Motorola Wing 5 Manual
Have a look at the manual Motorola Wing 5 Manual online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 249 Motorola manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
![Page 66
2 - 20 WiNG CLI Reference Guide
• crypto key import rsa
{passphrase } {background {on }|on }
• crypto key zeroise {force} {on }
import rsa
Imports a RSA Keypair from a specified source
– Specify the RSA Keypair name.
{background}
{on }Specify the RSA Keypair source address in the following format:
tftp://[:port]/path/file
ftp://:@[:port]/path/file
sftp://@[:port]>/path/file
http://[:port]/path/file
cf:/path/file
usb1:/path/file
usb2:/path/file
background – Optional. Performs the import...](http://img.usermanuals.tech/thumb/52/100713/w64_wing-5-manual-1509563222_d-65.png "Page 66
2 - 20 WiNG CLI Reference Guide
• crypto key import rsa
{passphrase } {background {on }|on }
• crypto key zeroise {force} {on }
import rsa
Imports a RSA Keypair from a specified source
– Specify the RSA Keypair name.
{background}
{on }Specify the RSA Keypair source address in the following format:
tftp://[:port]/path/file
ftp://:@[:port]/path/file
sftp://@[:port]>/path/file
http://[:port]/path/file
cf:/path/file
usb1:/path/file
usb2:/path/file
background – Optional. Performs the import...")
![Page 67
USER EXEC MODE COMMANDS 2 - 21
• crypto pki authenticate {background {on }|
on }
• crypto pki request [generate-rsa-key|use-rsa-key]
autogen-subject-name [|email |fqdn |
ip-address ]
zeroise rsa
Deletes a specified RSA Keypair
– Specify the RSA Keypair name.
force {on } Optional. Forces deletion of all certificates associated with the RSA Keypair
on – Optional. Forces deletion of all certificates associated with
the RSA Keypair on a specified device
– Specify the name of the AP or wireless...](http://img.usermanuals.tech/thumb/52/100713/w64_wing-5-manual-1509563222_d-66.png "Page 67
USER EXEC MODE COMMANDS 2 - 21
• crypto pki authenticate {background {on }|
on }
• crypto pki request [generate-rsa-key|use-rsa-key]
autogen-subject-name [|email |fqdn |
ip-address ]
zeroise rsa
Deletes a specified RSA Keypair
– Specify the RSA Keypair name.
force {on } Optional. Forces deletion of all certificates associated with the RSA Keypair
on – Optional. Forces deletion of all certificates associated with
the RSA Keypair on a specified device
– Specify the name of the AP or wireless...")
![Page 68
2 - 22 WiNG CLI Reference Guide
• crypto pki request [generate-rsa-key|use-rsa-key]
subject-name
[, email , fqdn , ip-address
{background {on /path/file
http://[:port]/path/file
cf:/path/file
usb1:/path/file
background – Optional. Performs the export operation in the background
on – Optional. Performs the export operation on a specified
device
– Specify the name of the AP or wireless controller.
email Exports CSR to a specified e-mail address
– Specify the e-mail address of the CA....](http://img.usermanuals.tech/thumb/52/100713/w64_wing-5-manual-1509563222_d-67.png "Page 68
2 - 22 WiNG CLI Reference Guide
• crypto pki request [generate-rsa-key|use-rsa-key]
subject-name
[, email , fqdn , ip-address
{background {on /path/file
http://[:port]/path/file
cf:/path/file
usb1:/path/file
background – Optional. Performs the export operation in the background
on – Optional. Performs the export operation on a specified
device
– Specify the name of the AP or wireless controller.
email Exports CSR to a specified e-mail address
– Specify the e-mail address of the CA....")
![Page 69
USER EXEC MODE COMMANDS 2 - 23
• crypto pki trustpoint {background {on }|on |passphrase background {on }|
on }}
{background {on /path/file
http://[:port]/path/file
cf:/path/file
usb1:/path/file
background – Optional. Performs the export operation in the background
on – Optional. Performs the export operation on a specific
device.
– Specify the name of the AP or wireless controller.
email Exports CSR to a specified e-mail address
– Specify the e-mail address of the CA.
fqdn Exports CSR to a...](http://img.usermanuals.tech/thumb/52/100713/w64_wing-5-manual-1509563222_d-68.png "Page 69
USER EXEC MODE COMMANDS 2 - 23
• crypto pki trustpoint {background {on }|on |passphrase background {on }|
on }}
{background {on /path/file
http://[:port]/path/file
cf:/path/file
usb1:/path/file
background – Optional. Performs the export operation in the background
on – Optional. Performs the export operation on a specific
device.
– Specify the name of the AP or wireless controller.
email Exports CSR to a specified e-mail address
– Specify the e-mail address of the CA.
fqdn Exports CSR to a...")
