User Guide for the CiscoWorks Wireless LAN Solution Engine, 2.0
Command Line Interface Reference

Table Of Contents

Using the Command Line Interface (CLI)

Using the CLI

CLI Conventions

Command Privileges

Checking Command Syntax

Command History Feature

Help for CLI Commands

Command Description Conventions

Command Summary

Privilege Level 0 Commands

exit

ping

show clock

show domain-name

show interfaces

show process

show version

traceroute

Privilege Level 15 Commands

auth

backup

backupconfig

cdp

clock

df

dumptcp

erase config

firewall

gethostbyname

hostname

import

install configure

install list

install update

interface

ip domain-name

ip name-server

listbackup

mail

mailcntrl clear

mailcntrl list

mailroute

mkcert

nslookup

ntp server

reload

reinitdb

repository

repository add

repository delete

repository list

repository server

restore

route

services

show anilog

show auth-cli

show auth-http

show backupconfig

show bootlog

show cdp neighbor

show cdp run

show collectorlog

show config

show daemonslog

show dmgtdlog

show webaccesslog

show weberrorlog

show websslaccesslog

show import

show install logs

show ipchains

show hosts

show maillog

show proc

show repository

show route

show securitylog

show snmp-server

show ssh-version

show syslog

show tech

show telnetenable

show tomcatlog

shutdown

snmp-server

ssh

ssh-version

telnet

telnetenable

username

webtimeout

Maintenance Image Commands

erase config

fsck

reload


Using the Command Line Interface (CLI)


This appendix summarizes the Wireless LAN Solution Engine's command line interface (CLI) commands.


Note When you use CLI commands to make a configuration change, the system configuration is updated immediately.


This appendix contains the following sections:

Using the CLI

CLI Conventions

Command Privileges

Checking Command Syntax

Command History Feature

Help for CLI Commands

Command Summary

Command Description Conventions

Privilege Level 0 Commands

Privilege Level 15 Commands

Maintenance Image Commands

Using the CLI

You can use the CLI by:

Attaching a console to the WLSE, or

Accessing the WLSE using Telnet or SSH.


Note Telnet is disabled by default. Use the telnetenable command to enable Telnet. See telnetenable.


CLI Conventions

The command-line interface (CLI) uses the following conventions:

The key combination ^c or Ctrl-c means hold down the Ctrl key while you press the c key.

A string is defined as a non-quoted set of characters.

Use single-quotes (`) to surround a series of parameters; do not use double-quotes


Note Although the WLSE CLI is similar to the IOS CLI, they are not identical.


Command Privileges

Access to CLI commands is controlled by your user account privilege level. Users with privilege level 15 can use all commands. Users with privilege level 0 can use only a subset of the commands. The command descriptions in this appendix are organized by privilege level.

Checking Command Syntax

The user interface provides several types of responses to incorrect command entries:

Command not found—You entered a command line that does not contain a valid command.

Incomplete command—You entered a valid command but omitted required arguments.

Invalid input—You entered a valid command but provided invalid arguments or parameters.

In addition, some commands have command-specific error messages that notify you that a command is valid but cannot run correctly.

Command History Feature

The CLI provides a command history feature. To display previously entered commands, press the up arrow key. After pressing the up arrow key, you can press the down arrow key to display the commands in reverse order. To run a command, press the Enter key while the command is displayed on the command line. You can also edit commands before pressing the Enter key.

Help for CLI Commands

You can obtain help using the following methods:

For a list of all commands and their syntax, type help and press Enter.

For help on a specific command, use either of the following methods:

Type the command name, a space, help; then press Enter. For example, ntp help.

Type help, a space, and the command name; then press Enter. For example, help ntp.

The help contains command usage information and syntax.

Command Description Conventions

Command descriptions in this document and in the CLI help system use the following conventions:

Vertical bars (|) separate alternative, mutually exclusive elements.

Square brackets ([ ]) indicate optional elements.

