01 fundamentals configuration guide book
DESCRIPTION
Manual Access ControllersTRANSCRIPT
H3C WX Series Access Controllers Fundamentals Configuration Guide
Hangzhou H3C Technologies Co., Ltd. http://www.h3c.comDocument Version: 6W105-20101124
Copyright 2008-2010, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights ReservedNo part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C,
, Aolynk,
, H3Care,
, TOP G,
, IRF, NetPilot, Neocean, NeoVTL,
SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners.
NoticeThe information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.
PrefaceThe H3C WX series documentation set describes the software features for the H3C WX Series Access Controllers and guides you through the software configuration procedures. The configuration guides also provide configuration examples to help you apply the software features to different network scenarios. The Fundamentals Configuration Guide describes CLI, logging in to the AC, device management, FTP and TFTP, user interface, file management, basic system configuration, HTTP, and hotfix configurations. This preface includes: Audience Conventions About the H3C WX Series Documentation Set Obtaining Documentation Technical Support Documentation Feedback
AudienceThis documentation is intended for: Network planners Field technical support and servicing engineers Network administrators working with the WX series
ConventionsThis section describes the conventions used in this documentation set.
Command conventionsConvention Boldface italic [] { x | y | ... } [ x | y | ... ] { x | y | ... } * Description Bold text represents commands and keywords that you enter literally as shown. Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none. Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one.
Convention [ x | y | ... ] * & #
Description Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you may select multiple choices or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times. A line that starts with a pound (#) sign is comments.
GUI conventionsConvention Boldface > Description Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK. Multi-level menus are separated by angle brackets. For example, File > Create > Folder.
SymbolsConvention Description Means reader be extremely careful. Improper operation may cause bodily injury. Means reader be careful. Improper operation may cause data loss or damage to equipment. Means an action or information that needs special attention to ensure successful configuration or good performance. Means a complementary description. Means techniques helpful for you to make configuration with ease.
Network topology iconsConvention Description Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, an access controller module, or a switching engine on a unified switch.
Represents an access point.
Represents a mesh access point.
Convention
Description
Represents omnidirectional signals.
Represents directional signals.
About the H3C WX Series Documentation SetThe H3C WX series documentation set includes:Category Documents WX3000 Series Unified Wired and Wireless Switches Brochure Product description and specifications WX5000 Series Access Controllers Brochure WX6000 Series Access Controllers Brochure LSWM1WCM10 Access Module Card Manual LSWM1WCM20 Access Module Card Manual Hardware specifications and installation LSRM1WCM2A1 Access Module Card Manual LSQM1WCMB0 Access Module Installation Manual LSBM1WCM2A0 Access Module Installation Manual Controller Controller Controller Controller Controller Guide you through hardware specifications and installation methods to help you install your AC. Provide the hardware specifications of the cards, and describe how to install and remove the cards. Describe product specifications and benefits. Purposes
WX Series Access Controllers Getting Started Guides WX Series Access Controllers Configuration Guides WX Series Access Controllers Command References WX Series Access Controllers Web-based Configuration Guides WX3000 Series Release Notes Unified Switches
Guide you through the main functions of your AC, and describes how to install and log in to your AC, perform basic configurations, maintain software, and troubleshoot your AC. Describe software features and configuration procedures. Provide a quick reference to all available commands. Describes configuration procedures through the web interface.
Software configuration
Operations and maintenance
WX5002 Series Access Controllers Release Notes WX5004 Series Access Controllers Release Notes WX6103 Series Access Controllers Release Notes
Provide information about the product release, including the version history, hardware and software compatibility matrix, version upgrade information, technical support information, and software upgrading.
Obtaining DocumentationYou can access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com. Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support & Documents > Technical Documents] Provides hardware installation, software upgrading, getting started, and software feature configuration and maintenance documentation. [Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version.
Technical [email protected] http://www.h3c.com
Documentation FeedbackYou can e-mail your comments about product documentation to [email protected]. We appreciate your comments.
Read Compatibility Matrixes before using an H3C WX series access controller. Support of the H3C WX series access controllers for features and commands may vary by AC model. For more information, see Feature Matrixes and Command Matrixes in Compatibility Matrixes. The term AC in this document refers to H3C access controllers, access controller modules, and H3C WX series unified switches' access controller engines. The interface types and the number of interfaces vary by AC model. This document uses GE interfaces to show how to configure Ethernet interfaces. The models listed in this manual are not applicable to all regions. Please consult your local sales office for the models applicable to your region.
Table of Contents1 Applicable Models and Software Versions 1-1 2 Typical Network Scenarios2-1 AC Networking 2-1 Access Controller Module Networking 2-1 Unified Switch Networking 2-2 3 Feature Matrixes 3-1 Feature Matrix for the WX5000 Series3-1 Feature Matrix for the WX6000 Series3-7 Feature Matrix for the WX3000 Series3-11 4 Command Matrixes4-1 Command Matrix for the WX5000 Series 4-1 Command Matrix for the WX6000 Series 4-15 Command Matrix for the WX3000 Series 4-24 5 CLI Configuration 5-1 What Is CLI? 5-1 Entering the CLI 5-1 Entering CLI Through the Console Port 5-2 Entering CLI Through Telnet 5-6 CLI Descriptions5-7 Command Conventions 5-7 CLI View Description 5-8 Using the CLI 5-9 Using the CLI Online Help5-9 Command Line Error Information 5-10 Typing and Editing Commands 5-11 Displaying and Executing History Commands 5-11 Undo Form of a Command5-12 Controlling CLI Display 5-12 Configuring the CLI 5-15 Configuring CLI Hotkeys5-15 Configuring Command Aliases5-16 Synchronous Information Output5-17 Configuring Command Levels 5-18 Saving Configurations 5-19 6 FTP Configuration 6-1 FTP Overview 6-1 Introduction to FTP 6-1 Operation of FTP 6-1 Configuring the FTP Client6-3i
Establishing an FTP Connection 6-3 Operating the Directories on an FTP Server 6-4 Operating the Files on an FTP Server6-5 Using Another Username to Log In to an FTP Server 6-6 Maintaining and Debugging an FTP Connection 6-6 Terminating an FTP Connection 6-6 FTP Client Configuration Example 6-7 Configuring the FTP Server 6-8 Configuring FTP Server Operating Parameters 6-8 Configuring Authentication and Authorization on the FTP Server 6-9 FTP Server Configuration Example6-10 Displaying and Maintaining FTP 6-12 7 TFTP Configuration 7-1 TFTP Overview 7-1 Introduction to TFTP7-1 Operation of TFTP7-1 Configuring the TFTP Client 7-2 Displaying and Maintaining the TFTP Client7-3 TFTP Client Configuration Example 7-3 8 Logging In to an Access Controller Product 8-1 Logging In to an Access Controller Product8-1 Introduction to the User Interface8-1 Supported User Interfaces 8-1 User Interface Number 8-1 Common User Interface Configuration8-2 9 Logging In Through the Console Port9-1 Introduction 9-1 Setting Up the Connection to the Console Port 9-1 Console Port Login Configuration 9-4 Configuring Common Settings for Console Login 9-4 Console Port Login Configurations for Different Authentication Modes9-5 Configuring None Authentication for Console Port Login 9-6 Configuration Procedure9-6 Configuration Example 9-8 Configuring Password Authentication for Console Port Login9-9 Configuration Procedure9-9 Configuration Example 9-10 Configuring Scheme Authentication for Console Port Login 9-12 Configuration Procedure9-12 Configuration Example 9-14 10 Logging In Through Telnet 10-1 Introduction 10-1 Establishing a Telnet Connection 10-2
ii
Telnetting to an Access Controller from a Terminal 10-2 Telnetting to Another Access Controller from the Current One10-4 Common Configuration10-4 Telnet Configurations for Different Authentication Modes10-5 Configuring None Authentication for Telnet Login 10-6 Configuration Procedure10-6 Configuration Example 10-7 Configuring Password Authentication for Telnet Login10-8 Configuration Procedure10-8 Configuration Example 10-9 Configuring Scheme Authentication for Telnet Login 10-11 Configuration Procedure10-11 Configuration Example 10-13 11 Logging In Through the Web-Based Network Management System 11-1 Introduction 11-1 Setting Up a Web Configuration Environment 11-2 12 Logging In Through an NMS 12-1 Introduction 12-1 Connection Establishment 12-1 13 Controlling Login Users13-1 Introduction 13-1 Controlling Telnet Users 13-1 Prerequisites13-1 Controlling Telnet Users by SSIDs of Clients13-2 Controlling Telnet Users by Source IP Addresses 13-2 Controlling Telnet Users by Source and Destination IP Addresses13-3 Controlling Telnet Users by Source MAC Addresses 13-3 Configuration Example 13-4 Controlling Network Management Users by Source IP Addresses 13-5 Prerequisites13-5 Controlling Network Management Users by Source IP Addresses13-5 Configuration Example 13-6 14 File Management14-1 Managing Files14-1 Filename Formats14-1 Directory Operations 14-2 Displaying Directory Information 14-2 Displaying the Current Working Directory 14-2 Changing the Current Working Directory 14-2 Creating a Directory14-2 Removing a Directory 14-2 File Operations14-3 Displaying File Information 14-3
