CLI Guide
Page 18
... the WAN port. Mobile units (MUs) associate with Shared Key • KeyGuard • WPA/WPA2-TKIP • WPA2/CCMP (802.11i) 1.2.1.3 VPN Security Virtual Private Networks (VPNs) are placed behind a user-configurable firewall that provides stateful packet inspection. Four of these ports provide IEEE 802.3af-compliant Power over Ethernet (PoE) support for devices that use encryption and tunneling to give users remote access to a secure LAN. WAN port. The WS2000 Wireless Switch acts as a robust VPN gateway. This...
... the WAN port. Mobile units (MUs) associate with Shared Key • KeyGuard • WPA/WPA2-TKIP • WPA2/CCMP (802.11i) 1.2.1.3 VPN Security Virtual Private Networks (VPNs) are placed behind a user-configurable firewall that provides stateful packet inspection. Four of these ports provide IEEE 802.3af-compliant Power over Ethernet (PoE) support for devices that use encryption and tunneling to give users remote access to a secure LAN. WAN port. The WS2000 Wireless Switch acts as a robust VPN gateway. This...
CLI Guide
Page 19
.../sec. Use Symbol's Null-Modem cable (Part No. 25-632878-0) for connection to a DSL modem, cable modem, or any other indicating whether there is being delivered over Ethernet" (PoE) support; This wireless switch can connect directly to a cable or DSL modem, and can also connect to other wide area networks through a Layer 2/3 device (such as an Access Port). (See the WS 2000 Wireless Switch LED explanation for more information on the port. The four LAN ports with PoE...
.../sec. Use Symbol's Null-Modem cable (Part No. 25-632878-0) for connection to a DSL modem, cable modem, or any other indicating whether there is being delivered over Ethernet" (PoE) support; This wireless switch can connect directly to a cable or DSL modem, and can also connect to other wide area networks through a Layer 2/3 device (such as an Access Port). (See the WS 2000 Wireless Switch LED explanation for more information on the port. The four LAN ports with PoE...
CLI Guide
Page 49
.... Enables or disables legacy mode support for the Access Port with (1-12) with (150 characters) Example: admin(network.ap)>set short-pre enable admin(network.ap)>set shor 1 enable admin(network.ap)>set name 1 BigOffice admin(network.ap)>set dtim 1 25 admin(network.ap)>set loc 1 BigBldg admin(network.ap)>show ap 1 ap name ap location ap mac address ap serial number ap radio type adopted by : BigOffice : BigBldg : 00A0F8565656 : 00A0F8565656 : 802.11 B : WLAN1 ap indoor use ap channel ap radio power antenna gain rf power antenna type...
.... Enables or disables legacy mode support for the Access Port with (1-12) with (150 characters) Example: admin(network.ap)>set short-pre enable admin(network.ap)>set shor 1 enable admin(network.ap)>set name 1 BigOffice admin(network.ap)>set dtim 1 25 admin(network.ap)>set loc 1 BigBldg admin(network.ap)>show ap 1 ap name ap location ap mac address ap serial number ap radio type adopted by : BigOffice : BigBldg : 00A0F8565656 : 00A0F8565656 : 802.11 B : WLAN1 ap indoor use ap channel ap radio power antenna gain rf power antenna type...
CLI Guide
Page 51
... mode configuration for the portal (1-12). Shows a list of Access Ports and their status. Shows SIP statistics for the switch Example admin(network.ap)>show ap 1 ap name ap location ap mac address ap serial number ap radio type adopted by : BigOffice : BigBldg : 00A0F8565656 : 00A0F8565656 : 802.11 B : WLAN1 ap indoor use ap channel ap radio power antenna gain rf power : indoor/outdoor : 1 : 4 dB : 0 dBi : 3 mW antenna type ap diversity : external : full basic rates supported...
... mode configuration for the portal (1-12). Shows a list of Access Ports and their status. Shows SIP statistics for the switch Example admin(network.ap)>show ap 1 ap name ap location ap mac address ap serial number ap radio type adopted by : BigOffice : BigBldg : 00A0F8565656 : 00A0F8565656 : 802.11 B : WLAN1 ap indoor use ap channel ap radio power antenna gain rf power : indoor/outdoor : 1 : 4 dB : 0 dBi : 3 mW antenna type ap diversity : external : full basic rates supported...
CLI Guide
Page 55
... use ap channel ap channel mode ap radio power : indoor only : 36 : random : 17 dBm : 50 mW ap diversity : full basic rates supported rates : 6 12 24 : 6 9 12 18 24 36 48 54 rts threshold : 2341 beacon interval : 100 BSSID | DTIM period 1 | 10 2 | 10 3 | 10 4 | 10 short preamble primary wlan index : disable : wlan1 admin(network.ap.default)> Related Commands show default Displays the default AP settings...
