Brocade Mobility RFS4000, RFS6000, and RFS7000 · 53-1002740-01 29 November 2012 ® Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide Supporting software release

53-1002740-0129 November 2012

®

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide

Supporting software release 5.4.0.0 and later

Copyright © 2012 Brocade Communications Systems, Inc. All Rights Reserved.

Brocade, Brocade Assurance, the B-wing symbol, DCX, Fabric OS, MLX, SAN Health, VCS, and VDX are registered trademarks, and AnyIO, Brocade One, CloudPlex, Effortless Networking, ICX, NET Health, OpenScript, and The Effortless Network are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. Other brands, products, or service names mentioned may be trademarks of their respective owners.

Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to this document at any time, without notice, and assumes no responsibility for its use. This informational document describes features that may not be currently available. Contact a Brocade sales office for information on feature and product availability. Export of technical data contained in this document may require an export license from the United States government.

The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that accompany it.

The product described by this document may contain “open source” software covered by the GNU General Public License or other open source license agreements. To find out which open source software is included in Brocade products, view the licensing terms applicable to the open source software, and obtain a copy of the programming source code, please visit

http://www.brocade.com/support/oscd.

Brocade Communications Systems, Incorporated

Document History

Corporate and Latin American HeadquartersBrocade Communications Systems, Inc.130 Holger WaySan Jose, CA 95134 Tel: 1-408-333-8000 Fax: 1-408-333-8101 E-mail: [email protected]

Asia-Pacific HeadquartersBrocade Communications Systems China HK, Ltd.No. 1 Guanghua RoadChao Yang DistrictUnits 2718 and 2818Beijing 100020, ChinaTel: +8610 6588 8888Fax: +8610 6588 9999E-mail: [email protected]

European HeadquartersBrocade Communications Switzerland SàrlCentre SwissairTour B - 4ème étage29, Route de l'AéroportCase Postale 105CH-1215 Genève 15Switzerland Tel: +41 22 799 5640Fax: +41 22 799 5641E-mail: [email protected]

Asia-Pacific HeadquartersBrocade Communications Systems Co., Ltd. (Shenzhen WFOE)Citic PlazaNo. 233 Tian He Road NorthUnit 1308 – 13th FloorGuangzhou, ChinaTel: +8620 3891 2000Fax: +8620 3891 2111E-mail: [email protected]

Title Publication number Summary of changes Date


53-1002313-01 New document June 2011


53-1002486-01 New Additions for software version 5.2.0.0

November 2011



May 2012



November 2012

Contents

About This Guide

Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . .xvii

Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xviiText formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xviiNotes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xviii

Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix

Getting technical help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xx

Chapter 1 IntroductionCLI overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Getting context sensitive help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Using the no command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6Basic conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Using CLI editing features and shortcuts . . . . . . . . . . . . . . . . . . . . . . 7Moving the cursor on the command line . . . . . . . . . . . . . . . . . . . 7Completing a partial command name . . . . . . . . . . . . . . . . . . . . . 8Command output pagination . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9Creating profiles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9Change the default profile by creating VLAN 150 and mapping to ge3 physical interface . . . . . . . . . . . . . . . . . . . 10Remote administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Chapter 2 User Exec Mode CommandsUser Exec Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

ap-upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15captive-portal-page-upload . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20change-passwd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22clear . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27connect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28create-cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29crypto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39join-cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39l2tpv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42exit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43mint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide iii53-1002740-01

page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48ssh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50time-it . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52watch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53

Chapter 3 Privileged Exec Mode CommandsPrivileged Exec Mode Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .56

ap-upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58archive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63boot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64captive-portal-page-upload . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65cd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67change-passwd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67clear . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73configure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74connect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74copy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75create-cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76crypto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86diff . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87dir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89edit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90erase . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91exit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92halt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93join-cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93l2tpv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95mint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96mkdir. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .98more . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .99no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .104pwd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105re-elect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106remote-debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107rename . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109rmdir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .110self . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .110ssh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111

iv Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112time-it . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114upgrade-abort . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115watch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .116

Chapter 4 Global Configuration CommandsGlobal Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .119

aaa-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .121aaa-tacacs-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122advanced-wips-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123br300 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124br650 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124br6511 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .125br71xx . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126association-acl-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126auto-provisioning-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .127captive portal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .128clear . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .147customize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .156device-categorization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .157dhcp-server-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .161dns-whitelist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .162do . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .165end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .175event-system-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .175firewall-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .187host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .188inline-password-encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . .188ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .189l2tpv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .191management-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .192meshpoint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .193meshpoint-qos-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .195mint-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .196nac-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .196no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .200password-encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .205profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .206radio-qos-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .209radius-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .209radius-server-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .210radius-user-pool-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .211rf-domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .212rfs4000. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .228rfs6000. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .228rfs7000. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .229role-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .229

