTTY. The PuTTY Configuration dialog box appears, showing the Session
screen as seen in Figure 3.
2In Connection type, select Serial if you are connecting via serial cable.
Figure 3. Selecting serial as a connection type
3Under Category, click Connection > Serial. The serial connection options appear
on the right side of the dialog box, displaying PuTTY’s default serial connection
settings. See Figure 4.
Accessing the Command Line Interface
Start and Configure the SSH Client
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 20
Figure 4. PuTTy’s default serial connection setting
4Configure the serial connection settings as follows. See Figure 5.
Serial line to connect to: Type the COM port name to which you connected
the RS-232 cable.
Bits per second: 115200
Data bits: 8
Stop bits: 1
•Parity: None
Flow control: None
Accessing the Command Line Interface
Start and Configure the SSH Client
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 21
Figure 5. PuTTYs serial connection settings for connecting to the controller
5Click Open. The PuTTY console appears and displays the login prompt as seen
in Figure 6.
Accessing the Command Line Interface
Log On to CLI
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 22
Figure 6. PuTTY console displaying the login prompt
You have completed configuring the SSH client to connect to the controller CLI.
Log On to CLI
The following describes the process for log on to the CLI.
Log on to the controller using putty/Xssh (any other application) using the user
credentials of login name and password as given.
NOTE: You cannot use 'admin' as a password, which is used during the controller
installation procedure.
The Ruckus Wireless controller CLI welcome message appears with the CLI
prompt as seen in Figure 7.
Accessing the Command Line Interface
Log On to CLI
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 23
Figure 7. Welcome to SmartZone
You are now logged into the controller CLI as a user with limited privileges by
looking at the CLI prompt. If you are in limited mode, the prompt appears as
ruckus> (with a greater than sign). To view a list of commands that are available
at the root level or user mode, enter help or? as seen in Figure 7 and Figure 8.
NOTE: To change the CLI prompt to a privileged mode, see step 5.
Accessing the Command Line Interface
Log On to CLI
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 24
Figure 8. Using Show Commands
As a user with limited privileges, you can view a history of commands that were
previously executed and ping a device as seen in Figure 9.
Accessing the Command Line Interface
Log On to CLI
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 25
Figure 9. Using the Ping command
If you want to run more commands, you need to switch to privileged mode by
entering enable and the password at the root prompt as seen in Figure 10. The
prompt changes from ruckus> to ruckus# (with a pound sign) as seen in Figure
10. Refer to enable command for details.
Figure 10. Changing to privileged mode
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 26
2
Configuration Commands (a - d)
This chapter describes the commands that you can use to configure, enable, and
disable various controller components. The following table lists the commands.
NOTE: For easy access and reading, the configuration chapter has been split into
three chapters based on the alphabetical order of commands.
config
To execute commands in configuration mode, you need to change the mode to:
ruckus(config)#
Example
SZ100-Node1#
SZ100-Node1# config
SZ100-Node1(config)#
Table 3. Configuration commands
config ad-service admin admin-radius ap
ap-auto-
approve
ap-auto-
tagging
ap-cert-check ap-certificate-
reset
ap-control-mgmt-
tos
ap-heartbeat cert-store changepasswo
rd
clock cluster-ip-list
cluster-name cluster-
redundancy
dns-server-
service
do dp-group
Configuration Commands (a - d)
ad-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 27
ad-service
To create or update the active directory service configuration, use the following
command:
ruckus(config)# ad-service <name>
Once you enter the config-admin context, you can configure the rest of the
administrator’s profile (see example below).
Syntax Description
This command uses the following syntax:
name: Active service directory name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ad-service ads
SZ100-Node1(config-ad-service)#
Related Commands
Table 5 lists the related ad-service configuration commands.
Table 4. Commands related to ruckus(config-ad-service)
Syntax and Type Parameters (if any) Description
ruckus(config-ad-service)# admin-
domain-name
Type: Privileged
<domain-name> Sets the administrator domain
name. This field is applicable on
executing the group attribute
command.
ruckus(config-ad-service)# admin-
password
Type: Privileged
<password> Sets the administrator domain
password. This field is applicable
on executing the group attribute
command.
ruckus(config-ad-service)#
description
Type: Privileged
<text> Sets the description
Configuration Commands (a - d)
ad-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 28
ruckus(config-ad-service)# do
Type: Privileged
Executes the do command.
ruckus(config-ad-service)# email
Type: Privileged
<email> Sets the user’s email details.
ruckus(config-ad-service)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-ad-service)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-ad-service)#
friendly-name
Type: Privileged
<friendly-name> Sets friendly name for the active
service directory.
ruckus(config-ad-service)# global-
catalog
Type: Privileged
<friendly-name> Enables the global catalog
support
ruckus(config-ad-service)# group-
attrs
Type: Privileged
<attr-value>: Group
attribute value
<user-role>: User Role
Sets the user traffic profile
mapping.
ruckus(config-ad-service)# help
Type: Privileged
Displays help.
ruckus(config-ad-service)# ip-
address
Type: Privileged
<ip> - Sets the primary
server IP address
Sets the primary service IP
address.
ruckus(config-ad-service)# name
Type: Privileged
<name> Sets the active directory service
name.
ruckus(config-ad-service)# no
Type: Privileged
<global-catalog>
<group-attrs> <attr-
value>
Disables the commands.
ruckus(config-ad-service)# port
Type: Privileged
<port> Sets the primary server port.
Table 4. Commands related to ruckus(config-ad-service)
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
admin
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 29
admin
To create or update the administrator’s profile (including the email address, login ID
and password), use the following command:
ruckus(config)# admin <name>
Once you enter the config-admin context, you can configure the rest of the
administrator’s profile (see example below).
Syntax Description
This command uses the following syntax:
name: Administrator user name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# admin joe
SZ100-Node1(config-admin)# email joe@company.com
SZ100-Node1(config-admin)# password admin!234
SZ100-Node1(config-admin)# phone 22870001
SZ100-Node1(config-admin)# real-name "Joe Admin"
SZ100-Node1(config-admin)# title CTO
SZ100-Node1(config-admin)# radius radius-1
SZ100-Node1(config-admin-radius)# ip 1.1.1.1
SZ100-Node1(config-admin-radius)# port 1813
SZ100-Node1(config-admin-radius)# realm tw1
SZ100-Node1(config-admin-radius)# shared-secret 11
ruckus(config-ad-service)#
windows-domain-name
Type: Privileged
<domain-name>
Example: dc=domain,
dc=ruckuswireless,
dc=com
Sets the windows domain name
ruckus(config-ad-service)# title
Type: Privileged
<text> Sets the user’s job title.
Table 4. Commands related to ruckus(config-ad-service)
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
admin
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 30
Retype: **
SZ100-Node1(config-admin-radius)# exit
SZ100-Node1(config-admin)# exit
SZ100-Node1(config)#
Related Commands
Table 5 lists the related admin configuration commands.
Table 5. Commands related to ruckus(config-admin)
Syntax and Type Parameters (if any) Description
ruckus(config-admin)# do
Type: Privileged
Executes the do command.
ruckus(config-admin)# email
Type: Privileged
<email> Sets the user’s email details.
ruckus(config-admin)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-admin)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-admin)# help
Type: Privileged
Displays help.
ruckus(config-admin)# name
Type: Privileged
<name> Sets the account name.
ruckus(config-admin)# password
Type: Privileged
<password> Sets the password for user.
ruckus(config-admin)# phone
Type: Privileged
<phone> Sets the phone number of the user.
ruckus(config-admin)# real-name
Type: Privileged
<name> Sets the real name.
ruckus(config-admin)# role
Type: Privileged
<name> Sets the user role.
ruckus(config-admin)# title
Type: Privileged
<text> Sets the user’s job title.
Configuration Commands (a - d)
admin-radius
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 31
admin-radius
To configure the RADIUS server for administrators use the following command:
ruckus(config)# admin-radius
Syntax Description
This command uses the following syntax:
name: RADIUS server name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config-admin)# radius radius-1
SZ100-Node1(config-admin-radius)# ip 1.1.1.1
SZ100-Node1(config-admin-radius)# port 1813
SZ100-Node1(config-admin-radius)# realm tw1
SZ100-Node1(config-admin-radius)# shared-secret 11
Retype: **
SZ100-Node1(config-admin-radius)# exit
Configuration Commands (a - d)
admin-radius
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 32
Related Commands
Table 6 lists the related admin-radius-service configuration commands.
Table 6. Commands related to ruckus(config-radius-service)
Syntax and Type Parameters (if any) Description
ruckus(config-admin-radius)#
backup
Type: Privileged
ip <ip>: Sets the IP
address of secondary
RADIUS server
port <port>: Sets the port
of secondary RADIUS
server
shared-secret: Sets the
shared secret of
secondary RADIUS server
request-timeout
<seconds>: Sets the
request timeout seconds
for failover policy
max-retry <number>:
Sets the maximum
number of retries for
failover policy
retry-prilnvl <minutes>:
Sets the reconnect
primary minutes for
failover policy
Enables backup of RADIUS server.
ruckus(config-admin-radius)# do
Type: Privileged
Executes the do command.
ruckus(config-admin-radius)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-admin-radius)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-admin-radius)# help
Type: Privileged
Displays help.
Configuration Commands (a - d)
admin-radius
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 33
ruckus(config-admin-radius)# ip
Type: Privileged
<ip> Sets the IP addresses of the
primary RADIUS server.
ruckus(config-admin-radius)#
name
Type: Privileged
<name> Sets the RADIUS server name.
ruckus(config-admin-radius)# no
Type: Privileged
backup Disables the backup RADIUS
support.
ruckus(config-admin-radius)# port
Type: Privileged
<port> Sets the port addresses of the
primary RADIUS server.
ruckus(config-admin-radius)#
realm
Type: Privileged
<realms> Multiple realms
supported. Use a comma
(,) to separate realms
(example:home1,home2)
Sets the realms.
ruckus(config-admin-radius)#
service
Type: Privileged
<services>: Multiple
services supported. Use a
comma (,) to separate
services
(example:home1,home2)
Sets the services.
ruckus(config-admin-radius)#
shared-secret
Type: Privileged
<shared-secret> Shared
secret between 1 and
255.
Sets the shared secret of the
primary RADIUS server.
ruckus(config-admin-radius)# test
Type: Privileged
<username>
<password> [CHAP |
PAP]
Tests the RADIUS server based on
the user credentials.
ruckus(config-admin-radius)# type
Type: Privileged
[ radius | tacacs ] Sets the admin authentication
type,
Table 6. Commands related to ruckus(config-radius-service)
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 34
ap
To update the AP configuration, use the following commands:
ruckus(config)# ap <mac>
ruckus(config)# ap pre-prov <import <ftp-url>> <export <ftp-url>>
ruckus(config)# ap swap <import <ftp-url>> <export <ftp-url>>
Syntax Description
This command uses the following syntax:
<mac> lock
<mac>: AP MAC address
lock: Lock AP
<mac> pre-prov
<mac>: AP MAC address
pre-prov: Update Pre-provision configuration
<mac> swap
<mac>: AP MAC address
swap: Update Swap configuration
<mac> trigger-swap
<mac>: AP MAC address
trigger-swap: Trigger swap action
<mac> approve
<mac>: AP MAC address
approve: Approve AP to go ahead registration process
Default
This command has no default settings.
Command Mode
Config
Example
ruckus(config)# ap mac
SZ100-Node1(config)# ap A1:87:45:34:56:FE
ruckus(config)# ap pre-prov <export <ftp-url>>
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 35
SZ100-Node1(config)# ap pre-prov import ftp://
ruckus:ruckus1!@172.19.7.100/backup/AP_ad8745345
ruckus(config)# ap swap <import <ftp-url>>
SZ100-Node1(config)# ap swap export ftp://
ruckus:ruckus1!@172.19.7.100
Related Commands
Table 7 lists the related ap profile configuration commands.
Table 8 lists the related ap model configuration commands.
Table 10 lists the related ap model lan1 configuration commands.
Table 7 lists the related ap profile configuration commands.
Table 7. Commands related to ruckus(config-ap).
Syntax and Type Parameters (if any) Description
ruckus(config-ap)# admin
Type: Privileged
<logon> <password> Sets the administrative logon
credentials.
ruckus(config-ap)# admin-mode
Type: Privileged
<locked> <unlocked> Sets the administrative mode to
either locked or unlocked.
ruckus(config-ap)# ap-logon
Type: Privileged
<logon-id> Sets the access point
administration login credentials.
ruckus(config-ap)# ap-model
Type: Privileged
<ap-model> Sets the model specification
(overrides the zone configuration).
ruckus(config-ap)# ap-password
Type: Privileged
<password> Sets the access point
administrative password.
ruckus(config-ap)# area-code
Type: Privileged
<areacode> Sets the user location information
of LAC or TAC.
ruckus(config-ap)# ap-snmp-
options
Type: Privileged
Sets the AP SNMP options.
ruckus(config-ap)# bonjour-
gateway
Type: Privileged
Enables the bonjour gateway.
ruckus(config-ap)# bonjour-policy
Type: Privileged
Enables the bonjour policy.
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 36
ruckus(config-ap)# channel-
evaluation-interval
Type: Privileged
<seconds>:The interval
value (Range: 60-3600
sec)
Sets the channel evaluation
interval.
ruckus(config-ap)# channel-select-
mode
Type: Privileged
2.4g ${value}: 2.4GHz
radio
5g ${value}: 5GHz radio
Sets a mode to automatically
adjust AP channels.
ruckus(config-ap)# channelfly-
mtbc
Type: Privileged
2.4g <number>: 2.4GHz
radio
<number>: MTBC value
(Range:100~1440)
5g <number>: 5GHz
radio
Set MTBC value of ChannelFly
Table 7. Commands related to ruckus(config-ap).
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 37
ruckus(config-ap)# client-
admission-control
Type: Privileged
2.4g
5g
2.4g minClientCount
<minClientCount>
Min Client Count (Default:
10)
2.4g maxRadioLoad
<maxRadioLoad>
Max Radio Load (Default:
75%)
2.4g
minClientThroughput
<minClientThroughput>:
Min Client Throughput
(Default: 0.0Mbps)
5g minClientCount
<minClientCount>
Min Client Count (Default:
20)
5g maxRadioLoad
<maxRadioLoad>
Max Radio Load (Default:
75%)
5g minClientThroughput
<minClientThroughput>
Min Client Throughput
(Default: 0.0Mbps)
Enables the client admission
control.
ruckus(config-ap)# description
Type: Privileged
<description> Sets the model specification
(overrides the zone configuration).
ruckus(config-ap)# device-ip-
mode
Type: Privileged
[ ipv6 | ipv4 ] Sets the device IP mode.
ruckus(config-ap)# do
Type: Privileged
Executes the do command.