iii
Displaying the Contents of a File14-3 Renaming a File 14-3 Copying a File14-4 Moving a File 14-4 Deleting a File14-4 Restoring a File from the Recycle Bin 14-4 Emptying the Recycle Bin 14-4 Batch Operations 14-5 Storage Medium Operations 14-5 Managing the Space of a Storage Medium 14-5 Mounting/Unmounting a Storage Medium14-6 Setting Prompt Modes14-6 Example for File Operations 14-7 15 Configuration File Management15-1 Configuration File Overview15-1 Types of Configuration 15-1 Format and Content of a Configuration File 15-1 Coexistence of Multiple Configuration Files 15-2 Startup with the Configuration File 15-2 Saving the Current Running Configuration 15-2 Introduction15-2 Encrypting a Configuration File 15-2 Modes in Saving the Configuration 15-3 Setting Configuration Rollback15-4 Configuration Rollback 15-4 Configuration Task List15-4 Configuring Parameters for Saving the Current Running Configuration 15-5 Enabling Automatic Saving of the Running Configuration 15-6 Manually Saving the Current Running Configuration 15-6 Setting Configuration Rollback 15-7 Specifying a Startup Configuration File to Be Used at the Next System Startup 15-7 Backing Up the Startup Configuration File15-8 Deleting a Startup Configuration File to Be Used at the Next Startup15-8 Restoring a Startup Configuration File15-9 Displaying and Maintaining Device Configuration 15-9 16 Device Management 16-1 Device Management Overview 16-1 Device Management Configuration Task List 16-1 Registering the Software16-2 Rebooting the AC16-2 Configuring the Scheduled Automatic Execution Function16-3 Upgrading AC Software 16-4 AC Software Overview 16-4 Upgrading the Boot ROM Program Through Command Lines 16-5iv
Upgrading the Boot File Through Command Lines16-6 Configuring Temperature Alarm Thresholds for a Board16-6 Clearing the 16-bit Interface Indexes Not Used in the Current System16-6 Displaying and Maintaining Device Management Configuration 16-7 Device Management Configuration Examples16-8 Remote Scheduled Automatic Upgrade Configuration Example 16-8 17 User Interface Configuration 17-1 User Interface Overview17-1 Brief Introduction 17-1 Users and User Interfaces17-2 Numbering User Interfaces 17-2 User Interface Configuration Task List17-2 Configuring Asynchronous Serial Interface Attributes 17-3 Configuring Terminal Attributes 17-4 Configuring the auto-execute Command 17-5 Configuring User Privilege Level Under a User Interface 17-5 Configuring Access Restriction on VTY User Interfaces 17-6 Configuring Supported Protocols on VTY User Interfaces 17-7 Configuring Authentication Mode for Users at Login 17-7 Configuring Command Authorization 17-9 Configuring Command Accounting 17-10 Defining Shortcut Keys for Starting Terminal Sessions/Aborting Tasks17-10 Sending Messages to the Specified User Interfaces 17-11 Releasing the Connection Established on the User Interfaces17-11 Displaying and Maintaining User Interfaces17-11 User Interface Configuration Examples 17-12 User Authentication Configuration Example 17-12 Command Authorization Configuration Example 17-13 Command Accounting Configuration Example 17-14 18 Basic Configurations 18-1 Configuration Display 18-1 Quick Configuration18-2 Basic Configurations 18-2 Entering System View 18-3 Exiting the Current View 18-3 Exiting to User View 18-3 Configuring the AC Name 18-3 Configuring the System Clock 18-4 Configuring a Banner18-6 Configuring CLI Hotkeys18-8 Configuring Command Aliases18-9 Configuring User Privilege Levels and Command Levels 18-10 Configuring the Number of Concurrent Users18-16 Displaying and Maintaining Basic Configurations 18-16v
CLI Features 18-17 Introduction to CLI 18-17 Online Help with Command Lines 18-18 Synchronous Information Output18-19 Undo Form of a Command18-19 Editing Features 18-19 CLI Display 18-20 Saving History Commands18-23 Command Line Error Information 18-23 19 HTTP Configuration19-1 HTTP Overview19-1 How HTTP Works19-1 Logging In to the Access Controller (AC) Through HTTP 19-1 Protocols and Standards 19-1 Enabling the HTTP Service19-2 Configuring the Port Number of the HTTP Service19-2 Associating the HTTP Service with an ACL19-2 Displaying and Maintaining HTTP19-3 20 HTTPS Configuration 20-1 HTTPS Overview 20-1 HTTPS Configuration Task List 20-1 Associating the HTTPS Service with an SSL Server Policy 20-2 Enabling the HTTPS Service 20-2 Associating the HTTPS Service with a Certificate Attribute Access Control Policy20-3 Configuring the Port Number of the HTTPS Service 20-3 Associating the HTTPS Service with an ACL 20-4 Displaying and Maintaining HTTPS 20-4 HTTPS Configuration Example20-5 21 Hotfix Configuration 21-1 Hotfix Overview 21-1 Basic Concepts in Hotfix21-1 Patch Status 21-2 Hotfix Configuration Task List 21-4 Configuration Prerequisites21-5 One-Step Patch Installation 21-5 Step-by-Step Patch Installation21-6 Step-by-Step Patch Installation Task List21-6 Configuring the Patch File Location 21-6 Loading a Patch File21-6 Activating Patches 21-7 Confirming Running Patches21-7 One-Step Patch Uninstallation21-8 Step-by-Step Patch Uninstallation 21-8 Step-by-Step Patch Uninstallation Task List 21-8vi
Stopping Running Patches21-8 Deleting Patches 21-8 Displaying and Maintaining Hotfix21-9 Hotfix Configuration Example 21-9 22 Index 22-1
vii
1
Applicable Models and Software VersionsH3C WX series access controllers include the WX3000 series unified switches, and WX5000 and WX6000 series access controllers. Table 1-1 shows the applicable models and software versions. Table 1-1 Applicable models and software versionsModel WX3024 unified switches WX3010 unified switches WX3000-CMW520-R3111P03 WX3008 unified switches LSWM1WCM20 access controller module WX5002 access controller WX5002-CMW520-R1112 LS8M1WCMA0 access controller module WX5002V2 access controller WX5004 access controller LSWM1WCM10 access controller module WX6103 access controller LSQM1WCMB0 access controller module WX6103-CMW520-R2115P08 LSBM1WCM2A0 access controller module LSRM1WCM2A1 access controller module WX5004-CMW520-R2107P04 Software version
1-1
2
Typical Network Scenarios
AC NetworkingAs shown in the following figure, the AC is connected to Switch (Layer 2 or Layer 3) through GE1/0/1, which can be connected to APs directly or connected to APs over an IP network. Clients can be connected to the network through the APs to implement WLAN user access. Figure 2-1 AC networkingScheme 1 AC GE 1/0/1 Server
IP network
AP 1
AP 2
Client A
Client B
Access Controller Module NetworkingAs shown in the following figure, installed with an access controller module, Switch (Layer 2 or Layer 3) can be connected to APs directly or connected to APs over an IP network. Clients can be connected to the network through the APs to implement WLAN user access.
2-1
Figure 2-2 Access controller module networking
Unified Switch NetworkingAs shown in Figure 2-3, Unified switch (functions as both an AC and a Layer 2 switch) can be connected to APs directly or connected to APs over an IP network. Clients can be connected to the network through the APs to implement WLAN user access. Figure 2-3 Unified switch networking diagram
2-2
3
Feature MatrixesIn this document, Yes means a feature or command is supported, and No means not supported.
Feature Matrix for the WX5000 Series
The LS8M1WCMA0, LSWM1WCM10, and LSWM1WCM20 on the WX5000 series adopt the OAP architecture. Installed on the expansion slots of switches, they work as OAP cards to exchange data and status and control information with the switches through their internal service interfaces. Do not configure services such as QoS rate limiting and 802.1X authentication on GE interfaces on the LS8M1WCMA0, XGE 1/0/1 on the LSWM1WCM10, and the logical interface BAGG1 aggregated by GE 1/0/1 and GE 1/0/2 on the LSWM1WCM20.
Table 3-1 Feature matrix for the WX5000 seriesDocument Fundamentals Configuration Guide Module Feature AUX user interface Login configuration Console user interface Telnet User interface configuration WX5002 Yes No Yes Console user interface not supported WX5002V2 No Yes Yes AUX user interface not supported LS8M1WCMA0 Yes No Yes WX5004 No Yes Yes AUX user interface not supported LSWM1WCM10 Yes No Yes Console user interface not supported LSWM1WCM20 Yes No Yes Console user interface not supported
User interface type
Yes
3-1
Document
Module File system management configuration
Feature Configuration file encryption Storage media supported
WX5002 No
WX5002V2 No
LS8M1WCMA0 No
WX5004 No
LSWM1WCM10 No
LSWM1WCM20 Yes
Flash Supports 32 concurrent APs by default, and can be extended to support 64. No on the WX5002-12 8
CF
Flash
CF Supports 64 concurren t APs by default, and can be extended to support 256. Yes 256 Yes
CF
Flash
Device management configuration License
Supports 32 concurrent APs by default, and can be extended to support 64.
No
Supports 64 concurrent APs by default, and can be extended to support 256.
Supports 32 concurrent APs by default, and can be extended to support 128.