Braces ({ }) indicate a required choice. Braces within square brackets ([{ }]) indicate a required choice within an optional element.

Boldface indicates commands and keywords that are entered literally as shown.

Italics indicate arguments for which you supply values.

Command Summary

Table B-1 summarizes all commands available on the WLSE. For full descriptions of commands, see the following sections:

Privilege Level 0 Commands

Privilege Level 15 Commands

Maintenance Image Commands

Table B-1 Command Summary 

Command
Privilege Level
Description
For a detailed description, see ...

auth

15

Enables secure remote authentication.

auth

backup

15

Backs up WLSE configuration.

backup

backupconfig

15

Sets the backup file location for all backup and restore operations.

backupconfig

cdp

15

Enables or disables the Cisco Discovery Protocol (CDP).

cdp

clock

15

Sets the system date and time.

show clock

df

15

Displays the current storage usage on the WLSE.

df

dumptcp

15

Displays TCP/IP packet content.

dumptcp

erase config

151

Erases the configuration in flash memory and reloads the device.

erase config

exit

0

Logs user out of the WLSE.

exit

gethostbyname

15

Displays IP address of a known domain name.

gethostbyname

fsck

N/A2

Checks and repairs the file system.

fsck

firewall

15

Implements port filtering on the WLSE.

firewall

hostname

15

Changes the system host name.

hostname

import

15

Imports host files or maps IP addresses to host names.

import

install configure

15

Configures the repository for installing software updates on the WLSE.

install configure

install list

15

Lists software updates and images currently available on the repository.

install list

install update

15

Installs software updates and images from the repository.

install update

interface

15

Configures Ethernet interfaces.

interface

ip domain-name

15

Defines the default domain name.

ip domain-name

ip name-server

15

Specifies the address of name servers for name and address resolution.

ip name-server

listbackup

15

Lists all current backups at the configured site.

listbackup

mail

15

Debugs and tests email settings.

mail

mailcntrl clear

15

Deletes the mail log, send queue, or user queue.

mailcntrl clear

mailcntrl list

15

Lists the size of the mail log, user queue, or send queue.

mailcntrl list

mailroute

15

Forwards email to a specified server.

mailroute

mkcert

15

Generates a Certificate Signed Request (CSR) for HTTPS.

mkcert

nslookup

15

Translates a device name to its IP address or an IP address to its device name.

nslookup

ntp server

15

Allows the system clock to be synchronized by a time server.

ntp server

ping

0

Sends ICMP echo_request packets for diagnosing basic network connectivity.

ping

reload

151

Reboots the system.

reload

reinitdb

15

Reinitializes the database.

reinitdb

repository

15

Configures the WLSE to be a repository server.

repository

repository add

15

Transfers software updates and images from a remote server to the WLSE's local repository.

repository add

repository delete

15

Deletes software updates and images on the local repository.

repository delete

repository list

15

Lists software updates and images on the local or remote repository.

repository list

repository server

15

Starts, stops, or displays the status of the WLSE's local repository.

repository server

restore

15

Restores backed up configuration from the configured location.

restore

route

15

Adds a route.

route

services

15

Lists, starts, or stops management services.

services

show anilog

15

Displays the WLSE's ANI log.

show anilog

show auth-cli

15

Displays the type of authentication used for secure CLI access.

show auth-cli

show auth-http

15

Displays the type of authentication used for secure HTTP access.

show auth-http

show backupconfig

15

Displays the current backup and restore configuration.

show backupconfig

show bootlog

0

Displays the messages logged during the last system boot.

show bootlog

show cdp neighbor

15

Displays the WLSE's nearest neighbor on the network.

show cdp neighbor

show cdp run

15

Displays the Cisco Discovery Protocol (CDP) configuration.

show cdp run

show clock

0

Displays system time in Coordinated Universal Time (UTC).

show clock

show collectorlog

15

Displays the WLSE's collector log.