Table 7. Commands related to ruckus(config-ap).
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 38
ruckus(config-ap)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-ap)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-ap)# gps
Type: Privileged
<latitude> <longitude> Sets the GPS coordinates to
latitude and longitude values.
ruckus(config-ap)# gps-latitude
Type: Privileged
<gps-latitude> Sets the GPS coordination
latitude.
ruckus(config-ap)# gps-longitude
Type: Privileged
<gps-longitude> Sets the GPS coordination
longitude.
ruckus(config-ap)# help
Type: Privileged
Displays help.
ruckus(config-ap)# hotspot20
Type: Privileged
<name> [ swe | cze | spa
| eng | chi | ger | fre | jpn |
dan | tur ]
<name>: Name
swe: Swedish
cze: Czech
spa: Spanish
eng: English
chi: Chinese
ger: German
fre: French
jpn: Japanese
dan: Danish
tur: Turkish
Sets the hotspot 2.0 settings.
ruckus(config-ap)# ip
Type: Privileged
address <ip> <network-
mask> <gateway>
name-server <dns-
server> secondary
Sets the IP address and primary
and secondary DNS servers.
Table 7. Commands related to ruckus(config-ap).
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 39
ruckus(config-ap)# ip6
Type: Privileged
[ keep | auto ]: Retains the
AP settings
static <ipv6> <gateway>
<primaryDNS>
<secondaryDNS : Static
IPv6 address with the
primary and secondary
server details.
Sets the AP IPv6 address.
ruckus(config-ap)# location
Type: Privileged
<location> Sets the location.
ruckus(config-ap)# location-
additional-info
Type: Privileged
<text> Sets the additional information for
location.
ruckus(config-ap)# mesh
Type: Privileged
[ disable | mesh | root |
auto ]
Sets the mesh mode to either:
disable: Disable
mesh: Mesh AP
root: Root AP
auto: Auto
ruckus(config-ap)# model
Type: Privileged
Sets the model specifications. It
overrides the zone configuration.
ruckus(config-ap)# name
Type: Privileged
<name> Sets the AP name.
Table 7. Commands related to ruckus(config-ap).
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 40
ruckus(config-ap)# no
Type: Privileged
admin
bonjour-gateway
channel-evaluation-
interval
channel-select-mode
client-admission-control
description
gps
hotspot20
ip <address> <name-
server secondary>
ip6 <address> <name-
server secondary>
location
location-additional-info
Disables the configuration.
...................................continued
ruckus(config-ap)# no
Type: Privileged
model
override-ap-mgmt-vlan
channel-select-mode
override-client-
admission-control
override-smart-mon
override-syslog-opt
override-zone-location
override-zone-location-
additional-info
radio
smart-mon
swap-in-ap
syslog
uplink-ap
venue-profile
Disables the configuration.
Table 7. Commands related to ruckus(config-ap).
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 41
ruckus(config-ap)# override-ap-
mgmt-vlan
Type: Privileged
<vlanTag> Override AP Management VLAN.
ruckus(config-ap)# override-
channel-select-mode
Type: Privileged
<2.4g> : 2.4 GHz radio
<5g> : 5 GHz radio
Overrides the auto channel
selection mode and channelFly
MTBC.
ruckus(config-ap)# override-client-
admission-control
Type: Privileged
<2.4g> <5g> Overrides the client admission
control.
ruckus(config-ap)# override-smart-
mon
Type: Privileged
Overrides the smart monitor.
ruckus(config-ap)# override-
syslog-opt
Type: Privileged
Override Syslog options
ruckus(config-ap)# override-zone-
location
Type: Privileged
Overrides the zone location
settings.
ruckus(config-ap)# override-zone-
location-additional-info
Type: Privileged
Overrides the zone’s additional
information setting on location.
Table 7. Commands related to ruckus(config-ap).
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 42
ruckus(config-ap)# radio
Type: Privileged
2.4g channel <channel>
5g channel <channel>
2.4g channelization
<channelization>
5g channelization
<channelization>
2.4g tx-power <tx-
power>
5g tx-power <tx-power>
2.4g wlan-service
5g wlan-service
2.4g wlan-group <name>
5g wlan-group <name>
2.4g roam [ enable |
disable ]
5g roam [ enable | disable ]
Sets the radio channels.
ruckus(config-ap)# smart-mon
Type: Privileged
interval <between 5-60>
threshold <between 1-
10>
Enables the smart monitor.
ruckus(config-ap)# swap-in-ap
Type: Privileged
<mac> Sets the AP Mac IP address for
swap-in.
Table 7. Commands related to ruckus(config-ap).
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 43
ruckus(config-ap)# syslog
Type: Privileged
enable <ip> <port> -
Enable the syslog server
enable <ip> <port> [
Local2 | Keep Original |
Local1 | Local5 | Local6 |
Local0 | Local7 | Local3 |
Local4 ] [ Error |
Critical | Warning | All |
Alert | Notice | Info |
Emergency ]
disable - Disables the
syslog server
Sets the syslog server.
ruckus(config-ap)# uplink
Type: Privileged
[ smart | manual ] Sets the uplink selection to either
smart or manual.
ruckus(config-ap)# uplink-ap
Type: Privileged
Sets the uplink to manual access
point.
ruckus(config-ap)# venue-profile
Type: Privileged
<name> Sets the venue profile
ruckus(config-ap)# zone
Type: Privileged
<name> Moves the access point to another
zone.
Table 7. Commands related to ruckus(config-ap).
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 44
Table 8 lists the related to ap-model configuration commands.
Table 8. Commands related to ruckus(config-ap-model)
Syntax and Type Parameters (if any) Description
ruckus(config-ap-model)# do
Type: Privileged
Executes the do command.
ruckus(config-ap-model)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-ap-model)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-ap-model)# ext-ant
Type: Privileged
2.4g <number> - 2.4 with
DBI number
2.4gg <number> [ 3 | 2 ] -
3/2 antennas
5g <number> - 5g with
DBI number
5gg <number> [ 2 | 3 ] -
5gg with 2/3 antennas
Enables the external antenna.
ruckus(config-ap-model)# help
Type: Privileged
Displays help.
ruckus(config-ap-model)# internal-
heater
Type: Privileged
Enables the internal heater.
ruckus(config-ap-model)# lan1
ruckus(config-ap-model)# lan2
ruckus(config-ap-model)# lan3
ruckus(config-ap-model)# lan4
ruckus(config-ap-model)# lan5
Type: Privileged
Sets the LAN configurations from 1
to 5.
ruckus(config-ap-model)# led
Type: Privileged
Enables the status of LEDs.
ruckus(config-ap-model)# led-
mode
Type: Privileged
Sets the LED mode.
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 45
ruckus(config-ap-model)# lldp
Type: Privileged
Enables link layer discovery
protocol.
ruckus(config-ap-model)# lldp-ad-
interval
Type: Privileged
<seconds> Sets the LLDP advertise interval.
ruckus(config-ap-model)# lldp-
hold-time
Type: Privileged
<seconds> Sets the LLDP hold time.
ruckus(config-ap-model)# lldp-
mgmt
Type: Privileged
Enables LLDP management IP
TLV.
ruckus(config-ap-model)# no
Type: Privileged
ext-ant
internal-heater
lan1
lan2
lan3
lan4
lan5
led
lldp
lldp-mgmt
poe-operating-mode
poe-out-port
radio-band
usb
Disables or deletes the settings
that have been configured.
ruckus(config-ap-model)# poe-
operating-mode
Type: Privileged
Switches the PoE mode.
ruckus(config-ap-model)# poe-
out-port
Type: Privileged
Enables the PoE out port.
Table 8. Commands related to ruckus(config-ap-model)
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 46
Table 9 lists the related to ap-model-lan1 configuration commands.
ruckus(config-ap-model)# radio-
band
Type: Privileged
${value} Switches the radio band.
ruckus(config-ap-model)# usb
Type: Privileged
<ap-model> [ enable |
disable]
Sets the USB port for a specific AP
model.
Table 9. Commands related to ruckus(config-ap-model-lan1)
Syntax and Type Parameters (if any) Description
ruckus(config-ap-model-lan1)#
8021x
Type: Privileged
<802.1x-type> Sets 802.1x.
ruckus(config-ap-model-lan1)#
acct-service
Type: Privileged
<acct-service> Sets the authentication service
configurations.
ruckus(config-ap-model-lan1)#
auth-service
Type: Privileged
<auth-service> Sets the authentication service
configurations.
ruckus(config-ap-model-lan1)# do
Type: Privileged
Executes the do command.
ruckus(config-ap-model-lan1)#
end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-ap-model-lan1)#
exit
Type: Privileged
Exits from the EXEC.
ruckus(config-ap-model-lan1)#
help
Type: Privileged
Displays help.
ruckus(config-ap-model-lan1)# no
Type: Privileged
overwrite Does not permit overwriting.
Table 8. Commands related to ruckus(config-ap-model)
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap-auto-approve
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 47
ap-auto-approve
To enable auto approve, use the following command:
ruckus(config)# ap-auto-approve
Syntax Description
This command has no arguments or keywords
ruckus(config-ap-model-lan1)#
mac-bypass
Type: Privileged
Sets the MAC bypass.
ruckus(config-ap-model-lan1)#
members
Type: Privileged
<members> Sets the AP model configurations.
ruckus(config-ap-model-lan1)# no
Type: User
acct-service
mac-bypass
Disables or deletes the settings
that have been configured.
ruckus(config-ap-model-lan1)#
profile
Type: Privileged
<profile> : Ethernet port
profile.
Sets the Ethernet port profile.
ruckus(config-ap-model-lan1)#
supplicant
Type: Privileged
mac
custom <username>
<password>
Sets the supplicant.
ruckus(config-ap-model-lan1)#
type
Type: Privileged
[trunk-port | access-port |
general-port]
Sets the port type.
ruckus(config-ap-model-lan1)#
vlan-untag-id
Type: Privileged
<vlan-untag-id> Sets the VLAN untag ID.
ruckus(config-ap-model-lan1)#
vlan-members
Type: Privileged
<members>: VLAN
members
Sets the VLAN members.
Table 9. Commands related to ruckus(config-ap-model-lan1)
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap-auto-approve
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 48
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ap-auto-approve
Successful operation
Configuration Commands (a - d)
ap-auto-tagging
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 49
ap-auto-tagging
To setup critical access point auto tagging rules or to enable auto tagging critical
access points, use the following command:
ruckus(config)# ap-auto-tagging
Syntax Description
This command has no arguments or keywords
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ap-auto-tagging
SZ100-Node1(config-ap-auto-tagging)#
Related Commands
Table 10 lists the related to ap-auto-tagging configuration commands.
exi
Table 10. Commands related to ruckus(config-ap-auto-tagging)
Syntax and Type Parameters (if any) Description
ruckus(config-ap-auto-tagging)#
do
Type: Privileged
Executes the do command.
ruckus(config-ap-auto-tagging)#
enable
Type: Privileged
Enables the auto tagging for critical
APs.
ruckus(config-ap-auto-tagging)#
end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-ap-auto-tagging)#
exit
Type: Privileged
Exits from the EXEC.
Configuration Commands (a - d)
ap-cert-check
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 50
ap-cert-check
To enable the access point certificate check, use the following command:
ruckus(config)# ap-cert-check
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ap-cert-check
Successful operation
ruckus(config-ap-auto-tagging)#
help
Type: Privileged
Displays help.
ruckus(config-ap-auto-tagging)#
no
Type: Privileged
<enable> Disables the auto tagging for
critical APs.
ruckus(config-ap-auto-tagging)#
rule
Type: Privileged
<daily-threshold> - Traffic
bytes exceeds threshold
rule
Selects the auto tagging rule. To
view this command the ap-auto-
tagging should be enabled.
ruckus(config-ap-auto-tagging)#
threshold
Type: Privileged
<daily-> Disables the auto tagging for
critical APs. To view this command
the ap-auto-tagging should be
enabled.
ruckus(config-ap-auto-tagging)#
unit
Type: Privileged
[ m | g ] Sets the unit to either mega bytes
or giga bytes.
Table 10. Commands related to ruckus(config-ap-auto-tagging)
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
ap-certificate-reset
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 51
ap-certificate-reset
To the AP certificate request which failed to update the certificate, use the following
command:
ruckus(config)# ap-certificate-reset
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ap-certificate-reset
ap-control-mgmt-tos
To enable the access control and management traffic type of service and values,
use the following command:
ruckus(config)# ap-control-mgmt-tos <value>
Syntax Description
This command has no arguments or keywords.
Default
This command uses the following syntax:
value: TOS value
Command Mode
Config
Example
SZ100-Node1(config)# ap-control-mgmt-tos 10
Configuration Commands (a - d)
ap-heartbeat
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 52
ap-heartbeat
To setup the access point heartbeat, use the following command:
ruckus(config)# ap-heartbeat <seconds>
Syntax Description
This command uses the following syntax:
seconds: Interval in seconds, which the AP sends the heartbeat to the controller
such as: 30, 60, 150 and 300
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ap-heartbeat 30
app-denial-policy
To create or update an Application Denial Policy, use the following command:
ruckus(config)# app-denial-policy <name>
Syntax Description
This command has the following parameter:
<name>: application name
Default
This command has no default settings.
Command Mode
Privileged
Example
SZ100-Node1(config)# app-denial-policy xyz
Configuration Commands (a - d)
app-port-mapping
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 53
Related Commands
Table 11 lists the related app-denial-policy configuration commands.
Table 12 lists the related app-denial-policy-rule configuration commands.
app-port-mapping
To create or update application port mapping, use the following command:
ruckus(config)# app-port-mapping <name>
Syntax Description
This command has the following parameter:
<name>: application name
Table 11. Commands related to ruckus(config-app-denial-policy)
Syntax and Type Parameters (if any) Description
ruckus(config-app-denial-policy)#
description
Type: Privileged
<text> Sets the description.
ruckus(config-app-denial-policy)#
rule
Type: Privileged
Creates/Updates Application
Denial Policy rule
ruckus(config-app-denial-policy)#
no
Type: Privileged
rule Removes Application Denial Policy
rule.
