Motorola Wing 5 Manual

							PROFILES 7 - 135
• spanning-tree mst [ priority |cisco-interoperability 
[enable|disable]|enable|forward-time |hello-time |instance |
max-age |max-hops |region |revision ]
• spanning-tree portfast [bpdufilter|bpduguard] default]
mst Configures Multiple Spanning Tree (MST) commands
 priority  Specifies the number of instances required to configure MST. Select a value from 
0 -15.
 priority – Sets the bridge priority to the specified value. Use the no parameter with 
this command to restore the default bridge priority value.
  – Sets the bridge priority in increments (Lower priority indicates
greater likelihood of becoming root)
cisco interoperability 
[enable|disable]Enables or disables CISCO interoperability
enable Enables MST protocol
forward-time  Specifies the forwarding delay time in seconds
  – Specify a value from 4 - 30 seconds.
hello-time  Specifies the hello BDPU interval in seconds
  – Specify a value from 1 - 10 seconds.
instance  Defines the instance ID to which the VLAN is associated
  – Specify an instance ID from 1 - 10.
max-age  Defines the maximum time to listen for the root bridge
  – Specify a value from 4 - 60 seconds.
max-hops  Defines the maximum hops when BPDU is valid
  – Specify a value from 7 - 127.
region  Specifies the MST region
  – Specify the region name.
revision  Sets the MST bridge revision number. This enables the retrieval of configuration 
information.
  – Specify a value from 0 - 255.
portfast [bpdufilter| 
bpduguard] defaultEnables PortFast on a bridge
 bpdufilter default – Sets the BPDU filter for the port. Use the no parameter with 
this command to revert to default.
The spanning tree protocol sends BPDUs from all ports. Enabling the BPDU filter 
ensures that PortFast enabled ports do not transmit or receive BPDUs
 bpduguard default – Guards PortFast ports against BPDU receive
 default – Enables the BPDU filter on PortFast enabled ports by default 
						

							7 - 136 WiNG CLI Reference Guide
Usage Guidelines
If a bridge does not hear bridge protocol data units (BPDUs) from the root bridge within the specified interval, defined in 
the max-age (seconds) parameter, assume the network has changed and recomputed the spanning-tree topology.
Generally, spanning tree configuration settings in the config mode define the configuration for bridge and bridge instances.
MSTP works based on instances. An instance is a group of VLANs with a common spanning tree. A single VLAN cannot 
be associated with multiple instances.
Wireless controllers with the same instance, VLAN mapping, revision number and region names define a unique region. 
Wireless controllers in the same region exchange bridge protocol data units (BPDUs) with instance record information 
within.
Examples
rfs7000-37FABE(config-profile-default-RFS7000)#spanning-tree errdisable recovery 
cause bpduguard
rfs7000-37FABE(config-profile-default-RFS7000)#
rfs7000-37FABE(config-profile-default-RFS7000)#spanning-tree mst 2 priority 4096
rfs7000-37FABE(config-profile-default-RFS7000)#
rfs7000-37FABE(config-profile-default-RFS7000)#show context
profile RFS7000 default-RFS7000
 spanning-tree mst 2 priority 4096
 spanning-tree errdisable recovery cause bpduguard
 autoinstall configuration
 autoinstall firmware
 crypto isakmp policy default
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 interface me1
 interface ge1
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface ge2
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface ge3
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
 interface ge4
  ip dhcp trust
  qos trust dscp
--More--
rfs7000-37FABE(config-profile-default-RFS7000)#
Related Commands
noDisables or reverts settings to their default 
						