show collectorlog

show config

15

Displays WLSE configuration.

show config

show daemonslog

15

Displays WLSE's daemons log.

show daemonslog

show dmgtdlog

15

Displays WLSE's daemon manager log.

show dmgtdlog

show domain-name

0

Displays WLSE's domain name

show domain-name

show webaccesslog

15

Displays WLSE's Web access log.

show webaccesslog

show weberrorlog

15

Displays WLSE's Web error log.

show weberrorlog

show websslaccesslog

15

Displays WLSE's Web SSL log.

show websslaccesslog

show import

15

Displays imported host files.

show import

show install logs

15

Displays software updates and images available on the configured repository.

show install logs

show interfaces

0

Displays information about the WLSE's network interface.

show interfaces

show ipchains

15

Displays IP chains for the selected interface.

show ipchains

show hosts

15

Displays WLSE's host file.

show hosts

show maillog

15

Displays WLSE's mail log.

show maillog

show process

0

Displays information about processes running on the system.

show process

show repository

15

Displays the status or the access log of a configured repository.

show repository

show route

15

Displays the routes currently configured.

show route

show securitylog

15

Displays WLSE's secure log information.

show securitylog

show snmp-server

15

Displays WLSE's SNMP configuration.

show snmp-server

show ssh-version

15

Displays type of SSH enabled.

show ssh-version

show syslog

15

Displays syslog information.

show syslog

show tech

15

Displays information necessary for Cisco's Technical Assistance Center to assist you.

show tech

show telnetenable

15

Displays WLSE's Telnet status.

show telnetenable

show tomcatlog

15

Displays WLSE's Tomcat log.

show tomcatlog

show version

0

Displays information about current software installed on WLSE.

show version

shutdown

15

Shuts down system in preparation for powering it off.

shutdown

snmp-server

15

Configures an SNMP agent.

snmp-server

ssh

15

Connects to an external host by using SSH.

ssh

ssh-version

15

Enables Secure Shell (SSH) 1, SSH 2, or both SSH 1 and SSH 2.

ssh-version

telnet

15

Telnets to an external host.

telnet

telnetenable

15

Configures Telnet access.

telnetenable

traceroute

0

Displays route to a specified host and identifies faulty gateways.

traceroute

username

15

Creates new user account or changes account properties.

username

webtimeout

15

Changes the session timeout for the Web interface.

webtimeout

1 This command is also available in the maintenance image.

2 This command is available only in the maintenance image.


Privilege Level 0 Commands

This section describes the privilege level 0 commands.

exit

To log out of the system, use the following command:

exit

Syntax Description

This command has no arguments or keywords.

Example

The following command logs you out of the system:

exit

ping

To send ICMP echo_request packets for diagnosing basic network connectivity, use the following command.

ping [ -c count ] [ -i wait ] [ -s packetsize ] [ -n ] { hostname | ip-address }

Syntax Description

c Sets the number of echo packets to send.

count Number of echo packets to send.

i Sets the amount of time to wait between sending each packet.

wait Amount of time to wait between sending each packet, in seconds. The default is 1.

s Sets the size of each echo packet.

packetsize The size of each echo packet, in bytes. The default is 56.

hostname Host name of system to ping.

ip-address IP address of system to ping.

n Disables reverse DNS lookup.

Usage Guidelines

To use this command with the hostname argument, DNS must be configured on the system.

To force the time-out of a nonresponsive host or to eliminate a loop cycle, press Ctrl-c.

Example

This command sends 4 echo packets to the host otherhost with a wait time of 5 seconds between each packet:

ping -c 4 -i 5 209.165.200.224

PING 209.165.200.224 (209.165.200.224) from 209.165.201.0 : 56(84) 
bytes of data.
64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=0 ttl=246 
time=16.3 ms
64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=1 ttl=246 
time=2.0 ms
64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=2 ttl=246 
time=2.1 ms
64 bytes from dns-sj1.cisco.com (209.165.200.224): icmp_seq=3 ttl=246 
time=2.1 ms

show clock

To display the system date and time in Coordinated Universal Time (UTC), use the following command.

show clock

Syntax Description

This command has no arguments or keywords.