Table 12. Commands related to ruckus(config-app-denial-policy-rule)
Syntax and Type Parameters (if any) Description
ruckus(config-app-denial-policy-
rule)# applicationtype
Type: Privileged
[ port | http-domain-name
]
port: Port
http-domain-name:
HTTP domain name
Sets the application type.
ruckus(config-app-denial-policy-
rule)# content
Type: Privileged
<content> Sets the content.
Configuration Commands (a - d)
app-port-mapping
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 54
Default
This command has no default settings.
Command Mode
Privileged
Example
SZ100-Node1(config)# app-port-mapping abc
Related Commands
Table 13 lists the related app-port-mapping configuration commands.
Table 13. Commands related to ruckus(config-app-port-mapping)
Syntax and Type Parameters (if any) Description
ruckus(config-app-port-
mapping)# port
Type: Privileged
<port>: Port Sets the port.
ruckus(config-app-port-
mapping)# protocol
Type: Privileged
[tcp | udp] Sets the protocol
Configuration Commands (a - d)
cert-store
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 55
cert-store
To create or update certificate configurations, use the following command:
ruckus(config)# cert-store ap-cert <name>
ruckus(config)# cert-store cert <name>
ruckus(config)# cert-store csr <name>
ruckus(config)# cert-store hotspot-cert <name>
ruckus(config)# cert-store web-cert <name>
Syntax Description
This command uses the following syntax:
ap-cert <name>: Create / updates the AP port certificate
cert <name>: Create / updates the certificate configuration
csr <name>: Create / updates CSR (Certificate Signing Request) configuration
hotspot-cert <name>: Sets the hotspot certificate
web-cert <name>: Sets the management web certificate
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# cert-store cert apcert
SZ100-Node1(config-cert)#
Related Commands
Table 14 lists the related cert-store configuration commands.
Table 14. Commands related to ruckus(config-cert-store) configuration
Syntax and Type Parameters (if any) Description
ruckus(config-cert-store)# cert
Type: Privileged
<ftp-url>
<ftp-url> append
Uploads the certificate file.
ruckus(config-cert-store)# city
Type: Privileged
<city> Sets the city
Configuration Commands (a - d)
cert-store
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 56
ruckus(config-cert-store)#
common-name
Type: Privileged
<domain-name> Sets the domain name
ruckus(config-cert-store)# country
Type: Privileged
<country> Sets the country.
ruckus(config-cert-store)#
description
Type: Privileged
<text> Sets the description
ruckus(config-cert-store# do
Type: Privileged
Executes the do command.
ruckus(config-cert-store)# email
Type: Privileged
<email> Sets the email address.
ruckus(config-cert-store)# end
Type: Privileged
Ends the current configuration
session and return to privileged
EXEC mode.
ruckus(config-cert-store)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-cert-store)# help
Type: Privileged
Displays help.
ruckus(config-cert-store)#inter-
cert
Type: Privileged
<ftp-url>:FTP URL
format: ftp://
<username>:<password>
@<ftp-host>/<file-path>
Upload intermediate CA
certificate.
ruckus(config-cert-store)# no
Type: Privileged
inter-cert
root-cert
Disables all commands.
ruckus(config-cert-store)#
organization
Type: Privileged
<org> Sets the organization.
ruckus(config-cert-store)#
passphrase
Type: Privileged
<passphrase> Sets the key passphrase.
Table 14. Commands related to ruckus(config-cert-store) configuration
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
changepassword
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 57
changepassword
To change the administrative password, use the following command:
ruckus(config)# changepassword
<old password>
<new password>
Syntax Description
This command uses the following syntax:
old password: Existing password
new password: Changed password.
The password must contain at least eight characters with at least one number,
one letter, and one special character (~ ! @ # $ % ^ & * ( ) - _ = + [ ] { } \ | ; : ' "
, . < > / ?) except ` or $(.
ruckus(config-cert-store)# private-
key
Type: Privileged
upload <ftp-url>
csr <csr-name>
Sets the private key.
ruckus(config-cert-store)# root-
cert
Type: Privileged
<ftp-url>:FTP URL
format: ftp://
<username>:<password>
@<ftp-host>/<file-path>
Select the root certificate.
ruckus(config-cert-store)# root-
cert-type
Type: Privileged
Sets the certificate type to trusted
root certificate.
ruckus(config-cert-store)# server-
cert
Type: Privileged
<ftp-url>:FTP URL
format: ftp://
<username>:<password>
@<ftp-host>/<file-path>
Upload server certificates.
ruckus(config-cert-store)# state
Type: Privileged
<state> Sets the state
ruckus(config-cert-store)# unit
Type: Privileged
<org-unit> Sets the organization unit.
Table 14. Commands related to ruckus(config-cert-store) configuration
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
clock
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 58
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# changepassword
Old Password: *******
New Password: *******
clock
To update the system clock or the timezone configuration, use the following
command:
ruckus(config)# clock timezone <timezone>
Syntax Description
This command uses the following syntax:
timezone: Sets the system clock timezone
<timezone>: Timezone name of the domain
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# clock timezone Africa/Nairobi
Configuration Commands (a - d)
cluster-ip-list
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 59
cluster-ip-list
To update the node IP address mapping list of the cluster configuration, use the
following command:
ruckus(config)# cluster-ip-list <ip-mappings>
Syntax Description
This command uses the following syntax:
ip-mappings: Node IP mapping list, which is space separated.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# cluster-ip-list <old-ip>:<new-ip> <old-
ip2>:<new-ip2>
SZ100-Node1(config)# cluster-ip-list 172.19.18.96:172.19.13.56
172.19.15.67:172.19.10.07
Configuration Commands (a - d)
cluster-name
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 60
cluster-name
To change the cluster name, use the following command:
ruckus(config)# cluster-name <cluster-name>
Syntax Description
This command uses the following syntax:
cluster-name: Change the cluster name.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# cluster-name cls1
cluster-redundancy
To create or update a cluster redundancy configuration, use the following
command:
ruckus(config)# cluster-redundancy
Syntax Description
This command has no arguments or keywords
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# cluster-redundancy
Related Commands
Table 15 lists the related cluster redundancy configuration commands.
Table 16 lists the related cluster redundancy cluster configuration commands.
Configuration Commands (a - d)
cluster-redundancy
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 61
Table 15 lists the related cluster redundancy configuration commands.
Table 15. Commands related to ruckus(config-cluster-redundancy)
Syntax and Type Parameters (if any) Description
ruckus(config-cluster-
redundancy)# cluster
Type: Privileged
<name>
<name> priority [ up |
down ]
Create or update the cluster
redundancy configuration.
ruckus(config-cluster-
redundancy)# do
Type: Privileged
Executes the do command.
ruckus(config-cluster-
redundancy)# enable
Type: Privileged
Enables the cluster redundancy
configuration.
ruckus(config-cluster-
redundancy)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-cluster-
redundancy# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-cluster-
redundancy)# help
Type: Privileged
Displays the help.
ruckus(config-cluster-
redundancy)# no cluster
Type: Privileged
<cluster> Deletes cluster redundancy
configurations.
ruckus(config-cluster-
redundancy)# no enable
Type: Privileged
<enable> Disables cluster redundancy.
Configuration Commands (a - d)
cluster-redundancy
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 62
Table 16 lists the related cluster redundancy cluster configuration commands.
Table 16. Commands related to ruckus(config-cluster-redundancy-cluster)
Syntax and Type Parameters (if any) Description
ruckus(config-cluster-redundancy-
cluster)# do
Type: Privileged
Executes the do command.
ruckus(config-cluster-redundancy-
cluster)# dual-list
Type: Privileged
<dual-list> Sets the dual address list. List
format: IPv4 address/IPv6
address,IPv4 address,IPv6
address
ruckus(config-cluster-redundancy-
cluster)# end
Type: Privileged
Ends the current configuration
session and returns to
privileged EXEC mode.
ruckus(config-cluster-redundancy-
cluster)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-cluster-redundancy-
cluster)# help
Type: Privileged
Displays the help.
ruckus(config-cluster-redundancy-
cluster)# name
Type: Privileged
<text> Sets the cluster name.
ruckus(config-cluster-redundancy-
cluster)# ip-list
Type: Privileged
<ipl-list>: Control IPs.
Comma separated IP
list.
Sets the Control IP list.
Configuration Commands (a - d)
dns-server-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 63
dns-server-service
To create or update DNS server services, use the following command.
ruckus(config)# dns-server-service
Syntax Description
This command has the following keywords:
<name>: DNS server service name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# dns-server-service xy
Related Commands
Table 17 lists the related dns-server-service configuration commands.
Table 17. Commands related to ruckus(dns-server-service)
Syntax and Type Parameters (if any) Description
ruckus(config-dns-server-service)#
description
Type: Privileged
Sets description.
ruckus(config-dns-server-service)#
do
Type: Privileged
Executes the do command.
ruckus(config-dns-server-service)#
exit
Type: Privileged
Exits from the EXEC.
ruckus(config-dns-server-service)#
end
Type: Privileged
Ends the current configuration
session and returns to the
privileged EXEC mode.
Configuration Commands (a - d)
do
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 64
do
To setup the do command, use the following command.
ruckus(config)# do
Syntax Description
This command has no arguments or keywords.
ruckus(config-dns-server-service)#
help
Type: Privileged
Displays help.
ruckus(config-dns-server-service)#
name
Type: Privileged
<name> Sets the DNS server services
name.
ruckus(config-dns-server-
service)## no
Type: Privileged
Disable and delete commands.
ruckus(config-dns-server-service)#
primary-ip
Type: Privileged
Sets the primary IP address.
ruckus(config-dns-server-
service)## secondary-ip
Type: Privileged
Sets the secondary IP address.
ruckus(config-dns-server-service)#
no description
Type: Privileged
Delete the description.
ruckus(config-dns-server-service)#
no primary-ip
Type: Privileged
Deletes the primary IP address.
ruckus(config-dns-server-
service)## no secondary-ip
Type: Privileged
Deletes the secondary IP address.
Table 17. Commands related to ruckus(dns-server-service)
Syntax and Type Parameters (if any) Description
Configuration Commands (a - d)
dp-group
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 65
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# do
dp-group
To enable and sets the data plane grouping, use the following command.
ruckus(config)# dp-group <dp-mac-group>
Syntax Description
This command uses the following syntax:
<dp-mac-group>: Dataplane groups, which is comma separated DP MAC
addresses in a group. For example, 3 DP value is seen as “,”.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# dp-group dp1-172.19.7.100 dp2-172.19.8.120
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 66
3
Configuration Commands (e-r)
This chapter describes the commands that you can use to configure, enable, and
disable various components of the controller. The following table lists the
commands.
NOTE: For easy access and reading, the configuration chapter has been split into
3 chapters based on the alphabetical order of commands.
Table 18. Configuration commands
encrypt-mac-ip encrypt-zone-
name
end eth-port-
validate-one-
trunk
event
event db-
persistence
event email event snmp-
notification
event-email event-threshold
exit ftp-server ftp-test help hostname
identity-provider interface ip ip control-nat ip name-server
ip name-server-
ipv6
ip route ip route-ipv6 ipsec-profile lbs-service
ldap-service license license cloud license export
license import license local license sync-
now
lineman localdb-service
logging console lwapp2scg mgmt-acl no ad-service no admin
no admin-radius no ap no ap auto-
approve
no ap auto-
tagging
no ap-cert-check
no ap-control-
mgmt-tos
no ap-group no block-client no bonjour-
fencing
no bonjour-fencing-
policy
no bonjour-
gateway
no bonjour-
policy
no cert-store no control-
plane
no data-plane
no device-policy no diffserv no dns-server-
service
no dp-group no encrypt-mac-ip
Configuration Commands (e-r)
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 67
no encrypt-
zone-name
no ethernet-
port-profile
no event no ftp-server no guest-access
no hotspot no hotspot20-
venue-profile
no hotspot20-
wlan-profile
no identity-
provider
no interface
no ip no ipsec-
profile
no l2-acl no lbs-service no ldap-service
no lineman no logging no oauth-
service
no operator-
profile
no osu-portal-
profile
no outbound
firewall
no proxy-aaa no report no role no sci-profile
no snmp-
notification
no snmp-v2-
community
no snmp-v3-
user
no user-agent-
blacklist
no user-group
no user-role no user-traffic-
profile
no vlan-pooling no web-
authentication
no wlan
no wlan-group no wlan-
scheduler
no zone northbound-
authtype
northbound-portal
ntp-server oauth-service operator-profile outbound-
firewall
proxy-aaa
rebalance-aps report rks-gre
Table 18. Configuration commands
Configuration Commands (e-r)
encrypt-mac-ip
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 68
encrypt-mac-ip
To enable encryption of MAC and IP address for Wireless Internet Service Provider
roaming (WISPr) enriched URL, use the following command.
ruckus(config)# encrypt-mac-ip
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# encrypt-mac-ip
Successful operation
encrypt-zone-name
To enable AP Zone name encryption for Wireless Internet Service Provider roaming
(WISPr) enriched URL, use the following command.
ruckus(config)# encrypt-zone-name
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# encrypt-zone-name
Successful operation
Configuration Commands (e-r)
eth-port-validate-one-trunk
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 69
eth-port-validate-one-trunk
To update the validator for an AP with at least one trunk port, use the following
command.
ruckus(config)# eth-port-validate-one-trunk
Syntax Description
This command has the following keywords:
disable: Disable the validator for the AP with at least one trunk port
enable: Enable the validator for the AP with at least one trunk port
Default
This command has no default settings.
Command Mode
Config
Example
ruckus(config)# eth-port-validate-one-trunk
end
To end the current session and returns to privileged EXEC mode, use the following
command.
ruckus(config)# end
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# end
Configuration Commands (e-r)
event
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 70
event
To update the event notification configuration, use the following command.
ruckus(config)# event <eventCode>
Syntax Description
This command uses the following syntax:
<eventCode>: Single configuration event notification
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# event 1002
Related Commands
Table 19 lists the related event configuration commands.