... use ap channel ap channel mode ap radio power : indoor only : 36 : random : 17 dBm : 50 mW ap diversity : full basic rates supported rates : 6 12 24 : 6 9 12 18 24 36 48 54 rts threshold : 2341 beacon interval : 100 BSSID | DTIM period 1 | 10 2 | 10 3 | 10 4 | 10 short preamble primary wlan index : disable : wlan1 admin(network.ap.default)> Related Commands show default Displays the default AP settings...
CLI Guide
Page 77
...the radio with the index [enable|disable] (1-12). Syntax set Network AP Mesh Commands Sets the mesh related parameters. Example admin(network.ap.mesh)> set client 1 enable admin(network.ap.mesh)> show 1 "Mode" "WLAN" "Base Auto Selection" "Max Clients" Client Only WLAN1 Enabled N/A admin(network.ap.mesh)> set base 1 enable admin(network.ap.mesh)> show 1 "Mode" "WLAN" "Base Auto Selection" "Max Clients" Base and Client WLAN1 Enabled 6 admin(network.ap.mesh)> set wlan 1 3 admin(network.ap.mesh)> show 1 "Mode" "WLAN" "Base Auto Selection" "Max Clients...
...the radio with the index [enable|disable] (1-12). Syntax set Network AP Mesh Commands Sets the mesh related parameters. Example admin(network.ap.mesh)> set client 1 enable admin(network.ap.mesh)> show 1 "Mode" "WLAN" "Base Auto Selection" "Max Clients" Client Only WLAN1 Enabled N/A admin(network.ap.mesh)> set base 1 enable admin(network.ap.mesh)> show 1 "Mode" "WLAN" "Base Auto Selection" "Max Clients" Base and Client WLAN1 Enabled 6 admin(network.ap.mesh)> set wlan 1 3 admin(network.ap.mesh)> show 1 "Mode" "WLAN" "Base Auto Selection" "Max Clients...
CLI Guide
Page 115
... used as the top end of outbound firewall policy to (1-65535). Sets logging of the range. Example admin(network.fw.policy.outb)>set [saddr|daddr|tp|sport|dport|nat|action|logging] Parameters saddr daddr tp sport [] dport [] nat action [allow 255.255.255.224 255.255.255.0 201 nat port 0 gre 20:21 200: 0.0.0.0 allow |deny] logging [enable|disable] Sets source IP address and IP netmask for outbound firewall...
... used as the top end of outbound firewall policy to (1-65535). Sets logging of the range. Example admin(network.fw.policy.outb)>set [saddr|daddr|tp|sport|dport|nat|action|logging] Parameters saddr daddr tp sport [] dport [] nat action [allow 255.255.255.224 255.255.255.0 201 nat port 0 gre 20:21 200: 0.0.0.0 allow |deny] logging [enable|disable] Sets source IP address and IP netmask for outbound firewall...
CLI Guide
Page 121
..., w = WAN). • - The source subnet. (one of s1 = subnet1, s2 = subnet2, s3 = subnet3, [enable|disable|d s4 = subnet4, s5 = subnet5, s6 = subnet6). The source subnet. (one of s1 = subnet1, s2 = subnet2, s3 = subnet3, [enable|disable] s4 = subnet4, s5 = subnet5, s6 = subnet6). • - Network CLI Commands Reference 3-85 3.16.4 Network Firewall Submap set Command set Network Firewall Submap Commands Sets a default subnet access rule to allow (log enabled) admin(network.fw.submap)> Example admin(network.fw...
..., w = WAN). • - The source subnet. (one of s1 = subnet1, s2 = subnet2, s3 = subnet3, [enable|disable|d s4 = subnet4, s5 = subnet5, s6 = subnet6). The source subnet. (one of s1 = subnet1, s2 = subnet2, s3 = subnet3, [enable|disable] s4 = subnet4, s5 = subnet5, s6 = subnet6). • - Network CLI Commands Reference 3-85 3.16.4 Network Firewall Submap set Command set Network Firewall Submap Commands Sets a default subnet access rule to allow (log enabled) admin(network.fw.submap)> Example admin(network.fw...
CLI Guide
Page 124
... Wireless Switch System Reference Guide 3.17.1 Network LAN set Command set Network LAN Commands Sets the LAN parameters for the subnets. Unassigns a port with = none. Sets the default gateway for the subnet (1-6) to 7 characters). Assigns port (1-6) to the subnet indicated by (none, s1, s2, s3, s4, s5, s6). NOTE: STP is applied on mesh networks even if it is disabled through the set command. Unassigns a WLAN with = none. Example admin(network.lan)>show lan 1 subnet name subnet interface ip address network mask ports wlans : Subnet1 : enable...