Usage Guidelines

or more information about the system time, see the Configuration and Installation Guide for the Wireless LAN Solution Engine.

Example

This command displays the system date and time:

show clock
12:43:47 Jun 20 2001

Related Commands

clock

ntp server

show domain-name

To display the system domain name, use the following command.

show domain-name

Syntax Description

This command has no arguments or keywords.

Example

This command displays the system domain name:

show domain-name
cisco.com

show interfaces

To display information about the system network interfaces, use the following command.

show interfaces

Syntax Description

This command has no arguments or keywords.

Example

This command displays information about system network interfaces:

show interfaces
eth0      Link encap:Ethernet  HWaddr 00:02:B3:35:FD:CC  
          inet addr:209.165.200.224 Bcast:209.165.201.0 
Mask:255.255.255.224
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:80309 errors:0 dropped:0 overruns:0 frame:0
          TX packets:22451 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          Interrupt:5 Base address:0xef00 Memory:d0c7e000-d0c7ec40 

Related Commands

interface

show process

To display information about processes running on the system (including the status of the database), use the following command.

show process [ page ]


Note If the db2sync process is listed, the database is running.


Syntax Description

page Displays command output one screen at a time. Press the Return key to display the next output screen. Press Ctrl-c to exit paged output and return to the command prompt.

Example

This command displays information about processes running on the system:

show process page
PID  PPID     ELAPSED    SZ                  STARTED TTY  COMMAND
    1     0  4-20:04:35   277 Fri Jun 15 16:54:03 2001 ?    init
    2     1  4-20:04:35     0 Fri Jun 15 16:54:03 2001 ?    kflushd
    3     1  4-20:04:35     0 Fri Jun 15 16:54:03 2001 ?    kupdate
    4     1  4-20:04:35     0 Fri Jun 15 16:54:03 2001 ?    kpiod
    5     1  4-20:04:35     0 Fri Jun 15 16:54:03 2001 ?    kswapd
    6     1  4-20:04:28     0 Fri Jun 15 16:54:10 2001 ?    kreiserfsd
   81     1  4-20:04:25     0 Fri Jun 15 16:54:13 2001 ?    kreiserfsd
   82     1  4-20:04:25     0 Fri Jun 15 16:54:13 2001 ?    kreiserfsd
   83     1  4-20:04:25     0 Fri Jun 15 16:54:13 2001 ?    kreiserfsd
   84     1  4-20:04:25     0 Fri Jun 15 16:54:13 2001 ?    kreiserfsd
   85     1  4-20:04:24     0 Fri Jun 15 16:54:14 2001 ?    kreiserfsd
  199     1  4-20:04:23   290 Fri Jun 15 16:54:15 2001 ?    watchdog
  213     1  4-20:04:23   342 Fri Jun 15 16:54:15 2001 ?    idled
  402     1  4-20:04:17   290 Fri Jun 15 16:54:21 2001 ?    syslogd
  411     1  4-20:04:17   360 Fri Jun 15 16:54:21 2001 ?    klogd
  517     1  4-20:04:15   327 Fri Jun 15 16:54:23 2001 ?    crond
  531     1  4-20:04:15   286 Fri Jun 15 16:54:23 2001 ?    inetd
  540     1  4-20:04:14   585 Fri Jun 15 16:54:24 2001 ?    sshd
  585     1  4-20:04:09   842 Fri Jun 15 16:54:29 2001 ?    dmgtd.lnx
-----------more-----------

show version

To display information about the current software on the system, use the following command.

show version

Syntax Description

This command has no arguments or keywords.

