01 fundamentals configuration guide book

H3C WX Series Access Controllers Fundamentals Configuration Guide

Hangzhou H3C Technologies Co., Ltd. http://www.h3c.comDocument Version: 6W105-20101124

Copyright 2008-2010, Hangzhou H3C Technologies Co., Ltd. and its licensors

All Rights ReservedNo part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd.

Trademarks

H3C,

, Aolynk,

, H3Care,

, TOP G,

, IRF, NetPilot, Neocean, NeoVTL,

SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners.

NoticeThe information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

PrefaceThe H3C WX series documentation set describes the software features for the H3C WX Series Access Controllers and guides you through the software configuration procedures. The configuration guides also provide configuration examples to help you apply the software features to different network scenarios. The Fundamentals Configuration Guide describes CLI, logging in to the AC, device management, FTP and TFTP, user interface, file management, basic system configuration, HTTP, and hotfix configurations. This preface includes: Audience Conventions About the H3C WX Series Documentation Set Obtaining Documentation Technical Support Documentation Feedback

AudienceThis documentation is intended for: Network planners Field technical support and servicing engineers Network administrators working with the WX series

ConventionsThis section describes the conventions used in this documentation set.

Command conventionsConvention Boldface italic [] { x | y | ... } [ x | y | ... ] { x | y | ... } * Description Bold text represents commands and keywords that you enter literally as shown. Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none. Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one.

Convention [ x | y | ... ] * & #

Description Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you may select multiple choices or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times. A line that starts with a pound (#) sign is comments.

GUI conventionsConvention Boldface > Description Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK. Multi-level menus are separated by angle brackets. For example, File > Create > Folder.

SymbolsConvention Description Means reader be extremely careful. Improper operation may cause bodily injury. Means reader be careful. Improper operation may cause data loss or damage to equipment. Means an action or information that needs special attention to ensure successful configuration or good performance. Means a complementary description. Means techniques helpful for you to make configuration with ease.

Network topology iconsConvention Description Represents a generic network device, such as a router, switch, or firewall.

Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, an access controller module, or a switching engine on a unified switch.

Represents an access point.

Represents a mesh access point.

Convention

Description

Represents omnidirectional signals.

Represents directional signals.

About the H3C WX Series Documentation SetThe H3C WX series documentation set includes:Category Documents WX3000 Series Unified Wired and Wireless Switches Brochure Product description and specifications WX5000 Series Access Controllers Brochure WX6000 Series Access Controllers Brochure LSWM1WCM10 Access Module Card Manual LSWM1WCM20 Access Module Card Manual Hardware specifications and installation LSRM1WCM2A1 Access Module Card Manual LSQM1WCMB0 Access Module Installation Manual LSBM1WCM2A0 Access Module Installation Manual Controller Controller Controller Controller Controller Guide you through hardware specifications and installation methods to help you install your AC. Provide the hardware specifications of the cards, and describe how to install and remove the cards. Describe product specifications and benefits. Purposes

WX Series Access Controllers Getting Started Guides WX Series Access Controllers Configuration Guides WX Series Access Controllers Command References WX Series Access Controllers Web-based Configuration Guides WX3000 Series Release Notes Unified Switches

Guide you through the main functions of your AC, and describes how to install and log in to your AC, perform basic configurations, maintain software, and troubleshoot your AC. Describe software features and configuration procedures. Provide a quick reference to all available commands. Describes configuration procedures through the web interface.

Software configuration

Operations and maintenance

WX5002 Series Access Controllers Release Notes WX5004 Series Access Controllers Release Notes WX6103 Series Access Controllers Release Notes

Provide information about the product release, including the version history, hardware and software compatibility matrix, version upgrade information, technical support information, and software upgrading.

Obtaining DocumentationYou can access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com. Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support & Documents > Technical Documents] Provides hardware installation, software upgrading, getting started, and software feature configuration and maintenance documentation. [Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version.

Technical [email protected] http://www.h3c.com

Documentation FeedbackYou can e-mail your comments about product documentation to [email protected]. We appreciate your comments.

Read Compatibility Matrixes before using an H3C WX series access controller. Support of the H3C WX series access controllers for features and commands may vary by AC model. For more information, see Feature Matrixes and Command Matrixes in Compatibility Matrixes. The term AC in this document refers to H3C access controllers, access controller modules, and H3C WX series unified switches' access controller engines. The interface types and the number of interfaces vary by AC model. This document uses GE interfaces to show how to configure Ethernet interfaces. The models listed in this manual are not applicable to all regions. Please consult your local sales office for the models applicable to your region.

Table of Contents1 Applicable Models and Software Versions 1-1 2 Typical Network Scenarios2-1 AC Networking 2-1 Access Controller Module Networking 2-1 Unified Switch Networking 2-2 3 Feature Matrixes 3-1 Feature Matrix for the WX5000 Series3-1 Feature Matrix for the WX6000 Series3-7 Feature Matrix for the WX3000 Series3-11 4 Command Matrixes4-1 Command Matrix for the WX5000 Series 4-1 Command Matrix for the WX6000 Series 4-15 Command Matrix for the WX3000 Series 4-24 5 CLI Configuration 5-1 What Is CLI? 5-1 Entering the CLI 5-1 Entering CLI Through the Console Port 5-2 Entering CLI Through Telnet 5-6 CLI Descriptions5-7 Command Conventions 5-7 CLI View Description 5-8 Using the CLI 5-9 Using the CLI Online Help5-9 Command Line Error Information 5-10 Typing and Editing Commands 5-11 Displaying and Executing History Commands 5-11 Undo Form of a Command5-12 Controlling CLI Display 5-12 Configuring the CLI 5-15 Configuring CLI Hotkeys5-15 Configuring Command Aliases5-16 Synchronous Information Output5-17 Configuring Command Levels 5-18 Saving Configurations 5-19 6 FTP Configuration 6-1 FTP Overview 6-1 Introduction to FTP 6-1 Operation of FTP 6-1 Configuring the FTP Client6-3i

Establishing an FTP Connection 6-3 Operating the Directories on an FTP Server 6-4 Operating the Files on an FTP Server6-5 Using Another Username to Log In to an FTP Server 6-6 Maintaining and Debugging an FTP Connection 6-6 Terminating an FTP Connection 6-6 FTP Client Configuration Example 6-7 Configuring the FTP Server 6-8 Configuring FTP Server Operating Parameters 6-8 Configuring Authentication and Authorization on the FTP Server 6-9 FTP Server Configuration Example6-10 Displaying and Maintaining FTP 6-12 7 TFTP Configuration 7-1 TFTP Overview 7-1 Introduction to TFTP7-1 Operation of TFTP7-1 Configuring the TFTP Client 7-2 Displaying and Maintaining the TFTP Client7-3 TFTP Client Configuration Example 7-3 8 Logging In to an Access Controller Product 8-1 Logging In to an Access Controller Product8-1 Introduction to the User Interface8-1 Supported User Interfaces 8-1 User Interface Number 8-1 Common User Interface Configuration8-2 9 Logging In Through the Console Port9-1 Introduction 9-1 Setting Up the Connection to the Console Port 9-1 Console Port Login Configuration 9-4 Configuring Common Settings for Console Login 9-4 Console Port Login Configurations for Different Authentication Modes9-5 Configuring None Authentication for Console Port Login 9-6 Configuration Procedure9-6 Configuration Example 9-8 Configuring Password Authentication for Console Port Login9-9 Configuration Procedure9-9 Configuration Example 9-10 Configuring Scheme Authentication for Console Port Login 9-12 Configuration Procedure9-12 Configuration Example 9-14 10 Logging In Through Telnet 10-1 Introduction 10-1 Establishing a Telnet Connection 10-2

ii

Telnetting to an Access Controller from a Terminal 10-2 Telnetting to Another Access Controller from the Current One10-4 Common Configuration10-4 Telnet Configurations for Different Authentication Modes10-5 Configuring None Authentication for Telnet Login 10-6 Configuration Procedure10-6 Configuration Example 10-7 Configuring Password Authentication for Telnet Login10-8 Configuration Procedure10-8 Configuration Example 10-9 Configuring Scheme Authentication for Telnet Login 10-11 Configuration Procedure10-11 Configuration Example 10-13 11 Logging In Through the Web-Based Network Management System 11-1 Introduction 11-1 Setting Up a Web Configuration Environment 11-2 12 Logging In Through an NMS 12-1 Introduction 12-1 Connection Establishment 12-1 13 Controlling Login Users13-1 Introduction 13-1 Controlling Telnet Users 13-1 Prerequisites13-1 Controlling Telnet Users by SSIDs of Clients13-2 Controlling Telnet Users by Source IP Addresses 13-2 Controlling Telnet Users by Source and Destination IP Addresses13-3 Controlling Telnet Users by Source MAC Addresses 13-3 Configuration Example 13-4 Controlling Network Management Users by Source IP Addresses 13-5 Prerequisites13-5 Controlling Network Management Users by Source IP Addresses13-5 Configuration Example 13-6 14 File Management14-1 Managing Files14-1 Filename Formats14-1 Directory Operations 14-2 Displaying Directory Information 14-2 Displaying the Current Working Directory 14-2 Changing the Current Working Directory 14-2 Creating a Directory14-2 Removing a Directory 14-2 File Operations14-3 Displaying File Information 14-3