... Wireless Switch System Reference Guide 3.17.1 Network LAN set Command set Network LAN Commands Sets the LAN parameters for the subnets. Unassigns a port with = none. Sets the default gateway for the subnet (1-6) to 7 characters). Assigns port (1-6) to the subnet indicated by (none, s1, s2, s3, s4, s5, s6). NOTE: STP is applied on mesh networks even if it is disabled through the set command. Unassigns a WLAN with = none. Example admin(network.lan)>show lan 1 subnet name subnet interface ip address network mask ports wlans : Subnet1 : enable...
CLI Guide
Page 126
...Enables or disables Spanning Tree Protocol for a specified subnet (LAN). 3-90 WS2000 Wireless Switch System Reference Guide 3.17.2 Network LAN show Command show [lan|stp] Parameters lan stp Shows the settings for the subnet (1-4). Shows the STP status for the device Example admin(network.lan)>show lan 1 subnet name subnet interface ip address network mask ports wlans : Subnet1 : enable : 192.168.0.1 : 255.255.255.0 : port1 port2 port3 port4 port5 port6 : wlan1 admin(network.lan)>set name 1 NewName admin(network.lan)>set port 4 none admin(network.lan)>set wlan 2 s1 admin(network...
...Enables or disables Spanning Tree Protocol for a specified subnet (LAN). 3-90 WS2000 Wireless Switch System Reference Guide 3.17.2 Network LAN show Command show [lan|stp] Parameters lan stp Shows the settings for the subnet (1-4). Shows the STP status for the device Example admin(network.lan)>show lan 1 subnet name subnet interface ip address network mask ports wlans : Subnet1 : enable : 192.168.0.1 : 255.255.255.0 : port1 port2 port3 port4 port5 port6 : wlan1 admin(network.lan)>set name 1 NewName admin(network.lan)>set port 4 none admin(network.lan)>set wlan 2 s1 admin(network...
CLI Guide
Page 134
... Wireless Switch System Reference Guide option-189 option-43 Sets the IP addresses and ports numbers for WIAP enabled switches for the subnet (1-6). (max 63 characters) must be in the format a.b.c.d:xx and multiple addresses must be separated by a comma. Example admin(network.lan.dhcp)>set dns 1 1 209.160.0.18 admin(network.lan.dhcp)>set dns 1 2 209.160.0.218 admin(network.lan.dhcp)>show dhcp 1 dhcp mode : server default gateway : 192.168.0.1 primary dns server : 209.160.0.18 secondary dns server : 209.160.0.218 wins server : 192.168.0.254 starting ip address...
... Wireless Switch System Reference Guide option-189 option-43 Sets the IP addresses and ports numbers for WIAP enabled switches for the subnet (1-6). (max 63 characters) must be in the format a.b.c.d:xx and multiple addresses must be separated by a comma. Example admin(network.lan.dhcp)>set dns 1 1 209.160.0.18 admin(network.lan.dhcp)>set dns 1 2 209.160.0.218 admin(network.lan.dhcp)>show dhcp 1 dhcp mode : server default gateway : 192.168.0.1 primary dns server : 209.160.0.18 secondary dns server : 209.160.0.218 wins server : 192.168.0.254 starting ip address...
CLI Guide
Page 135
... 3.18.5 Network LAN DHCP show Command show Network LAN DHCP Commands Shows DHCP parameter settings for subnet (1-6). Example admin(network.lan.dhcp)>set dns 1 2 192.168.0.242 admin(network.lan.dhcp)>set dns 1 2 192.168.0.1 admin(network.lan.dhcp)>show dhcp Displays the DHCP parameter settings for specified subnets. Syntax show dhcp Parameters show dhcp 1 dhcp mode : server ddns mode : disable user class : default gateway : 192.168.0.50 primary dns server : 192.168.10.1 secondary dns server : 192.168.0.1 wins server : 192.168.0.254 starting ip address : 192...
... 3.18.5 Network LAN DHCP show Command show Network LAN DHCP Commands Shows DHCP parameter settings for subnet (1-6). Example admin(network.lan.dhcp)>set dns 1 2 192.168.0.242 admin(network.lan.dhcp)>set dns 1 2 192.168.0.1 admin(network.lan.dhcp)>show dhcp Displays the DHCP parameter settings for specified subnets. Syntax show dhcp Parameters show dhcp 1 dhcp mode : server ddns mode : disable user class : default gateway : 192.168.0.50 primary dns server : 192.168.10.1 secondary dns server : 192.168.0.1 wins server : 192.168.0.254 starting ip address : 192...