WLAN Configuration Guide Layer 2 LAN Switching Configuration Guide
Hot AC backup WLAN services configuration Ethernet interface configuration Maximum number of SSIDs supported Combo port configuration
No 128 Yes
Yes 256 Yes
No 128 No
Yes 256 No Yes. Do not use the shutdown command on internal interfaces; otherwise, the normal operation of the device will be affected. No
No 128 No Yes. Do not use the shutdown command on internal interfaces; otherwise, the normal operation of the device will be affected. No
Shutting down an Ethernet interface
Yes
Yes
Yes
Yes
Configuring flow control on an Ethernet interface
Yes
Yes
Yes
Yes
3-2
Document
Module
Feature Configuring loopback detection on an Ethernet interface
WX5002 Yes on GE interfaces only
WX5002V2 Yes on GE interfaces only
LS8M1WCMA0 Internal loopback testing supported on GE interfaces only No No Yes
WX5004 Yes on GE interfaces only Yes Yes No Remote port mirroring and cross-boa rd mirroring not supported Yes
LSWM1WCM10 Internal loopback testing supported on XGE interfaces only No No No
LSWM1WCM20 Internal loopback testing supported on GE interfaces only Yes No No
Link aggregation configuration MSTP Configuration Layer 2 forwarding configuration
Link aggregation STP Layer 2 forwarding
Yes No Yes
Yes Yes No
Port mirroring configuration
Port mirroring
Remote port mirroring and cross-board mirroring not supported
Remote port mirroring and cross-board mirroring not supported
No
No
No
DNS configuration IP performance optimization configuration Adjacency table configuration IPv6 basics configuration IPv6 application configuration
IPv6 DNS configuration Configuring ICMP to send error packets Displaying and maintaining adjacency table IPv6 basics configuration IPv6 application configuration
Yes
Yes
Yes
Yes
Yes
Yes
No
No
No
No
No
Layer 3 IP Services Configuration Guide
No
Yes
No
Yes
Yes
Yes
Yes Yes
Yes Yes
Yes Yes
Yes Yes
Yes Yes
Yes Yes
3-3
Document Layer 3 IP Routing Configuration Guide
Module IP routing basics configuration IPv6 static routing configuration MLD snooping configuration IPv6 multicast VLAN configuration ACL configuration
Feature IPv6 features IPv6 static routing configuration MLD snooping IPv6 multicast VLAN IPv6 ACL Configuring line rate
WX5002 Yes Yes Yes Yes Yes Yes No
WX5002V2 Yes Yes Yes Yes Yes Yes Yes
LS8M1WCMA0 Yes Yes Yes Yes Yes Yes No
WX5004 Yes Yes Yes Yes Yes Yes Yes
LSWM1WCM10 Yes Yes Yes Yes Yes Yes Yes
LSWM1WCM20 Yes Yes Yes Yes Yes Yes Yes
IP Multicast Configuration Guide
ACL and QoS Configuration Guide
QoS
Configuring CAR applicable to all traffic of online users Specifying the device ID to be used in stateful failover mode Configuring Layer 3 portal authentication Specifying the portal group to which the portal service backup interface belongs
Security Configuration Guide
AAA
No
Yes
No
Yes
Yes
No
No
Yes
No
Yes
Yes
Yes
No
Yes
No
Yes
Yes
No
Portal configuration
Specifying the device ID to be used in stateful failover mode Specifying the backup source IP address for RADIUS packets to be sent Specifying a source IPv6 address or interface for an SSH client
No
Yes
No
Yes
Yes
No
No
Yes
No
Yes
Yes
No
SSH2.0 configuration
Yes
Yes
Yes
Yes
Yes
Yes
3-4
Document
Module
Feature Establishing a connection between an SSH client and an IPv6 SSH server Specifying a source IPv6 address or interface for an SFTP client Establishing a connection between an SFTP client and an IPv6 SFTP server IPv6 SFTP client
WX5002
WX5002V2
LS8M1WCMA0
WX5004
LSWM1WCM10
LSWM1WCM20
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes Telnet, SNMP, and web managemen t packets whose destination IP address is the local host
Yes
Yes
Yes ICMP, IEC, Telnet, and SNMP packets whose destinatio n IP address is the local host
Yes
Yes
Security protection configuration
Management protocol packets supported
ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host
Telnet, SNMP, and web management packets whose destination IP address is the local host
ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host
ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host
3-5
Document
Module
Feature
WX5002 11MAC/802. 1X/ARP/DH CP/HWTAC AS/ICMP/IG MP/MLD/L WAPP/ND/ NTP/PIM/R ADIUS Data packets: all packets except the above packets.
WX5002V2
LS8M1WCMA0
WX5004
LSWM1WCM10
LSWM1WCM20
Other protocol packets supported
UDP/TCP/8 02.1X/DHC P/IGMP/NT P/ARP/LWA PP/LooPbac k/PPPoE/IA CTP/ACSEI/ STP/LWAP P_DATA/De fault
11MAC/802.1X/ ARP/DHCP/HW TACAS/ICMP/IG MP/MLD/LWAP P/ND/NTP/PIM /RADIUS Data packets: all packets except the above packets.
UDP/TCP/ 802.1X/D HCP/IGM P/NTP/AR P/LWAPP /LooPbac k/PPPoE/I ACTP/AC SEI/ STP/LWA PP_DATA /Default
UDP/TCP/802.1 X/DHCP/IGMP/ NTP/ARP/LWA PP/LooPback/P PPoE/IACTP/A CSEI/ STP/LWAPP_D ATA/Default
UDP/TCP/802.1 X/DHCP/IGMP/ NTP/ARP/LWA PP/LooPback/P PPoE/IACTP/A CSEI/ STP/LWAPP_D ATA/Default
Enabling attack prevention for protocols Configuring rate limits for a protocol Network Management and Monitoring Configuration Guide
No
Yes
No
Yes
Yes
Yes
No
Yes
No
Yes
Yes
Yes
Information center configuration
Logfile
No
Yes
No
Yes
Yes
No
OAP module configuration OAA Configuration Guide OAA configuration ACSEI server configuration ACSEI client configuration Access Controller Module Basic Configuration Guide Access Controller Module Basic Configuration Access Controller Module Basic Configuration
No No No
Yes Yes Yes
No No Yes
Yes Yes Yes
No No Yes
No No Yes
No
No
Yes
No
Yes
Yes
3-6
Feature Matrix for the WX6000 Series
The switch interface module on the WX6103, and the LSQM1WCMB0, LSBM1WCM2A0, and LSRM1WCM2A1 access controller modules on the WX6000 series adopt the OAP architecture. Installed on the expansion slots of switches, they work as OAP cards to exchange data and status and control information with the switches through their internal service interfaces. The XGE interfaces on the switch interface module on the WX6103, and the LSQM1WCMB0, LSBM1WCM2A0, and LSWM1WCM10 access controller modules are internal interfaces. Do not configure services such as QoS rate limiting and 802.1X authentication on them.