							PROFILES 7 - 137
7.1.46 use
Creating Profiles
Uses pre configured policies with this profile
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax Profiles
use [advanced-wips-policy|auto-provisioning-policy|captive-portal|
critical-resource-policy||dhcp-server-policy|event-system-policy|firewall-policy|
igmp-snoop-policy| management-policy|radius-server-policy|role-policy]
ParametersProfiles mode
• use [advanced-wips-policy|auto-provisioning-policy|captive-portal|
critical-resource-policy||dhcp-server-policy|event-system-policy|firewall-policy|
igmp-snoop-policy| management-policy|radius-server-policy|role-policy]
NOTE: The Parameter Table contains the ‘use’ command parameters for the Profiles and 
Device modes.
use Associates the following policies with this profile:
advanced-wips-policy 
Associates an advanced WIPS policy
  – Specify the WIPS policy name.
auto-provisioning-policy 
Associates an auto provisioning policy
  – Specify the auto provisioning policy name.
captive-portal server 
Configures access to a specified captive portal with this profile
  – Specify the captive portal name.
critical-resource-policy 
Associates a critical resource policy
  – Specify the critical resource policy name. 
						

							7 - 138 WiNG CLI Reference Guide
Syntax Device Mode
use [adoption-policy|advanced-wips-policy|
captive-portal|critical-resource-policy||dhcp-server-policy|
firewall-policy|igmp-snoop-policy|management-policy|profile|
radius-server-policy|rf-domain|role-policy|
smart-rf-policy|trustpoint|wips-policy]
ParametersDevice mode
• use [advanced-wips-policy|auto-provisioning-policy|captive-portal|
critical-resource-policy||dhcp-server-policy|event-system-policy|firewall-policy|
igmp-snoop-policy|management-policy|profile|radius-server-policy|rf-domain|role-
policy|wip-policy]
dhcp-server-policy 
Associates a DHCP server policy
  – Specify the DHCP server policy name.
event-system-policy 
Associates an event system policy
  – Specify the event system policy name.
firewall-policy  Associates a firewall policy
  – Specify the firewall policy name.
igmp-snoop-policy 
Associates an IGMP snoop policy
  – Specify the IGMP snoop policy name.
management-policy 
Associates a management policy
  – Specify the management policy name.
radius-server-policy 
Associates a device onboard RADIUS policy
  – Specify the RADIUS policy name.
role-policy  Associates a role policy
  – Specify the role policy name.
use Associates the following policies with this device:
advanced-wips-policy 
Associates an advanced WIPS policy
  – Specify the advanced WIPS policy name.
auto-provisioning-policy 
Associates an auto provisioning policy
  – Specify the auto provisioning policy name.
captive-portal server 
Configures access to a specified captive portal
  – Specify the captive portal name.
critical-resource-policy 
Associates a critical resource policy
  – Specify the critical resource policy name.
dhcp-server-policy 
Associates a DHCP server policy
  – Specify the DHCP server policy name.
event-system-policy 
Associates an event system policy
  – Specify the event system policy name. 
						

							PROFILES 7 - 139
Examples
rfs7000-37FABE(config-profile-default-RFS7000)#use role-policy test
rfs7000-37FABE(config-profile-default-RFS7000)#
rfs7000-37FABE(config-profile-default-RFS7000)#use adoption-policy test
rfs7000-37FABE(config-profile-default-RFS7000)#
rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#use trustpoint trust1 https radius-
ca-certificate radius-server-certificate
rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#
Related Commands
firewall-policy 
Associates a firewall policy
  – Specify the firewall policy name.
igmp-snoop-policy 
Associates an IGMP snoop policy
  – Specify the IGMP snoop policy name.
management-policy 
Associates a management policy
  – Specify the management policy name.
profile  Associates a profile with this device
  – Specify the profile name.
radius-server-policy 
Associates a device onboard RADIUS policy
  – Specify the RADIUS policy name.
rf-domain 
Associates an RF Domain
  – Specify the RF Domain name.
role-policy  Associates a role policy
  – Specify the role policy name.
wips-policy  Associates a WIPS policy
  – Specify the WIPS policy name.
noDisables or reverts settings to their default 
						