Table 19. Commands related to ruckus(config-event)
Syntax and Type Parameters (if any) Description
ruckus(config-event)# db-
persistence
Type: Privileged
Enables the data blade
persistence for the event.
ruckus(config-event)# do
Type: Privileged
Executes the do command.
ruckus(config-event)# email
Type: Privileged
Enables the email notification.
ruckus(config-event)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-event)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-event)# help
Type: Privileged
Displays the help.
Configuration Commands (e-r)
event db-persistence
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 71
event db-persistence
To enable data base persistence for the event, use the following command.
ruckus(config)# event db-persistence
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# event db-persistence
No. Event Code Category Type Description Severity SNMP Email
DB Persistence
----- ----------- ------------------------ ----------------------
1 103 AP Communication AP managed
This event occurs when AP is approved by the SmartZone. Informational
Disabled Disabled Enabled
2 105 AP Communication AP rejected
This event occurs when AP is rejected by the SmartZone.Minor
Enabled Disabled Enabled
3 106 AP Communication AP firmware updated
This event occurs when AP successfully updates its firmware.
Informational Disabled Disabled Enabled
ruckus(config-event)# no
Type: Privileged
db-persistence
email
snmp-trap
Enables the SNMP trap.
ruckus(config-event)# snmp-trap
Type: Privileged
Enables the SNMP trap.
Table 19. Commands related to ruckus(config-event)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
event email
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 72
event email
To enable event triggers for selected email notification, use the following command.
ruckus(config)# event email <eventCode>
Syntax Description
This command has no arguments or keywords.
Command Mode
Config
Example
SZ100-Node1(config)# event email
No. Event Code Category Type Description Severity SNMP Email
DB Persistence
----- ----------- ------------------------ ----------------------
1 103 AP Communication AP managed This event
occurs when AP is approved by the SmartZone Informational Enabled
Enabled Enabled .
2 105 AP Communication AP rejected
This event occurs when AP is rejected by SmartZone Minor
Enabled Enabled Enabled
3 106 AP Communication AP firmware updated
This event occurs when AP successfully updates its firmware
Informational Enabled Enabled Enabled
Please choose Event Codes (separated by ',') to enable Event to
trigger Email:
Configuration Commands (e-r)
event snmp-notification
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 73
Related Commands
Table 20 lists the related event-email configuration commands.
event snmp-notification
To enable selected SNMP notification, use the following command.
ruckus(config)# event snmp-notification <eventCode>
Syntax Description
This command has no arguments or keywords.
Command Mode
Config
Example
SZ100-Node1(config)# event snmp-notification
No. Event Code Category Type Description Severity SNMP Email
DB Persistence
----- ----------- ------------------------ ----------------------
1 103 AP Communication AP managed This event
occurs when AP is approved by the SmartZone Informational Enabled
Enabled Enabled .
Table 20. Commands related to ruckus(config-event-email)
Syntax and Type Parameters (if any) Description
ruckus(config-event-email)#
enable
Type: Privileged
Enables notification email for
events.
ruckus(config-event-email)# mail-
to
Type: Privileged
<email> email address Email address configuration.
ruckus(config-event-email)# no
enable
Type: Privileged
Disables the email notification for
events.
ruckus(config-event-email)# no
mail-to
Type: Privileged
Disables email address
configuration.
Configuration Commands (e-r)
event-email
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 74
event-email
To setup the event to email services, use the following command.
ruckus(config)# event-email <eventCode>
Syntax Description
This command has no arguments or keywords.
Command Mode
Config
Example
SZ100-Node1(config)# event-email
SZ100-Node1(config-event-email)#
Related Commands
Table 21 lists the related event-email configuration commands.
Table 21. Commands related to ruckus(config-event-email)
Syntax and Type Parameters (if any) Description
ruckus(config-event-email)# do
Type: Privileged
Enables the do command.
ruckus(config-event-email)#
enable
Type: Privileged
Enables the email notifications for
events.
ruckus(config-event-email)# end:
Privileged
End the current configuration
session and returns to the
privileged EXEC mode.
ruckus(config-event-email)# exit
Privileged
Exit from the EXEC.
ruckus(config-event-email)# help
Privileged
Display the help message.
ruckus(config-event)# mail-to
Type: Privileged
<email> Sets the email address
configuration.
ruckus(config-event)# no
Type: Privileged
enable
mail-to
Disables various options.
Configuration Commands (e-r)
event-threshold
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 75
event-threshold
To update the event threshold configuration, use the following command.
ruckus(config)# event-threshold <threshold>
Syntax Description
This command has no arguments or keywords.
Command Mode
Config
Example
SZ100-Node1(config)# event-threshold thres
SZ100-Node1(config-event-threshold)#
Related Commands
Table 22 lists the related event-threshold configuration commands.
Table 22. Commands related to ruckus(config-event-threshold)
Syntax and Type Parameters (if any) Description
ruckus(config-event-threshold)#
do
Type: Privileged
Enables the do command.
ruckus(config-event-threshold)#
end: Privileged
End the current configuration
session and returns to the
privileged EXEC mode.
ruckus(config-event-threshold)#
exit
Type: Privileged
Exit from the EXEC.
ruckus(config-event-threshold)#
help
Type: Privileged
Display the help message.
ruckus(config-threshold)# unit
Type: Privileged
Sets the threshold unit.
ruckus(config-threshold)# value
Type: Privileged
Sets the threshold value.
Configuration Commands (e-r)
exit
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 76
exit
To exit from the EXEC, use the following command.
ruckus(config)# exit
Syntax Description
This command has no arguments or keywords.
Command Mode
Config
Example
SZ100-Node1(config)# exit
ftp-server
To update the FTP server for uploading reports configuration, use the following
command.
ruckus(config)# ftp-server <name>
Once you enter the config-ftp-server context, you can configure the rest of the FTP
server settings (see example below).
Syntax Description
This command has no arguments or keywords
Default
This command has no default settings.
Command Mode
config
Example
SZ100-Node1(config)# ftp-server f1
SZ100-Node1(config-ftp-server)#
SZ100-Node1(config-ftp-server)# host 1.1.1.1
SZ100-Node1(config-ftp-server)# port 21
SZ100-Node1(config-ftp-server)# username test
SZ100-Node1(config-ftp-server)# password
Password: ****
Configuration Commands (e-r)
ftp-server
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 77
Retype: ****
SZ100-Node1(config-ftp-server)# exit
SZ100-Node1(config)#
Related Commands
Table 23 lists the related ftp-server commands.
Table 23. Commands related to ruckus(config-ftp-server)
Syntax and Type Parameters (if any) Description
ruckus(config-ftp-server)# do
Type: Privileged
Executes the do command.
ruckus(config-ftp-server)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-ftp-server)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-ftp-server)# help
Type: Privileged
Displays the help.
ruckus(config-ftp-server)# host
Type: Privileged
<ip> Sets the FTP server IP address.
ruckus(config-ftp-server)#
password
Type: Privileged
<password> Sets the FTP password.
ruckus(config-ftp-server)# port
Type: Privileged
<port> Sets the FTP server port.
ruckus(config-ftp-server)# protocol
Type: Privileged
Sets the protocol.
ruckus(config-ftp-server)# remote-
directory
Type: Privileged
<directory> Sets the FTP remote directory.
ruckus(config-ftp-server)# test
Type: Privileged
Test the FTP settings.
ruckus(config-ftp-server)#
username
Type: Privileged
<username> Sets the user name.
Configuration Commands (e-r)
ftp-test
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 78
ftp-test
To test the FTP server connection, use the following command.
ruckus(config)# ftp-test <name>
Syntax Description
This command uses the following syntax:
<name>: FTP server name
Default
This command has no default settings.
Command Mode
config
Example
SZ100-Node1(config)# ftp-test FTP-SERVER
Fail to connection to FTP server
help
To display the help message, use the following command.
ruckus(config)# help
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# help
admin Create/Update Administrator account configuration
admin-radius Create/Update RADIUS server for Administrators
ap-auto-approve Enable AP auto approve
Configuration Commands (e-r)
hostname
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 79
hostname
To change the hostname, use the following command.
ruckus(config)# hostname <hostname>
Syntax Description
This command uses the following syntax:
hostname: Changed hostname
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# hostname
identity-provider
To create or update identity provider configuration, use the following command.
ruckus(config)# identity-provider <name>
Syntax Description
This command uses the following syntax:
name: Name of the identity provider
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# identity-provider idwlan
SZ100-Node1(config-identity-provider)#
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 80
Related Commands
Table 24 lists the related identity-provider configuration commands.
Table 25 lists the related identity-provider-acct-profile configuration commands.
Table 26 lists the related identity-provider-acct-profile-realm configuration
commands.
Table 27 lists the related identity-provider-auth-profile configuration commands
Table 28 lists the related identity-provider-auth-profile-realm configuration
commands.
Table 29 lists the related identity-provider-osu-enable configuration commands.
Table 30 lists the related identity-provider-realms configuration commands.
Table 31 lists the related identity-provider-realms-eaps configuration commands.
Table 32 lists the related identity-provider-realms-eaps-auth configuration
commands
Table 24 lists the related identity-provider configuration commands.
Table 24. Commands related to ruckus(config-identity-provider)
Syntax and Type Parameters (if any) Description
ruckus(config-identity-provider)#
acct-enable
Type: Privileged
Enables accounting.
ruckus(config-identity-provider)#
acct-profile
Type: Privileged
Sets the accounting profile.
ruckus(config-identity-provider)#
auth-profile
Type: Privileged
Sets the authentication profile.
ruckus(config-identity-provider)#
description
Type: Privileged
<text> Sets the description.
ruckus(config-identity-provider)#
do
Type: Privileged
Executes the do command.
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 81
ruckus(config-identity-provider)#
end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-identity-provider)#
exit
Type: Privileged
Exits from the EXEC.
ruckus(config-identity-provider)#
help
Type: Privileged
Displays the help.
ruckus(config-identity-provider)#
home-ois
Type: Privileged
<name> 5-hex <id1>
<id2> <id3> <id4> <hex-
value>
<name> 3-hex <id1>
<id2> <id3>
Sets the Home OIs.
ruckus(config-identity-provider)#
name
Type: Privileged
<name> Sets the identity provider name.
ruckus(config-identity-provider)#
no
Type: Privileged
acct-enable
home-ois
osu-enable
plmns
realms
Disables the commands.
ruckus(config-identity-provider)#
osu-enable
Type: Privileged
Enables the online signup and pro-
visioning.
ruckus(config-identity-provider)#
plmns
Type: Privileged
<mcc> <mnc> Sets the PLMNs.
ruckus(config-identity-provider)#
realms
Type: Privileged
<name> Sets the realms
Table 24. Commands related to ruckus(config-identity-provider)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 82
Table 25 lists the related identity-provider-acct-profile configuration commands.
Table 25. Commands related to ruckus(config-identity-provider-acct-profile)
Syntax and Type Parameters (if any) Description
ruckus(config-identity-provider-
acct-profile)# default
Type: Privileged
no-match-realm acct
<name>
no-realm acct <name>
Sets the default service.
ruckus(config-identity-provider-
acct-profile)# description
Type: Privileged
<text> Sets the description
ruckus(config-identity-provider-
acct-profile)# do
Type: Privileged
Executes the do command.
ruckus(config-identity-provider-
acct-profile)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-identity-provider-
acct-profile)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-identity-provider-
acct-profile)# help
Type: Privileged
Displays the help.
ruckus(config-identity-provider-
acct-profile)# no
Type: Privileged
realm <name> Disables the realm command.
ruckus(config-identity-provider-
acct-profile)# realm
Type: Privileged
<realm> Sets the accounting service realm.
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 83
Table 26 lists the related identity-provider-acct-profile-realm configuration
commands.
Table 27 lists the related identity-provider-auth-profile configuration commands.
Table 26. Commands related to ruckus(config-acct-profile-realm)
Syntax and Type Parameters (if any) Description
ruckus(config-identity-provider-
acct-profile-realm)# acct-service
Type: Privileged
<name> Sets the accounting service.
ruckus(config-identity-provider-
acct-profile-realm)# do
Type: Privileged
Executes the do command.
ruckus(config-identity-provider-
acct-profile-realm)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-identity-provider-
acct-profile-realm)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-identity-provider-
acct-profile-realm)# help
Type: Privileged
Displays the help.
ruckus(config-identity-provider-
acct-profile-realm)# name
Type: Privileged
<name> Sets the realm name.
ruckus(config-identity-provider-
acct-profile)# realm
Type: Privileged
<realm> Sets the accounting service realm.
Table 27. Commands related to ruckus(config-identity-provider-auth-profile)
Syntax and Type Parameters (if any) Description
ruckus(config-identity-provider-
auth-profile)# aaa-interim-acct-in-
terval
Type: Privileged
<seconds> Sets the accounting interim inter-
val for the hosted AAA server.
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 84
ruckus(config-identity-provider-
auth-profile)# aaa-session-idle-
timeout
Type: Privileged
<seconds> Sets the idle session timeout for
the hosted AAA server.
ruckus(config-identity-provider-
auth-profile)# aaa-session-timeout
Type: Privileged
<seconds> Sets the session timeout for the
hosted AAA server.
ruckus(config-identity-provider-
auth-profile)# aaa-support
Type: Privileged
Enables the hosted AAA server
support.
ruckus(config-identity-provider-
auth-profile)# default
Type: Privileged
no-match-realm acct
<name> - Set to either
RADIUS, local-database,
na (request rejected) or
radius. Set the authenti-
cation service name.
no-realm acct <name>
Sets the default authenti-
cation service.
Sets the default service.
ruckus(config-identity-provider-
auth-profile)# description
Type: Privileged
<text> Sets the description
ruckus(config-identity-provider-
auth-profile)# do
Type: Privileged
Executes the do command.
ruckus(config-identity-provider-
auth- profile)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-identity-provider-
auth-profile)# exit
Type: Privileged
Exits from the EXEC.