![Page 70
2 - 24 WiNG CLI Reference Guide
• crypto pki generate self-signed [generate-rsa-key|
use-rsa-key] autogen-subject-name {email |
fqdn |ip-address |on }
• crypto pki generate self-signed [generate-rsa-key|
use-rsa-key] subject-name
{email |
fqdn |ip-address |on }
on Optional. Performs the export operation on a specified device
– Specify the name of the AP or wireless controller.
passphrase
{background {on }|
on Optional. Encrypts the key with a passphrase before exporting it
– Specify...](http://img.usermanuals.tech/thumb/52/100713/w64_wing-5-manual-1509563222_d-69.png "Page 70
2 - 24 WiNG CLI Reference Guide
• crypto pki generate self-signed [generate-rsa-key|
use-rsa-key] autogen-subject-name {email |
fqdn |ip-address |on }
• crypto pki generate self-signed [generate-rsa-key|
use-rsa-key] subject-name
{email |
fqdn |ip-address |on }
on Optional. Performs the export operation on a specified device
– Specify the name of the AP or wireless controller.
passphrase
{background {on }|
on Optional. Encrypts the key with a passphrase before exporting it
– Specify...")
![Page 71
USER EXEC MODE COMMANDS 2 - 25
• crypto pki import [certificate|crl] {background
{on }|on }
[generate-rsa-key|
use-rsa-key]
Generates a new RSA Keypair, or uses an existing RSA Keypair
generate-rsa-key – Generates a new RSA Keypair for digital authentication
use-rsa-key – Uses an existing RSA Keypair for digital authentication
– If generating a new RSA Keypair, specify a name for it.
If using an existing RSA Keypair, specify its name.
subject-name
Specify a subject name to identify the...](http://img.usermanuals.tech/thumb/52/100713/w64_wing-5-manual-1509563222_d-70.png "Page 71
USER EXEC MODE COMMANDS 2 - 25
• crypto pki import [certificate|crl] {background
{on }|on }
[generate-rsa-key|
use-rsa-key]
Generates a new RSA Keypair, or uses an existing RSA Keypair
generate-rsa-key – Generates a new RSA Keypair for digital authentication
use-rsa-key – Uses an existing RSA Keypair for digital authentication
– If generating a new RSA Keypair, specify a name for it.
If using an existing RSA Keypair, specify its name.
subject-name
Specify a subject name to identify the...")
USER EXEC MODE COMMANDS 2 - 25
• crypto pki import [certificate|crl] {background
{on }|on }
[generate-rsa-key|
use-rsa-key]
Generates a new RSA Keypair, or uses an existing RSA Keypair
generate-rsa-key – Generates a new RSA Keypair for digital authentication
use-rsa-key – Uses an existing RSA Keypair for digital authentication
– If generating a new RSA Keypair, specify a name for it.
If using an existing RSA Keypair, specify its name.
subject-name
Specify a subject name to identify the certificate.
– Specify the common name used with the CA certificate. The
name should enable you to identify the certificate easily.
Sets the deployment country name (2 character ISO code)
Sets the state name (2 to 64 characters)
Sets the city name (2 to 64 characters)
Sets the organization name (2 to 64 characters)
Sets the organization unit (2 to 64 characters)
email Exports the CSR to a specified e-mail address
– Specify the e-mail address of the CA.
fqdn Exports the CSR to the CA by providing the FQDN of the CA
– Specify the FQDN of the CA.
ip address Exports the CSR to a specified device or system
– Specify the IP address of the CA
pki Enables PKI management. Use this command to authenticate, export, generate, or
delete a trustpoint and its associated CA certificates.
import Imports certificates, CRL, or a trustpoint to the selected device
[certificate|crl]
Imports a signed server certificate or CRL
certificate – Imports signed server certificate
crl – Imports CRL
– Specify the trustpoint name (should be authenticated).
Specify the signed server certificate or CRL source address in the following format:
tftp://[:port]/path/file
ftp://:@[:port]/path/file
sftp://@[:port]>/path/file
http://[:port]/path/file
cf:/path/file
usb1:/path/file
usb2:/path/file
2 - 26 WiNG CLI Reference Guide
• crypto pki import trustpoint {background {on
}|on }
• crypto pki zeroise trustpoint {del-key {on }|
on }
background
{on }Optional. Performs the import operation in the background
on – Optional. Performs the import operation on a specified device
– Specify the name of the AP or wireless controller.
on Optional. Performs the import operation on a specified device
– Specify the name of the AP or wireless controller.
pki Enables PKI management. Use this command to authenticate, export, generate, or
delete a trustpoint and its associated CA certificates.
import Imports certificates, CRL, or a trustpoint to the selected device
trustpoint
Imports a trustpoint and its associated CA certificate, server certificate, and private
key
– Specify the trustpoint name (should be authenticated).