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide v53-1002740-01

routing-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .230self . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .231smart-rf-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .232wips-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .233wlan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .234wlan-qos-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .273

Chapter 5 Common CommandsCommon Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275

clrscr . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275commit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276exit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .277help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .277no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .281revert. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283show . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .309write . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .310

Chapter 6 Show Commandsshow commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .313

show . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .315adoption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .319advanced-wips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .320ap-upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .322boot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .324captive-portal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .325captive-portal-page-upload . . . . . . . . . . . . . . . . . . . . . . . . . . . .327cdp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .328clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .330cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .330commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .331context . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .332critical-resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .334crypto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .334debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .337debugging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .339dot1x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .341event-history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .342event-system-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .343file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .344firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .344interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .347ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .349ip-access-list-stats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .354l2tpv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .355licenses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357lldp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .358mac-access-list-stats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .359mac-address-table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .360

vi Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

mint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .360noc . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .363ntp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .365password-encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .366pppoe-client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .366privilege . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .367reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .368remote-debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .368rf-domain-manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .369role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .370route-maps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .370rtls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371running-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371session-changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .375session-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377smart-rf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .380startup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .383terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .383timezone. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .384upgrade-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .384version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .385vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .386what . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .387wireless. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .388wwan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .401

Chapter 7 ProfilesProfile Config Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .404

ap-mobility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .406ap-upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .406br300 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .407arp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .408auto-learn-staging-config. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .410autoinstall. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .410bridge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .411captive-portal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .424cdp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .424cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .425configuration-persistence . . . . . . . . . . . . . . . . . . . . . . . . . . . . .427controller. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .428critical-resource . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .430crypto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .432dot1x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .457dscp-mapping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .458email-notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .459enforce-version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .460events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .461export . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .462interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .463ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .531

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide vii53-1002740-01

l2tpv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .538l3e-lite-table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .539led . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .540legacy-auto-downgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .541legacy-auto-update . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .541lldp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .542load-balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .543logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .547mac-address-table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .549memory-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .550meshpoint-device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .551meshpoint-monitor-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . .551min-misconfiguration-recovery-time . . . . . . . . . . . . . . . . . . . . .552mint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .553misconfiguration-recovery-time . . . . . . . . . . . . . . . . . . . . . . . .556neighbor-inactivity-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . .557neighbor-info-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .557no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .558noc . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .561ntp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .562power-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .563preferred-controller-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . .564preferred-tunnel-controller . . . . . . . . . . . . . . . . . . . . . . . . . . . .565radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .566rf-domain-manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .567router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .568spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .569tunnel-controller. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 571use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .572vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 574wep-shared-key-auth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .577

Device Config Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .578area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583channel-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .584contact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .584country-code. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .585dhcp-redundancy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .586floor. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .587hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .587layout-coordinates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .588license. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .589location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .590mac-name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .590neighbor-info-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .591no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .592override-wlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .595remove-override . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .596rsa-key. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .598sensor-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .599stats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .600timezone. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .601trustpoint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .602

viii Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

Chapter 8 AAA-Policyaaa-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .604

accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .605attribute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .608authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .609health-check. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .612mac-address-format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .613no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .614proxy-attribute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 617server-pooling-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .618use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .619

Chapter 9 Auto-Provisioning-Policyauto-provisioning-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .622

adopt. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .622default-adoption. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .625deny . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .625no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .627

Chapter 10 Advanced-WIPS-Policyadvanced-wips-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .630

event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .631no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .636server-listen-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .638terminate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .639use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .639

Chapter 11 Association-ACL-Policyassociation-acl-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .641

deny . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .642no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .643permit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .644

Chapter 12 Access-listip-access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .648

deny . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .648no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .653permit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .658

mac-access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .663deny . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .664no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .666permit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .668

Chapter 13 DHCP-Server-Policydhcp-server-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .672

bootp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .672dhcp-class. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .673dhcp-pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .677no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .709

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide ix53-1002740-01

option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 710ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .711

Chapter 14 Firewall-Policyfirewall-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714

alg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .715clamp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .715dhcp-offer-convert . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 716dns-snoop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 716firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 717flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .718ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .719ip-mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .724logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .726no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .727proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .734stateful-packet-inspection-12 . . . . . . . . . . . . . . . . . . . . . . . . . .734storm-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .735virtual-defragmentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .736