Table 27. Commands related to ruckus(config-identity-provider-auth-profile)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 85
Table 28 lists the related identity-provider-auth-profile-realm configuration
commands.
ruckus(config-identity-provider-
auth-profile)# help
Type: Privileged
Displays the help.
ruckus(config-identity-provider-
auth-profile)# gpp-support
Type: Privileged
Sets the PLMN identifier.
ruckus(config-identity-provider-
auth-profile)# no
Type: Privileged
aaa-support
gpp-support
realm
Disables the commands.
ruckus(config-identity-provider-
auth-profile)# realm
Type: Privileged
<realm> Sets the authentication service
realm.
ruckus(config-identity-provider-
auth-profile)# sgsn-mcc
Type: Privileged
<mcc> Sets the mobile country code.
ruckus(config-identity-provider-
auth-profile)# sgsn-mnc
Type: Privileged
<mnc> Sets the mobile network code.
Table 28. Commands related to ruckus(config-identity-provider-auth-profile-realm)
Syntax and Type Parameters (if any) Description
ruckus(config-identity-provider-
auth-profile-realm)# auth-method
Type: Privileged
Sets the authorization method.
ruckus(config-identity-provider-
auth-profile-realm)# auth-service
Type: Privileged
<name> Set to either RA-
DIUS, local-database, na
(request rejected) or radi-
us. Set the authentication
service name.
Sets the authentication service.
Table 27. Commands related to ruckus(config-identity-provider-auth-profile)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 86
Table 29 lists the related identity-provider-osu-enable configuration commands.
ruckus(config-identity-provider-
auth-profile-realm)# do
Type: Privileged
Executes the do command.
ruckus(config-identity-provider-
auth-profile-realm)# dynamic-vlan
Type: Privileged
<vlan-id> Sets the dynamic VLAN ID.
ruckus(config-identity-provider-
auth- profile-realm)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-identity-provider-
auth-profile-realm)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-identity-provider-
auth-profile-realm)# help
Type: Privileged
Displays the help.
ruckus(config-identity-provider-
auth-profile-realm)# name
Type: Privileged
<name> Sets the authentication service
name.
Table 29. Commands related to ruckus(config-identity-provider-osu-enable)
Syntax and Type Parameters (if any) Description
ruckus(config-identity-provider-
osu-enable)# common-icon
Type: Privileged
<ftp-url> Sets the common language icon.
ruckus(config-identity-provider-
osu-enable)# do
Type: Privileged
Executes the do command.
ruckus(config-identity-provider-
osu-enable)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
Table 28. Commands related to ruckus(config-identity-provider-auth-profile-realm)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 87
ruckus(config-identity-provider-
osu-enable)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-identity-provider-
osu-enable)# help
Type: Privileged
Displays the help.
ruckus(config-identity-provider-
osu-enable)# no
Type: Privileged
osu-auth-services
service-descr
whitelisted-domains
Disables the commands
ruckus(config-identity-provider-
osu-enable)# osu-auth-services
Type: Privileged
<service-name> local
<realm>
<service-name>: Authen-
tication services name
local: Local database
<realm>: Realm server
<service-name> remote
<realm>
remote: Supports only
RADIUS service
<service-name> local
<realm> never
<service-name> local
<realm> hour <expira-
tion-value> - Local cre-
dential expiration,
between 1 and 175200
Sets the OSU authentication ser-
vices.
...................................continued.
Table 29. Commands related to ruckus(config-identity-provider-osu-enable)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 88
ruckus(config-identity-provider-
osu-enable)# osu-auth-services
Type: Privileged
<service-name> local
<realm> day <expiration-
value> - Local credential
expiration, between 1 and
7300
<service-name> local
<realm> week <expira-
tion-value> - Local cre-
dential expiration,
between 1 and 1040
<service-name> local
<realm> month
<expiration-value> -
Local credential
expiration - between 1
and 240
Sets the OSU authentication ser-
vices.
ruckus(config-identity-provider-
osu-enable)# osu-cert
Type: Privileged
${cert} Sets the OSU certificates.
ruckus(config-identity-provider-
osu-enable)# osu-nai-realm
Type: Privileged
Sets the OSU NAI realm.
ruckus(config-identity-provider-
osu-enable)# osu-portal
Type: Privileged
internal <osu-portal-pro-
file>
external <portal-url>
Sets the OSU portal.
ruckus(config-identity-provider-
osu-enable)# provisioning-format
Type: Privileged
r2-r1-zeroit
r2-r1-zeroit: Hotspot 2.0
R2, Hotspot 2.0 R1
r2-zeroit
Sets the provisioning format.
ruckus(config-identity-provider-
osu-enable)# provisioning-protocol
Type: Privileged
all
oma-dm
soap-xml
Sets the provisioning protocol.
Table 29. Commands related to ruckus(config-identity-provider-osu-enable)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 89
Table 30 lists the related identity-provider-realms configuration commands.
ruckus(config-identity-provider-
osu-enable)# provisioning-service-
url
Type: Privileged
<url> Sets the provisioning service URL.
ruckus(config-identity-provider-
osu-enable)# provisioning-update-
at
Type: Privileged
home-only
home-roaming
any
Sets the provisioning update.
ruckus(config-identity-provider-
osu-enable)# service-descr
Type: Privileged
<language> <name>
<icon-ftp-url>
<language> <name>
<description> <icon-ftp-
url>
Sets the subscription description
ruckus(config-identity-provider-
osu-enable)# whitelisted-domains
Type: Privileged
<domain-name> Sets the whitelisted domains.
Table 30. Commands related to ruckus(config-identity-provider-realms)
Syntax and Type Parameters (if any) Description
ruckus(config-identity-provider-
realms)# do
Type: Privileged
Executes the do command.
ruckus(config-identity-provider-
realms)# eaps
Type: Privileged
[ #4 | #2 | #3 | #1 ]
#4: EAP method ID
#2: EAP method ID
#3: EAP method ID
#1: EAP method ID
Creates or updates the EAP con-
figuration.
ruckus(config-identity-provider-
realms)# encoding
Type: Privileged
[ rfc-4282 | utf-8 ] Sets the encoding type.
Table 29. Commands related to ruckus(config-identity-provider-osu-enable)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 90
Table 31 lists the related identity-provider-realms-eaps configuration commands.
ruckus(config-identity-provider-
realms)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-identity-provider-
realms)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-identity-provider-
realms)# help
Type: Privileged
Displays the help.
ruckus(config-identity-provider-
realms)# name
Type: Privileged
<name> Sets the realm name.
ruckus(config-identity-provider-
realms)# no
Type: Privileged
eaps Disables the command.
Table 31. Commands related to ruckus(config-identity-provider-realms-eaps)
Syntax and Type Parameters (if any) Description
ruckus(config-identity-provider-
realms-eaps)# auth
Type: Privileged
[ 4 | 1 | 2 | 3 ]
4: Authentication index
1: Authentication index
2: Authentication index
3: Authentication index
Creates or updates the authenti-
cation information based on the
index.
ruckus(config-identity-provider-
realms-eaps)# do
Type: Privileged
Executes the do command.
ruckus(config-identity-provider-
realms-eaps)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
Table 30. Commands related to ruckus(config-identity-provider-realms)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 91
ruckus(config-identity-provider-
realms-eaps)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-identity-provider-
realms-eaps)# help
Type: Privileged
Displays the help.
ruckus(config-identity-provider-
realms-eaps)# method
Type: Privileged
[ eap-aka-23 | eap-tls |
eap-mschap-v2 | na |
eap-aka-50 | md5 | eap-
ttls | reserved | eap-sim |
eap-cisco | peap ]
eap-aka-23: EAP-AKA
eap-tls: EAP-Transport
Layer Security (EAP-TLS)
eap-mschap-v2: EAP-
MSCHAP-V2
na: N/A
eap-aka-50: EAP-AKA
md5: MD5-Challenge
eap-ttls: EAP-Tunneled
Transport Layer Security
(EAP-TTLS)
reserved: Reserved for
the Expanded Type
eap-sim: EAP for GSM
Subscriber Identity Mod-
ule (EAP-SIM)
eap-cisco: EAP-Cisco
peap: Protected Extensi-
ble Authentication Proto-
col (PEAP)
Sets the EAP method.
Table 31. Commands related to ruckus(config-identity-provider-realms-eaps)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
identity-provider
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 92
Table 32 lists the related identity-provider-realms-eaps-auth configuration
commands.
ruckus(config-identity-provider-
realms-eaps)# no
Type: Privileged
auth Disables the command.
Table 32. Commands related to ruckus(config-identity-provider-realms-eaps-auth)
Syntax and Type Parameters (if any) Description
ruckus(config-identity-provider-
realms-eaps-auth)# info
Type: Privileged
tunneled | credential |
non-eap-inner | expand-
inner-eap | inner-auth-eap
| expand-eap ]
tunneled: Tunneled EAP
method credential type
credential: Credential
type
non-eap-inner: Non EAP
inner authentication type
expand-inner-eap: Ex-
panded inner EAP meth-
od
inner-auth-eap: Inner au-
thentication EAP method
type
expand-eap: Expanded
EAP method
Sets the authentication parameter
type.
ruckus(config-identity-provider-
realms-eaps-auth)# type
Type: Privileged
<type> Sets the authentication type.
ruckus(config-identity-provider-
realms-eaps-auth)# vendor-id
Type: Privileged
<vendor-id> Sets the vendor ID.
Table 31. Commands related to ruckus(config-identity-provider-realms-eaps)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
interface
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 93
interface
To setup the interface configuration, use the following command.
ruckus(config)# interface <ap-tunnel-data>
ruckus(config)# interface <mgmt-and-ap-control>
ruckus(config)# interface <user-defined <name>>
Syntax Description
This command has no arguments or keywords.
Default
cluster
cluster: Cluster interface
control
control: Control interface
management
management: Management interface
mgmt-and-ap-control
mgmt-and-ap-control: Management & AP Control
ap-tunnel-data
ap-tunnel-data: AP Tunnel Data
mgmt-or-ap-tunnel
mgmt-or-ap-tunnel: Management/AP Tunnel Traffic
user-defined <name>
user-defined: User defined interface
<name>: User defined interface name.
Command Mode
Config
ruckus(config-identity-provider-
realms-eaps-auth)# vendor-type
Type: Privileged
<vendor-type> Sets the vendor type.
Table 32. Commands related to ruckus(config-identity-provider-realms-eaps-auth)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
interface
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 94
Example
SZ100-Node1(config)# interface
ap-tunnel-data AP Tunnel Data
mgmt-and-ap-control Management and AP Control
user-defined User-defined interface
SZ100-Node1(config)# interface ap-tunnel-data
SZ100-Node1(config-if)#
data-plane Update Data Plane configuration
do Do command
end End the current configuration session and return to privileged
EXEC mode
e x i t E x i t f r o m t h e E X E C
help Display this help message
ip Update IP configuration
no Disable and delete commands ned UD1
Related Commands
Table 33 lists the related interface-ap-tunnel-data and mgmt-and-ap-control
configuration commands.
Table 34 lists the related interface-user-defined configuration commands.
Table 35 lists the related interface-user-defined configuration commands.
Table 33 lists the related interface-ap-tunnel-data and mgmt-and-ap-control config-
uration commands.
Table 33. Commands related to ruckus(config-interface-ap-tunnel-data and mgmt-and-ap-
control)
Syntax and Type Parameters (if any) Description
ruckus(config-interface)# data-
plane
Type: Privileged
<name> forward-stp
<name>: Data plane
name
forward-stp: Disables the
STP package bridge
Updates the data plane
configuration
ruckus(config-interface)# do
Type: Privileged
Executes the do command.
Configuration Commands (e-r)
interface
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 95
ruckus(config-interface)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-interface)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-interface)# help
Type: Privileged
Displays help.
ruckus(config-interface)# interface
Type: Privileged
Sets the physical interface.
ruckus(config-interface)# ip
Type: Privileged
address dhcp
address: Sets IP address
of interface
dhcp: IP address
negotiated by DHCP
ipv6-address auto
ipv6-address: Sets the
IPv6 address with prefix
lengths of interface
auto: IPv6 address
negotiated by auto
address <ip> <mask>
<gateway>
address: Sets IP address
of interface
<ip>: Static IP address
<mask>: IP Subnet mask
<gateway>: Gateway
Sets the IP address.
Table 33. Commands related to ruckus(config-interface-ap-tunnel-data and mgmt-and-ap-
control)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
interface
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 96
Table 34 lists the related interface-user-defined configuration commands.
ruckus(config-interface)# ip
Type: Privileged
ipv6-address <ip>
<gateway>
ipv6-address: Sets IPv6
address of interface
<ip>: Static IPv6 address
<gateway>: Gateway
Sets the IP address.
ruckus(config-interface)# no data-
plane
Type: Privileged
<name> Disables the data-plane
ruckus(config-interface)# service
Type: Privileged
Sets the service.
ruckus(config-interface)# vlan
Type: Privileged
<vlan-id> VLAN ID Sets the VLAN ID.
Table 34. Commands related to ruckus(config-interface-user-defined)
Syntax and Type Parameters (if any) Description
ruckus(config-interface-user-
defined)# do
Type: Privileged
Executes the do command.
ruckus(config-interface-user-
defined)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-interface-user-
defined)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-interface-user-
defined)# help
Type: Privileged
Displays help.
Table 33. Commands related to ruckus(config-interface-ap-tunnel-data and mgmt-and-ap-
control)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
interface
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 97
Table 35 lists the related interface-user-defined configuration commands.
ruckus(config-interface-user-
defined)# interface
Type: Privileged
[ control | management ] Sets the physical interface such as
control and management
interface. Executed in conjunction
with user defined sub command.
ruckus(config-interface-user-
defined)# name
Type: Privileged
Renames the user-define
interface.
ruckus(config-interface-user-
defined)# ip
Type: Privileged
<address> Sets the IP address for the user
defined interface.
ruckus(config-interface-user-
defined)# service
Type: Privileged
<any>
<hotspot>
Sets the service.
ruckus(config-interface-user-
defined)# vlan
Type: Privileged
<vlan-id> Sets the VLAN ID for the interface.
Table 35. Commands related to ruckus(config-interface-user-defined)
Syntax and Type Parameters (if any) Description
ruckus(config-if)# data-plane
Type: Privileged
<name> Updates the data plane
configurations.
ruckus(config-if)# do
Type: Privileged
Executes the do command.
ruckus(config-if)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-if)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-if)# help
Type: Privileged
Displays help.