Table 3-2 Feature matrix for the WX6000 seriesVolume Module Feature AUX user interface Login configuration Console user interface Telnet User interface configuration File management configuration User interface type Configuration file encryption Storage media supported Device management configuration No Yes Yes AUX user interface not supported No CF and USB 128 APs at most by default, and can be extended to 640 APs. Yes WX6103 LSQM1WCMB0 No Yes Yes AUX user interface not supported No CF and USB 128 APs at most by default, and can be extended to 640 APs. Yes LSBM1WCM2A0 No Yes Yes (IPv6 telnet not supported) AUX user interface not supported No CF and USB 128 APs at most by default, and can be extended to 640 APs. Yes LSRM1WCM2A1 Yes Yes Yes AUX user interface not supported No CF and USB 128 APs at most by default, and can be extended to 640 APs. Yes
Fundamentals Configuration Guide
License
WLAN Configuration
WLAN services
Hot AC backup
3-7
Volume Guide
Module configuration
Feature Maximum number of SSIDs supported Combo port configuration Shutting down an Ethernet interface 512
WX6103
LSQM1WCMB0 512
LSBM1WCM2A0 512
LSRM1WCM2A1 512
The MPU does not support the Combo port. Yes Internal loopback testing supported on XGE interfaces only No No No No No Yes No
No
No
No
Yes Internal loopback testing supported on XGE interfaces only No No No No No Yes No
Yes Internal loopback testing supported on XGE interfaces only No No No No No No No
Yes Internal loopback testing supported on XGE interfaces only No No No No No Yes No
Ethernet interface configuration Configuring flow control on an Ethernet interface Layer 2 LAN Switching Configuration Guide Link aggregation configuration MSTP Configuration Layer 2 forwarding configuration Port mirroring configuration DNS configuration IP performance optimization configuration Layer 3 IP Services Configuration Guide Adjacency table configuration IPv6 basics configuration IPv6 application configuration Loopback detection on an Ethernet interface Link aggregation STP Layer 2 forwarding Port mirroring IPv6 DNS configuration Configuring ICMP to send error packets Displaying and maintaining adjacency table IPv6 basics configuration IPv6 application configuration
Yes
Yes
Yes
Yes
Yes Yes
Yes Yes
No No
Yes Yes
3-8
Volume
Module IP routing basics configuration IPv6 static routing configuration MLD snooping configuration IPv6 multicast VLAN configuration ACL configuration
Feature IPv6-related displaying and maintaining commands IPv6 static routing configuration MLD snooping IPv6 multicast VLAN IPv6 ACL Configuring line rate Yes
WX6103
LSQM1WCMB0 Yes
LSBM1WCM2A0 No
LSRM1WCM2A1 Yes
Layer 3 IP Routing Configuration Guide
Yes Yes Yes Yes No Yes
Yes Yes Yes Yes No Yes
No No No No No Yes
Yes No No Yes No Yes
IP Multicast Configuration Guide
ACL and QoS Configuration Guide
QoS
Configuring CAR applicable to all traffic of online users Specifying the device ID to be used in stateful failover mode Configuring Layer 3 portal authentication Specifying the portal group to which the portal service backup interface belongs
Security Configuration Guide
AAA configuration
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Portal configuration
Specifying the device ID to be used in stateful failover mode Specifying the backup source IP address for RADIUS packets to be sent
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SSH2.0 configuration
Specifying a source IPv6 address or interface for an SSH client
Yes
Yes
No
Yes
3-9
Volume
Module
Feature Establishing a connection between an SSH client and an IPv6 SSH server Specifying a source IPv6 address or interface for an SFTP client Establishing a connection between an SFTP client and an IPv6 SFTP server IPv6 SFTP client
WX6103
LSQM1WCMB0
LSBM1WCM2A0
LSRM1WCM2A1
Yes
Yes
No
Yes
Yes
Yes
No
Yes
Yes
Yes
No
Yes
Yes ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/ DHCP/IGMP/NTP/ ARP/LWAPP/LooP back/PPPoE/IACT P/ACSEI/ STP/LWAPP_DAT A/Default Yes Yes
Yes ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/ DHCP/IGMP/NTP/ ARP/LWAPP/LooP back/PPPoE/IACT P/ACSEI/ STP/LWAPP_DAT A/Default Yes Yes
No ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/ DHCP/IGMP/NTP/ ARP/LWAPP/LooP back/PPPoE/IACT P/ACSEI/ STP/LWAPP_DAT A/Default Yes Yes
Yes ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/ DHCP/IGMP/NTP/ ARP/LWAPP/LooP back/PPPoE/IACT P/ACSEI/ STP/LWAPP_DAT A/Default Yes Yes
Management protocol packets supported
Security protection configuration
Other protocol packets supported
Enabling attack prevention for protocols Configuring rate limits for a protocol Network Management and Monitoring Configuration Guide OAA Configuration Guide Information center configuration OAA configuration Logfile OAP module configuration ACSEI server configuration
Yes
No
No
No
Yes Yes 3-10
No No
No No
No No
Volume
Module
Feature ACSEI client configuration Yes
WX6103
LSQM1WCMB0 Yes
LSBM1WCM2A0 Yes
LSRM1WCM2A1 Yes
Access Controller Module Basic Configuration Guide
Access Controller Module Basic Configuration
Access Controller Module Basic Configuration
No
Yes
Yes
Yes
Feature Matrix for the WX3000 Series
The access controller engine and switching engine on the WX3000 series adopt the OAP architecture. The switching engine is integrated on the access controller engine as an OAP card. You actually log in to the access controller engine when you log in to the device by default. GE 1/0/1 interfaces on the WX3024, WX3010 and WX3008 are used to exchange data, status and control information with GE1/0/29 (WX3024), GE1/0/11 (WX3010) or GE1/0/9 (WX3008) on the switching engine. Do not configure services such as QoS rate limiting and 802.1X authentication on these interfaces.
Table 3-3 Feature matrix for the WX3000 seriesVolume Fundamentals Configuration Guide Login configuration Module Feature AUX user interface Console user interface Telnet User interface configuration File management configuration User interface type Configuration file encryption Yes No Yes (IPv6 telnet not supported) Console user interface not supported Yes WX3024 Yes No Yes (IPv6 telnet not supported) Console user interface not supported Yes WX3010 Yes No Yes (IPv6 telnet not supported) Console user interface not supported Yes WX3008
3-11
Volume
Module
Feature Storage media supported Flash
WX3024 Flash
WX3010 Flash No No 64 No
WX3008
Device management configuration
License Hot AC backup
24 APs at most by default, and can be extended to 48 APs. No 64 No No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine No Internal loopback testing supported on GE interfaces only No No No No No No Yes No
12 APs at most by default, and can be extended to 24 APs. No 64 No No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine No Internal loopback testing supported on GE interfaces only No No No No No No Yes No
WLAN Configuration Guide
WLAN services configuration
Maximum number of SSIDs supported Combo port configuration Shutting down an Ethernet interface
Ethernet interface configuration
No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine No Internal loopback testing supported on GE interfaces only No No No No No No Yes No
Configuring flow control on an Ethernet interface Loopback detection on an Ethernet interface
Layer 2 LAN Switching Configuration Guide Link aggregation configuration MSTP Configuration Layer 2 forwarding configuration Port mirroring configuration Layer 3 IP Services Configuration Guide DNS configuration IP performance optimization configuration Adjacency table configuration IPv6 basics configuration
Link aggregation configuration STP Layer 2 forwarding Port mirroring configuration IPv6 DNS configuration Configuring ICMP to send error packets Displaying and maintaining an adjacency table IPv6 basics configuration
3-12
Volume
Module IPv6 application configuration IP routing basics configuration IPv6 static routing configuration MLD snooping configuration
Feature IPv6 application configuration IPv6-related displaying and maintaining commands IPv6 static routing configuration MLS snooping IPv6 multicast VLAN IPv6 ACL Configuring line rate No No No No No No No Yes No Yes
WX3024 No No No No No No No Yes No Yes
WX3010 No No No No No No No Yes No Yes
WX3008
Layer 3 IP Routing Configuration Guide
IP Multicast Configuration Guide
IPv6 multicast VLAN configuration ACL configuration
ACL and QoS Configuration Guide
QoS
Configuring CAR applicable to all traffic of online users Specifying the device ID to be used in stateful failover mode Configuring Layer 3 portal authentication Specifying the portal group to which the portal service backup interface belongs
Security Configuration Guide
AAA configuration
No
No
No
Portal configuration Specifying the device ID to be used in stateful failover mode Specifying the backup source IP address for RADIUS packets to be sent SSH2.0 configuration Specifying a source IPv6 address or interface for an SSH client Establishing a connection between an SSH client and an IPv6 SSH server No No No
No
No
No
No
No
No
No
No
No
3-13
Volume
Module
Feature Specifying a source IPv6 address or interface for an SFTP client Establishing a connection between an SFTP client and an IPv6 SFTP server IPv6 SFTP client Management protocol packets supported No
WX3024 No
WX3010 No
WX3008
No No ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/DHC P/IGMP/NTP/ARP/LWA PP/LooPback/PPPoE/I ACTP/ACSEI/ STP/LWAPP_DATA/De fault Yes Yes
No No ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/DHC P/IGMP/NTP/ARP/LWA PP/LooPback/PPPoE/I ACTP/ACSEI /STP/LWAPP_DATA/De fault Yes Yes
No No ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/DHC P/IGMP/NTP/ARP/LWA PP/LooPback/PPPoE/I ACTP/ACSEI /STP/LWAPP_DATA/De fault Yes Yes
Security protection configuration
Other protocol packets supported
Enabling attack prevention for protocols Configuring rate limits for a protocol Network Management and Monitoring Configuration Guide Information center configuration Logfile OAP module configuration OAA Configuration Guide OAA configuration ACSEI server configuration ACSEI client configuration Access Controller Module Basic Configuration Guide Access Controller Module Basic Configuration Access Controller Module Basic Configuration
No Yes No No No
No Yes No No No
No Yes No No No
3-14
4
Command MatrixesIn this document, Yes means a feature or command is supported, and No means not supported.
Command Matrix for the WX5000 SeriesTable 4-1 Command matrix for the WX5000 seriesVolume Fundamentals Command Reference Module Login commands Command telnet ipv6 Yes WX5002 WX5002V2 Yes LS8M1WCMA0 Yes WX5004 Yes Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6. LSWM1WCM10 Yes LSWM1WCM20 Yes
AUX and VTY user interfaces are supported. User Interface Commands display user-interface When number is an absolute index, the value ranges from 0 to 5.
Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
4-1
Volume
Module
Command
WX5002
WX5002V2
LS8M1WCMA0
WX5004 Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6. Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
LSWM1WCM10
LSWM1WCM20
AUX and VTY user interfaces are supported. free user-interface When number is an absolute index, the value ranges from 0 to 5.
Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
AUX and VTY user interfaces are supported. send When number is an absolute index, the value ranges from 0 to 5.
Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
4-2
Volume
Module
Command
WX5002
WX5002V2
LS8M1WCMA0
WX5004 Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6. No Yes Yes Yes Yes Yes usb not supported fan-id ranges from 1 to 5. power-id takes the value of 1 or 2. No
LSWM1WCM10
LSWM1WCM20
AUX and VTY user interfaces are supported. user-interface When number is an absolute index, the value ranges from 0 to 5.
Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.
configuration encrypt ftp ipv6 File management commands mount open ipv6 tftp ipv6 umount Device management commands
No Yes No No Yes No cf-card, usb, subslot subslot-number not supported fan-id takes the value of 1 or 2. power-id takes the value of 1 or 2. No
No Yes No No Yes No usb not supported
No Yes No No Yes No cf-card, usb, subslot subslot-number not supported fan-id takes the value of 1 or 2. power-id takes the value of 1 or 2. No
No Yes No No Yes No usb and subslot subslot-number not supported No
Yes Yes No No Yes No cf-card, usb, subslot subslot-number not supported No
display device
display fan
fan-id ranges from 1 to 5. power-id takes the value of 1 or 2. No
display power
No
No
display rps
No
No
4-3
Volume
Module
Command license append
WX5002 No on the WX5002-128 By default, lower-value is 5, and upper-value is 60 number ranges from 1 to 6.
WX5002V2 Yes By default, lower-value is 0, and upper-value is 90 number ranges from 1 to 7.
LS8M1WCMA0 Yes By default, lower-value is 5, and upper-value is 60 number ranges from 1 to 6.
WX5004 Yes By default, lower-valu e is 0, and upper-valu e is 90 number ranges from 1 to 7. interface-n umber ranges from 0 to 1023. interface-n umber ranges from 0 to 1023. Yes interface-in dex ranges from 0 to 1023. group-id ranges from 1 to 64.
LSWM1WCM10 Yes
LSWM1WCM20 Yes By default, lower-value is 0, and upper-value is 60 number ranges from 1 to 7.
temperature-limit
No
Basic system configuration commands WLAN Command Reference WLAN interface commands
configure-user count
number ranges from 1 to 7.
display interface wlan-ess
interface-numbe r ranges from 0 to 127.
interface-numb er ranges from 0 to 1023.
interface-numbe r ranges from 0 to 127.
interface-numbe r ranges from 0 to 1023.
interface-number ranges from 0 to 127.
interface wlan-ess
interface-numbe r ranges from 0 to 127.
interface-numb er ranges from 0 to 1023.
interface-numbe r ranges from 0 to 127.
interface-numbe r ranges from 0 to 1023.
interface-number ranges from 0 to 127.
WLAN services commands
All commands for hot AC backup
No interface-index ranges from 0 to 127.
Yes interface-index ranges from 0 to 1023.
No interface-index ranges from 0 to 127.
No interface-index ranges from 0 to 127.
Yes interface-index ranges from 0 to 1023.
bind wlan-ess
display wlan ap-group
group-id ranges from 1 to 128.
group-id ranges from 1 to 32.
group-id ranges from 1 to 128.
group-id ranges from 1 to 32.
group-id ranges from 1 to 64.
4-4
Volume
Module
Command
WX5002
WX5002V2
LS8M1WCMA0
WX5004 hellointerv al ranges from 100 to 2000 millisecond s, and defaults to 2000 millisecond s. group-id ranges from 1 to 64. group-id ranges from 1 to 64. Yes Yes Yes Yes Yes Yes Yes Yes Yes
LSWM1WCM10
LSWM1WCM20
hot-backup hellointerval
No
hellointerval ranges from 100 to 2000 milliseconds, and defaults to 2000 milliseconds.
No
No
hellointerval ranges from 100 to 2000 milliseconds, and defaults to 2000 milliseconds.
wlan ap-group
group-id ranges from 1 to 128.
group-id ranges from 1 to 32.
group-id ranges from 1 to 128.
group-id ranges from 1 to 32.
group-id ranges from 1 to 64.
wlan permit-ap-group display wlan client display wlan mobility-group WLAN roaming commands member mobility-tunnel undo member source Layer 2 LAN Switching Command Reference Ethernet interface commands duplex display loopback-detecti on flow-control
group-id ranges from 1 to 128.
group-id ranges from 1 to 32.
group-id ranges from 1 to 128.
group-id ranges from 1 to 32.
group-id ranges from 1 to 64.
Yes Yes Yes Yes Yes Yes Yes Yes Yes
Yes Yes Yes Yes Yes Yes Yes Yes Yes
Yes Yes Yes Yes Yes Yes Yes Yes Yes
Yes Yes Yes Yes Yes Yes No Yes No
Yes Yes Yes Yes Yes Yes No No No
4-5
Volume
Module
Command
WX5002
WX5002V2
LS8M1WCMA0
WX5004 value ranges from 1600 to 4096 bytes and defaults to 1600 bytes. Yes Yes Yes Yes Yes Yes The maximum value is 512. count ranges from 0 to 8192.
LSWM1WCM10
LSWM1WCM20
jumboframe enable
value ranges from 1600 to 9216 bytes and defaults to 1600 bytes.
value ranges from 1600 to 4096 bytes and defaults to 1600 bytes.
value ranges from 1600 to 4096 bytes and defaults to 1600 bytes.
value ranges from 1600 to 4096 bytes and defaults to 1600 bytes.
value ranges from 1600 to 4096 bytes and defaults to 1600 bytes.
loopback loopback-detecti on control enable loopback-detecti on enable loopback-detecti on interval-time shutdown speed interface vlan-interface
Yes Yes Yes Yes Yes Yes The maximum value is 64.
Yes Yes Yes Yes Yes Yes The maximum value is 64.
Yes Yes Yes Yes Yes No The maximum value is 64.
Only internal is supported. No No No No No The maximum value is 512.
Only internal is supported. No No No No No The maximum value is 64.
VLAN commands
MAC Address Table Commands
mac-address max-mac-count All commands in the link aggregation commands manual All commands in the MSTP commands manual
count ranges from 0 to 4096.
count ranges from 0 to 4096.
count ranges from 0 to 4096.
count ranges from 0 to 8192.
count ranges from 0 to 4096.
Link aggregation commands
Yes
Yes
No
No
No
No
MSTP commands
No
Yes
No
Yes
No
No
4-6
Volume
Module Layer 2 forwarding commands
Command All commands in the Layer 2 commands manual All commands in the port mirroring commands manual pppoe-server max-sessions local-mac
WX5002
WX5002V2
LS8M1WCMA0
WX5004
LSWM1WCM10
LSWM1WCM20
Yes
No
Yes
Yes
No
No
Port mirroring commands
Yes
Yes
No
Yes
No
No
number ranges from 1 to 2048.
number ranges from 1 to 2048.
number ranges from 1 to 2048.
number ranges from 1 to 2048. number ranges from 1 to 65535 and defaults to 4096. number ranges from 0 to 8192.
number ranges from 1 to 4096.
number ranges from 1 to 2048.
Layer 2 WAN Command Reference
PPP commands pppoe-server max-sessions total number ranges from 1 to 2048 and defaults to 1024. number ranges from 1 to 4096 and defaults to 4096. number ranges from 1 to 2048 and defaults to 1024.
number ranges from 1 to 4096 and defaults to 4096.
number ranges from 1 to 2048 and defaults to 1024.
Layer 3 IP Services Command Reference
ARP commands
arp max-learning-nu m All commands in IPv6 DNS configuration commands ip redirects enable
number ranges from 0 to 2048.
number ranges from 0 to 4096.
number ranges from 0 to 2048.
number ranges from 0 to 2048.
number ranges from 0 to 8192.
DNS commands
Yes
Yes
Yes
Yes
Yes
Yes
Yes Yes Yes No
No No No Yes
No No No No
No No No Yes
No No No Yes
No No No Yes
IP performance optimization commands
ip ttl-expires enable ip unreachables enable
Adjacency table commands
display adjacent-table
4-7
Volume
Module
Command All commands in IPv6 basics commands manual
WX5002
WX5002V2
LS8M1WCMA0
WX5004
LSWM1WCM10
LSWM1WCM20
Yes
Yes
Yes
Yes
Yes
Yes
IPv6 basics commands ipv6 neighbors max-learning-nu m
number ranges from 1 to 256 and defaults to 256.
number ranges from 1 to 1024 and defaults to 1024.
number ranges from 1 to 256 and defaults to 256.
number ranges from 1 to 1024 and defaults to 1024.
number ranges from 1 to 1024 and defaults to 1024.
number ranges from 1 to 1024 and defaults to 1024.