CLI Guide
Page 140
wireless-trunking Sets the wireless trunking mode (enable/disable) for lan (1-6). 3-104 WS2000 Wireless Switch System Reference Guide 3.19.2 Network LAN Bridge set Command set wireless-trunking 1 enable admin(network.lan.bridge)>show ** LAN1 Bridge Configuration ** Bridge Priority Hello Time (seconds) Message Age Time (seconds) Forward Delay Time (seconds) : 5 : 2 : 20 : 15 Entry Ageout Time (seconds) : 60 Wireless Trunking : enable ** LAN2 Bridge Configuration ** Bridge Priority Hello Time (seconds) Message Age Time (seconds) Forward Delay Time (seconds) : 32768 : 2 : 20 : 15...
wireless-trunking Sets the wireless trunking mode (enable/disable) for lan (1-6). 3-104 WS2000 Wireless Switch System Reference Guide 3.19.2 Network LAN Bridge set Command set wireless-trunking 1 enable admin(network.lan.bridge)>show ** LAN1 Bridge Configuration ** Bridge Priority Hello Time (seconds) Message Age Time (seconds) Forward Delay Time (seconds) : 5 : 2 : 20 : 15 Entry Ageout Time (seconds) : 60 Wireless Trunking : enable ** LAN2 Bridge Configuration ** Bridge Priority Hello Time (seconds) Message Age Time (seconds) Forward Delay Time (seconds) : 32768 : 2 : 20 : 15...
CLI Guide
Page 172
... Wireless Switch System Reference Guide 3.26.3 Network WAN TrunkIPFPolicy set Command set Network WAN TrunkIPFPolicy Commands Sets the different Trunk Port IP Filter Policy configuration settings Syntax set [ipf-mode|default] set ipf-mode set default outgoing deny admin(network.wan.trunkipfpolicy)>show Filter-Name Direction Action IP Filter Mode : enable Default Incoming Action : allow Default Outgoing Action : allow admin(network.wan.trunkipfpolicy)>set default [incoming|outgoing] [allow|deny] Parameters ipf-mode default [incoming|outgoing] [allow|deny] Enables...
... Wireless Switch System Reference Guide 3.26.3 Network WAN TrunkIPFPolicy set Command set Network WAN TrunkIPFPolicy Commands Sets the different Trunk Port IP Filter Policy configuration settings Syntax set [ipf-mode|default] set ipf-mode set default outgoing deny admin(network.wan.trunkipfpolicy)>show Filter-Name Direction Action IP Filter Mode : enable Default Incoming Action : allow Default Outgoing Action : allow admin(network.wan.trunkipfpolicy)>set default [incoming|outgoing] [allow|deny] Parameters ipf-mode default [incoming|outgoing] [allow|deny] Enables...
CLI Guide
Page 178
...3-142 WS2000 Wireless Switch System Reference Guide 3.27.4 Network WAN NAT set Command set [inb|outb|type] Parameters inb [mode|ip] Sets the inbound NAT parameters. • mode - Sets the inbound NAT mode for WAN address index (1-8) to one of enable or disable. • ip - Example admin(network.wan.nat)>set type 1 1-to-1 admin(network.wan.nat)>set outb ip 1 209.239.44.36 admin(network.wan.nat)>set inb mode 1 enable admin(network.wan.nat)>show nat 1 nat type one to one nat ip address port forwarding mode port forwarding ip address one to many NAT mapping entries where...
...3-142 WS2000 Wireless Switch System Reference Guide 3.27.4 Network WAN NAT set Command set [inb|outb|type] Parameters inb [mode|ip] Sets the inbound NAT parameters. • mode - Sets the inbound NAT mode for WAN address index (1-8) to one of enable or disable. • ip - Example admin(network.wan.nat)>set type 1 1-to-1 admin(network.wan.nat)>set outb ip 1 209.239.44.36 admin(network.wan.nat)>set inb mode 1 enable admin(network.wan.nat)>show nat 1 nat type one to one nat ip address port forwarding mode port forwarding ip address one to many NAT mapping entries where...
CLI Guide
Page 187
... Sets the IKE Pre-Shared Key for SPD (1 to 13 characters) to . can be (a.b.c.d). Set this value to 0.0.0.0 to support tunneling to VPN peer which is set auto-initiate-interval Parameters ike myidtype Sets the Local ID type for IKE authentication for SPD (1 to 13 characters) to . This value is not required when the ID type is a DHCP client. ike opmode Sets the Operation Mode...