Table 34. Commands related to ruckus(config-interface-user-defined)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
ip
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 98
ip
To setup the IP address, use the following command.
ruckus(config)# ip
Syntax Description
This command uses the following syntax:
name-server Set name server
route Set static routes
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ip
name-server Set name server
route Set static routes
ruckus(config-if)# ip
Type: Privileged
address: Sets IP address
of interface
ipv6-address: Sets the
IPv6 address with prefix
lengths of interface
Updates the IP address
configuration.
ruckus(config-if)# no
Type: Privileged
<vlan-id> Disables and deletes commands.
Table 35. Commands related to ruckus(config-interface-user-defined)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
ip control-nat
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 99
ip control-nat
To set the Control NAT IP address, use the following command.
ruckus(config)# ip control-nat <ip>
Syntax Description
This command uses the following syntax:
<ip> Control NAT IP
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ip control-nat
ip name-server
To setup the name server configuration, use the following command.
ruckus(config)# ip name-server <ip>
Syntax Description
This command uses the following syntax:
ip: Primary DNS server
ip: Secondary DNS server
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ip name-server ip 172.19.13.56
Successful operation
Configuration Commands (e-r)
ip name-server-ipv6
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 100
ip name-server-ipv6
To setup the IPv6 server configuration, use the following command.
ruckus(config)# ip name-server <ipv6-address>
Syntax Description
This command uses the following syntax:
ipv6-address: Primary DNS server
ipv6-address: Secondary DNS server
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ip name-server-ipv6 172.19.13.56
Successful operation
ip route
To setup the static rule configuration, use the following command.
ruckus(config)# ip route <ip> <mask> <ip> <interface> <metric>
Syntax Description
This command uses the following syntax:
<ip> <mask> <ip> <interface> <metric>
<ip>: Destination network IP address
<mask>: Destination network mask
<ip>: Next hop IP address
<interface>: Interface
<metric>: Distance metric for this route
Default
This command has no default settings.
Command Mode
Config
Configuration Commands (e-r)
ip route-ipv6
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 101
Example
SZ100-Node1(config)# ip route ip 193.12.30.10 255.255.255
10.9.0.254 management
ip route-ipv6
To setup the IPv6 static rule configuration, use the following command.
ruckus(config)# ip route <ip> <ip> <interface> <metric>
Syntax Description
This command uses the following syntax:
<ip> <ip> <interface> <metric>
<ip>: Destination network IPv6 address with prefix length
<ip>: Next hop IPv6 address
<interface>: Interface
<metric>: Distance metric for this route
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ip route-ipv6 193.12.30.10 193.12.30.20
ipsec-profile
To create or update IPsec profile configuration, use the following command.
ruckus(config)# ipsec-profile <name>
Syntax Description
This command has the following syntax:
<name> : IPsec profile name.
Default
This command has no default settings.
Configuration Commands (e-r)
ipsec-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 102
Command Mode
Config
Example
SZ100-Node1(config)# ipsec-profile
Related Commands
Table 36 lists the related ipsec-profile configuration commands
Table 36. Commands related to ruckus(config-ipsec-profile).
Syntax and Type Parameters (if any) Description
ruckus(config-ipsec-profile)# auth-
type
Type: Privileged
Sets the authentication type
rruckus(config-ipsec-profile)#
cara-server
Type: Privileged
Sets Certificate Management
Protocol CA/RA address.
ruckus(config-ipsec-profile)# cara-
server-path
Type: Privileged
Sets Certificate Management
Protocol Server path.
ruckus(config-ipsec-profile)# cara-
subject-name
Type: Privileged
Sets the Certificate Management
Protocol subject name of CA/RA
ruckus(config-ipsec-profile)# cmp-
dhcp-opt43-subcode
Type: Privileged
Sets the Certificate Management
Protocol DHCP option 43 sub
code for the CA/RA address
ruckus(config-ipsec-profile)# cmp-
subject-name-dhcp-opt43-
subcode
Type: Privileged
Sets the Certificate Management
Protocol DHCP option 43 sub
code for subject name of CA/RA
ruckus(config-ipsec-profile)#
description
Type: Privileged
Sets the description.
ruckus(config-ipsec-profile)#
dhcp-opt43-subcode
Type: Privileged
Sets the DHCP option 43 sub
code for Security Gateway.
Configuration Commands (e-r)
ipsec-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 103
ruckus(config-ipsec-profile)# do
Type: Privileged
Executes the do command.
rruckus(config-ipsec-profile)#
dpd-delay
Type: Privileged
Sets the Dead Peer Detection.
ruckus(config-ipsec-profile)# end
Type: Privileged
End the current configuration
session and return to privileged
EXEC mode
ruckus(config-ipsec-profile)# esp-
proposal
Type: Privileged
[3des | aes256 | aes192 |
aes128 | none ] [ md5 |
sha512 | sha384 | sha1 |
sha256 | aesxcbc ] [
modp8192 |modp6144 |
modp1024 | none |
modp3072 | modp2048 |
modp1536 | modp768 |
modp4096]
3des: 3DES
aes256: AES256
aes192: AES192
aes128: AES128
none: NONE
md5: MD5
sha512: SHA512
sha384: SHA384
sha1: SHA1
sha256: SHA256
aesxcbc: AES-XCBC
modp8192: MODP8192
modp6144: MODP6144
modp1024: MODP1024
modp3072: MODP3072
modp2048: MODP2048
modp1536: MODP1536
modp768: MODP768
modp4096: MODP4096
Add ESP proposal.
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
ipsec-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 104
ruckus(config-ipsec-profile)# esp-
rekeytime
Type: Privileged
Sets the ESP Rekey time.
ruckus(config-ipsec-profile)# esp-
type
Type: Privileged
Set ESP Proposal Type
ruckus(config-ipsec-profile)# exit
Type: Privileged
Exits from the EXEC mode.
ruckus(config-ipsec-profile)#
failover-check-interval
Type: Privileged
Sets the Fail Over Checking
Interval
ruckus(config-ipsec-profile)#
failover-retry-interval
Type: Privileged
Sets the Fail Over Retry Interval
ruckus(config-ipsec-profile)#
failover-retry-mode
Type: Privileged
Sets the Fail Over Retry mode.
ruckus(config-ipsec-profile)#
failover-retry-period
Type: Privileged
Sets the Fail Over Retry period.
ruckus(config-ipsec-profile)# help
Type: Privileged
Displays the help.
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
ipsec-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 105
ruckus(config-ipsec-profile)# ike-
proposal
Type: Privileged
[ 3des | aes256 | aes192
| aes128 ] [ sha1 | md5 |
aesxcbc | sha512 |
sha384 | sha256 ] [
prfsha1 | prfmd5
|prfsha256 | prfaescmac |
prfaesxcbc | prfsha384 |
prfsha512 | use-integrity-
alg ] [ modp1024 |
modp8192 |modp6144 |
modp768 | modp4096 |
modp3072 | modp1536 |
modp2048 ]
Add IKE proposal.
ruckus(config-ipsec-profile)# ike-
rekeytime
Type: Privileged
Sets the IKE Rekey time.
ruckus(config-ipsec-profile)# ike-
type
Type: Privileged
Sets the IKE Proposal type.
ruckus(config-ipsec-profile)# ip-
compression
Type: Privileged
Enables IP compression.
ruckus(config-ipsec-profile)#
ipmode
Type: Privileged
Sets the IP mode.
ruckus(config-ipsec-profile)#
keep-alive-interval
Type: Privileged
Sets the NAT-T Keep Alive interval.
ruckus(config-ipsec-profile)#
name
Type: Privileged
Sets the IPsec profile name.
ruckus(config-ipsec-profile)# nat-
traversal
Type: Privileged
Enables force NAT-T.
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
ipsec-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 106
ruckus(config-ipsec-profile)# no
Type: Privileged
cara-server
cara-server-path
cara-subject-name
dpd-delay
esp-proposal
esp-rekeytime’
ike-proposal
ike-rekeytime
ip-compression
keep-alive-interval
nat-traversal
replay-window
retry-limit
security-gateway
Disables and deletes commands.
ruckus(config-ipsec-profile)#
replay-window
Type: Privileged
Sets the Replay window.
ruckus(config-ipsec-profile)# retry-
limit
Type: Privileged
Sets the Retry limit.
ruckus(config-ipsec-profile)#
security-gateway
Type: Privileged
Sets the Security gateway.
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
lbs-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 107
lbs-service
To create and update the Location Based Service (LBS) configuration, use the
following command.
ruckus(config)# lbs-service
Syntax Description
This command uses the following syntax:
name: LBS venue name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# lbs-service
<name> LBS venue name
SZ100-Node1(config)# lbs-service n3
Related Commands
Table 37 lists the related lbs-service configuration command
.
Table 37. Commands related to ruckus(config-lbs-service)
Syntax and Type Parameters (if any) Description
ruckus(config-lbs-service)# do
Type: Privileged
Sets the do command.
ruckus(config-lbs-service)# end
Type: Privileged
Ends the current configuration
session and returns to the
privileged EXEC mode.
ruckus(config-lbs-service)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-lbs-service)# help
Type: Privileged
Displays the help message.
ruckus(config-lbs-service)# host
Type: Privileged
<host> - Server IP
address
Sets the server address.
Configuration Commands (e-r)
ldap-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 108
ldap-service
To create and update the LDAP service configuration, use the following command.
ruckus(config)# ldap-service <name>
Syntax Description
This command uses the following syntax:
name: LDAP service name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ldap-service
SZ100-Node1(config-ldap-service)#
ruckus(config-lbs-service)#
password
Type: Privileged
<password> Sets the password.
ruckus(config-lbs-service)# port
Type: Privileged
<port> Sets the port number.
ruckus(config-lbs-service)# venue
Type: Privileged
<venue> Sets the LBS venue.
Table 37. Commands related to ruckus(config-lbs-service)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
ldap-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 109
Related Commands
Table 38 lists the related ldap-service configuration command
.
Table 38. Commands related to ruckus(config-ldap-service)
Syntax and Type Parameters (if any) Description
ruckus(config-ldap-service)#
admin-domain-name
Type: Privileged
<domain-name> LDAP
admin domain name, To
query multiple
organizational units, enter
an admin domain name
and password with full
search and read
privileges. For example:
uid=admin,dc=ldap,dc=c
om
Sets the LDAP administrator
domain name.
ruckus(config-ldap-service)#
admin-password
Type: Privileged
<password> - LDAP
server admin password.
For example: uid.
Sets the LDAP administrator
password.
ruckus(config-ldap-service)# base-
domain-name
Type: Privileged
<domain-name> LDAP
base domain name. For
example:
dc=ldap,dc=com
Sets the LDAP base domain name.
ruckus(config-ldap-service)#
description
Type: Privileged
<text> Sets the description.
ruckus(config-ldap-service)# do
Type: Privileged
Sets the do command.
ruckus(config-ldap-service)# end
Type: Privileged
Ends the current configuration
session and returns to the
privileged EXEC mode.
ruckus(config-ldap-service)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-ldap-service)#
friendly-name
Type: Privileged
<friendly-name> Sets the LDAP service name as
seen by the user.
Configuration Commands (e-r)
ldap-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 110
ruckus(config-ldap-service)#
group-attrs
Type: Privileged
<attr-value> <user-role>
<attr-value>: Group
attribute value
<user-role>: User role
Sets the user traffic profile
mapping.
ruckus(config-ldap-service)# help
Type: Privileged
Displays the help message.
ruckus(config-ldap-service)# ip-
address
Type: Privileged
<ip> Sets the IP address for LDAP
server.
ruckus(config-ldap-service)# key-
attr
Type: Privileged
<attr-value>
For example: uid
Sets the key attribute for LDAP
server.
ruckus(config-ldap-service)# no
Type: Privileged
group-attrs Disables the command.
ruckus(config-ldap-service)# port
Type: Privileged
<port> Sets the port number for LDAP
server.
ruckus(config-ldap-service)#
search-filter
Type: Privileged
<filter>
For example:
(objectClass=Person,
show more...)
Sets the search filter for LDAP
server.
ruckus(config-ldap-service)# test
Type: Privileged
<username>
<password>
Test AAA server.
Table 38. Commands related to ruckus(config-ldap-service)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
license
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 111
license
To enable the cloud license server, use the following command.
ruckus(config)# license cloud
ruckus(config)# license import
ruckus(config)# license export
ruckus(config)# license local
ruckus(config)# license sync-now
Syntax Description
This command uses the following syntax:
enable: Enables the cloud license server
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# license
cloud Enable Cloud License Server
export Export Licenses
import Import Licenses
local Enable Local License Server, Format: <local-server> <port>
sync-now Sync License with Server
Configuration Commands (e-r)
license cloud
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 112
license cloud
To enable the cloud license server, use the following command.
ruckus(config)# license cloud <enable>
Syntax Description
This command uses the following syntax:
enable: Enables the cloud license server
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# license cloud enable
Are you sure you want to change the license server configuration?
All current license data will be wipe out!! (or input 'no' to
cancel)? [yes/no]
license export
To setup the export licenses, use the following command.
ruckus(config)# license export <ftp-url> | <ftp-url> <name>
Syntax Description
This command uses the following syntax:
ftp-url: License file. FTP URL format is, ftp://<username>:<password>@<ip>/
<file-path>
<name>: Sets the control plane
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# license export ftp://dm:ruckus1!@172.19.7.100
Configuration Commands (e-r)
license import
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 113
license import
To setup the import licenses, use the following command.
ruckus(config)# license import <ftp-url> | <ftp-url> <name>
Syntax Description
This command uses the following syntax:
ftp-url: License file. FTP URL format is, ftp://<username>:<password>@<ip>/
<file-path>
<name>: Sets the control plane
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# license import ftp://dm:ruckus1!@172.19.7.100
license local
To enable the local license server, use the following command.
ruckus(config)# license local <local-server> <port>
Syntax Description
This command uses the following syntax:
<local-server>: Sets the local license server IP address or the domain name
<port>: Sets the local license server port number
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# license local 172.19.7.100 80
Configuration Commands (e-r)
license sync-now
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 114
license sync-now
To synchronize licenses, use the following command.
ruckus(config)# license sync-now
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# license sync-now
lineman
To setup the workflow URL, use the following command.
ruckus(config)# lineman <workflow-file> | <workflow-url>
Syntax Description
This command uses the following syntax:
<workflow-file>: Uploads the workflow file
<workflow-url>: Set the workflow URL
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# lineman workflow-file ftp://
dm:ruckus1!@172.19.7.100
Configuration Commands (e-r)
localdb-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 115
localdb-service
To create or update the local database service configuration, use the following
command.
ruckus(config)# localdb-service
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# localdb-service
SZ100-Node1(config-localdb-service)#
Related Commands
Table 39 lists the related localdb-service configuration command
.