IPv6 application commands Layer 3 IP Routing Command Reference
All commands in IPv6 application commands manual display ipv6 routing-table display ipv6 routing-table ipv6-address display ipv6 routing-table ipv6-address1 ipv6-address2
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
IP routing basics commands
display ipv6 routing-table protocol display ipv6 routing-table statistics display ipv6 routing-table verbose reset ipv6 routing-table statistics
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
4-8
Volume
Module IPv6 static routing commands
Command All commands in IPv6 static routing commands manual
WX5002
WX5002V2
LS8M1WCMA0
WX5004
LSWM1WCM10
LSWM1WCM20
Yes
Yes
Yes
Yes
Yes
Yes
IP Multicast Command Reference
igmp-snooping fast-leave
Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Yes Yes
Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Yes Yes
Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Yes Yes
Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Yes Yes
Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Yes Yes
Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Yes Yes
igmp-snooping group-limit IGMP snooping commands igmp-snooping static-group
igmp-snooping static-router-port vlan
Multicast VLAN commands
port multicast-vlan
MLD snooping commands IPv6 multicast VLAN commands
MLD snooping commands IPv6 multicast VLAN commands
4-9
Volume
Module
Command port multicast-vlan ipv6
WX5002 Layer 2 aggregate interface view supported
WX5002V2 Layer 2 aggregate interface view supported
LS8M1WCMA0 Layer 2 aggregate interface view supported
WX5004 Layer 2 aggregate interface view not supported Yes green action not supported remark-lppass new-localprecedenc e not supported Yes Yes
LSWM1WCM10 Layer 2 aggregate interface view not supported
LSWM1WCM20 Layer 2 aggregate interface view supported
ACL and QoS Command Reference
ACL Commands
IPv6 ACL Configuration Commands
Yes
Yes
Yes
Yes
Yes
QoS Commands
car
pir peak-informatio n-rate not supported
green action not supported remark-lp-pas s new-local-prec edence not supported
pir peak-informatio n-rate not supported
green action not supported remark-lp-pass new-local-prece dence not supported
green action not supported remark-lp-pass new-local-prece dence not supported
display qos lr interface display qos map-table
Yes dscp-lp not supported
Yes Yes
Yes dscp-lp not supported
Yes Yes
Yes Yes
4-10
Volume
Module
Command
WX5002
WX5002V2
LS8M1WCMA0
WX5004 classifier tcl-name not supported inbound-i nterface interface-ty pe interface-n umber not supported
LSWM1WCM10
LSWM1WCM20
classifier tcl-name not supported inbound-interf ace interface-type interface-numb er not supported if-match Yes local-precede nce local-preceden ce-list not supported rtp start-port start-port-numb er end-port end-port-numb er not supported Yes
classifier tcl-name not supported inbound-interfa ce interface-type interface-numbe r not supported local-preceden ce local-precedenc e-list not supported rtp start-port start-port-numbe r end-port end-port-numbe r not supported
classifier tcl-name not supported inbound-interfa ce interface-type interface-number not supported local-preceden ce local-precedenc e-list not supported rtp start-port start-port-numbe r end-port end-port-number not supported
local-prec edence local-prece dence-list not supported rtp start-port start-port-n umber end-port end-port-n umber not supported
qos pql inbound-interfac e qos pql protocol qos cql inbound-interfac e qos cql protocol qos car qos map-table
Yes Yes Yes Yes No dscp-lp not supported
No No No No Yes Yes
Yes Yes Yes Yes No dscp-lp not supported
No No No No Yes Yes
No No No No Yes Yes
No No No No Yes Yes
4-11
Volume
Module
Command
WX5002
WX5002V2 [ ebs excess-burst-si ze ] not supported Yes Yes user-number ranges from 1 to 4096. user-number ranges from 1 to 4096 and defaults to 4096.
LS8M1WCMA0
WX5004
LSWM1WCM10 [ ebs excess-burst-siz e ] not supported Yes Yes user-number ranges from 1 to 4096.
LSWM1WCM20 [ ebs excess-burst-siz e ] not supported Yes No user-number ranges from 1 to 2048.
qos lr
Yes
Yes
No
redirect Security Command Reference AAA commands nas device-id device-id
No No user-number ranges from 1 to 2048.
No No user-number ranges from 1 to 2048.
Yes Yes user-numb er ranges from 1 to 4096. user-numb er ranges from 1 to 4096 and defaults to 4096. layer3 supported
802.1X commands
dot1x max-user
MAC authentication commands
mac-authenticati on max-user user-number
user-number ranges from 1 to 1024 and defaults to 1024.
user-number ranges from 1 to 1024 and defaults to 1024.
user-number ranges from 1 to 4096 and defaults to 4096.
user-number ranges from 1 to 2048 and defaults to 2048.
Portal commands
portal server server-name method { direct | layer3 | redhcp } portal backup-group group-id nas device-id device-id radius nas-backup-ip ip-address radius scheme radius-scheme-na me nas-backup-ip ip-address
layer3 not supported
layer3 supported
layer3 not supported
layer3 supported
layer3 supported
No
Yes
No
Yes
Yes
No
No
Yes
No
Yes
Yes
No
No
Yes
No
Yes
Yes
No
No
Yes
No
Yes
Yes
No
4-12
Volume
Module
Command portal max-user max-number ssh client ipv6 source
WX5002 max-number ranges from 1 to 2048. Yes Yes Yes Yes No
WX5002V2 max-number ranges from 1 to 4096. Yes Yes Yes Yes Yes
LS8M1WCMA0 max-number ranges from 1 to 2048. Yes Yes Yes Yes No
WX5004 max-numb er ranges from 1 to 4096. Yes Yes Yes Yes Yes
LSWM1WCM10 max-number ranges from 1 to 4096. Yes Yes Yes Yes Yes
LSWM1WCM20 max-number ranges from 1 to 2048. Yes Yes Yes Yes Yes
SSH2.0 commands
ssh2 ipv6 sftp client ipv6 source sftp ipv6 anti-attack protocol enable anti-attack protocol threshold display anti-attack { 11mac | admin | all | arp | data | dhcp | dot1x | hwtacas | icmp | igmp | lwapp | nd | ntp | pim | radius } display anti-attack { protocol protocol | all }
No
Yes
No
Yes
Yes
Yes
Security protection commands
Yes
No
Yes
No
No
No
No
Yes
No
Yes
Yes
Yes
Network Management and Monitoring Command Reference
System maintenance and debugging commands Information center commands
ping ipv6 tracert ipv6 display logfile buffer
Yes Yes No
Yes Yes Yes
Yes Yes No
Yes Yes Yes
Yes Yes Yes
Yes Yes No
4-13
Volume
Module
Command display logfile summary info-center logfile enable info-center logfile frequency info-center logfile size-quota info-center logfile switch-directory logfile save No No No No No No
WX5002
WX5002V2 Yes Yes Yes Yes Yes Yes
LS8M1WCMA0 No No No No No No
WX5004 Yes Yes Yes Yes Yes Yes
LSWM1WCM10 Yes Yes Yes Yes Yes Yes Yes on the device side of the access controller module Yes No No No No
LSWM1WCM20 No No No No No No Yes on the device side of the access controller module Yes No No No No
mcms connect
No
No
No
No
mcms reboot oap connect slot OAA OAA commands oap management-ip oap reboot slot ACSEI server configuration commands ACSEI client configuration commands
No No No No No
No Yes Yes Yes Yes
No No No No No
No Yes Yes Yes Yes
No
Yes
Yes
Yes
Yes
Yes
4-14
Command Matrix for the WX6000 SeriesTable 4-2 Command matrix for the WX6000 seriesVolume Fundamentals Command Reference Module Login commands Command telnet ipv6 Yes AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6. AUX, console and VTY user interfaces are supported. free user-interface When number is an absolute index, the value ranges from 0 to 6. AUX, console and VTY user interfaces are supported. send When number is an absolute index, the value ranges from 0 to 6. AUX, console and VTY user interfaces are supported. user-interface When number is an absolute index, the value ranges from 0 to 6. No Yes 4-15 WX6103 LSQM1WCMB0 Yes AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. No Yes LSBM1WCM2A0 No AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. No No LSRM1WCM2A1 Yes AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. No Yes
display user-interface
User Interface Commands
File management configuration commands
configuration encrypt ftp ipv6
Volume
Module
Command mount open ipv6 tftp ipv6 umount display device display fan display power Yes Yes Yes Yes Yes
WX6103
LSQM1WCMB0 Yes Yes Yes Yes Yes fan-id can only be 1. power-id takes the value of 1 or 2. No Yes By default, lower-value is 0, and upper-value is 86 number ranges from 1 to 13. interface-number ranges from 0 to 1023. interface-number ranges from 0 to 1023. Yes interface-index ranges from 0 to 1023. group-id ranges from 1 to 640.
LSBM1WCM2A0 Yes Yes No Yes Yes fan-id can only be 1. power-id takes the value of 1 or 2. No Yes By default, lower-value is 0, and upper-value is 86 number ranges from 1 to 13. interface-number ranges from 0 to 1023. interface-number ranges from 0 to 1023. Yes interface-index ranges from 0 to 1023. group-id ranges from 1 to 640.
LSRM1WCM2A1 Yes Yes Yes Yes Yes fan-id can only be 1. power-id takes the value of 1 or 2. No Yes By default, lower-value is 0, and upper-value is 86 number ranges from 1 to 13. interface-number ranges from 0 to 1023. interface-number ranges from 0 to 1023. Yes interface-index ranges from 0 to 1023. group-id ranges from 1 to 640.
fan-id can only be 1. power-id takes the value of 1 or 2. No Yes By default, lower-value is 0, and upper-value is 86 number ranges from 1 to 13. interface-number ranges from 0 to 1023. interface-number ranges from 0 to 1023. Yes interface-index ranges from 0 to 1023. group-id ranges from 1 to 640.
Device management commands
display rps license append temperature-limit
Basic system configuration commands WLAN Command Reference WLAN interface commands
configure-user count
display interface wlan-ess
interface wlan-ess WLAN service commands All commands for hot AC backup bind wlan-ess display wlan ap-group
4-16
Volume
Module
Command
WX6103 hellointerval ranges from 30 to 2000 milliseconds, and defaults to 2000 milliseconds. group-id ranges from 1 to 640. group-id ranges from 1 to 640. Yes
LSQM1WCMB0 hellointerval ranges from 30 to 2000 milliseconds, and defaults to 2000 milliseconds. group-id ranges from 1 to 640. group-id ranges from 1 to 640. Yes
LSBM1WCM2A0 hellointerval ranges from 30 to 2000 milliseconds, and defaults to 2000 milliseconds. group-id ranges from 1 to 640. group-id ranges from 1 to 640. member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported iactp6 not supported undo member ipv6 ipv6-address not supported ipv6 ipv6-address not supported Yes Yes Yes value ranges from 1600 to 4096 bytes and defaults to 1600 bytes.