iii

Displaying the Contents of a File14-3 Renaming a File 14-3 Copying a File14-4 Moving a File 14-4 Deleting a File14-4 Restoring a File from the Recycle Bin 14-4 Emptying the Recycle Bin 14-4 Batch Operations 14-5 Storage Medium Operations 14-5 Managing the Space of a Storage Medium 14-5 Mounting/Unmounting a Storage Medium14-6 Setting Prompt Modes14-6 Example for File Operations 14-7 15 Configuration File Management15-1 Configuration File Overview15-1 Types of Configuration 15-1 Format and Content of a Configuration File 15-1 Coexistence of Multiple Configuration Files 15-2 Startup with the Configuration File 15-2 Saving the Current Running Configuration 15-2 Introduction15-2 Encrypting a Configuration File 15-2 Modes in Saving the Configuration 15-3 Setting Configuration Rollback15-4 Configuration Rollback 15-4 Configuration Task List15-4 Configuring Parameters for Saving the Current Running Configuration 15-5 Enabling Automatic Saving of the Running Configuration 15-6 Manually Saving the Current Running Configuration 15-6 Setting Configuration Rollback 15-7 Specifying a Startup Configuration File to Be Used at the Next System Startup 15-7 Backing Up the Startup Configuration File15-8 Deleting a Startup Configuration File to Be Used at the Next Startup15-8 Restoring a Startup Configuration File15-9 Displaying and Maintaining Device Configuration 15-9 16 Device Management 16-1 Device Management Overview 16-1 Device Management Configuration Task List 16-1 Registering the Software16-2 Rebooting the AC16-2 Configuring the Scheduled Automatic Execution Function16-3 Upgrading AC Software 16-4 AC Software Overview 16-4 Upgrading the Boot ROM Program Through Command Lines 16-5iv

Upgrading the Boot File Through Command Lines16-6 Configuring Temperature Alarm Thresholds for a Board16-6 Clearing the 16-bit Interface Indexes Not Used in the Current System16-6 Displaying and Maintaining Device Management Configuration 16-7 Device Management Configuration Examples16-8 Remote Scheduled Automatic Upgrade Configuration Example 16-8 17 User Interface Configuration 17-1 User Interface Overview17-1 Brief Introduction 17-1 Users and User Interfaces17-2 Numbering User Interfaces 17-2 User Interface Configuration Task List17-2 Configuring Asynchronous Serial Interface Attributes 17-3 Configuring Terminal Attributes 17-4 Configuring the auto-execute Command 17-5 Configuring User Privilege Level Under a User Interface 17-5 Configuring Access Restriction on VTY User Interfaces 17-6 Configuring Supported Protocols on VTY User Interfaces 17-7 Configuring Authentication Mode for Users at Login 17-7 Configuring Command Authorization 17-9 Configuring Command Accounting 17-10 Defining Shortcut Keys for Starting Terminal Sessions/Aborting Tasks17-10 Sending Messages to the Specified User Interfaces 17-11 Releasing the Connection Established on the User Interfaces17-11 Displaying and Maintaining User Interfaces17-11 User Interface Configuration Examples 17-12 User Authentication Configuration Example 17-12 Command Authorization Configuration Example 17-13 Command Accounting Configuration Example 17-14 18 Basic Configurations 18-1 Configuration Display 18-1 Quick Configuration18-2 Basic Configurations 18-2 Entering System View 18-3 Exiting the Current View 18-3 Exiting to User View 18-3 Configuring the AC Name 18-3 Configuring the System Clock 18-4 Configuring a Banner18-6 Configuring CLI Hotkeys18-8 Configuring Command Aliases18-9 Configuring User Privilege Levels and Command Levels 18-10 Configuring the Number of Concurrent Users18-16 Displaying and Maintaining Basic Configurations 18-16v

CLI Features 18-17 Introduction to CLI 18-17 Online Help with Command Lines 18-18 Synchronous Information Output18-19 Undo Form of a Command18-19 Editing Features 18-19 CLI Display 18-20 Saving History Commands18-23 Command Line Error Information 18-23 19 HTTP Configuration19-1 HTTP Overview19-1 How HTTP Works19-1 Logging In to the Access Controller (AC) Through HTTP 19-1 Protocols and Standards 19-1 Enabling the HTTP Service19-2 Configuring the Port Number of the HTTP Service19-2 Associating the HTTP Service with an ACL19-2 Displaying and Maintaining HTTP19-3 20 HTTPS Configuration 20-1 HTTPS Overview 20-1 HTTPS Configuration Task List 20-1 Associating the HTTPS Service with an SSL Server Policy 20-2 Enabling the HTTPS Service 20-2 Associating the HTTPS Service with a Certificate Attribute Access Control Policy20-3 Configuring the Port Number of the HTTPS Service 20-3 Associating the HTTPS Service with an ACL 20-4 Displaying and Maintaining HTTPS 20-4 HTTPS Configuration Example20-5 21 Hotfix Configuration 21-1 Hotfix Overview 21-1 Basic Concepts in Hotfix21-1 Patch Status 21-2 Hotfix Configuration Task List 21-4 Configuration Prerequisites21-5 One-Step Patch Installation 21-5 Step-by-Step Patch Installation21-6 Step-by-Step Patch Installation Task List21-6 Configuring the Patch File Location 21-6 Loading a Patch File21-6 Activating Patches 21-7 Confirming Running Patches21-7 One-Step Patch Uninstallation21-8 Step-by-Step Patch Uninstallation 21-8 Step-by-Step Patch Uninstallation Task List 21-8vi

Stopping Running Patches21-8 Deleting Patches 21-8 Displaying and Maintaining Hotfix21-9 Hotfix Configuration Example 21-9 22 Index 22-1

vii

1

Applicable Models and Software VersionsH3C WX series access controllers include the WX3000 series unified switches, and WX5000 and WX6000 series access controllers. Table 1-1 shows the applicable models and software versions. Table 1-1 Applicable models and software versionsModel WX3024 unified switches WX3010 unified switches WX3000-CMW520-R3111P03 WX3008 unified switches LSWM1WCM20 access controller module WX5002 access controller WX5002-CMW520-R1112 LS8M1WCMA0 access controller module WX5002V2 access controller WX5004 access controller LSWM1WCM10 access controller module WX6103 access controller LSQM1WCMB0 access controller module WX6103-CMW520-R2115P08 LSBM1WCM2A0 access controller module LSRM1WCM2A1 access controller module WX5004-CMW520-R2107P04 Software version

1-1

2

Typical Network Scenarios

AC NetworkingAs shown in the following figure, the AC is connected to Switch (Layer 2 or Layer 3) through GE1/0/1, which can be connected to APs directly or connected to APs over an IP network. Clients can be connected to the network through the APs to implement WLAN user access. Figure 2-1 AC networkingScheme 1 AC GE 1/0/1 Server

IP network

AP 1

AP 2

Client A

Client B

Access Controller Module NetworkingAs shown in the following figure, installed with an access controller module, Switch (Layer 2 or Layer 3) can be connected to APs directly or connected to APs over an IP network. Clients can be connected to the network through the APs to implement WLAN user access.

2-1

Figure 2-2 Access controller module networking

Unified Switch NetworkingAs shown in Figure 2-3, Unified switch (functions as both an AC and a Layer 2 switch) can be connected to APs directly or connected to APs over an IP network. Clients can be connected to the network through the APs to implement WLAN user access. Figure 2-3 Unified switch networking diagram

2-2

3

Feature MatrixesIn this document, Yes means a feature or command is supported, and No means not supported.

Feature Matrix for the WX5000 Series

The LS8M1WCMA0, LSWM1WCM10, and LSWM1WCM20 on the WX5000 series adopt the OAP architecture. Installed on the expansion slots of switches, they work as OAP cards to exchange data and status and control information with the switches through their internal service interfaces. Do not configure services such as QoS rate limiting and 802.1X authentication on GE interfaces on the LS8M1WCMA0, XGE 1/0/1 on the LSWM1WCM10, and the logical interface BAGG1 aggregated by GE 1/0/1 and GE 1/0/2 on the LSWM1WCM20.