Example

This command displays the current software on the system:

show version
Copyright (c) 1999-2000 by Cisco Systems, Inc.
Build Version (166) Mon Jun 11 16:56:23 PDT 2001
Uptime: 4 days 20 hours 6 mins
Linux/UID32 version 2.2.16-13bipsec.uid32 (gcc version egcs1

traceroute

To display the network route to a specified host and identify faulty gateways, use the following command.

traceroute [ -f first_ttl ] [ -m max_ttl ] [ -w waittime ] host [ packetlength ]

Syntax Description

-f (Optional) Sets the time-to-live used in the first outgoing probe packet.

first_ttl Time-to-live value of the first outgoing probe packet. The default is 1 hop.

-m (Optional) Sets the maximum time-to-live (maximum number of hops) used in outgoing probe packets.

max_ttl Maximum time-to-live for outgoing probe packets. The default is 30 hops.

-w (Optional) Sets the time to wait for a response to a probe, in seconds.

waittime Time to wait for a response to a probe, in seconds. The default is 5.

host Name or IP address of host to which to connect.

packetlength (Optional) The length of the packet to send, in bytes. The default and minimum value is 40.

Usage Guidelines

The traceroute command displays a list of the hosts that receive probe packets as they travel to the destination host, in the order that the receiving hosts receive the packets. Asterisks (*) appear as the list entry for hosts that do not respond to probing correctly.

Example

This command displays the network route to the host otherhost with a packet time-to-live value of 2, a wait time of 5 seconds, and 50-byte packets:

traceroute -m 20 -w 10 cisco.com 50
traceroute to example.com (209.165.200.224), 20 hops max, 50 byte 
packets
 1  ex1.com (209.165.200.225)  0.981 ms  0.919 ms  0.926 ms
 2  ex2.com (209.165.200.254)  1.528 ms  0.747 ms 0.661 ms
 3  ex3.com (209.165.200.255)  0.887 ms  0.770 ms  0.744 ms
 4  ex4.com (209.165.201.0)  0.932 ms  0.789 ms  0.679 ms
 5  ex5.com (209.165.201.1)  1.066 ms  1.052 ms  0.983 ms
 6  ex6.com (209.165.201.30)  1.472 ms  1.247 ms  1.847 ms
 7  ex7.com(209.165.201.31)  1.738 ms  1.424 ms  1.658 ms
 8  ex8.com (209.165.202.128)  3.728 ms  2.429 ms  2.804 ms
 9  ex9.com (209.165.202.129)  6.283 ms  5.499 ms 3.285 ms
10  ex10.com (209.165.202.158)  9.926 ms  73.463 ms  3.895 ms
11  ex11.com (209.165.202.159)  70.967 ms *  47.106 ms

Related Commands

ping

Privilege Level 15 Commands

This section describes the privilege level 15 commands. Only users with privilege level 15 can run these commands.

auth

Use the following command to enable secure remote authentication.

auth { cli | http } { local | tacacs secret server1 [server2] | radius secret server1 [ server2 ] | nt domain pdc [ bdc ] }

Syntax Description

cli Enables authentication using the Command Line Interface (CLI).

http Enables authentication using Hypertext Transfer Protocol (HTTP).

local Enables local authentication.

tacacs Enables authentication using the Terminal Access Controller Access Control System (TACACS).

radius Enables authentication using Remote Dial-In User Service (RADIUS).

nt Enables authentication from an NT domain controller.

secret Shared secret code of server.

server1 IP address or device name of server from which authentication will occur.

server2 IP address or device name of optional secondary server from which authentication could occur

domain NT domain name.

pdc Name of the Primary Domain Controller (PDC).

bdc Name of the Backup Domain Controller (BDC).

Example

This command enables secure remote authentication from a remote server, using TACACS.

auth http tacacs tr5e43 209.165.200.224 

This command uses RADIUS for CLI access via SSH or Telnet:

auth cli radius my_secret 209.165.200.224

backup

Use the following command to back up the WLSE.

backup [test]

Syntax Description

test Tests the configured backup hostname, username, password, and directory.