Chapter 15 Mint-Policymint-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .739

level. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 740mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 741udp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 741no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 742

Chapter 16 Management-Policymanagement-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 746

aaa-login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 746banner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 748ftp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 748http . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .750https . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .750idle-session-timeout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .751no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .752restrict-access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .755snmp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .757ssh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .760telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 761user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .762service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .763

Chapter 17 Radius-Policyradius-group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .765

guest . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .767policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .768rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .770no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 771

radius-server-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .773

x Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .775chase-referral . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .776crl-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .777ldap-group-verification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .777ldap-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .778local. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .780nas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .781no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .782proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .784session-resumption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .786use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .787

radius-user-pool-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .788user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .789no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .790

Chapter 18 Radio-QOS-Policyradio-qos-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .795

accelerated-multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .795admission-control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .796no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .799smart-aggregation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .801wmm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .802

Chapter 19 Role-Policyrole-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .806

default-role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .806ldap-deadperiod. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .807ldap-mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .808ldap-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .809ldap-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .810ldap-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .810no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .811user-role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .813

Chapter 20 Smart-RF-Policysmart-rf-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .836

area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .837assignable-power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .838channel-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .839channel-width. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .839coverage-hole-recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .841enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .842group-by . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .843interference-recovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .843neighbor-recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .845no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .846root-recovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .848sensitivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .849smart-ocs-monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .850

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide xi53-1002740-01

Chapter 21 WIPS-Policywips-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .856

ap-detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .857enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .858event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .858history-throttle-duration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .861interference-event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .862no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .863signature. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .867use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .879

Chapter 22 WLAN-QOS-Policywlan-qos-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .882

accelerated-multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .882classification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .883multicast-mask. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .885no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .886qos . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .888rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .889svp-prioritization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .892voice-prioritization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .892wmm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .893

Chapter 23 Interface-Radio Commandsinterface-radio instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .898

aeroscout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .900aggregation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .900airtime-fairness . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .902antenna-diversity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .903 antenna-downtilt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .904antenna-gain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .904antenna-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .905beacon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .906channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .907data-rates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .908description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .910dfs-rehome . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .910dynamic-chain-selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .911ekahau . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .911 extended-range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .913guard-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .914lock-rf-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .915max-clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .916mesh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 917meshpoint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .918no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .918non-unicast. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .922off-channel-scan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .924placement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .925power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .926preamble-short. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .927

xii Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

probe-response . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .928radio-share-mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .929 rate-selection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .930rf-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .931rifs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .932rts-threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .933shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .934sniffer-redirect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .934 stbc . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .935use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .936wireless-client. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .937wlan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .938

Chapter 24 L2TPV3-Policyl2tpv3-policy-commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .942

cookie-size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .943failover-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .944force-12-path-recovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .945hello-interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .946no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .946reconnect-attempts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .948reconnect-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .948retry-attempts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .949retry-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .950rx-window-size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .951tx-window-size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .951

l2tpv3-tunnel-commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .952establishment-criteria . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .953hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .954local-ip-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .955mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .956no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .956peer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .958router-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .960session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .961use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .962

l2tpv3-manual-session-commands . . . . . . . . . . . . . . . . . . . . . . . . .963local-cookie. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .964local-ip-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .965local-session-id. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .965mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .966no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .967peer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .968remote-cookie . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .969remote-session-id. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .970traffic-source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 971

Chapter 25 Router-Mode Commandsrouter-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 974

area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 974

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide xiii53-1002740-01

auto-cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .975default-information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 976ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .977network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .978ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .978passive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .979redistribute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .980route-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .981router-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .982vrrp-state-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .983no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .983OSPF-area-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .985

Chapter 26 Routing-Policyrouting-policy-commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .991

apply-to-local-packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .992logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .993route-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .993route-map-mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .994use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1000no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1000

Chapter 27 AAA-TACACS-Policyaaa-tacacs-policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1003

accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1004authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1006authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1008no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1010

Chapter 28 Meshpointmeshpoint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1013

allowed-vlans . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1015beacon-format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1015control-vlan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1016data-rates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1017description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1020meshid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1020neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1021no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1022root . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1025security-mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1025service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1026shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1027use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1028wpa2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1028

meshpoint-qos-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1030accelerated-multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1031no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1032rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1033

Other meshpoint commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1035

xiv Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

meshpoint-device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1035monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1036preferred. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1037root . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1038no . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1039

Chapter 29 Firewall LoggingFirewall Log Terminology and Syslog Severity Levels . . . . . . . . . .1041