Table 3-1 Feature matrix for the WX5000 seriesDocument Fundamentals Configuration Guide Module Feature AUX user interface Login configuration Console user interface Telnet User interface configuration WX5002 Yes No Yes Console user interface not supported WX5002V2 No Yes Yes AUX user interface not supported LS8M1WCMA0 Yes No Yes WX5004 No Yes Yes AUX user interface not supported LSWM1WCM10 Yes No Yes Console user interface not supported LSWM1WCM20 Yes No Yes Console user interface not supported

User interface type

Yes

3-1

Document

Module File system management configuration

Feature Configuration file encryption Storage media supported

WX5002 No

WX5002V2 No

LS8M1WCMA0 No

WX5004 No

LSWM1WCM10 No

LSWM1WCM20 Yes

Flash Supports 32 concurrent APs by default, and can be extended to support 64. No on the WX5002-12 8

CF

Flash

CF Supports 64 concurren t APs by default, and can be extended to support 256. Yes 256 Yes

CF

Flash

Device management configuration License

Supports 32 concurrent APs by default, and can be extended to support 64.

No



WLAN Configuration Guide Layer 2 LAN Switching Configuration Guide

Hot AC backup WLAN services configuration Ethernet interface configuration Maximum number of SSIDs supported Combo port configuration

No 128 Yes

Yes 256 Yes

No 128 No

Yes 256 No Yes. Do not use the shutdown command on internal interfaces; otherwise, the normal operation of the device will be affected. No

No 128 No Yes. Do not use the shutdown command on internal interfaces; otherwise, the normal operation of the device will be affected. No

Shutting down an Ethernet interface

Yes

Yes

Yes

Yes

Configuring flow control on an Ethernet interface

Yes

Yes

Yes

Yes

3-2

Document

Module

Feature Configuring loopback detection on an Ethernet interface

WX5002 Yes on GE interfaces only

WX5002V2 Yes on GE interfaces only

LS8M1WCMA0 Internal loopback testing supported on GE interfaces only No No Yes

WX5004 Yes on GE interfaces only Yes Yes No Remote port mirroring and cross-boa rd mirroring not supported Yes

LSWM1WCM10 Internal loopback testing supported on XGE interfaces only No No No

LSWM1WCM20 Internal loopback testing supported on GE interfaces only Yes No No

Link aggregation configuration MSTP Configuration Layer 2 forwarding configuration

Link aggregation STP Layer 2 forwarding

Yes No Yes

Yes Yes No

Port mirroring configuration

Port mirroring

Remote port mirroring and cross-board mirroring not supported

Remote port mirroring and cross-board mirroring not supported

No

No

No

DNS configuration IP performance optimization configuration Adjacency table configuration IPv6 basics configuration IPv6 application configuration

IPv6 DNS configuration Configuring ICMP to send error packets Displaying and maintaining adjacency table IPv6 basics configuration IPv6 application configuration

Yes

Yes

Yes

Yes

Yes

Yes

No

No

No

No

No

Layer 3 IP Services Configuration Guide

No

Yes

No

Yes

Yes

Yes

Yes Yes

Yes Yes

Yes Yes

Yes Yes

Yes Yes

Yes Yes

3-3

Document Layer 3 IP Routing Configuration Guide

Module IP routing basics configuration IPv6 static routing configuration MLD snooping configuration IPv6 multicast VLAN configuration ACL configuration

Feature IPv6 features IPv6 static routing configuration MLD snooping IPv6 multicast VLAN IPv6 ACL Configuring line rate

WX5002 Yes Yes Yes Yes Yes Yes No

WX5002V2 Yes Yes Yes Yes Yes Yes Yes

LS8M1WCMA0 Yes Yes Yes Yes Yes Yes No

WX5004 Yes Yes Yes Yes Yes Yes Yes

LSWM1WCM10 Yes Yes Yes Yes Yes Yes Yes

LSWM1WCM20 Yes Yes Yes Yes Yes Yes Yes

IP Multicast Configuration Guide

ACL and QoS Configuration Guide

QoS

Configuring CAR applicable to all traffic of online users Specifying the device ID to be used in stateful failover mode Configuring Layer 3 portal authentication Specifying the portal group to which the portal service backup interface belongs

Security Configuration Guide

AAA

No

Yes

No

Yes

Yes

No

No

Yes

No

Yes

Yes

Yes

No

Yes

No

Yes

Yes

No

Portal configuration

Specifying the device ID to be used in stateful failover mode Specifying the backup source IP address for RADIUS packets to be sent Specifying a source IPv6 address or interface for an SSH client

No

Yes

No

Yes

Yes

No

No

Yes

No

Yes

Yes

No

SSH2.0 configuration

Yes

Yes

Yes

Yes

Yes

Yes

3-4

Document

Module

Feature Establishing a connection between an SSH client and an IPv6 SSH server Specifying a source IPv6 address or interface for an SFTP client Establishing a connection between an SFTP client and an IPv6 SFTP server IPv6 SFTP client

WX5002

WX5002V2

LS8M1WCMA0

WX5004

LSWM1WCM10

LSWM1WCM20

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes Telnet, SNMP, and web managemen t packets whose destination IP address is the local host

Yes

Yes

Yes ICMP, IEC, Telnet, and SNMP packets whose destinatio n IP address is the local host

Yes

Yes

Security protection configuration

Management protocol packets supported

ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host

Telnet, SNMP, and web management packets whose destination IP address is the local host



3-5

Document

Module

Feature

WX5002 11MAC/802. 1X/ARP/DH CP/HWTAC AS/ICMP/IG MP/MLD/L WAPP/ND/ NTP/PIM/R ADIUS Data packets: all packets except the above packets.

WX5002V2

LS8M1WCMA0

WX5004

LSWM1WCM10

LSWM1WCM20

Other protocol packets supported

UDP/TCP/8 02.1X/DHC P/IGMP/NT P/ARP/LWA PP/LooPbac k/PPPoE/IA CTP/ACSEI/ STP/LWAP P_DATA/De fault

11MAC/802.1X/ ARP/DHCP/HW TACAS/ICMP/IG MP/MLD/LWAP P/ND/NTP/PIM /RADIUS Data packets: all packets except the above packets.

UDP/TCP/ 802.1X/D HCP/IGM P/NTP/AR P/LWAPP /LooPbac k/PPPoE/I ACTP/AC SEI/ STP/LWA PP_DATA /Default

UDP/TCP/802.1 X/DHCP/IGMP/ NTP/ARP/LWA PP/LooPback/P PPoE/IACTP/A CSEI/ STP/LWAPP_D ATA/Default

UDP/TCP/802.1 X/DHCP/IGMP/ NTP/ARP/LWA PP/LooPback/P PPoE/IACTP/A CSEI/ STP/LWAPP_D ATA/Default

Enabling attack prevention for protocols Configuring rate limits for a protocol Network Management and Monitoring Configuration Guide

No

Yes

No

Yes

Yes

Yes

No

Yes

No

Yes

Yes

Yes

Information center configuration

Logfile

No

Yes

No

Yes

Yes

No

OAP module configuration OAA Configuration Guide OAA configuration ACSEI server configuration ACSEI client configuration Access Controller Module Basic Configuration Guide Access Controller Module Basic Configuration Access Controller Module Basic Configuration

No No No

Yes Yes Yes

No No Yes

Yes Yes Yes

No No Yes

No No Yes

No

No

Yes

No

Yes

Yes

3-6


The switch interface module on the WX6103, and the LSQM1WCMB0, LSBM1WCM2A0, and LSRM1WCM2A1 access controller modules on the WX6000 series adopt the OAP architecture. Installed on the expansion slots of switches, they work as OAP cards to exchange data and status and control information with the switches through their internal service interfaces. The XGE interfaces on the switch interface module on the WX6103, and the LSQM1WCMB0, LSBM1WCM2A0, and LSWM1WCM10 access controller modules are internal interfaces. Do not configure services such as QoS rate limiting and 802.1X authentication on them.