							7 - 140 WiNG CLI Reference Guide
7.1.47 vpn
Creating Profiles
Configures VPN settings
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
vpn authentication-method [local|radius]
Parameters
• vpn authentication-method [local|radius]
Usage Guidelines
Virtual Private Network (VPN) enables IP traffic to travel securely over a public TCP/IP network by encrypting all traffic from 
one network to another. A VPN uses “tunneling” to encrypt information at the IP level.
Examples
rfs7000-37FABE(config-profile-default-RFS7000)#vpn authentication-method local
rfs7000-37FABE(config-profile-default-RFS7000)#
rfs7000-37FABE(config-profile-default-RFS7000)#vpn authentication-method radius
rfs7000-37FABE(config-profile-default-RFS7000)#
Related Commands
authentication-method 
[local|radius]Selects an authentication scheme
 local – Used for user based authentication
 radius – Used for RADIUS server authentication
noDisables or reverts settings to their default 
						

							PROFILES 7 - 141
7.1.48 wep-shared-key-auth
Creating Profiles
Enables support for 802.11 WEP shared key authentication
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
wep-shared-key-auth
Parameters
None
Examples
rfs7000-37FABE(config-profile-default-RFS7000)#wep-shared-key-auth
rfs7000-37FABE(config-profile-default-RFS7000)#
Related Commands
noDisables or reverts settings to their default 
						

							7 - 142 WiNG CLI Reference Guide
7.2 Device Specific Commands
Use the (config) instance to configure device specific parameters
To navigate to this instance, use the following commands:
rfs7000-37FABE(config)#AP7131?
rfs7000-37FABE(config)#AP7131 00-15-70-88-9E-C4
rfs7000-37FABE(config-device-00-15-70-88-9E-C4)#?
Device Mode commands:
  aaa                             VPN AAA authentication settings
  ap-upgrade                      AP firmware upgrade
  ap300                           Adopt/unadopt AP300 device to this
                                  profile/device
  area                            Set name of area where the system is located
  arp                             Address Resolution Protocol (ARP)
  auto-learn-staging-config       Enable learning network configuration of the
                                  devices that come for adoption
  autoinstall                     Autoinstall Configuration commands
  bridge                          Ethernet bridge
  cdp                             Cisco Discovery Protocol
  channel-list                    Configure channel list to be advertised to
                                  wireless clients
  cluster                         Cluster configuration
  configuration-persistence       Enable persistence of configuration across
                                  reloads (startup config file)
  contact                         Configure the contact
  controller                      WLAN controller configuration
  country-code                    Configure the country of operation
  crypto                          Encryption related commands
  dhcp-redundancy                 Enable DHCP redundancy
  dscp-mapping                    Configure IP DSCP to 802.1p priority mapping
                                  for untagged frames
  email-notification              Email notification configuration
  enforce-version                 Check the firmware versions of devices
                                  before interoperating
  events                          System event messages
  floor                           Set name of a floor within a area where the
                                  system is located
  hostname                        Set systems network name
  interface                       Select an interface to configure
  ip                              Internet Protocol (IP)
  layout-coordinates              Configure layout coordinates for this device
  led                             Turn LEDs on/off on the device
  legacy-auto-downgrade           Enable device firmware to auto downgrade
                                  when other legacy devices are detected
  legacy-auto-update              Auto upgrade of legacy devices
  license                         License management command
  lldp                            Link Layer Discovery Protocol
  load-balancing                  Configure load balancing parameter
  local                           Local user authentication database for VPN
  location                        Configure the location
  logging                         Modify message logging facilities
  mac-address-table               MAC Address Table
  mac-name                        Configure MAC address to name mappings
  mint                            MiNT protocol
  misconfiguration-recovery-time  Check controller connectivity after
                                  configuration is received
  monitor                         Critical resource monitoring
  neighbor-inactivity-timeout     Configure neighbor inactivity timeout
  neighbor-info-interval          Configure neighbor information exchange
                                  interval
  no                              Negate a command or set its defaults
  noc                             Configure the noc related setting
  ntp                             Ntp server A.B.C.D
  override-wlan                   Configure RF Domain level overrides for wlan
  power-config                    Configure power mode
  preferred-controller-group      Controller group this system will prefer for
                                  adoption 
						