Usage Guidelines

The backup command backs up the WLSE configuration to the location specified by the backupconfig command.

Related Commands

backupconfig

listbackup

restore

show backupconfig

backupconfig

Use the backupconfig command to specify the location for all backup and restore operations. To clear the backup and restore configuration information, use the no backupconfig command.

backupconfig { hostname } { username } { password } [ directory ]

no backupconfig

Syntax Description

hostname Host name or IP address of the host system.

username Username of host system.

password Password of the host system.

directory Path to specific backup directory, if different from user's default directory.

Example

The following command causes all backup and restore operations to use the host with IP address 209.165.200.224, username user1, and password pass:

backupconfig 209.165.200.224 user1 pass

The following command clears all backup and restore configuration information:

no backupconfig

Related Commands

backup

listbackup

restore

show backupconfig

cdp

Use the cdp command to configure the Cisco Discovery Protocol (CDP). CDP allows a Cisco device to recognize, and be recognized by, other Cisco devices.

cdp { run [ port ] | timer seconds | holdtime seconds }

no cdp { run [ port ] | timer | holdtime }

Syntax Description

run Start CDP; starts the WLSE sending out signals to other devices.

timer Set CDP packets retransmission time; sets the amount of time, in seconds, that CDP signals are sent.

holdtime Set CDP packet information hold time; sets the amount of time a device will recognize another device without receiving a signal. For example, if your system's holdtime is set to 30 seconds, and another device that has already been recognized by yours does not send a signal within that 30 seconds, your system will cease to recognize it.

port Ethernet port on which CDP will be enabled. Acceptable values are eth0-5. On the WLSE 1130, eth0 corresponds to the port labeled A on the back panel, and eth1 corresponds to the port labeled B.

seconds Amount of time, in seconds, that the system takes to either transmit the CDP packet information or to hold another system's CDP packet information.

Usage Guidelines

If you are using the no cdp command, the timer and holdtime values are set to their default values.

Example

This command sets the CDP packet's retransmission time at 10 seconds:

cdp timer 10

This command sets the CDP packet's retransmission to its default time.

no cdp timer

clock

To set the system date and time, use the following command. See the following usage guidelines before using this command.

clock {set hh:mm:ss month day year}

Syntax Description

set Sets the system clock.

hh:mm:ss Current time (for example, 13:32:00).

month Current month. You can enter full month names or abbreviations that include at least the first 3 characters of the month name (for example, jan, feb, mar).

day Day of the month (for example, 1 to 31).

year Current year (for example, 2000).

Usage Guidelines

When resetting the time, you must stop and restart WLSE services. Otherwise, scheduled configuration and firmware jobs will not run properly. To reset the time:


Step 1 Stop services:

services stop

Step 2 Change the time.

Step 3 Start services:

services start


To set the date and time, use the set option.

If you configure the system to use Network Time Protocol (NTP), you do not need to set the system clock manually using the clock command.When setting the clock, enter the current time in Coordinated Universal Time (UTC).

For more information about the system time, see the Installation and Configuration Guide for the Wireless LAN Solution Engine.

Example

This command sets the date and time:

clock set 16:00:00 dec 11 2001

Tue Dec 11 16:00:00 UTC 2001

Related Commands

ntp server

show clock

df

To display the current storage usage on the WLSE, use the following command.

df

Usage Guidelines

This command in primarily intended as a debugging tool for problems with full partitions.