Table 3-2 Feature matrix for the WX6000 seriesVolume Module Feature AUX user interface Login configuration Console user interface Telnet User interface configuration File management configuration User interface type Configuration file encryption Storage media supported Device management configuration No Yes Yes AUX user interface not supported No CF and USB 128 APs at most by default, and can be extended to 640 APs. Yes WX6103 LSQM1WCMB0 No Yes Yes AUX user interface not supported No CF and USB 128 APs at most by default, and can be extended to 640 APs. Yes LSBM1WCM2A0 No Yes Yes (IPv6 telnet not supported) AUX user interface not supported No CF and USB 128 APs at most by default, and can be extended to 640 APs. Yes LSRM1WCM2A1 Yes Yes Yes AUX user interface not supported No CF and USB 128 APs at most by default, and can be extended to 640 APs. Yes

Fundamentals Configuration Guide

License

WLAN Configuration

WLAN services

Hot AC backup

3-7

Volume Guide

Module configuration

Feature Maximum number of SSIDs supported Combo port configuration Shutting down an Ethernet interface 512

WX6103

LSQM1WCMB0 512

LSBM1WCM2A0 512

LSRM1WCM2A1 512

The MPU does not support the Combo port. Yes Internal loopback testing supported on XGE interfaces only No No No No No Yes No

No

No

No

Yes Internal loopback testing supported on XGE interfaces only No No No No No Yes No

Yes Internal loopback testing supported on XGE interfaces only No No No No No No No

Yes Internal loopback testing supported on XGE interfaces only No No No No No Yes No

Ethernet interface configuration Configuring flow control on an Ethernet interface Layer 2 LAN Switching Configuration Guide Link aggregation configuration MSTP Configuration Layer 2 forwarding configuration Port mirroring configuration DNS configuration IP performance optimization configuration Layer 3 IP Services Configuration Guide Adjacency table configuration IPv6 basics configuration IPv6 application configuration Loopback detection on an Ethernet interface Link aggregation STP Layer 2 forwarding Port mirroring IPv6 DNS configuration Configuring ICMP to send error packets Displaying and maintaining adjacency table IPv6 basics configuration IPv6 application configuration

Yes

Yes

Yes

Yes

Yes Yes

Yes Yes

No No

Yes Yes

3-8

Volume

Module IP routing basics configuration IPv6 static routing configuration MLD snooping configuration IPv6 multicast VLAN configuration ACL configuration

Feature IPv6-related displaying and maintaining commands IPv6 static routing configuration MLD snooping IPv6 multicast VLAN IPv6 ACL Configuring line rate Yes

WX6103

LSQM1WCMB0 Yes

LSBM1WCM2A0 No

LSRM1WCM2A1 Yes

Layer 3 IP Routing Configuration Guide

Yes Yes Yes Yes No Yes

Yes Yes Yes Yes No Yes

No No No No No Yes

Yes No No Yes No Yes



QoS



AAA configuration

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Portal configuration

Specifying the device ID to be used in stateful failover mode Specifying the backup source IP address for RADIUS packets to be sent

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

SSH2.0 configuration

Specifying a source IPv6 address or interface for an SSH client

Yes

Yes

No

Yes

3-9

Volume

Module

Feature Establishing a connection between an SSH client and an IPv6 SSH server Specifying a source IPv6 address or interface for an SFTP client Establishing a connection between an SFTP client and an IPv6 SFTP server IPv6 SFTP client

WX6103

LSQM1WCMB0

LSBM1WCM2A0

LSRM1WCM2A1

Yes

Yes

No

Yes

Yes

Yes

No

Yes

Yes

Yes

No

Yes

Yes ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/ DHCP/IGMP/NTP/ ARP/LWAPP/LooP back/PPPoE/IACT P/ACSEI/ STP/LWAPP_DAT A/Default Yes Yes


No ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/ DHCP/IGMP/NTP/ ARP/LWAPP/LooP back/PPPoE/IACT P/ACSEI/ STP/LWAPP_DAT A/Default Yes Yes


Management protocol packets supported



Enabling attack prevention for protocols Configuring rate limits for a protocol Network Management and Monitoring Configuration Guide OAA Configuration Guide Information center configuration OAA configuration Logfile OAP module configuration ACSEI server configuration

Yes

No

No

No

Yes Yes 3-10

No No

No No

No No

Volume

Module

Feature ACSEI client configuration Yes

WX6103

LSQM1WCMB0 Yes

LSBM1WCM2A0 Yes

LSRM1WCM2A1 Yes

Access Controller Module Basic Configuration Guide

Access Controller Module Basic Configuration

Access Controller Module Basic Configuration

No

Yes

Yes

Yes


The access controller engine and switching engine on the WX3000 series adopt the OAP architecture. The switching engine is integrated on the access controller engine as an OAP card. You actually log in to the access controller engine when you log in to the device by default. GE 1/0/1 interfaces on the WX3024, WX3010 and WX3008 are used to exchange data, status and control information with GE1/0/29 (WX3024), GE1/0/11 (WX3010) or GE1/0/9 (WX3008) on the switching engine. Do not configure services such as QoS rate limiting and 802.1X authentication on these interfaces.

Table 3-3 Feature matrix for the WX3000 seriesVolume Fundamentals Configuration Guide Login configuration Module Feature AUX user interface Console user interface Telnet User interface configuration File management configuration User interface type Configuration file encryption Yes No Yes (IPv6 telnet not supported) Console user interface not supported Yes WX3024 Yes No Yes (IPv6 telnet not supported) Console user interface not supported Yes WX3010 Yes No Yes (IPv6 telnet not supported) Console user interface not supported Yes WX3008

3-11

Volume

Module

Feature Storage media supported Flash

WX3024 Flash

WX3010 Flash No No 64 No

WX3008

Device management configuration

License Hot AC backup

24 APs at most by default, and can be extended to 48 APs. No 64 No No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine No Internal loopback testing supported on GE interfaces only No No No No No No Yes No

12 APs at most by default, and can be extended to 24 APs. No 64 No No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine No Internal loopback testing supported on GE interfaces only No No No No No No Yes No

WLAN Configuration Guide

WLAN services configuration

Maximum number of SSIDs supported Combo port configuration Shutting down an Ethernet interface

Ethernet interface configuration

No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine No Internal loopback testing supported on GE interfaces only No No No No No No Yes No

Configuring flow control on an Ethernet interface Loopback detection on an Ethernet interface

Layer 2 LAN Switching Configuration Guide Link aggregation configuration MSTP Configuration Layer 2 forwarding configuration Port mirroring configuration Layer 3 IP Services Configuration Guide DNS configuration IP performance optimization configuration Adjacency table configuration IPv6 basics configuration

Link aggregation configuration STP Layer 2 forwarding Port mirroring configuration IPv6 DNS configuration Configuring ICMP to send error packets Displaying and maintaining an adjacency table IPv6 basics configuration

3-12

Volume

Module IPv6 application configuration IP routing basics configuration IPv6 static routing configuration MLD snooping configuration

Feature IPv6 application configuration IPv6-related displaying and maintaining commands IPv6 static routing configuration MLS snooping IPv6 multicast VLAN IPv6 ACL Configuring line rate No No No No No No No Yes No Yes

WX3024 No No No No No No No Yes No Yes

WX3010 No No No No No No No Yes No Yes

WX3008

Layer 3 IP Routing Configuration Guide


IPv6 multicast VLAN configuration ACL configuration


QoS



AAA configuration

No

No

No

Portal configuration Specifying the device ID to be used in stateful failover mode Specifying the backup source IP address for RADIUS packets to be sent SSH2.0 configuration Specifying a source IPv6 address or interface for an SSH client Establishing a connection between an SSH client and an IPv6 SSH server No No No

No

No

No

No

No

No

No

No

No

3-13

Volume

Module

Feature Specifying a source IPv6 address or interface for an SFTP client Establishing a connection between an SFTP client and an IPv6 SFTP server IPv6 SFTP client Management protocol packets supported No

WX3024 No

WX3010 No

WX3008

No No ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/DHC P/IGMP/NTP/ARP/LWA PP/LooPback/PPPoE/I ACTP/ACSEI/ STP/LWAPP_DATA/De fault Yes Yes

No No ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/DHC P/IGMP/NTP/ARP/LWA PP/LooPback/PPPoE/I ACTP/ACSEI /STP/LWAPP_DATA/De fault Yes Yes

No No ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host UDP/TCP/802.1X/DHC P/IGMP/NTP/ARP/LWA PP/LooPback/PPPoE/I ACTP/ACSEI /STP/LWAPP_DATA/De fault Yes Yes



Enabling attack prevention for protocols Configuring rate limits for a protocol Network Management and Monitoring Configuration Guide Information center configuration Logfile OAP module configuration OAA Configuration Guide OAA configuration ACSEI server configuration ACSEI client configuration Access Controller Module Basic Configuration Guide Access Controller Module Basic Configuration Access Controller Module Basic Configuration

No Yes No No No

No Yes No No No

No Yes No No No

3-14

4

Command MatrixesIn this document, Yes means a feature or command is supported, and No means not supported.

Command Matrix for the WX5000 SeriesTable 4-1 Command matrix for the WX5000 seriesVolume Fundamentals Command Reference Module Login commands Command telnet ipv6 Yes WX5002 WX5002V2 Yes LS8M1WCMA0 Yes WX5004 Yes Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6. LSWM1WCM10 Yes LSWM1WCM20 Yes

AUX and VTY user interfaces are supported. User Interface Commands display user-interface When number is an absolute index, the value ranges from 0 to 5.

Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.

AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5.



4-1

Volume

Module

Command

WX5002

WX5002V2

LS8M1WCMA0

WX5004 Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6. Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6.

LSWM1WCM10

LSWM1WCM20

AUX and VTY user interfaces are supported. free user-interface When number is an absolute index, the value ranges from 0 to 5.





AUX and VTY user interfaces are supported. send When number is an absolute index, the value ranges from 0 to 5.





4-2

Volume

Module

Command

WX5002

WX5002V2

LS8M1WCMA0

WX5004 Console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6. No Yes Yes Yes Yes Yes usb not supported fan-id ranges from 1 to 5. power-id takes the value of 1 or 2. No

LSWM1WCM10

LSWM1WCM20

AUX and VTY user interfaces are supported. user-interface When number is an absolute index, the value ranges from 0 to 5.





configuration encrypt ftp ipv6 File management commands mount open ipv6 tftp ipv6 umount Device management commands

No Yes No No Yes No cf-card, usb, subslot subslot-number not supported fan-id takes the value of 1 or 2. power-id takes the value of 1 or 2. No

No Yes No No Yes No usb not supported

No Yes No No Yes No cf-card, usb, subslot subslot-number not supported fan-id takes the value of 1 or 2. power-id takes the value of 1 or 2. No

No Yes No No Yes No usb and subslot subslot-number not supported No

Yes Yes No No Yes No cf-card, usb, subslot subslot-number not supported No

display device

display fan

fan-id ranges from 1 to 5. power-id takes the value of 1 or 2. No

display power

No

No

display rps

No

No

4-3

Volume

Module

Command license append

WX5002 No on the WX5002-128 By default, lower-value is 5, and upper-value is 60 number ranges from 1 to 6.

WX5002V2 Yes By default, lower-value is 0, and upper-value is 90 number ranges from 1 to 7.

LS8M1WCMA0 Yes By default, lower-value is 5, and upper-value is 60 number ranges from 1 to 6.

WX5004 Yes By default, lower-valu e is 0, and upper-valu e is 90 number ranges from 1 to 7. interface-n umber ranges from 0 to 1023. interface-n umber ranges from 0 to 1023. Yes interface-in dex ranges from 0 to 1023. group-id ranges from 1 to 64.

LSWM1WCM10 Yes

LSWM1WCM20 Yes By default, lower-value is 0, and upper-value is 60 number ranges from 1 to 7.

temperature-limit

No

Basic system configuration commands WLAN Command Reference WLAN interface commands

configure-user count

number ranges from 1 to 7.

display interface wlan-ess

interface-numbe r ranges from 0 to 127.

interface-numb er ranges from 0 to 1023.



interface-number ranges from 0 to 127.

interface wlan-ess


interface-numb er ranges from 0 to 1023.



interface-number ranges from 0 to 127.

WLAN services commands

All commands for hot AC backup

No interface-index ranges from 0 to 127.

Yes interface-index ranges from 0 to 1023.



Yes interface-index ranges from 0 to 1023.

bind wlan-ess

display wlan ap-group

group-id ranges from 1 to 128.





4-4

Volume

Module

Command

WX5002

WX5002V2

LS8M1WCMA0

WX5004 hellointerv al ranges from 100 to 2000 millisecond s, and defaults to 2000 millisecond s. group-id ranges from 1 to 64. group-id ranges from 1 to 64. Yes Yes Yes Yes Yes Yes Yes Yes Yes

LSWM1WCM10

LSWM1WCM20

hot-backup hellointerval

No

hellointerval ranges from 100 to 2000 milliseconds, and defaults to 2000 milliseconds.

No

No

hellointerval ranges from 100 to 2000 milliseconds, and defaults to 2000 milliseconds.

wlan ap-group






wlan permit-ap-group display wlan client display wlan mobility-group WLAN roaming commands member mobility-tunnel undo member source Layer 2 LAN Switching Command Reference Ethernet interface commands duplex display loopback-detecti on flow-control






Yes Yes Yes Yes Yes Yes Yes Yes Yes



Yes Yes Yes Yes Yes Yes No Yes No

Yes Yes Yes Yes Yes Yes No No No

4-5

Volume

Module

Command

WX5002

WX5002V2

LS8M1WCMA0

WX5004 value ranges from 1600 to 4096 bytes and defaults to 1600 bytes. Yes Yes Yes Yes Yes Yes The maximum value is 512. count ranges from 0 to 8192.

LSWM1WCM10

LSWM1WCM20

jumboframe enable

value ranges from 1600 to 9216 bytes and defaults to 1600 bytes.





loopback loopback-detecti on control enable loopback-detecti on enable loopback-detecti on interval-time shutdown speed interface vlan-interface

Yes Yes Yes Yes Yes Yes The maximum value is 64.

Yes Yes Yes Yes Yes Yes The maximum value is 64.

Yes Yes Yes Yes Yes No The maximum value is 64.

Only internal is supported. No No No No No The maximum value is 512.

Only internal is supported. No No No No No The maximum value is 64.

VLAN commands

MAC Address Table Commands

mac-address max-mac-count All commands in the link aggregation commands manual All commands in the MSTP commands manual

count ranges from 0 to 4096.





Link aggregation commands

Yes

Yes

No

No

No

No

MSTP commands

No

Yes

No

Yes

No

No

4-6

Volume

Module Layer 2 forwarding commands

Command All commands in the Layer 2 commands manual All commands in the port mirroring commands manual pppoe-server max-sessions local-mac

WX5002

WX5002V2

LS8M1WCMA0

WX5004

LSWM1WCM10

LSWM1WCM20

Yes

No

Yes

Yes

No

No

Port mirroring commands

Yes

Yes

No

Yes

No

No




number ranges from 1 to 2048. number ranges from 1 to 65535 and defaults to 4096. number ranges from 0 to 8192.



Layer 2 WAN Command Reference

PPP commands pppoe-server max-sessions total number ranges from 1 to 2048 and defaults to 1024. number ranges from 1 to 4096 and defaults to 4096. number ranges from 1 to 2048 and defaults to 1024.

number ranges from 1 to 4096 and defaults to 4096.


Layer 3 IP Services Command Reference

ARP commands

arp max-learning-nu m All commands in IPv6 DNS configuration commands ip redirects enable






DNS commands

Yes

Yes

Yes

Yes

Yes

Yes

Yes Yes Yes No

No No No Yes

No No No No

No No No Yes

No No No Yes

No No No Yes

IP performance optimization commands

ip ttl-expires enable ip unreachables enable

Adjacency table commands

display adjacent-table

4-7

Volume

Module

Command All commands in IPv6 basics commands manual

WX5002

WX5002V2

LS8M1WCMA0

WX5004

LSWM1WCM10

LSWM1WCM20

Yes

Yes

Yes

Yes

Yes

Yes

IPv6 basics commands ipv6 neighbors max-learning-nu m







IPv6 application commands Layer 3 IP Routing Command Reference

All commands in IPv6 application commands manual display ipv6 routing-table display ipv6 routing-table ipv6-address display ipv6 routing-table ipv6-address1 ipv6-address2

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

IP routing basics commands

display ipv6 routing-table protocol display ipv6 routing-table statistics display ipv6 routing-table verbose reset ipv6 routing-table statistics

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

4-8

Volume

Module IPv6 static routing commands

Command All commands in IPv6 static routing commands manual

WX5002

WX5002V2

LS8M1WCMA0

WX5004

LSWM1WCM10

LSWM1WCM20

Yes

Yes

Yes

Yes

Yes

Yes

IP Multicast Command Reference

igmp-snooping fast-leave

Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Layer 2 aggregate interface view supported Yes Yes



Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Yes Yes

Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Yes Yes


igmp-snooping group-limit IGMP snooping commands igmp-snooping static-group

igmp-snooping static-router-port vlan

Multicast VLAN commands

port multicast-vlan

MLD snooping commands IPv6 multicast VLAN commands


4-9

Volume

Module

Command port multicast-vlan ipv6

WX5002 Layer 2 aggregate interface view supported

WX5002V2 Layer 2 aggregate interface view supported

LS8M1WCMA0 Layer 2 aggregate interface view supported

WX5004 Layer 2 aggregate interface view not supported Yes green action not supported remark-lppass new-localprecedenc e not supported Yes Yes