Date format in Syslog messages . . . . . . . . . . . . . . . . . . . . . 1042FTP data connection log . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1042UDP packets log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1043ICMP type logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1043ICMP type logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1044 Raw IP Protocol logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1045Raw IP Protocol logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1046Firewall startup log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1046Manual time change log . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1047Firewall ruleset log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1048TCP Reset Packets log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1050ICMP Destination log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1050ICMP Packet log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1050SSH connection log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1050Allowed/Dropped Packets Log . . . . . . . . . . . . . . . . . . . . . . . .1051

Creating a First Controller Managed WLAN. . . . . . . . . . . . . . . . . 1053Assumptions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1053Design. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1053Using the Command Line Interface to Configure the WLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1054

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide xv53-1002740-01

xvi Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

About This Guide

In this chapter•Supported hardware and software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii•Document Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii•Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix•Getting technical help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xx

Supported hardware and softwareThis guide provides information on using the following Brocade wireless controllers and access points:

• Brocade Mobility RFS7000 Controller• Brocade Mobility RFS6000 Controller• Brocade Mobility RFS4000 Controller• Brocade Mobility 71XX Series Access Point• Brocade Mobility 300 Access Point• Brocade Mobility 650 Access Point• Brocade Mobility 6511 Access Point

Document ConventionsThis section describes text formatting conventions and important notice formats used in this document.

Text formattingThe narrative-text formatting conventions that are used are as follows:

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide xvii53-1002740-01

For readability, command names in the narrative portions of this guide are presented in bold; for example, show version.

NotesThe following notice statement is used in this manual.

NOTEA note provides a tip, guidance or advice, emphasizes important information, or provides a reference to related information.

Understanding command syntax

bold text Identifies command names

Identifies the names of user-manipulated GUI elements

Identifies keywords

Identifies text to enter at the GUI or CLI

italic text Provides emphasis

Identifies variables

Identifies document titles

code text Identifies CLI output

Variables are described with a short description enclosed within a ‘’ pair.For example, the command,

RFController>show interface ge 1is documented as

show interface ge • show – The command – Display information• interface – The keyword – The interface• – The variable – ge Index value

| The pipe symbol. This is used to separate the variables/keywords in a list.For example, the command

RFController> show .....is documented as

show [adoption|advanced-wips|boot|captive-portal|......]where:• show – The command• [adoption|advanced-wips|boot|captive-portal|......] – Indicates the different commands that can be

combined with the show command. However, only one of the above list can be used at a time.show adoption ...show advanced-wips ...show boot ...

xviii Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

Related publicationsThe following Brocade Communications Systems, Inc. documents supplement the information in this guide and can be located at http://www.brocade.com/ethernetproducts.

• Brocade Mobility RFS4000, RFS6000 and RFS7000 System Reference Guide - Describes configuration of the Brocade wireless controllers using the Web UI.

• Brocade Mobility RFS4000, RFS6000 and RFS7000 CLI Reference Guide (this document) - Describes the Command Line Interface (CLI) and Management Information Base (MIB) commands used to configure the Brocade wireless controllers.

If you find errors in the guide, send an e-mail to [email protected].

[] Of the different keywords and variables listed inside a ‘[‘ & ‘]’ pair, only one can be used. Each choice in the list is separated with a ‘|’ (pipe) symbol.For example, the command

RFController# clear ...is documented as

clear [arp-cache|cdp|crypto|event-history|firewall|ip|spanning-tree]

where:• clear – The command• [arp-cache|cdp|crypto|event-history|firewall|ip|spanning-tree] – Indicates that seven keywords are

available for this command and only one can be used at a time

{ } Any command/keyword/variable or a combination of them inside a ‘{‘ & ‘}’ pair is optional. All optional commands follow the same conventions as listed above. However they are displayed italicized.For example, the command

RFController> show adoption ....is documented as

show adoption info {on }Here:• show adoption info – The command. This command can also be used as

show adoption info• {on } – The optional keyword on . The

command can also be extended asshow adoption info {on }Here the keyword {on } is optional.

command / keyword The first word is always a command. Keywords are words that must be entered as is. Commands and keywords are mandatory.For example, the command,

RFController>show wirelessis documented as

show wirelesswhere:• show – The command• wireless – The keyword

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide xix53-1002740-01

http://www.brocade.com/ethernetproducts

Getting technical helpTo contact Technical Support, go to http://www.brocade.com/services-support/index.page for the latest e-mail and telephone contact information.

xx Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

http://www.brocade.com/services-support/index.page

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

Chapter

1
Introduction
In this chapter•CLI overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2•Getting context sensitive help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5•Using the no command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6•Using CLI editing features and shortcuts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

This chapter describes the commands available within a device’s Command Line Interface (CLI) structure. CLI is available for wireless controllers as well as access points (APs).