Specify the trustpoint source address in the following format:
tftp://[:port]/path/file
ftp://:@[:port]/path/file
sftp://@[:port]>/path/file
http://[:port]/path/file
cf:/path/file
usb1:/path/file
usb2:/path/file
background
{on }Optional. Performs the import operation in the background
on – Optional. Performs the import operation on a specified device
– Specify the name of the AP or wireless controller.
on Optional. Performs the import operation on a specified device
– Specify the name of the AP or wireless controller.
passphrase
{background {on }|
on }Optional. Encrypts the trustpoint with a passphrase before importing it
– Specify a passphrase.
background – Optional. Imports the encrypted trustpoint in the background
on – Optional. Imports the encrypted trustpoint on a
specified device
– Specify the name of the AP or wireless controller.
pki Enables PKI management. Use this command to authenticate, export, generate, or
delete a trustpoint and its associated CA certificates.
zeroise
Deletes a trustpoint and its associated CA certificate, server certificate, and private key
– Specify the trustpoint name (should be authenticated).
USER EXEC MODE COMMANDS 2 - 27
Examples
rfs7000-37FABE#crypto key generate rsa key 1025
RSA Keypair successfully generated
rfs7000-37FABE#
rfs7000-37FABE#crypto key import rsa moto123 url passphrase word background on
rfs7000-37FABE
RSA key import operation is started in background
rfs7000-37FABE#
rfs7000-37FABE#crypto pki generate self-signed word generate-rsa-key word autogen-
subject-name fqdn word
Successfully generated self-signed certificate
rfs7000-37FABE#
rfs7000-37FABE#crypto pki zeroize trustpoint word del-key on rfs7000-37FABE
Successfully removed the trustpoint and associated certificates
%Warning: Applications associated with the trustpoint will start using default-
trustpoint
rfs7000-37FABE#
rfs7000-37FABE#crypto pki authenticate word url background on rfs7000-37FABE
Import of CA certificate started in background
rfs7000-37FABE#
rfs7000-37FABE#crypto pki import trustpoint word url passphrase word on rfs7000-37FABE
Import operaton started in background
rfs7000-37FABE#
Related Commands
del-key
{on }Optional. Deletes the private key associated with the server certificate
on – Optional. Deletes private key on a specific device
– Specify the name of the AP or wireless controller.
on Optional. Deletes the trustpoint on a specified device
– Specify the name of the AP or wireless controller.
noResets or disables the crypto commands
2 - 28 WiNG CLI Reference Guide 2.1.8 disable User Exec Commands Turns off (disables) the privileged mode command set. This command returns to the User Executable mode. AP300 AP621 AP650 AP6511 AP6521 AP6532 AP71XX RFS4000 RFS6000 RFS7000 NX9000 NX9500 Syntax disable Parameters None Examples rfs7000-37FABE#disable rfs7000-37FABE>
USER EXEC MODE COMMANDS 2 - 29 2.1.9 enable User Exec Commands Turns on (enables) the privileged mode command set. This command does not do anything in the Privilege Executable mode. AP300 AP621 AP650 AP6511 AP6521 AP6532 AP71XX RFS4000 RFS6000 RFS7000 NX9000 NX9500 Syntax enable Parameters None Examples rfs7000-37FABE>enable rfs7000-37FABE#
2 - 30 WiNG CLI Reference Guide 2.1.10 exit User Exec Commands Ends the current CLI session and closes the session window AP300 AP621 AP650 AP6511 AP6521 AP6532 AP71XX RFS4000 RFS6000 RFS7000 NX9000 NX9500 Syntax exit Parameters None Examples rfs7000-37FABE>exit
USER EXEC MODE COMMANDS 2 - 31
2.1.11 logging
User Exec Commands
Modifies message logging settings
AP300
AP621
AP650
AP6511
AP6521
AP6532
AP71XX
RFS4000
RFS6000
RFS7000
NX9000
NX9500
Syntax
logging monitor {|alerts|critical|debugging|emergencies|errors|
informational|warnings|notifications}
Parameters
• logging monitor {|alerts|critical|debugging|emergencies|errors|
informational|warnings|notifications}
Examples
rfs7000-37FABE>logging monitor warnings ?
rfs7000-37FABE>
rfs7000-37FABE>logging monitor 2
rfs7000-37FABE>
Related Commands
monitor Sets the terminal lines logging levels. The logging severity levels can be set from
0 - 7. The system configures default settings, if no logging severity level is specified.