LSWM1WCM10 Layer 2 aggregate interface view not supported

LSWM1WCM20 Layer 2 aggregate interface view supported

ACL and QoS Command Reference

ACL Commands

IPv6 ACL Configuration Commands

Yes

Yes

Yes

Yes

Yes

QoS Commands

car

pir peak-informatio n-rate not supported

green action not supported remark-lp-pas s new-local-prec edence not supported

pir peak-informatio n-rate not supported

green action not supported remark-lp-pass new-local-prece dence not supported

green action not supported remark-lp-pass new-local-prece dence not supported

display qos lr interface display qos map-table

Yes dscp-lp not supported

Yes Yes

Yes dscp-lp not supported

Yes Yes

Yes Yes

4-10

Volume

Module

Command

WX5002

WX5002V2

LS8M1WCMA0

WX5004 classifier tcl-name not supported inbound-i nterface interface-ty pe interface-n umber not supported

LSWM1WCM10

LSWM1WCM20

classifier tcl-name not supported inbound-interf ace interface-type interface-numb er not supported if-match Yes local-precede nce local-preceden ce-list not supported rtp start-port start-port-numb er end-port end-port-numb er not supported Yes

classifier tcl-name not supported inbound-interfa ce interface-type interface-numbe r not supported local-preceden ce local-precedenc e-list not supported rtp start-port start-port-numbe r end-port end-port-numbe r not supported

classifier tcl-name not supported inbound-interfa ce interface-type interface-number not supported local-preceden ce local-precedenc e-list not supported rtp start-port start-port-numbe r end-port end-port-number not supported

local-prec edence local-prece dence-list not supported rtp start-port start-port-n umber end-port end-port-n umber not supported

qos pql inbound-interfac e qos pql protocol qos cql inbound-interfac e qos cql protocol qos car qos map-table

Yes Yes Yes Yes No dscp-lp not supported

No No No No Yes Yes

Yes Yes Yes Yes No dscp-lp not supported

No No No No Yes Yes

No No No No Yes Yes

No No No No Yes Yes

4-11

Volume

Module

Command

WX5002

WX5002V2 [ ebs excess-burst-si ze ] not supported Yes Yes user-number ranges from 1 to 4096. user-number ranges from 1 to 4096 and defaults to 4096.

LS8M1WCMA0

WX5004

LSWM1WCM10 [ ebs excess-burst-siz e ] not supported Yes Yes user-number ranges from 1 to 4096.

LSWM1WCM20 [ ebs excess-burst-siz e ] not supported Yes No user-number ranges from 1 to 2048.

qos lr

Yes

Yes

No

redirect Security Command Reference AAA commands nas device-id device-id

No No user-number ranges from 1 to 2048.

No No user-number ranges from 1 to 2048.

Yes Yes user-numb er ranges from 1 to 4096. user-numb er ranges from 1 to 4096 and defaults to 4096. layer3 supported

802.1X commands

dot1x max-user

MAC authentication commands

mac-authenticati on max-user user-number

user-number ranges from 1 to 1024 and defaults to 1024.




Portal commands

portal server server-name method { direct | layer3 | redhcp } portal backup-group group-id nas device-id device-id radius nas-backup-ip ip-address radius scheme radius-scheme-na me nas-backup-ip ip-address

layer3 not supported

layer3 supported

layer3 not supported

layer3 supported

layer3 supported

No

Yes

No

Yes

Yes

No

No

Yes

No

Yes

Yes

No

No

Yes

No

Yes

Yes

No

No

Yes

No

Yes

Yes

No

4-12

Volume

Module

Command portal max-user max-number ssh client ipv6 source

WX5002 max-number ranges from 1 to 2048. Yes Yes Yes Yes No

WX5002V2 max-number ranges from 1 to 4096. Yes Yes Yes Yes Yes

LS8M1WCMA0 max-number ranges from 1 to 2048. Yes Yes Yes Yes No

WX5004 max-numb er ranges from 1 to 4096. Yes Yes Yes Yes Yes

LSWM1WCM10 max-number ranges from 1 to 4096. Yes Yes Yes Yes Yes

LSWM1WCM20 max-number ranges from 1 to 2048. Yes Yes Yes Yes Yes

SSH2.0 commands

ssh2 ipv6 sftp client ipv6 source sftp ipv6 anti-attack protocol enable anti-attack protocol threshold display anti-attack { 11mac | admin | all | arp | data | dhcp | dot1x | hwtacas | icmp | igmp | lwapp | nd | ntp | pim | radius } display anti-attack { protocol protocol | all }

No

Yes

No

Yes

Yes

Yes

Security protection commands

Yes

No

Yes

No

No

No

No

Yes

No

Yes

Yes

Yes

Network Management and Monitoring Command Reference

System maintenance and debugging commands Information center commands

ping ipv6 tracert ipv6 display logfile buffer

Yes Yes No

Yes Yes Yes

Yes Yes No

Yes Yes Yes

Yes Yes Yes

Yes Yes No

4-13

Volume

Module

Command display logfile summary info-center logfile enable info-center logfile frequency info-center logfile size-quota info-center logfile switch-directory logfile save No No No No No No

WX5002

WX5002V2 Yes Yes Yes Yes Yes Yes

LS8M1WCMA0 No No No No No No

WX5004 Yes Yes Yes Yes Yes Yes

LSWM1WCM10 Yes Yes Yes Yes Yes Yes Yes on the device side of the access controller module Yes No No No No

LSWM1WCM20 No No No No No No Yes on the device side of the access controller module Yes No No No No

mcms connect

No

No

No

No

mcms reboot oap connect slot OAA OAA commands oap management-ip oap reboot slot ACSEI server configuration commands ACSEI client configuration commands

No No No No No

No Yes Yes Yes Yes

No No No No No

No Yes Yes Yes Yes

No

Yes

Yes

Yes

Yes

Yes

4-14

Command Matrix for the WX6000 SeriesTable 4-2 Command matrix for the WX6000 seriesVolume Fundamentals Command Reference Module Login commands Command telnet ipv6 Yes AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 6. AUX, console and VTY user interfaces are supported. free user-interface When number is an absolute index, the value ranges from 0 to 6. AUX, console and VTY user interfaces are supported. send When number is an absolute index, the value ranges from 0 to 6. AUX, console and VTY user interfaces are supported. user-interface When number is an absolute index, the value ranges from 0 to 6. No Yes 4-15 WX6103 LSQM1WCMB0 Yes AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. No Yes LSBM1WCM2A0 No AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. No No LSRM1WCM2A1 Yes AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. AUX, console and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 12. No Yes

display user-interface

User Interface Commands

File management configuration commands

configuration encrypt ftp ipv6

Volume

Module

Command mount open ipv6 tftp ipv6 umount display device display fan display power Yes Yes Yes Yes Yes

WX6103

LSQM1WCMB0 Yes Yes Yes Yes Yes fan-id can only be 1. power-id takes the value of 1 or 2. No Yes By default, lower-value is 0, and upper-value is 86 number ranges from 1 to 13. interface-number ranges from 0 to 1023. interface-number ranges from 0 to 1023. Yes interface-index ranges from 0 to 1023. group-id ranges from 1 to 640.

LSBM1WCM2A0 Yes Yes No Yes Yes fan-id can only be 1. power-id takes the value of 1 or 2. No Yes By default, lower-value is 0, and upper-value is 86 number ranges from 1 to 13. interface-number ranges from 0 to 1023. interface-number ranges from 0 to 1023. Yes interface-index ranges from 0 to 1023. group-id ranges from 1 to 640.

LSRM1WCM2A1 Yes Yes Yes Yes Yes fan-id can only be 1. power-id takes the value of 1 or 2. No Yes By default, lower-value is 0, and upper-value is 86 number ranges from 1 to 13. interface-number ranges from 0 to 1023. interface-number ranges from 0 to 1023. Yes interface-index ranges from 0 to 1023. group-id ranges from 1 to 640.

fan-id can only be 1. power-id takes the value of 1 or 2. No Yes By default, lower-value is 0, and upper-value is 86 number ranges from 1 to 13. interface-number ranges from 0 to 1023. interface-number ranges from 0 to 1023. Yes interface-index ranges from 0 to 1023. group-id ranges from 1 to 640.

Device management commands

display rps license append temperature-limit

Basic system configuration commands WLAN Command Reference WLAN interface commands


display interface wlan-ess

interface wlan-ess WLAN service commands All commands for hot AC backup bind wlan-ess display wlan ap-group

4-16

Volume

Module

Command

WX6103 hellointerval ranges from 30 to 2000 milliseconds, and defaults to 2000 milliseconds. group-id ranges from 1 to 640. group-id ranges from 1 to 640. Yes

LSQM1WCMB0 hellointerval ranges from 30 to 2000 milliseconds, and defaults to 2000 milliseconds. group-id ranges from 1 to 640. group-id ranges from 1 to 640. Yes

LSBM1WCM2A0 hellointerval ranges from 30 to 2000 milliseconds, and defaults to 2000 milliseconds. group-id ranges from 1 to 640. group-id ranges from 1 to 640. member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported iactp6 not supported undo member ipv6 ipv6-address not supported ipv6 ipv6-address not supported Yes Yes Yes value ranges from 1600 to 4096 bytes and defaults to 1600 bytes.