Access the CLI by using:

• A terminal emulation program running on a computer connected to the serial port on the wireless controller. The serial port is located on the front of the wireless controller.

• A Telnet session through Secure Shell (SSH) over a network.

Configuration for connecting to a Wireless Controller using a terminal emulator

If connecting through the serial port, use the following settings to configure your terminal emulator:

When a CLI session is established, complete the following (user input is in bold):

login as: administrator’s login password:

User Credentials

Use the following credentials when logging into a device for the first time:

When logging into the CLI for the first time, you are prompted to change the password.

Examples in this reference guide

Examples used in this reference guide are generic to the each supported wireless controller model and AP. Commands that are not common, are identified using the notation “Supported in the following platforms.” For an example, see below:

Bits Per Second 19200

Data Bits 8

Parity None

Stop Bit 1

Flow Control None

User Name admin

Password admin123

1

1

Supported in the following platforms:

• Wireless Controller – Brocade Mobility RFS6000

The above example indicates the command is only available for a Brocade Mobility RFS6000 model wireless controller.

CLI overviewThe CLI is used for configuring, monitoring, and maintaining the network. The user interface allows you to execute commands on supported wireless controllers and APs, using either a serial console or a remote access method.

This chapter describes basic CLI features. Topics covered include an introduction to command modes, navigation and editing features, help features and command history.

The CLI is segregated into different command modes. Each mode has its own set of commands for configuration, maintenance, and monitoring. The commands available at any given time depend on the mode you are in, and to a lesser extent, the particular model used. Enter a question mark (?) at the system prompt to view a list of commands available for each command mode/instance.

Use specific commands to navigate from one command mode to another. The standard order is: USER EXEC mode, PRIV EXEC mode and GLOBAL CONFIG mode.

FIGURE 1 Hierarchy of User Modes

Command Modes

A session generally begins in the USER EXEC mode (one of the two access levels of the EXEC mode). For security, only a limited subset of EXEC commands are available in the USER EXEC mode. This level is reserved for tasks that do not change the wireless controller configuration.

rfs7000-37FABE>The system prompt signifies the device name and the last three bytes of the device MAC address.

2 Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide53-1002740-01

1

To access commands, enter the PRIV EXEC mode (the second access level for the EXEC mode). Once in the PRIV EXEC mode, enter any EXEC command. The PRIV EXEC mode is a superset of the USER EXEC mode.

rfs7000-37FABE>enablerfs7000-37FABE#

Most of the USER EXEC mode commands are one-time commands and are not saved across wireless controller reboots. Save the command by executing ‘commit’ command. For example, the show command displays the current configuration and the clear command clears the interface.

Access the GLOBAL CONFIG mode from the PRIV EXEC mode. In the GLOBAL CONFIG mode, enter commands that set general system characteristics. Configuration modes, allow you to change the running configuration. If you save the configuration later, these commands are stored across wireless controller reboots.

Access a variety of protocol specific (or feature-specific) modes from the global configuration mode. The CLI hierarchy requires you to access specific configuration modes only through the global configuration mode.

rfs7000-37FABE# configure terminalEnter configuration commands, one per line. End with CNTL/Z.rfs7000-37FABE(config)#

You can also access sub-modes from the global configuration mode. Configuration sub-modes define specific features within the context of a configuration mode.

rfs7000-37FABE(config)# aaa-policy testrfs7000-37FABE(config-aaa-policy-test)#

Table 1 summarizes available wireless controller commands.

TABLE 1 Wireless Controller Modes and CommandsUser Exec Mode Priv Exec Mode Global Configuration Mode