Table 39. Commands related to ruckus(config-localdb-service).
Syntax and Type Parameters (if any) Description
ruckus(config-localdb-service)#
description
Type: Privileged
<text> Sets the description.
ruckus(config-localdb-service)# do
Type: Privileged
Sets the do command
ruckus(config-localdb-service)#
end
Type: Privileged
Ends the current configuration
session and returns to the
privileged EXEC mode.
ruckus(config-localdb-service)#
exit
Type: Privileged
Exits from the EXEC.
ruckus(config-localdb-service)#
friendly-name
Type: Privileged
<friendly-name> Displays the local database server
name as seen by the user.
Configuration Commands (e-r)
logging console
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 116
logging console
To enable service logging on the console, use the following command.
ruckus(config)# logging console cli [ error | info ] | cli debug | <name>
Syntax Description
This command uses the following syntax:
cli [ error | info ]
cli: Enables CLI logging
error: Error level
info: Information level
cli debug
cli: Enables CLI logging
debug: Debug level
<name> : System service name. Enables logging for a system service.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# cli
2014-11-14 11:17:11,932 wsg.cli[main] INFO c.r.w.c.g.ShellRunner[-
1] - Read line:
SZ100-Node1(config)# logging console
ruckus(config-localdb-service)#
group-attrs
Type: Privileged
<attr-value> <user-role>
<attr-value>: Group
attribute value
<user-role>: User role
Sets the user traffic profile
mapping.
ruckus(config-localdb-service)#
help
Type: Privileged
Displays the help message.
Table 39. Commands related to ruckus(config-localdb-service).
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
lwapp2scg
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 117
2014-11-14 11:17:24,683 wsg.cli[CliSessionTimeout] INFO
c.r.w.c.Context[-1] - sleep interrupted
2014-11-14 11:17:24,684 wsg.cli[main] INFO c.r.w.c.g.Shell[-1] -
Input command: help logging console
2014-11-14 11:17:24,684 wsg.cli[main] INFO c.r.w.c.g.Shell[-1] -
Executing command (help): com.ruckuswireless.wsg.cli.command.Help-
Command; options: [logging, console]
2014-11-14 11:17:24,687 wsg.cli[main] INFO c.r.w.c.c.CommandOp-
tionsMixin[-1] - Starting to cache validation status
2014-11-14 11:17:24,689 wsg.cli[main] INFO c.r.w.c.c.CommandOp-
tionsMixin[-1] - Finished to cache validation status
2014-11-14 11:17:24,690 wsg.cli[main] INFO c.r.w.c.c.CommandOp-
tionsMixin[-1] - Starting to cache validation status
2014-11-14 11:17:24,700 wsg.cli[main] INFO c.r.w.c.c.CommandOp-
tionsMixin[-1] - Finished to cache validation status
lwapp2scg
To update the LWAPP to controller configurations, use the following command.
ruckus(config)# lwapp2scg
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# lwapp2scg
Configuration Commands (e-r)
lwapp2scg
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 118
Related Commands
Table 40 lists the related lwapp2scg configuration command
.
Table 40. Commands related to ruckus(config-lwapp2scg).
Syntax and Type Parameters (if any) Description
ruckus(config-lwapp2scg)# acl-ap
Type: Privileged
mac <ApMac>: Sets the
AP MAC address. Use
commas to separate the
addresses. For example:
1a:2b:3c:4d:5f:60,11:22:
33:44:55:66
serial <SerialNumber>:
Sets the serial number.
Use commas to separate
the serial numbers. For
example:
123456789012,9876543
21021
Sets the ACL AP.
ruckus(config-lwapp2scg)# do
Type: Privileged
Sets the do command
ruckus(config-lwapp2scg)# end
Type: Privileged
Ends the current configuration
session and returns to the
privileged EXEC mode.
ruckus(config-lwapp2scg)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-lwapp2scg)# help
Type: Privileged
Displays the help message.
ruckus(config-lwapp2scg)#
natIpTranslation
Type: Privileged
NAT IP translation in FTP passive
mode.
ruckus(config-lwapp2scg)# no
Type: Privileged
acl-ap
natIpTranslation
Disables the commands.
ruckus(config-lwapp2scg)# pasv-
port
Type: Privileged
<port> <port> - Sets it to
minimum and maximum
port.
Set the dynamic data transmission
port range to minimum and
maximum.
Configuration Commands (e-r)
mgmt-acl
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 119
mgmt-acl
To update the Management interface Access Control List (ACL) configuration, use
the following command.
ruckus(config)# mgmt-acl
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# mgmt-acl
Related Commands
Table 41 lists the related config-mgmt-acl configuration commands.
ruckus(config-lwapp2scg)# policy
Type: Privileged
<accept> Accept by ACL
AP list
<accept-all> Accept all
<deny> Deny by ACL AP
list
<deny-all> Deny all
Sets the ACL policy.
Table 41. Commands related to ruckus(config-event-email)
Syntax and Type Parameters (if any) Description
ruckus(config-mgmt-acl)# enable
Type: Privileged
Enables access control of
management interface.
ruckus(config-mgmt-acl)# no
Type: Privileged
enable
rule
Disables the commands.
Table 40. Commands related to ruckus(config-lwapp2scg).
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
no ad-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 120
no ad-service
To delete the all active service directories, use the following command.
ruckus(config)# no ad-service <name>
Syntax Description
This command uses the following syntax:
name: Name of the active service directory to be deleted
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ad-service active-orange
Related Commands
Table 42 lists the related config-mgmt-acl configuration commands.
ruckus(config-mgmt-acl)# rule
Type: Privileged
<name> ACL rule name Create/update management
interface ACL rule configuration.
Table 42. Commands related to ruckus(config-event-email)
Syntax and Type Parameters (if any) Description
ruckus(config-mgmt-acl)# enable
Type: Privileged
Enables access control of
management interface.
ruckus(config-mgmt-acl)# no
Type: Privileged
enable
rule
Disables the commands.
ruckus(config-mgmt-acl)# rule
Type: Privileged
<name> ACL rule name Create/update management
interface ACL rule configuration.
Table 41. Commands related to ruckus(config-event-email)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
no admin
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 121
no admin
To delete the administrator, use the following command.
ruckus(config)# no admin <username>
Syntax Description
This command uses the following syntax:
username: Name of the administrator to be deleted
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no admin adam
no admin-radius
To delete RADIUS servers configurations for administrators, use the following
command.
ruckus(config)# no admin-radius <name>
Syntax Description
This command uses the following syntax:
name: AAA server name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no admin-radius aaa1
Configuration Commands (e-r)
no ap
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 122
no ap
To delete the lock or unlock the access point, use the following command.
ruckus(config)# no ap <mac> lock
Syntax Description
This command uses the following syntax:
mac: AP MAC address
lock: Unlock AP
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ap 50:A7:33:24:EA:00
no ap auto-approve
To disable AP auto approve, use the following command.
ruckus(config)# no ap auto-approve
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ap-auto-approve
Configuration Commands (e-r)
no ap auto-tagging
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 123
no ap auto-tagging
To disable auto tagging of critical access points, use the following command.
ruckus(config)# no ap auto-tagging <enable>
Syntax Description
This command uses the following syntax:
enable: Disable the auto tagging for critical access point
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ap-auto-tagging enable
no ap-cert-check
To disable the access point certificate check, use the following command.
ruckus(config)# no ap-cert-check
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ap-cert-check
Configuration Commands (e-r)
no ap-control-mgmt-tos
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 124
no ap-control-mgmt-tos
To disable the access point control management traffic type of service, use the
following command.
ruckus(config)# no ap-control-mgmt-tos
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ap-control-mgmt-tos
no ap-group
To disable or delete the AP group, use the following command.
ruckus(config)# no ap-group ${apGroupName} | <name>
Syntax Description
This command uses the following syntax:
ap-group ${apGroupName}?
ap-group:
${apGroupName}?:
<name>: AP Group name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ap-group ap3
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no block-client
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 125
no block-client
To delete all blocked clients profiles, use the following command.
ruckus(config)# no block-client ${value} <mac>
Syntax Description
This command uses the following syntax:
block-client ${value}?
<mac>: blocked client MAC
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no block-client 84:18:3A:39:C8:50
no bonjour-fencing
To delete bonjour fencing settings, use the following command.
ruckus(config)# no bonjour-fencing
Syntax Description
This command has no arguments or keywords
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no bonjour-fencing
no bonjour-fencing-policy
To delete bonjour fencing policy settings, use the following command.
ruckus(config)# no bonjour-fencing-policy
Configuration Commands (e-r)
no bonjour-gateway
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 126
Syntax Description
This command has no arguments or keywords
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no bonjour-fencing-policy
no bonjour-gateway
To disable bonjour gateway settings, use the following command.
ruckus(config)# no bonjour-gateway
Syntax Description
This command has no arguments or keywords
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no bonjour-gateway
Configuration Commands (e-r)
no bonjour-policy
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 127
no bonjour-policy
To disable bonjour policy, use the following command.
ruckus(config)# no bonjour-policy <name>
Syntax Description
This command has no arguments or keywords
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no bonjour-policy bonj1
no cert-store
To delete all OSU (Online SignUp) portal profile configuration, use the following
command.
ruckus(config)# no cert-store <name>
ruckus(config)# no csr <name>
Syntax Description
This command uses the following syntax:
cert <name> - Deletes certificate
csr <name> - Deletes Certificates Signing Request (CSR)
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no cert-store cert certpool
Do you want to continue to delete (or input 'n
Configuration Commands (e-r)
no control-plane
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 128
no control-plane
To remove the control plane from the cluster configuration, use the following
command.
ruckus(config)# no control-plane <name>
Syntax Description
This command uses the following syntax:
name: Control plane name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no control-plane cp1
no data-plane
To disable the STP package bridge of the local data plane configuration, use the
following command.
ruckus(config)# no data-plane <name> forward-stp
Syntax Description
This command uses the following syntax:
name: Dataplane name
forward-stp: Disables the STP package bridge
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no data-plane name indus7-d1
Configuration Commands (e-r)
no device-policy
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 129
no device-policy
To delete a device policy, use the following command.
ruckus(config)# no device-policy <name>
Syntax Description
This command uses the following syntax:
name: device policy name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no device-policy dp1
no diffserv
no diffserv
To delete the Diffserv profile, use the following command.
ruckus(config)# no diffserv ${diffservName}? <name>
Syntax Description
This command uses the following syntax:
$diffservname: diffserv value
name: diffserv profile name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no diffserv ds1
Configuration Commands (e-r)
no dns-server-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 130
no dns-server-service
To delete all DNS server services, use the following command.
ruckus(config)# no dns-server-service <name>
Syntax Description
This command uses the following syntax:
name: DNS server service name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no dns-server-service dns1
no dp-group
To disable the data plane grouping, use the following command.
ruckus(config)# no dp-group
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no dp-group
Configuration Commands (e-r)
no encrypt-mac-ip
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 131
no encrypt-mac-ip
To disable the encryption of MAC and IP address, use the following command.
ruckus(config)# no encrypt-mac-ip
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no encrypt-mac-ip
Do you want to continue to disable (or input 'no' to cancel)? [yes/
no]
no encrypt-zone-name
To disable AP Zone name encryption for Wireless Internet Service Provider roaming
(WISPr) enriched URL, use the following command.
ruckus(config)# no encrypt-zone-name
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no encrypt-zone-name
Configuration Commands (e-r)
no ethernet-port-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 132
no ethernet-port-profile
To delete Eternet port services, use the following command.
ruckus(config)# no ethernet-port-profile <name>
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ethernet-port-profile et2
no event
To disable the trigger to SNMP trap/email configuration, use the following command.
ruckus(config)# no event <snmp-trap> <email> <db-persistence>
Syntax Description
This command uses the following syntax:
snmp-trap: Disables the trigger to SNMP trap
email: Disables the to trigger email
db-persistence: Disables DB persistence for the event
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no event email 305, 214, 11
Configuration Commands (e-r)
no ftp-server
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 133
no ftp-server
To delete FTP server, use the following command.
ruckus(config)# no ftp-server <FTPname>
Syntax Description
This command uses the following syntax:
<FTPname>: Name of the FTP server
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ftp-server ftp1
no guest-access
To delete the guest access configuration, use the following command.
ruckus(config)# guest-access ${guestAccessName}? | <name>
Syntax Description
This command uses the following syntax:
<name>: Name of the guest
guest-access ${guestAccessName}?
Default
This command has no default settings.