LSRM1WCM2A1 hellointerval ranges from 30 to 2000 milliseconds, and defaults to 2000 milliseconds. group-id ranges from 1 to 640. group-id ranges from 1 to 640. Yes

hot-backup hellointerval

wlan ap-group wlan permit-ap-group display wlan client

display wlan mobility-group

Yes

Yes

Yes

WLAN roaming commands

member mobility-tunnel undo member

Yes Yes Yes

Yes Yes Yes

Yes Yes Yes

source Layer 2 LAN Switching Command Reference Ethernet interface commands duplex display loopback-detection flow-control

Yes Yes Yes Yes value ranges from 1600 to 9216 bytes and defaults to 1600 bytes.



jumboframe enable

4-17

Volume

Module

Command loopback loopback-detection control enable loopback-detection enable loopback-detection interval-time shutdown speed Yes Yes Yes Yes Yes Yes

WX6103

LSQM1WCMB0 Yes Yes Yes Yes Yes No The maximum value is 1024. count ranges from 0 to 24576. No No No No number ranges from 1 to 20480. number ranges from 1 to 65535 and defaults to 4096. number ranges from 0 to 24576. Yes

LSBM1WCM2A0 Yes Yes Yes Yes Yes Yes The maximum value is 1024. count ranges from 0 to 24576. No No No No number ranges from 1 to 20480. number ranges from 1 to 65535 and defaults to 4096. number ranges from 0 to 24576. No

LSRM1WCM2A1 Yes Yes Yes Yes Yes No The maximum value is 1024. count ranges from 0 to 24576. No No No No number ranges from 1 to 20480. number ranges from 1 to 65535 and defaults to 4096. number ranges from 0 to 24576. Yes

VLAN commands MAC address table management commands Link aggregation commands MSTP commands Layer 2 forwarding commands Port mirroring commands

interface vlan-interface mac-address max-mac-count All commands All commands All commands All commands pppoe-server max-sessions local-mac

The maximum value is 1024. count ranges from 0 to 24576. No No No No number ranges from 1 to 20480. number ranges from 1 to 65535 and defaults to 4096. number ranges from 0 to 24576. Yes 4-18


PPP commands pppoe-server max-sessions total


ARP commands DNS commands

arp max-learning-num All commands for IPv6 DNS configuration

Volume

Module

Command ip redirects enable No No No Yes Yes

WX6103

LSQM1WCMB0 No No No Yes Yes number ranges from 1 to 1024 and defaults to 1024. Yes Yes

LSBM1WCM2A0 No No No Yes No number ranges from 1 to 1024 and defaults to 1024. No No

LSRM1WCM2A1 No No No Yes Yes number ranges from 1 to 1024 and defaults to 1024. Yes Yes

IP performance optimization commands

ip ttl-expires enable ip unreachables enable display adjacent-table All commands

Adjacency table commands

IPv6 basics commands

ipv6 neighbors max-learning-num All commands display ipv6 routing-table display ipv6 routing-table ipv6-address display ipv6 routing-table ipv6-address1 ipv6-address2 display ipv6 routing-table protocol display ipv6 routing-table statistics display ipv6 routing-table verbose

number ranges from 1 to 1024 and defaults to 1024. Yes Yes

IPv6 application commands IP Routing Command Reference IP routing basics commands

Yes

Yes

No

Yes

Yes

Yes

No

Yes

Yes

Yes

No

Yes

Yes

Yes

No

Yes

Yes

Yes

No

Yes

4-19

Volume

Module

Command reset ipv6 routing-table statistics Yes

WX6103

LSQM1WCMB0 Yes

LSBM1WCM2A0 No

LSRM1WCM2A1 Yes

IPv6 static routing commands

All commands igmp-snooping fast-leave igmp-snooping group-limit

Yes Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Yes Yes Layer 2 aggregate interface view not supported Yes

Yes Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Yes Yes Layer 2 aggregate interface view not supported Yes

No Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported No No Layer 2 aggregate interface view not supported Yes

Yes Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported No No Layer 2 aggregate interface view not supported Yes

IGMP snooping commands igmp-snooping static-group igmp-snooping static-router-port vlan Multicast VLAN commands MLD snooping commands port multicast-vlan MLD snooping commands IPv6 multicast VLAN commands IPv6 multicast VLAN commands port multicast-vlan ipv6 IPv6 ACL Configuration Commands

IP Multicast Command Reference

ACL and QoS Command Reference

ACL Commands

4-20

Volume

Module

Command

WX6103 green action not supported

LSQM1WCMB0 green action not supported remark-lp-pass new-local-precedenc e not supported No Yes classifier tcl-name not supported inbound-interface interface-type interface-number not supported rtp start-port start-port-number end-port end-port-number not supported No No No No Yes No Yes Yes Yes

LSBM1WCM2A0 green action not supported remark-lp-pass new-local-precedenc e not supported No Yes classifier tcl-name not supported inbound-interface interface-type interface-number not supported rtp start-port start-port-number end-port end-port-number not supported No No No No Yes No Yes Yes Yes

LSRM1WCM2A1 green action not supported remark-lp-pass new-local-precedenc e not supported No Yes classifier tcl-name not supported inbound-interface interface-type interface-number not supported rtp start-port start-port-number end-port end-port-number not supported No No No No Yes No Yes Yes Yes

car

remark-lp-pass new-local-precedenc e not supported No Yes classifier tcl-name not supported inbound-interface interface-type interface-number not supported rtp start-port start-port-number end-port end-port-number not supported

display qos lr interface display qos map-table

if-match QoS commands

qos pql inbound-interface qos pql protocol qos cql inbound-interface qos cql protocol qos car qos lr qos map-table redirect Security Command Reference AAA commands nas device-id device-id

No No No No Yes No Yes Yes Yes

4-21

Volume

Module 802.1X commands MAC authentication commands

Command dot1x max-user mac-authentication max-user user-number portal server server-name method { direct | layer3 | redhcp } portal backup-group group-id nas device-id device-id

WX6103 user-number ranges from 1 to 20480. user-number ranges from 1 to 4096 and defaults to 4096.

LSQM1WCMB0 user-number ranges from 1 to 20480. user-number ranges from 1 to 4096 and defaults to 4096.

LSBM1WCM2A0 user-number ranges from 1 to 20480. user-number ranges from 1 to 4096 and defaults to 4096.

LSRM1WCM2A1 user-number ranges from 1 to 20480. user-number ranges from 1 to 4096 and defaults to 4096.

layer3 supported

layer3 supported

layer3 supported

layer3 supported

Yes Yes Yes

Yes Yes Yes

Yes Yes Yes

Yes Yes Yes

Portal commands

radius nas-backup-ip ip-address radius scheme radius-scheme-name nas-backup-ip ip-address portal max-user max-number ssh client ipv6 source ssh2 ipv6

Yes

Yes

Yes

Yes

max-number ranges from 1 to 20480. Yes Yes Yes Yes Yes Yes


max-number ranges from 1 to 20480. No No No No Yes Yes


SSH2.0 commands sftp client ipv6 source sftp ipv6 Security protection commands anti-attack protocol enable anti-attack protocol threshold

4-22

Volume

Module

Command display anti-attack { 11mac | admin | all | arp | data | dhcp | dot1x | hwtacas | icmp | igmp | lwapp | nd | ntp | pim | radius } display anti-attack { protocol protocol | all }

WX6103

LSQM1WCMB0

LSBM1WCM2A0

LSRM1WCM2A1

No

No

No

No

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No Yes Yes Yes

Yes Yes Yes No No No No No No No No No No No No

Yes No No No No No No No No No No No No No No

Yes Yes Yes No No No No No No No No No No No No

System maintenance and debugging commands

ping ipv6 tracert ipv6 display logfile buffer display logfile summary

Network Management and Monitoring Command Reference

info-center logfile enable Information center commands info-center logfile frequency info-center logfile size-quota info-center logfile switch-directory logfile save

OAA

OAA commands

mcms connect mcms reboot oap connect slot oap management-ip oap reboot slot

4-23

Volume

Module

Command ACSEI server configuration commands ACSEI client configuration commands Yes

WX6103

LSQM1WCMB0 No

LSBM1WCM2A0 No

LSRM1WCM2A1 No

Yes

Yes

Yes

Yes

Command Matrix for the WX3000 SeriesTable 4-3 Command matrix for the WX3000 seriesVolume Fundamentals Command Reference Module Login commands Command telnet ipv6 No AUX and VTY user interfaces are supported. display user-interface When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. free user-interface User Interface Commands send When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. user-interface When number is an absolute index, the value ranges from 0 to 5. 4-24 WX3024 No AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. WX3010 No AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. AUX and VTY user interfaces are supported. When number is an absolute index, the value ranges from 0 to 5. WX3008