ap-upgrade ap-upgrade aaa-policy

captive-portal-page-upload archive aaa-tacacs-policy

change-passwd boot advanced-wips-policy

clear captive-portal-page-upload br300

commit clear br650

connect clock br6511

disable connect br71xx

enable copy association-acl-policy

help create-cluster auto-provisioning-policy

join-cluster crypto captive-portal

l2tpv3 debug clear

logging delete customize

mint diff device

no dir device-categorization

page disable dhcp-server-policy

ping edit dns-whitelist

Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide 353-1002740-01

1

revert enable event-system-policy

service erase firewall-policy

show format help

ssh halt host

telnet help igmp-snoop-policy

terminal join-cluster inline-password-encryption

time-it l2tpv3 ip

traceroute logging l2tpv3

watch mint mac

write mkdir management-policy

clrscr more meshpoint

exit no meshpoint-qos-policy

page mint-policy

ping nac-list

pwd no

re-elect password-encryption

reload profile

remote-debug radio-qos-policy

rename radius-group

revert radius-server-policy

rmdir radius-user-pool-policy

self rf-domain

service rfs4000

show rfs6000

ssh rfs7000

terminal role-policy

time-it routing-policy

traceroute self

upgrade smart-rf-policy

upgrade-abort wips-policy

watch wlan

write wlan-qos-policy

clrscr write

exit clrscr

commit

do



1

Getting context sensitive helpEnter a question mark (?) at the system prompt to display a list of commands available for each mode. Obtain a list of arguments and keywords for any command using the CLI context-sensitive help.

Use the following commands to obtain help specific to a command mode, command name, keyword or argument:

NOTEThe system prompt varies depending on the configuration mode.

NOTEEnter Ctrl + V to use ? as a regular character and not as a character used for displaying context sensitive help. This is required when the user has to enter a URL that ends with a ?

NOTEThe escape character used through out the CLI is “\”. To enter a "\" use "\\" instead.

When using context-sensitive help, the space (or lack of a space) before the question mark (?) is significant. To obtain a list of commands that begin with a particular sequence, enter the characters followed by a question mark (?). Do not include a space. This form of help is called word help, because it completes a word.

rfs7000-37FABE#service?service Service Commands

end

exit

revert

service

show


Command Description

(prompt)# help Displays a brief description of the help system

(prompt)# abbreviated-command-entry? Lists commands in the current mode that begin with a particular character string

(prompt)# abbreviated-command-entry Completes a partial command name

(prompt)# ? Lists all commands available in the command mode

(prompt)# command ? Lists the available syntax options (arguments and keywords) for the command

(prompt)# command keyword ? Lists the next available syntax option for the command


1

rfs7000-37FABE#serviceEnter a question mark (?) (in place of a keyword or argument) to list keywords or arguments. Include a space before the “?”. This form of help is called command syntax help. It shows the keywords or arguments available based on the command/keyword and argument already entered.

rfs7000-37FABE>service ? advanced-wips Advanced WIPS service commands br300 Set global BRbr300300 parameters clear Remove cli-tables-skin Choose a formatting layout/skin for CLI tabular outputs cluster Cluster Protocol delete-offline-aps Delete Access Points that are configured but offline enable Enable radiusd loading on low memory devices force-send-config Resend configuration to the device load-balancing Wireless load-balancing service commands locator Enable leds flashing on the device radio Radio parameters radius Radius test set Set validation mode show Show running system information smart-rf Smart-RF Management Commands ssm Command related to ssm wireless Wireless commands

rfs7000-37FABE>It’s possible to abbreviate commands and keywords to allow a unique abbreviation. For example, “configure terminal” can be abbreviated as config t. Since the abbreviated command is unique, the wireless controller accepts the abbreviation and executes the command.

Enter the help command (available in any command mode) to provide the following description:

rfs7000-37FABE>help

When using the CLI, help is provided at the command line when typing '?'.

If no help is available, the help content will be empty. Backup until entering a '?'shows the help content.

There are two styles of help provided:1. Full help. Available when entering a command argument (e.g. 'show ?'). This will describe each possible argument.

2. Partial help. Available when an abbreviated argument is entered. This will display which arguments match the input (e.g. 'show ve?').

rfs7000-37FABE>

Using the no commandAlmost every command has a no form. Use no to disable a feature or function or return it to its default. Use the command without the no keyword to re-enable a disabled feature.


1

Basic conventionsKeep the following conventions in mind while working within the CLI structure:

• Use ? at the end of a command to display available sub-modes. Type the first few characters of the sub-mode and press the tab key to add the sub-mode. Continue using ? until you reach the last sub-mode.

• Pre-defined CLI commands and keywords are case-insensitive: cfg = Cfg = CFG. However (for clarity), CLI commands and keywords are displayed (in this guide) using mixed case. For example, apPolicy, trapHosts, channelInfo.

• Enter commands in uppercase, lowercase, or mixed case. Only passwords are case sensitive.

Using CLI editing features and shortcutsA variety of shortcuts and edit features are available. The following sections describe these features:

• Moving the cursor on the command line• Completing a partial command name• Command output pagination

Moving the cursor on the command lineTable 2 Shows the key combinations or sequences to move the command line cursor. Ctrl defines the control key, which must be pressed simultaneously with its associated letter key. Esc means the escape key (which must be pressed first), followed by its associated letter key. Keys are not case sensitive. Specific letters are used to provide an easy way of remembering their functions. In Table 2, bold characters indicate the relation between a letter and its function.