LSRM1WCM2A1 hellointerval ranges from 30 to 2000 milliseconds, and defaults to 2000 milliseconds. group-id ranges from 1 to 640. group-id ranges from 1 to 640. Yes
hot-backup hellointerval
wlan ap-group wlan permit-ap-group display wlan client
display wlan mobility-group
Yes
Yes
Yes
WLAN roaming commands
member mobility-tunnel undo member
Yes Yes Yes
Yes Yes Yes
Yes Yes Yes
source Layer 2 LAN Switching Command Reference Ethernet interface commands duplex display loopback-detection flow-control
Yes Yes Yes Yes value ranges from 1600 to 9216 bytes and defaults to 1600 bytes.
Yes Yes Yes Yes value ranges from 1600 to 4096 bytes and defaults to 1600 bytes.
Yes Yes Yes Yes value ranges from 1600 to 4096 bytes and defaults to 1600 bytes.
jumboframe enable
4-17
Volume
Module
Command loopback loopback-detection control enable loopback-detection enable loopback-detection interval-time shutdown speed Yes Yes Yes Yes Yes Yes
WX6103
LSQM1WCMB0 Yes Yes Yes Yes Yes No The maximum value is 1024. count ranges from 0 to 24576. No No No No number ranges from 1 to 20480. number ranges from 1 to 65535 and defaults to 4096. number ranges from 0 to 24576. Yes
LSBM1WCM2A0 Yes Yes Yes Yes Yes Yes The maximum value is 1024. count ranges from 0 to 24576. No No No No number ranges from 1 to 20480. number ranges from 1 to 65535 and defaults to 4096. number ranges from 0 to 24576. No
LSRM1WCM2A1 Yes Yes Yes Yes Yes No The maximum value is 1024. count ranges from 0 to 24576. No No No No number ranges from 1 to 20480. number ranges from 1 to 65535 and defaults to 4096. number ranges from 0 to 24576. Yes
VLAN commands MAC address table management commands Link aggregation commands MSTP commands Layer 2 forwarding commands Port mirroring commands
interface vlan-interface mac-address max-mac-count All commands All commands All commands All commands pppoe-server max-sessions local-mac
The maximum value is 1024. count ranges from 0 to 24576. No No No No number ranges from 1 to 20480. number ranges from 1 to 65535 and defaults to 4096. number ranges from 0 to 24576. Yes 4-18
Layer 2 WAN Command Reference
PPP commands pppoe-server max-sessions total
Layer 3 IP Services Command Reference
ARP commands DNS commands
arp max-learning-num All commands for IPv6 DNS configuration
Volume
Module
Command ip redirects enable No No No Yes Yes
WX6103
LSQM1WCMB0 No No No Yes Yes number ranges from 1 to 1024 and defaults to 1024. Yes Yes
LSBM1WCM2A0 No No No Yes No number ranges from 1 to 1024 and defaults to 1024. No No
LSRM1WCM2A1 No No No Yes Yes number ranges from 1 to 1024 and defaults to 1024. Yes Yes
IP performance optimization commands
ip ttl-expires enable ip unreachables enable display adjacent-table All commands
Adjacency table commands
IPv6 basics commands
ipv6 neighbors max-learning-num All commands display ipv6 routing-table display ipv6 routing-table ipv6-address display ipv6 routing-table ipv6-address1 ipv6-address2 display ipv6 routing-table protocol display ipv6 routing-table statistics display ipv6 routing-table verbose
number ranges from 1 to 1024 and defaults to 1024. Yes Yes
IPv6 application commands IP Routing Command Reference IP routing basics commands
Yes
Yes
No
Yes
Yes
Yes
No
Yes
Yes
Yes
No
Yes
Yes
Yes
No
Yes
Yes
Yes
No
Yes
4-19
Volume
Module
Command reset ipv6 routing-table statistics Yes
WX6103
LSQM1WCMB0 Yes
LSBM1WCM2A0 No
LSRM1WCM2A1 Yes
IPv6 static routing commands
All commands igmp-snooping fast-leave igmp-snooping group-limit
Yes Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Yes Yes Layer 2 aggregate interface view not supported Yes
Yes Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Yes Yes Layer 2 aggregate interface view not supported Yes
No Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported No No Layer 2 aggregate interface view not supported Yes
Yes Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported No No Layer 2 aggregate interface view not supported Yes
IGMP snooping commands igmp-snooping static-group igmp-snooping static-router-port vlan Multicast VLAN commands MLD snooping commands port multicast-vlan MLD snooping commands IPv6 multicast VLAN commands IPv6 multicast VLAN commands port multicast-vlan ipv6 IPv6 ACL Configuration Commands
IP Multicast Command Reference
ACL and QoS Command Reference
ACL Commands
4-20
Volume
Module
Command
WX6103 green action not supported
LSQM1WCMB0 green action not supported remark-lp-pass new-local-precedenc e not supported No Yes classifier tcl-name not supported inbound-interface interface-type interface-number not supported rtp start-port start-port-number end-port end-port-number not supported No No No No Yes No Yes Yes Yes
LSBM1WCM2A0 green action not supported remark-lp-pass new-local-precedenc e not supported No Yes classifier tcl-name not supported inbound-interface interface-type interface-number not supported rtp start-port start-port-number end-port end-port-number not supported No No No No Yes No Yes Yes Yes
LSRM1WCM2A1 green action not supported remark-lp-pass new-local-precedenc e not supported No Yes classifier tcl-name not supported inbound-interface interface-type interface-number not supported rtp start-port start-port-number end-port end-port-number not supported No No No No Yes No Yes Yes Yes
car
remark-lp-pass new-local-precedenc e not supported No Yes classifier tcl-name not supported inbound-interface interface-type interface-number not supported rtp start-port start-port-number end-port end-port-number not supported
display qos lr interface display qos map-table
if-match QoS commands
qos pql inbound-interface qos pql protocol qos cql inbound-interface qos cql protocol qos car qos lr qos map-table redirect Security Command Reference AAA commands nas device-id device-id
No No No No Yes No Yes Yes Yes
4-21
Volume
Module 802.1X commands MAC authentication commands
Command dot1x max-user mac-authentication max-user user-number portal server server-name method { direct | layer3 | redhcp } portal backup-group group-id nas device-id device-id
WX6103 user-number ranges from 1 to 20480. user-number ranges from 1 to 4096 and defaults to 4096.
LSQM1WCMB0 user-number ranges from 1 to 20480. user-number ranges from 1 to 4096 and defaults to 4096.
LSBM1WCM2A0 user-number ranges from 1 to 20480. user-number ranges from 1 to 4096 and defaults to 4096.
LSRM1WCM2A1 user-number ranges from 1 to 20480. user-number ranges from 1 to 4096 and defaults to 4096.
layer3 supported
layer3 supported
layer3 supported
layer3 supported
Yes Yes Yes
Yes Yes Yes
Yes Yes Yes
Yes Yes Yes
Portal commands
radius nas-backup-ip ip-address radius scheme radius-scheme-name nas-backup-ip ip-address portal max-user max-number ssh client ipv6 source ssh2 ipv6
Yes
Yes
Yes
Yes
max-number ranges from 1 to 20480. Yes Yes Yes Yes Yes Yes
max-number ranges from 1 to 20480. Yes Yes Yes Yes Yes Yes
max-number ranges from 1 to 20480. No No No No Yes Yes
max-number ranges from 1 to 20480. Yes Yes Yes Yes Yes Yes
SSH2.0 commands sftp client ipv6 source sftp ipv6 Security protection commands anti-attack protocol enable anti-attack protocol threshold
4-22
Volume
Module
Command display anti-attack { 11mac | admin | all | arp | data | dhcp | dot1x | hwtacas | icmp | igmp | lwapp | nd | ntp | pim | radius } display anti-attack { protocol protocol | all }
WX6103
LSQM1WCMB0
LSBM1WCM2A0
LSRM1WCM2A1
No
No
No
No
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No Yes Yes Yes
Yes Yes Yes No No No No No No No No No No No No
Yes No No No No No No No No No No No No No No
Yes Yes Yes No No No No No No No No No No No No
System maintenance and debugging commands
ping ipv6 tracert ipv6 display logfile buffer display logfile summary
Network Management and Monitoring Command Reference
info-center logfile enable Information center commands info-center logfile frequency info-center logfile size-quota info-center logfile switch-directory logfile save
OAA
OAA commands
mcms connect mcms reboot oap connect slot oap management-ip oap reboot slot
4-23
Volume
Module
Command ACSEI server configuration commands ACSEI client configuration commands Yes
WX6103
LSQM1WCMB0 No
LSBM1WCM2A0 No
LSRM1WCM2A1 No
Yes
Yes
Yes
Yes
Command Matrix for the WX3000 SeriesTable 4-3 Command matrix for the WX3000 seriesVolume Fundamentals Command Reference Module Login commands Command telnet ipv6 No AUX and VTY user interfaces are supported. display user-interface When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. free user-interface User Interface Commands send When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. user-interface When number is an absolute index, the value ranges from 0 to 5. 4-24 WX3024 No AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. WX3010 No AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. WX3008
Volume
Module
Command configuration encrypt ftp ipv6 Yes No No No No No
WX3024 Yes No No No No No
WX3010 Yes No No No No No
WX3008
File management configuration commands
mount open ipv6 tftp ipv6 umount display device display fan
cf-card and usb not supported fan-id takes the value of 1 or 2. power-id can only be 1. Yes Yes By default, lower-value is 4, and upper-value is 79. number ranges from 1 to 6. interface-number ranges from 0 to 63. interface-number ranges from 0 to 63. No interface-index ranges from 0 to 63. group-id ranges from 1 to 64.
cf-card and usb not supported fan-id ranges from 1 to 3. power-id can only be 1. No Yes By default, lower-value is 0, and upper-value is 63. number ranges from 1 to 6. interface-number ranges from 0 to 63. interface-number ranges from 0 to 63. No interface-index ranges from 0 to 63. group-id ranges from 1 to 12.
cf-card and usb not supported fan-id ranges from 1 to 3. power-id can only be 1. No Yes By default, lower-value is 0, and upper-value is 63. number ranges from 1 to 6. interface-number ranges from 0 to 63. interface-number ranges from 0 to 63. No interface-index ranges from 0 to 63. group-id ranges from 1 to 12.