... Sets the IKE Pre-Shared Key for SPD (1 to 13 characters) to . can be (a.b.c.d). Set this value to 0.0.0.0 to support tunneling to VPN peer which is set auto-initiate-interval Parameters ike myidtype Sets the Local ID type for IKE authentication for SPD (1 to 13 characters) to . This value is not required when the ID type is a DHCP client. ike opmode Sets the Operation Mode...
CLI Guide
Page 214
... : 101 wlan mode : enable subnet : s1 vlan_id : 1 enc type : none auth type : none voice prioritization : enable disallow mu to W EP104. admin(network.wlan)>set auth 1 kerberos Kerberos requires WEP 104 or Keyguard. This in milliseconds : 2000 handshake retry count : 3 admin(network.wlan)> Enables or disables secure beacon for the WLAN (1-8). The encryption type has been changed to mu : disable answer broadcast ess : disable secure beacon mode : disable default mu acl mode : allow all default ap adopt mode : allow all multicast address 1 : 01005E000000...
... : 101 wlan mode : enable subnet : s1 vlan_id : 1 enc type : none auth type : none voice prioritization : enable disallow mu to W EP104. admin(network.wlan)>set auth 1 kerberos Kerberos requires WEP 104 or Keyguard. This in milliseconds : 2000 handshake retry count : 3 admin(network.wlan)> Enables or disables secure beacon for the WLAN (1-8). The encryption type has been changed to mu : disable answer broadcast ess : disable secure beacon mode : disable default mu acl mode : allow all default ap adopt mode : allow all multicast address 1 : 01005E000000...
CLI Guide
Page 326
4-16 WS2000 Wireless Switch System Reference Guide 4.4.5 System Config set Command set ap300 [file|path|max-size|legacy-mode] Parameters server user passwd file cfgpath fw [ file | path | boot [on-board-flash| compact-flash]| active-partition [primary|secondary] Sets the FTP/TFTP server IP address to 39 characters). Sets the active partition on the compact flash card to either the on board flash (on-board-flash) or the compact flash card (compactflash) attached to the WS 2000 Wireless Switch. •...
4-16 WS2000 Wireless Switch System Reference Guide 4.4.5 System Config set Command set ap300 [file|path|max-size|legacy-mode] Parameters server user passwd file cfgpath fw [ file | path | boot [on-board-flash| compact-flash]| active-partition [primary|secondary] Sets the FTP/TFTP server IP address to 39 characters). Sets the active partition on the compact flash card to either the on board flash (on-board-flash) or the compact flash card (compactflash) attached to the WS 2000 Wireless Switch. •...
CLI Guide
Page 328
... Wireless Switch System Reference Guide 4.4.6 System Config show Command show all ftp/tftp server ip address : 157.235.208.196 ftp user name : admin ftp password : ******** cfg filename : v23.26b.bin config filepath : /home/ftp/admin/2k/ firmware filepath : /home/ftp/admin/2k/ firmware filename : v23.26b.bin sensor firmware filepath : /home/ftp/admin/2k/ sensor firmware filename : leo_sensor.bin max size of sensor firmware file : 512000 import enc admin password mode : disable boot source device : on-board-flash...
... Wireless Switch System Reference Guide 4.4.6 System Config show Command show all ftp/tftp server ip address : 157.235.208.196 ftp user name : admin ftp password : ******** cfg filename : v23.26b.bin config filepath : /home/ftp/admin/2k/ firmware filepath : /home/ftp/admin/2k/ firmware filename : v23.26b.bin sensor firmware filepath : /home/ftp/admin/2k/ sensor firmware filename : leo_sensor.bin max size of sensor firmware file : 512000 import enc admin password mode : disable boot source device : on-board-flash...
CLI Guide
Page 394
4-84 WS2000 Wireless Switch System Reference Guide cf-thresh min-pkt dos-rate-limit rate • admin-passwd-change trap • dyndns-update - Admin password change - Dynamic DNS update trap • wids-mu - Compact Flash memory trap • min-pkt - packets greater than (0 - 108.00) MBPS. • pct-nu - bit speed less than (0 - 9999.99). • mbps - The scope where the rate applies to ((0 - 2147483647...
4-84 WS2000 Wireless Switch System Reference Guide cf-thresh min-pkt dos-rate-limit rate • admin-passwd-change trap • dyndns-update - Admin password change - Dynamic DNS update trap • wids-mu - Compact Flash memory trap • min-pkt - packets greater than (0 - 108.00) MBPS. • pct-nu - bit speed less than (0 - 9999.99). • mbps - The scope where the rate applies to ((0 - 2147483647...