TABLE 2 Keystrokes DetailsKeystrokes Function Summary Function Details

Left ArroworCtrl-B

Back character Moves the cursor one character to the leftWhen entering a command that extends beyond a single line, press the Left Arrow or Ctrl-B keys repeatedly to move back to the system prompt.

Right Arrow or Ctrl-F Forward character Moves the cursor one character to the right

Esc- B Back word Moves the cursor back one word

Esc- F Forward word Moves the cursor forward one word

Ctrl-A Beginning of line Moves the cursor to the beginning of the command line

Ctrl-E End of line Moves the cursor to the end of the command line

Ctrl-D Deletes the current character

Ctrl-U Deletes text up to cursor

Ctrl-K Deletes from the cursor to end of the line

Ctrl-P Obtains the prior command from memory

Ctrl-N Obtains the next command from memory


1

Completing a partial command nameIf you cannot remember a command name (or if you want to reduce the amount of typing you have to perform), enter the first few letters of a command, then press the Tab key. The command line parser completes the command if the string entered is unique to the command mode. If your keyboard does not have a Tab key, press Ctrl-L.

The CLI recognizes a command once you have entered enough characters to make the command unique. If you enter “conf” within the privileged EXEC mode, the CLI associates the entry with the configure command, since only the configure command begins with conf.

In the following example, the CLI recognizes a unique string in the privileged EXEC mode when the Tab key is pressed:

rfs7000-37FABE# confrfs7000-37FABE# configure

When using the command completion feature, the CLI displays the full command name. The command is not executed until the Return or Enter key is pressed. Modify the command if the full command was not what you intended in the abbreviation. If entering a set of characters (indicating more than one command), the system lists all commands beginning with that set of characters.

Enter a question mark (?) to obtain a list of commands beginning with that set of characters. Do not leave a space between the last letter and the question mark (?).

For example, entering U lists all commands available in the current command mode:

rfs7000-37FABE# co? commit Commit all changes made in this session configure Enter configuration mode connect Open a console connection to a remote device copy Copy from one file to anotherrfs7000-37FABE# co

NOTEThe characters entered before the question mark are reprinted to the screen to complete the command entry.

Esc-C Converts the letter at the cursor to uppercase

Esc-L Converts the letter at the cursor to lowercase

Esc-D Deletes the remainder of a word

Ctrl-W Deletes the word up to the cursor

Ctrl-Z Returns to the root prompt

Ctrl-T Transposes the character to the left of the cursor with the character located at the cursor

Ctrl-L Clears the screen

TABLE 2 Keystrokes DetailsKeystrokes Function Summary Function Details


1

Command output paginationOutput often extends beyond the visible screen length. For cases where output continues beyond the screen, the output is paused and a

--More--prompt displays at the bottom of the screen. To resume the output, press the Enter key to scroll down one line or press the Spacebar to display the next full screen of output.

Creating profilesProfiles are sort of a ‘template’ representation of configuration. The system has:

• a default wireless controller profile• a default profile for each of the following access points:

• Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point, Brocade Mobility 71XX Access Point

To modify the default profile to assign an IP address to the management port:

rfs7000-37FABE(config)#profile rfs7000 default-rfs7000rfs7000-37FABE(config-profile-default-rfs7000)#interface me1rfs7000-37FABE(config-profile-default-rfs7000-if-me1)#ip address 172.16.10.2/24rfs7000-37FABE(config-profile-default-rfs7000-if-me1)#commitrfs7000-37FABE(config-profile-default-rfs7000)#exitrfs7000-37FABE(config)#

The following command displays a default Brocade Mobility 71XX Access Point profile:

rfs7000-37FABE(config)#profile br71xx default-br71xxrfs7000-37FABE(config-profile-default-br71xx)#rfs7000-37FABE(config-profile-default-br71xx)#show contextprofile br71xx default-br71xx autoinstall configuration autoinstall firmware crypto ikev1 policy ikev1-default isakmp-proposal default encryption aes-256 group 2 hash sha crypto ikev2 policy ikev2-default isakmp-proposal default encryption aes-256 group 2 hash sha crypto ipsec transform-set default esp-aes-256 esp-sha-hmac crypto ikev1 remote-vpn crypto ikev2 remote-vpn crypto auto-ipsec-secure interface radio1 interface radio2 interface radio3 interface ge1 ip dhcp trust qos trust dscp qos trust 802.1p interface ge2 ip dhcp trust qos trust dscp qos trust 802.1p interface vlan1--More--