Command Mode
config
Example
SZ100-Node1(config)# no guest-access dominic
Configuration Commands (e-r)
no hotspot
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 134
no hotspot
To delete the hotspot (Wireless Internet Service Provider roaming (WISPr)) configu-
ration, use the following command.
ruckus(config)# no hotspot ${hotspotName}? | <name>
Syntax Description
This command uses the following syntax:
hotspot ${hotspotName}?
name: Name of the WISPr hotspot profile
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no hotspot htsp1
no hotspot20-venue-profile
To delete all hotspot 2.0 venue profile, use the following command.
ruckus(config)# no hotspot20-venue-profile ${name}? | <name>
Syntax Description
This command uses the following syntax:
$name?
name: Name of hotspot 2.0 venue profile
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no hotspot20-venue-profile htsp2vp
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no hotspot20-wlan-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 135
no hotspot20-wlan-profile
To delete all hotspot 2.0 WLAN profile, use the following command.
ruckus(config)# no hotspot20-wlan-profile ${name}? | <name>
Syntax Description
This command uses the following syntax:
$name?
name: Name of hotspot 2.0 WLAN profile
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no hotspot20-wlan-profile htsp2wl
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no identity-provider
To delete all identity provider profile, use the following command.
ruckus(config)# no identity-provider <identity-provider ${name}?> | <name>
Syntax Description
This command uses the following syntax:
$name?
name: Name of identity provider
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no identity-provider ip2wl
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no interface
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 136
no interface
To disable an interface configuration, use the following command.
ruckus(config)# no interface <user-defined <name>>
Syntax Description
This command uses the following syntax:
user-defined: User defined interface
name: User defined interface name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no interface user-defined UD1
no ip
To remove all IP address static routes, use the following command.
ruckus(config)# no ip <route> | route <ip> <mask> <ip> <interface> | route-
ipv6 <ip> <ip> <interface>| name-server secondary| separate-access-core
enable
Syntax Description
This command uses the following syntax:
route: Deletes static routes
route <ip> <mask> <ip> <interface>
route: Deletes static routes
<ip>: Destination network IP address
<mask>: Destination network mask
<ip>: Next hop IP address
<interface>: Interface
route-ipv6 <ip> <ip> <interface>
route-ipv6: Delete IPv6 static routes
<ip>: Destination network IPv6 address
Configuration Commands (e-r)
no ipsec-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 137
<ip>: Next hop IPv6 address
<interface>: Interface
name-server secondary
name-server: Deletes all name servers
secondary: Deletes secondary name server
separate-access-core enable
separate-access-core: Separates the access and core gateway
enable: Disables the access and core gateway
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ip route ip 193.12.30.10 255.255.255
10.9.0.254 management
no ipsec-profile
To delete all IPsec profiles, use the following command.
ruckus(config)# no ipsec-profile <name>
Syntax Description
This command uses the following syntax:
<name> : IPsec profile name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ipsec-profile xyz
Configuration Commands (e-r)
no l2-acl
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 138
no l2-acl
To disables the layer 2 Access Control List (ACL) configuration, use the following
command.
ruckus(config)# no l2-acl <name>
Syntax Description
This command uses the following syntax:
<name>: Layer 2 Access Control List name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no l2-acl n3
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no lbs-service
To disables the load balance server configuration, use the following command.
ruckus(config)# no lbs-service <name>
Syntax Description
This command uses the following syntax:
<name>: Set the LBS venue name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no lbs-service lbsruckus
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no ldap-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 139
no ldap-service
To delete all LDAP service, use the following command.
ruckus(config)# no ldap-service <name>
Syntax Description
This command uses the following syntax:
<name>: LDAP server name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no ldap-service ldapser
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no lineman
To disables the lineman application configuration, use the following command.
ruckus(config)# no lineman <workflow-url>
Syntax Description
This command uses the following syntax:
<workflow-url>: Workflow URL
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no lineman workflow-url ftp://
dm:ruckus1!@172.19.7.100
Configuration Commands (e-r)
no logging
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 140
no logging
To disable service logging settings, use the following command.
ruckus(config)# no logging <console cli>
Syntax Description
This command uses the following syntax:
console: Disables all services that logon to the console and reverts to default
settings.
cli: Disables the CLI logging on the console and changes the default log level
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no logging console cli
no oauth-service
To disable the all OAuth servers, use the following command.
ruckus(config)# no oauth-service <name>
Syntax Description
This command uses the following syntax:
<name>: OAuth server name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no oauth-service nam3
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no operator-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 141
no operator-profile
To disable all WiFi operator profile settings, use the following command.
ruckus(config)# no operator-profile <operator-profile ${name}?> | <name>
Syntax Description
This command uses the following syntax:
operator-profile ${name}?
<name>: Operator name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1# no operator-profile ops2
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no osu-portal-profile
To disable all OSU portal profile settings, use the following command.
ruckus(config)# no osu-portal <osu-portal-profile ${name}?| <name>
Syntax Description
This command uses the following syntax:
osu-portal ${name}?
<name>: OSU profile name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no osu-portal-profile ops3
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no outbound firewall
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 142
no outbound firewall
To disable the outbound firewall, use the following command.
ruckus(config)# no outbound firewall
Syntax Description
This command has no keywords or arguments.
Default
This command has no default settings.
Command Mode
Privileged
Example
SZ100-Node1(config)# no outbound firewall
no proxy-aaa
To disable the proxy AAA server settings, use the following command.
ruckus(config)# no proxy-aaa <name>
Syntax Description
This command uses the following syntax:
<name>: Proxy AAA server name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no proxy-aaa
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no report
To delete reports, use the following command.
ruckus(config)# no report <report-title>
Configuration Commands (e-r)
no role
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 143
Syntax Description
This command uses the following syntax:
report-title: Report to be deleted
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no report dns-report
no role
To delete all administrator roles except the default administrator role, use the
following command.
ruckus(config)# no role <name>
Syntax Description
This command uses the following syntax:
name: Name of the role to be deleted
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no role rm34
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no sci-profile
To delete an sci-profile, use the following command.
ruckus(config)# no sci-profile
Syntax Description
This command has no keywords or arguments.
Configuration Commands (e-r)
no snmp-notification
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 144
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no sci-profile
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no snmp-notification
To disable SNMP notification, use the following command.
ruckus(config)# no snmp-notification
Syntax Description
This command has no arguments or keywords.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no snmp-notification
Do you want to continue to disable (or input 'no' to cancel)? [yes/
no]
no snmp-v2-community
To delete SNMPv2 community, use the following command.
ruckus(config)# no snmp-v2-community <community>
Syntax Description
This command uses the following syntax:
community: Community name
Default
This command has no default settings.
Configuration Commands (e-r)
no snmp-v2-community
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 145
Command Mode
Config
Example
SZ100-Node1(config)#snmpno snmp-v2-community cm2
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no snmp-v3-user
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 146
no snmp-v3-user
To delete SNMPv3 user configuration, use the following command.
ruckus(config)# no snmp-v3-user <user>
Syntax Description
This command uses the following syntax:
user: User name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no snmp-v3-user ud11
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no snmp-v2-community
To delete SNMPv2 community, use the following command.
ruckus(config)# no snmp-v2-community <community>
Syntax Description
This command uses the following syntax:
community: Community name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)#snmpno snmp-v2-community cm2
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no snmp-v3-user
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 147
no snmp-v3-user
To delete SNMPv3 user configuration, use the following command.
ruckus(config)# no snmp-v3-user <user>
Syntax Description
This command uses the following syntax:
user: User name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no snmp-v3-user ud11
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no subpackages
To delete subscription packages, use the following command.
ruckus(config)# no subpackages <name>
Syntax Description
This command uses the following syntax:
<name>: Subscription packages name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no subpackages abcd
Configuration Commands (e-r)
no user-agent-blacklist
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 148
no user-agent-blacklist
To delete the user agent blacklisted, use the following command.
ruckus(config)# no user-agent-blacklist <name>
Syntax Description
This command uses the following syntax:
name: Name of the user agent which is blacklisted
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no user-agent-blacklist userb1
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no user-group
To delete a user group, use the following command.
ruckus(config)# no user-group <group>
Syntax Description
This command uses the following syntax:
group: user group name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no user-group
Do you want to continue to delete (or input 'no' to cancel)?
[yes/no]
Configuration Commands (e-r)
no user-role
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 149
no user-role
To delete all users except the default user, use the following command.
ruckus(config)# no user-role <name>
Syntax Description
This command uses the following syntax:
name: Name of the user role
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no user-role userr1
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no user-traffic-profile
To delete all users traffic profiles, use the following command.
ruckus(config)# no user-traffic-profile <name>
Syntax Description
This command uses the following syntax:
name: Name of the user traffic profile
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no user-traffic-profile userp1
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no vlan-pooling
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 150
no vlan-pooling
To delete all VLAN pooling profiles, use the following command.
ruckus(config)# no vlan-pooling <vlan-pooling ${vlanPoolingName}?> |
<name>
Syntax Description
This command uses the following syntax:
vlan-pooling ${vlanPoolingName}?
name: Name of the VLAN pooling profile
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no vlan-pooling vlanservice1
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no web-authentication
To delete all web authentication, use the following command.
ruckus(config)# no web-authentication ${webAuthenticationName}?| <name>
Syntax Description
This command uses the following syntax:
name: Name of the user traffic profile
web-authentication ${webAuthenticationName}?
Default
This command has no default settings
Command Mode
Config
Example
SZ100-Node1(config)# no web-authentication
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no wlan
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 151
no wlan
To delete all WLAN, use the following command.
ruckus(config)# no wlan ${wlanName}?| <name>
Syntax Description
This command uses the following syntax:
name: WLAN name
wlan ${wlanName}?
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no wlan
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no wlan-group
To delete all WLAN group, use the following command.
ruckus(config)# no wlan-group ${wlanGroupName}?| <name>
Syntax Description
This command uses the following syntax:
name: WLAN name
wlan-group ${wlanGroupName}?
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no wlan-group
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
Configuration Commands (e-r)
no wlan-scheduler
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 152
no wlan-scheduler
To delete all WLAN group, use the following command.
ruckus(config)# no wlan-scheduler ${wlanSchedulerName}?
Syntax Description
This command uses the following syntax:
wlan-scheduler ${wlanSchedulerName}?
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no wlan-scheduler
Do you want to continue to delete (or input 'no' to cancel)? [yes/no]
no zone
To delete all zones except the stagging zone, use the following command.
ruckus(config)# no zone
Syntax Description
This command uses the following syntax:
Need Input
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# no zone
Do you want to continue to delete (or input 'no' to cancel)?
[yes/no]
Configuration Commands (e-r)
northbound-authtype
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 153
northbound-authtype
Sets the RADIUS authentication type to northbound portal interface, use the
following command.
ruckus(config)# northbound-authtype <PAP>|<CHAP>
Syntax Description
This command uses the following syntax:
PAP: Password authentication protocol
CHAP: Challenge handshake authentication protocol
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# northbound-authtype PAP
SZ100-Node1(config)# northbound-authtype CHAP
northbound-portal
To enable the northbound portal interface and set the password, use the following
command.
ruckus(config)# northbound-portal <password>
Syntax Description
This command uses the following syntax:
password: Password for the northbound portal interface
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# northbound-portal ruckus1!
Configuration Commands (e-r)
ntp-server
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 154
ntp-server
To update the NTP server configuration, use the following command.
ruckus(config)# ntp-server <ntp-server>
Syntax Description
This command uses the following syntax:
ntp-server: NTP server IP/domain name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# ntp-server host 172.19.13.53
oauth-service
To create or update OAuth service configuration, use the following command.
ruckus(config)# oauth-service <name>
Syntax Description
This command uses the following syntax:
name: OAuth service name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# oauth-service osuauth
SZ100-Node1(config-oauth-service)#
Configuration Commands (e-r)
oauth-service
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 155
Related Commands
Table 43 lists the related oauth-service configuration commands.
Table 43. Commands related ruckus(config-oauth-service)
Syntax and Type Parameters (if any) Description
ruckus(config-oauth-service)#
app-id
Type: Privileged
<app-id> Sets the application ID.
ruckus(config-oauth-service)#
app-secret
Type: Privileged
<app-secret> Sets the application secret name.
ruckus(config-oauth-service)#
collect-email
Type: Privileged
Enables collecting email
addresses.
ruckus(config-oauth-service)#
description
Type: Privileged
<text> Sets the description.
ruckus(config-oauth-service)# do
Type: Privileged
Executes the do command.
ruckus(config-oauth-service)# end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-oauth-service)# exit
Type: Privileged
Exits from the EXEC.
ruckus(config-oauth-service)#
group-attrs
Type: Privileged
<user-role> Sets the user traffic profile
mapping.
ruckus(config-oauth-service)# help
Type: Privileged
Displays the help.
ruckus(config-oauth-service)#
name
Type: Privileged
<name> Sets the OAuth service name.
ruckus(config-oauth-service)# no
Type: Privileged
collect-email
whitelisted-domain
Disables commands.
Configuration Commands (e-r)
operator-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 156
operator-profile
To create or update WiFi operator profile configuration, use the following command.
ruckus(config)# operator-profile <name>
Syntax Description
This command uses the following syntax:
name: Operator profile name
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# operator-profile orangewifi
SZ100-Node1(config-operator-profile)#
ruckus(config-oauth-service)# type
Type: Privileged
[ linkedin | facebook |
google ]
Sets the OAuth provider type.
ruckus(config-oauth-service)#
whitelisted-domains
Type: Privileged
<domain> Sets the whitelisted domains.
Table 43. Commands related ruckus(config-oauth-service)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
operator-profile
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 157
Related Commands
Table 44 lists the related operator-profile configuration commands.
Table 44. Commands related ruckus(config-operator-profile)
Syntax and Type Parameters (if any) Description
ruckus(config-operator-profile)#
description
Type: Privileged
<text> Sets the description.
ruckus(config-operator-profile)# do
Type: Privileged
Executes the do command.
ruckus(config-operator-profile)#
domain-names
Type: Privileged
<domain-name> Sets the domain name.
ruckus(config-operator-profile)#
end
Type: Privileged
Ends the current configuration
session and returns to privileged
EXEC mode.
ruckus(config-operator-profile)#
exit
Type: Privileged
Exits from the EXEC.
ruckus(config-operator-profile)#
friendly-names
Type: Privileged
<language> <names> Sets the friendly name as seen by
the end user.
ruckus(config-operator-profile)#
help
Type: Privileged
Displays the help.
ruckus(config-operator-profile)#
name
Type: Privileged
<name> Sets the WiFi operator profile
name.
ruckus(config-operator-profile)# no
Type: Privileged
domain-names
friendly-names
signup-security
Disables commands.
ruckus(config-operator-profile)#
osen-cert
Type: Privileged
${cert} Uploads the operator certificate.
Configuration Commands (e-r)
outbound-firewall
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 158
outbound-firewall
To update the outbound firewall configuration settings, use the following command.
ruckus(config)# outbound-firewall
Syntax Description
This command has no keywords or arguments.
Default
This command has no default settings.
Command Mode
Config
Example
SZ100-Node1(config)# outbound firewall
ruckus(config-operator-profile)#
signup-security
Type: Privileged
Enables OSEN (Support for
Anonymous Authentication)
Table 44. Commands related ruckus(config-operator-profile)
Syntax and Type Parameters (if any) Description
Configuration Commands (e-r)
outbound-firewall
SZ-100 and vSZ-E CLI Reference Guide for SmartZone 3.5, 800-71293-001 159
Related Commands
Table 45 lists the related outbound-firewall configuration commands.
Table 45. Commands related ruckus(config-outbound-firewall)
Syntax and Type Parameters (if any) Description
ruckus(config-outbound-firewall)#
enable
Type: Privileged