Volume

Module

Command configuration encrypt ftp ipv6 Yes No No No No No

WX3024 Yes No No No No No

WX3010 Yes No No No No No

WX3008

File management configuration commands

mount open ipv6 tftp ipv6 umount display device display fan

cf-card and usb not supported fan-id takes the value of 1 or 2. power-id can only be 1. Yes Yes By default, lower-value is 4, and upper-value is 79. number ranges from 1 to 6. interface-number ranges from 0 to 63. interface-number ranges from 0 to 63. No interface-index ranges from 0 to 63. group-id ranges from 1 to 64.

cf-card and usb not supported fan-id ranges from 1 to 3. power-id can only be 1. No Yes By default, lower-value is 0, and upper-value is 63. number ranges from 1 to 6. interface-number ranges from 0 to 63. interface-number ranges from 0 to 63. No interface-index ranges from 0 to 63. group-id ranges from 1 to 12.

cf-card and usb not supported fan-id ranges from 1 to 3. power-id can only be 1. No Yes By default, lower-value is 0, and upper-value is 63. number ranges from 1 to 6. interface-number ranges from 0 to 63. interface-number ranges from 0 to 63. No interface-index ranges from 0 to 63. group-id ranges from 1 to 12.

Device management commands

display power display rps license append temperature-limit

Basic system configuration commands WLAN Command Reference


display interface wlan-ess WLAN interface commands interface wlan-ess WLAN services commands All commands for hot AC backup bind wlan-ess display wlan ap-group

4-25

Volume

Module

Command hot-backup hellointerval wlan ap-group wlan permit-ap-group No

WX3024 No

WX3010 No

WX3008

group-id ranges from 1 to 64. group-id ranges from 1 to 64. member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported iactp6 not supported undo member ipv6 ipv6-address not supported ipv6 ipv6-address not supported No No No value ranges from 1600 to 4086 bytes and defaults to 1600 bytes. Only internal is supported No No

group-id ranges from 1 to 12. group-id ranges from 1 to 12. member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported iactp6 not supported undo member ipv6 ipv6-address not supported ipv6 ipv6-address not supported No No No value ranges from 1600 to 9216 bytes and defaults to 1600 bytes. Only internal is supported No No

group-id ranges from 1 to 12. group-id ranges from 1 to 12. member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported member ipv6 ipv6-address not supported iactp6 not supported undo member ipv6 /ipv6-address not supported ipv6 ipv6-address not supported No No No value ranges from 1600 to 9216 bytes and defaults to 1600 bytes. Only internal is supported No No

display wlan client

display wlan mobility-group

WLAN roaming commands

member mobility-tunnel undo member

source Layer 2 LAN Switching Command Reference Ethernet interface commands duplex display loopback-detection flow-control jumboframe enable loopback loopback-detection control enable loopback-detection enable

4-26

Volume

Module

Command loopback-detection interval-time No

WX3024 No

WX3010 No

WX3008

shutdown

No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine No The maximum value is 32. count ranges from 0 to 2048. No No No No number ranges from 1 to 1024. number ranges from 1 to 1024 and defaults to 1024. number ranges from 0 to 2048.



speed VLAN commands MAC address table management commands Link aggregation commands MSTP commands Layer 2 forwarding commands Port mirroring commands interface vlan-interface mac-address max-mac-count All commands All commands All commands All commands pppoe-server max-sessions local-mac PPP commands pppoe-server max-sessions total ARP commands arp max-learning-num



4-27

Volume

Module DNS commands

Command All commands for IPv6 DNS configuration ip redirects enable No No No No Yes No No No No No No No No No No No

WX3024 No No No No Yes No No No No No No No No No No No

WX3010 No No No No Yes No No No No No No No No No No No

WX3008

IP performance optimization commands Adjacency table commands IPv6 basics commands IPv6 application commands

ip ttl-expires enable ip unreachables enable display adjacent-table All commands ipv6 neighbors max-learning-num All commands display ipv6 routing-table display ipv6 routing-table ipv6-address display ipv6 routing-table ipv6-address1 ipv6-address2

Layer 3 IP Routing Command Reference

IP routing basics commands

display ipv6 routing-table protocol display ipv6 routing-table statistics display ipv6 routing-table verbose reset ipv6 routing-table statistics

IPv6 static routing commands IP Multicast Command Reference IGMP snooping commands

All commands

igmp-snooping fast-leave

Layer 2 aggregate interface view not supported 4-28

Layer 2 aggregate interface view not supported

Layer 2 aggregate interface view not supported

Volume

Module

Command igmp-snooping group-limit

WX3024 Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported No No Layer 2 aggregate interface view not supported No green action not supported

WX3010 Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported No No Layer 2 aggregate interface view not supported No green action not supported remark-lp-pass new-local-precedence not supported

WX3008 Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported Layer 2 aggregate interface view not supported No No Layer 2 aggregate interface view not supported No green action not supported remark-lp-pass new-local-precedence not supported

igmp-snooping static-group

igmp-snooping static-router-port vlan Multicast VLAN commands MLD snooping commands

port multicast-vlan


IPv6 multicast VLAN commands port multicast-vlan ipv6 ACL and QoS Command Reference IPv6 ACL Configuration Commands

ACL Commands

QoS commands

car

remark-lp-pass new-local-precedence not supported

4-29

Volume

Module

Command display qos map-table display qos lr interface Yes No

WX3024 Yes No

WX3010 Yes No

WX3008

classifier tcl-name not supported inbound-interface interface-type interface-number not supported IPv6 ACL not supported rtp start-port start-port-number end-port end-port-number not supported

classifier tcl-name not supported inbound-interface interface-type interface-number not supported local-precedence local-precedence-list not supported IPv6 ACL not supported rtp start-port start-port-number end-port end-port-number not supported No No No No Yes No Yes Yes No No user-number ranges from 1 to 2048.

classifier tcl-name not supported inbound-interface interface-type interface-number not supported local-precedence local-precedence-list not supported IPv6 ACL not supported rtp start-port start-port-number end-port end-port-number not supported No No No No Yes No Yes Yes No No user-number ranges from 1 to 2048.

if-match

qos pql inbound-interface qos pql protocol qos cql inbound-interface qos cql protocol qos car qos lr qos map-table redirect Congestion management configuration commands Security Command Reference AAA commands 802.1X commands nas device-id device-id dot1x max-user

No No No No Yes No Yes Yes No No user-number ranges from 1 to 2048.

4-30

Volume

Module MAC authentication commands

Command mac-authentication max-user user-number portal server server-name method { direct | layer3 | redhcp } portal backup-group group-id nas device-id device-id

WX3024 user-number ranges from 1 to 1024 and defaults to 1024. layer3 supported



No No No

No No No

No No No

Portal commands

radius nas-backup-ip ip-address radius scheme radius-scheme-name nas-backup-ip ip-address portal max-user max-number ssh client ipv6 source ssh2 ipv6

No

No

No




SSH2.0 commands sftp client ipv6 source sftp ipv6 anti-attack protocol enable anti-attack protocol threshold Security protection commands display anti-attack { 11mac | admin | all | arp | data | dhcp | dot1x | hwtacas | icmp | igmp | lwapp | nd | ntp | pim | radius } display anti-attack { protocol protocol | all }

No

No

No

Yes

Yes

Yes

4-31

Volume

Module System maintenance and debugging commands

Command ping ipv6 tracert ipv6 display logfile buffer display logfile summary No No No No No No No No No No No Yes Yes Yes No No

WX3024 No No No No No No No No No No No Yes Yes Yes No No

WX3010 No No No No No No No No No No No Yes Yes Yes No No

WX3008

Network Management and Monitoring Command Reference Information center commands

info-center logfile enable info-center logfile frequency info-center logfile size-quota info-center logfile switch-directory logfile save mcms connect mcms reboot oap connect slot oap management-ip

OAA

OAA commands oap reboot slot ACSEI server configuration commands ACSEI client configuration commands

4-32

5

CLI ConfigurationThis chapter includes these sections: What Is CLI? Entering the CLI CLI Descriptions Using the CLI Configuring the CLI

What Is CLI?The command line interface (CLI) is an interface where you can interact with your device by typing text commands. At the CLI, you can instruct your device to perform a given task by typing a text command and then pressing Enter to submit it to your device. At the CLI, you can enter commands to configure your access controller (AC), and verify th

01 fundamentals configuration guide book

Documents

access controller module

trademarks h3c

mesh access point

set of optional syntax

set of required syntax

description asterisk

configuration guides

symbolsconvention description