1

Change the default profile by creating VLAN 150 and mapping to ge3 physical interfaceLogon to the wireless controller in config mode and follow the procedure below:

rfs7000-37FABE(config-profile-default-rfs7000)# interface vlan 150rfs7000-37FABE(config-profile-default-rfs7000-if-vlan150)# ip address 192.168.150.20/24rfs7000-37FABE(config-profile-default-rfs7000-if-vlan150)# exitrfs7000-37FABE(config-profile-default-rfs7000)# interface ge 3rfs7000-37FABE(config-profile-default-rfs7000-if-ge3)# switchport access vlan 150rfs7000-37FABE(config-profile-default-rfs7000-if-ge3)# commit write[OK]rfs7000-37FABE(config-profile-default-rfs7000-if-ge3)# show interface vlan 150Interface vlan150 is UP Hardware-type: vlan, Mode: Layer 3, Address: 00-15-70-37-FA-BE Index: 8, Metric: 1, MTU: 1500 IP-Address: 192.168.150.20/24 input packets 43, bytes 12828, dropped 0, multicast packets 0 input errors 0, length 0, overrun 0, CRC 0, frame 0, fifo 0, missed 0 output packets 0, bytes 0, dropped 0 output errors 0, aborted 0, carrier 0, fifo 0, heartbeat 0, window 0 collisions 0

Viewing configured APsTo view previously configured APs, enter the following command:

rfs7000-37FABE(config)#show wireless ap configured------------------------------------------------------------------------------------- IDX NAME MAC PROFILE RF-DOMAIN ADOPTED-BY------------------------------------------------------------------------------------- 1 br71xx-139B34 00-23-68-13-9B-34 default-br71xx default un-adopted 2 br7131-4AA708 00-04-96-4A-A7-08 default-br71xx default un-adopted 3 br71xx-889EC4 00-15-70-88-9E-C4 default-br71xx default un-adopted 4 br650-000001 00-A0-F8-00-00-01 default-br650 default un-adopted 5 br650-000010 00-A0-F8-00-00-10 default-br650 default un-adopted 6 br650-311641 00-23-68-31-16-41 default-br650 default un-adopted-------------------------------------------------------------------------------------rfs7000-37FABE(config)#

Remote administrationA terminal server may function in remote administration mode if either the terminal services role is not installed on the machine or the client used to invoke the session has enabled the admin wireless controller.


1

• A terminal emulation program running on a computer connected to the serial port on the wireless controller. The serial port is located on the front of the wireless controller.

• A Telnet session through a Secure Shell (SSH) over a network. The Telnet session may or may not use SSH depending on how the wireless controller is configured. Brocade recommends using SSH for remote administration tasks.

Configuring Telnet for management accessLogin through the serial console. Perform the following:

1. A session generally begins in the USER EXEC mode (one of the two access levels of the EXEC mode).

2. Access the GLOBAL CONFIG mode from the PRIV EXEC mode.

rfs7000-37FABE> enrfs7000-37FABE# configure terminalEnter configuration commands, one per line. End with CNTL/Z.

3. Go to ‘default-management-policy’ mode.

rfs7000-37FABE(config)# management-policy ?rfs7000-37FABE(config)# management-policy defaultrfs7000-37FABE(config-management-policy-default)#

4. Enter Telnet and the port number at the command prompt. The port number is optional. The default port is 23. Commit the changes after every command. Telnet is enabled.

rfs7000-37FABE(config-management-policy-default)# telnetrfs7000-37FABE(config-management-policy-default)# commit write

5. Connect to the wireless controller through Telnet using its configured IP address. Use the following credentials when logging on to the device for the first time:

When logging into the wireless controller for the first time, you are prompted to change the password.

To change user credentials:

1. Enter the username, password, role and access details.

rfs7000-37FABE(config-management-policy-default)#user testuser password symbol role helpdesk access allrfs7000-37FABE(config-management-policy-default)# commitrfs7000-37FABE(config-management-policy-default)#show contextmanagement-policy default telnet http server https server ssh user admin password 1 ba7da2bf2f7945af1d3ae1b8b762b541bd5bac1f80a54cd4488f38ed44b91ecd role superuser access all user operator password 1 0be97e9e30d29dfc4733e7c5f74a7be54570c2450e855cea1a696b0558a40401 role monitor access all

Brocade Mobility RFS4000, RFS6000, and RFS7000 · 53-1002740-01 29 November 2012 ® Brocade Mobility RFS4000, RFS6000, and RFS7000 CLI Reference Guide Supporting software release

Documents