							PROFILES 7 - 143
  radius                          Configure device-level radius authentication
                                  parameters
  remove-override                 Remove configuration item override from the
                                  device (so profile value takes effect)
  rf-domain-manager               RF Domain Manager
  rsa-key                         Assign a RSA key to a service
  sensor-server                   Motorola AirDefense sensor server
                                  configuration
  spanning-tree                   Spanning tree
  stats                           Configure the stats related setting
  timezone                        Configure the timezone
  trustpoint                      Assign a trustpoint to a service
  use                             Set setting to use
  vpn                             Vpn configuration
  wep-shared-key-auth             Enable support for 802.11 WEP shared key
                                  authentication
  clrscr                          Clears the display screen
  commit                          Commit all changes made in this session
  do                              Run commands from Exec mode
  end                             End current mode and change to EXEC mode
  exit                            End current mode and down to previous mode
  help                            Description of the interactive help system
  revert                          Revert changes
  service                         Service Commands
  show                            Show running system information
  write                           Write running configuration to memory or
                                  terminal
rfs7000-37FABE(config-device-00-15-70-88-9E-C4)#
Table 7.8 summarizes device mode commands
Table 7.8Device Mode Commands
Command Description Reference
aaaConfigures VPN AAA authentication settingspage 7-5
adopted-modeSets device running on adopted modepage 7-7
ap-upgradeUpgrades AP firmwarepage 7-8
ap300Enables adoption of AP300s by a profile or wireless controllerpage 7-10
areaSets the name of area where the system is deployedpage 7-147
arpConfigures ARP parameterspage 7-11
auto-learn-staging-
configEnables the automatic recognition of devices pending adoptionpage 7-13
autoinstallAutoinstalls firmware image and configuration setup parametersautoinstall
bridge commandsConfigures Ethernet Bridging parameterspage 7-15
cdpOperates CDP on the devicepage 7-29
channel-listConfigures channel list advertised to wireless clientspage 7-148
clusterSets cluster configurationpage 7-31
configuration-
persistenceEnables configuration persistence across reloadspage 7-33
contactSets contact informationpage 7-149 
						

							7 - 144 WiNG CLI Reference Guide
controllerConfigures a WLAN wireless controllerpage 7-34
country-codeConfigures wireless controller’s country codepage 7-150
cryptoConfigures crypto settingspage 7-36
dhcp-redundancyEnables DHCP redundancypage 7-151
dscp-mappingConfigures IP Differentiated Services Code Point (DSCP) to 802.1p 
priority mapping for untagged framespage 7-54
email-notificationConfigures e-mail notificationpage 7-55
enforce-versionChecks the device firmware version before attempting connectionpage 7-57
eventsDisplays system event messagespage 7-59
floorSets the building floor where the system is deployedpage 7-152
hostnameSets a systems network namepage 7-153
interfaceSelects an interface to configurepage 7-67
ipConfigures IP componentspage 7-60
layout-coordinatesConfigures layout coordinatespage 7-154
ledTurns LEDs on or offpage 7-101
legacy-auto-
downgradeEnables legacy device firmware to auto downgradepage 7-102
legacy-auto-updateAuto updates AP650 and AP71xx legacy device firmwarepage 7-103
lldpConfigures Link Layer Discovery Protocol (LLDP) settings for this profilepage 7-104
load-balancingConfigures load balancing parameters.page 7-106
localSets the username and password for local user authenticationpage 7-111
locationConfigures the location the system is deployedpage 7-155
loggingEnables message loggingpage 7-112
mac-address-tableConfigures the MAC address tablepage 7-114
mac-nameConfigures MAC name to name mappingspage 7-156
mintConfigures MiNT protocol commandspage 7-116
misconfiguration-
recovery-timeVerifies wireless controller connectivity after a configuration is receivedpage 7-119
monitorEnables critical resource monitoringpage 7-120
neighbor-inactivity-
timeoutConfigures a neighbor inactivity timeoutpage 121
Table 7.8Device Mode Commands
Command Description Reference