– Optional. Specify the logging severity level from 0-7. The various levels and
their implications are as follows:
alerts – Optional. Immediate action needed (severity=1)
critical – Optional. Critical conditions (severity=2)
debugging – Optional. Debugging messages (severity=7)
emergencies – Optional. System is unusable (severity=0)
errors – Optional. Error conditions (severity=3)
informational – Optional.Informational messages (severity=6)
notifications – Optional. Normal but significant conditions (severity=5)
warnings – Optional. Warning conditions (severity=4)
noResets the terminal lines logging levels
2 - 32 WiNG CLI Reference Guide
2.1.12 mint
User Exec Commands
Uses MiNT protocol to perform a ping and a traceroute to a remote device
AP300
AP621
AP650
AP6511
AP6521
AP6532
AP71XX
RFS4000
RFS6000
RFS7000
NX9000
NX9500
Syntax
mint [ping|traceroute]
mint ping {count []|size []|timeout []}
mint traceroute {destination-port []|max-hops []|
source-port []|timeout []}
Parameters
• mint ping {count []|size []|timeout []}
• mint traceroute {destination-port []|max-hops []|
source-port []|timeout []}
ping Sends a MiNT echo message to a MiNT destination
– Specify the MiNT destination ID to ping.
count Optional. Sets the number of times to ping the MiNT destination
– Specify a value from 1 - 60. The default is 3.
size Optional. Sets the MiNT payload size in bytes
– Specify a value from 1 - 640000. The default is 64 bytes.
timeout Optional. Sets a response time in seconds
– Specify a value from 1 - 10 seconds. The default is 1 second.
traceroute Prints the route packets trace to a device
– Specify the MiNT destination ID.
destination-port
Optional. Sets the Equal-cost Multi-path (ECMP) routing destination port
– Specify a value from 1 - 65535. The default port is 45.
USER EXEC MODE COMMANDS 2 - 33 Examples rfs7000-37FABE>mint ping 70.37.FA.BF count 20 size 128 MiNT ping 70.37.FA.BF with 128 bytes of data. Response from 70.37.FA.BF: id=1 time=0.292 ms Response from 70.37.FA.BF: id=2 time=0.206 ms Response from 70.37.FA.BF: id=3 time=0.184 ms Response from 70.37.FA.BF: id=4 time=0.160 ms Response from 70.37.FA.BF: id=5 time=0.138 ms Response from 70.37.FA.BF: id=6 time=0.161 ms Response from 70.37.FA.BF: id=7 time=0.174 ms Response from 70.37.FA.BF: id=8 time=0.207 ms Response from 70.37.FA.BF: id=9 time=0.157 ms Response from 70.37.FA.BF: id=10 time=0.153 ms Response from 70.37.FA.BF: id=11 time=0.159 ms Response from 70.37.FA.BF: id=12 time=0.173 ms Response from 70.37.FA.BF: id=13 time=0.156 ms Response from 70.37.FA.BF: id=14 time=0.209 ms Response from 70.37.FA.BF: id=15 time=0.147 ms Response from 70.37.FA.BF: id=16 time=0.203 ms Response from 70.37.FA.BF: id=17 time=0.148 ms Response from 70.37.FA.BF: id=18 time=0.169 ms Response from 70.37.FA.BF: id=19 time=0.164 ms Response from 70.37.FA.BF: id=20 time=0.177 ms --- 70.37.FA.BF ping statistics --- 20 packets transmitted, 20 packets received, 0% packet loss round-trip min/avg/max = 0.138/0.177/0.292 ms max-hops Optional. Sets the maximum number of hops a traceroute packet traverses in the forward direction – Specify a value from 1 - 255. The default is 30. source-port Optional. Sets the ECMP source port – Specify a value from 1 - 65535. The default port is 45. timeout Optional. Sets the minimum response time period – Specify a value from 1 - 255 seconds. The default is 30 seconds.
2 - 34 WiNG CLI Reference Guide
2.1.13 no
User Exec Commands
Use the no command to revert a command or to set parameters to their default. This command is useful to turn off an
enabled feature or set default values for a parameter.
AP300
AP621
AP650
AP6511
AP6521
AP6532
AP71XX
RFS4000
RFS6000
RFS7000
NX9000
NX9500
Syntax
no [adoption|captive-portal|crypto|debug|logging|page|service|terminal|wireless]
no adoption {on }
no captive-portal client [captive-portal |]
{on }
no crypto pki [server|trustpoint]
no crypto pki [server|trustpoint] {del-key {on }|
on }
no logging monitor
no page
no service [ap300|cli-tables-expand|locator]
no service ap300 locator
no service [cli-tables-expand |locator {on }]
no terminal [length|width]
no wireless client [all {filter|on}|]
no wireless client all {filter [wlan []]}
no wireless client all {on {filter [wlan []]}}
no wireless client {on }
NOTE: The commands have their own set of parameters that can be reset.