Device management commands
display power display rps license append temperature-limit
Basic system configuration commands WLAN Command Reference
configure-user count
display interface wlan-ess WLAN interface commands interface wlan-ess WLAN services commands All commands for hot AC backup bind wlan-ess display wlan ap-group
4-25
Volume
Module
Command hot-backup hellointerval wlan ap-group wlan permit-ap-group No
WX3024 No
WX3010 No
WX3008
group-id ranges from 1 to 64. group-id ranges from 1 to 64. member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported iactp6 not supported undo member ipv6 ipv6-address not supported ipv6 ipv6-address not supported No No No value ranges from 1600 to 4086 bytes and defaults to 1600 bytes. Only internal is supported No No
group-id ranges from 1 to 12. group-id ranges from 1 to 12. member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported iactp6 not supported undo member ipv6 ipv6-address not supported ipv6 ipv6-address not supported No No No value ranges from 1600 to 9216 bytes and defaults to 1600 bytes. Only internal is supported No No
group-id ranges from 1 to 12. group-id ranges from 1 to 12. member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported iactp6 not supported undo member ipv6 /ipv6-address not supported ipv6 ipv6-address not supported No No No value ranges from 1600 to 9216 bytes and defaults to 1600 bytes. Only internal is supported No No
display wlan client
display wlan mobility-group
WLAN roaming commands
member mobility-tunnel undo member
source Layer 2 LAN Switching Command Reference Ethernet interface commands duplex display loopback-detection flow-control jumboframe enable loopback loopback-detection control enable loopback-detection enable
4-26
Volume
Module
Command loopback-detection interval-time No
WX3024 No
WX3010 No
WX3008
shutdown
No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine No The maximum value is 32. count ranges from 0 to 2048. No No No No number ranges from 1 to 1024. number ranges from 1 to 1024 and defaults to 1024. number ranges from 0 to 2048.
No on GE1/0/1 of the access controller engine and GE1/0/11 on the switching engine No The maximum value is 32. count ranges from 0 to 2048. No No No No number ranges from 1 to 1024. number ranges from 1 to 1024 and defaults to 1024. number ranges from 0 to 2048.
No on GE1/0/1 of the access controller engine and GE1/0/9 on the switching engine No The maximum value is 32. count ranges from 0 to 2048. No No No No number ranges from 1 to 1024. number ranges from 1 to 1024 and defaults to 1024. number ranges from 0 to 2048.
speed VLAN commands MAC address table management commands Link aggregation commands MSTP commands Layer 2 forwarding commands Port mirroring commands interface vlan-interface mac-address max-mac-count All commands All commands All commands All commands pppoe-server max-sessions local-mac PPP commands pppoe-server max-sessions total ARP commands arp max-learning-num
Layer 2 WAN Command Reference
Layer 3 IP Services Command Reference
4-27
Volume
Module DNS commands
Command All commands for IPv6 DNS configuration ip redirects enable No No No No Yes No No No No No No No No No No No
WX3024 No No No No Yes No No No No No No No No No No No
WX3010 No No No No Yes No No No No No No No No No No No
WX3008
IP performance optimization commands Adjacency table commands IPv6 basics commands IPv6 application commands
ip ttl-expires enable ip unreachables enable display adjacent-table All commands ipv6 neighbors max-learning-num All commands display ipv6 routing-table display ipv6 routing-table ipv6-address display ipv6 routing-table ipv6-address1 ipv6-address2
Layer 3 IP Routing Command Reference
IP routing basics commands
display ipv6 routing-table protocol display ipv6 routing-table statistics display ipv6 routing-table verbose reset ipv6 routing-table statistics
IPv6 static routing commands IP Multicast Command Reference IGMP snooping commands
All commands
igmp-snooping fast-leave
Layer 2 aggregate interface view not supported 4-28
Layer 2 aggregate interface view not supported
Layer 2 aggregate interface view not supported
Volume
Module
Command igmp-snooping group-limit
WX3024 Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported No No Layer 2 aggregate interface view not supported No green action not supported
WX3010 Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported No No Layer 2 aggregate interface view not supported No green action not supported remark-lp-pass new-local-precedence not supported
WX3008 Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported No No Layer 2 aggregate interface view not supported No green action not supported remark-lp-pass new-local-precedence not supported
igmp-snooping static-group
igmp-snooping static-router-port vlan Multicast VLAN commands MLD snooping commands
port multicast-vlan
MLD snooping commands IPv6 multicast VLAN commands
IPv6 multicast VLAN commands port multicast-vlan ipv6 ACL and QoS Command Reference IPv6 ACL Configuration Commands
ACL Commands
QoS commands
car
remark-lp-pass new-local-precedence not supported
4-29
Volume
Module
Command display qos map-table display qos lr interface Yes No
WX3024 Yes No
WX3010 Yes No
WX3008
classifier tcl-name not supported inbound-interface interface-type interface-number not supported IPv6 ACL not supported rtp start-port start-port-number end-port end-port-number not supported
classifier tcl-name not supported inbound-interface interface-type interface-number not supported local-precedence local-precedence-list not supported IPv6 ACL not supported rtp start-port start-port-number end-port end-port-number not supported No No No No Yes No Yes Yes No No user-number ranges from 1 to 2048.
classifier tcl-name not supported inbound-interface interface-type interface-number not supported local-precedence local-precedence-list not supported IPv6 ACL not supported rtp start-port start-port-number end-port end-port-number not supported No No No No Yes No Yes Yes No No user-number ranges from 1 to 2048.
if-match
qos pql inbound-interface qos pql protocol qos cql inbound-interface qos cql protocol qos car qos lr qos map-table redirect Congestion management configuration commands Security Command Reference AAA commands 802.1X commands nas device-id device-id dot1x max-user
No No No No Yes No Yes Yes No No user-number ranges from 1 to 2048.
4-30
Volume
Module MAC authentication commands
Command mac-authentication max-user user-number portal server server-name method { direct | layer3 | redhcp } portal backup-group group-id nas device-id device-id
WX3024 user-number ranges from 1 to 1024 and defaults to 1024. layer3 supported
WX3010 user-number ranges from 1 to 1024 and defaults to 1024. layer3 supported
WX3008 user-number ranges from 1 to 1024 and defaults to 1024. layer3 supported
No No No
No No No
No No No
Portal commands
radius nas-backup-ip ip-address radius scheme radius-scheme-name nas-backup-ip ip-address portal max-user max-number ssh client ipv6 source ssh2 ipv6
No
No
No
max-number ranges from 1 to 2048. No No No No Yes Yes
max-number ranges from 1 to 2048. No No No No Yes Yes
max-number ranges from 1 to 2048. No No No No Yes Yes
SSH2.0 commands sftp client ipv6 source sftp ipv6 anti-attack protocol enable anti-attack protocol threshold Security protection commands display anti-attack { 11mac | admin | all | arp | data | dhcp | dot1x | hwtacas | icmp | igmp | lwapp | nd | ntp | pim | radius } display anti-attack { protocol protocol | all }
No
No
No
Yes
Yes
Yes
4-31
Volume
Module System maintenance and debugging commands
Command ping ipv6 tracert ipv6 display logfile buffer display logfile summary No No No No No No No No No No No Yes Yes Yes No No
WX3024 No No No No No No No No No No No Yes Yes Yes No No
WX3010 No No No No No No No No No No No Yes Yes Yes No No
WX3008
Network Management and Monitoring Command Reference Information center commands
info-center logfile enable info-center logfile frequency info-center logfile size-quota info-center logfile switch-directory logfile save mcms connect mcms reboot oap connect slot oap management-ip
OAA
OAA commands oap reboot slot ACSEI server configuration commands ACSEI client configuration commands
4-32
5
CLI ConfigurationThis chapter includes these sections: What Is CLI? Entering the CLI CLI Descriptions Using the CLI Configuring the CLI
What Is CLI?The command line interface (CLI) is an interface where you can interact with your device by typing text commands. At the CLI, you can instruct your device to perform a given task by typing a text command and then pressing Enter to submit it to your device. At the CLI, you can enter commands to configure your access controller (AC), and verify th