Example

The following command displays the current storage usage on the WLSE:

df
Filesystem            Size  Used Avail Use% Mounted on
/dev/sda12            151M   59M   92M  39% /
/dev/sda1              49M  2.8M   44M   6% /boot
/dev/sda7             985M   24M  911M   3% /extra
/dev/sda8             601M   32M  569M   5% /home
/dev/sda6            1001M  136M  865M  14% /opt
/dev/sda13            9.7G   32M  9.7G   0% /tftpboot
/dev/sda9             601M   32M  569M   5% /tmp
/dev/sda10            591M  212M  350M  38% /usr
/dev/sda5             2.9G  450M  2.5G  15% /var

dumptcp

The following command displays TCP/IP network protocol packet content.

dumptcp proto { snmp snmp-trap ip icmp tcp udp | port port }
[ interface eth[ernet] 0 ... 5] [ host host [ host2 host2 ]]

Syntax Description

proto Name of protocol. Enter snmp, snmp-trap, ip, icmp, tcp, or udp to specify the protocol for which you want to view the packet content. You must specify either a protocol or a port.

port Use the port number to specify the protocol to observe, instead of specifying the protocol name. You must specify either a protocol or a port.

port The port number.

interface eth[0-5] The interface to observe. On the WLSE 1130, eth0 corresponds to the port labeled A on the back panel, and eth1 corresponds to the port labeled B.

host, host2 The host(s) to observe.

host The host name(s).

Usage Guidelines

You can either specify a protocol by name or specify a port; you must specify one or the other. Optionally, you can specify the interface and specify one or two hosts to observe.

The command allows you to continuously observe the packets. Enter Ctrl C to terminate the command.

Examples

The following command listens displays the SNMP packets in the interface:

dumptcp proto snmp interface eth0

The following command listens to packets from port 161 only with abc.com as either the source or destination host:

dumptcp port 161 host abc.com

erase config

To erase the configuration in flash memory and reload the device, use the following command.

erase config

Syntax Description

This command has no arguments or keywords.

Usage Guidelines

When you enter the command, you are prompted for confirmation. Enter yes to confirm, or press Enter to accept the default response no.


Caution When you confirm this command, the system configuration is erased and the system reboots automatically. The system will not operate until you reconfigure it.

When the system reboots, you must reconfigure it with the setup program. For information about using the setup program, see the Installation and Configuration Guide for the Wireless LAN Solution Engine.

Example

This command erases the system configuration:

erase config
This will erase your configuration, return device t
o factory defaults, and reload the device 
Do you want to continue?[no]:yes

firewall

The following command implements port filtering on the WLSE.

firewall eth [0-5] [public | private | none ] | [icmp telnet ssh snmp
https 1741 respository tftp traceroute ]]

Syntax Description

eth [0-5] Port to be configured. Acceptable values are eth0-eth5. On the WLSE 1130, eth0 corresponds to the port labeled A on the back panel, and eth1 corresponds to the port labeled B.

public Denies access via Internet Control Message Protocol (ICMP), Telnet, SNMP, and the HTTP 1741 port.

none Disables the firewall on an interface.

private Denies no access.

icmp Denies ICMP ping messages.

telnet Denies incoming Telnet connections.

ssh Denies incoming SSH connections.

snmp Denies incoming SNMP requests.

https Denies all connections to the SSL HTTP port.

1741 Denies all connections to the HTTP 1741 port.

repository Disables the local software repository from access from the network.

traceroute Prevents the WLSE from responding to traceroute commands.

tftp Disables TFTP access.

Usage Guidelines

To configure an Ethernet port for secured public access, use the public option.

To configure an Ethernet port for local access, via a LAN or VLAN, use the private option.

To disable ICMP, Telnet, SSH, SNMP, HTTPS, or to deny connections to the SSL HTTP port or the HTTP 1741 port, use the corresponding option.

Example

The following is an example of a secure Ethernet port configuration:

Ethernet port 0 is connected to the Internet, and is configured to be accessible only via HTTPS by entering the following command:

firewall eth0 public ssh 1741 

Ethernet port 0 is connected to an internal LAN or VLAN, and is configured to be accessible via any of the supported protocols by entering the following command:

firewall eth0 private 

An on-site user has full access to the WLSE, but an external user can only access it using a secure connection.

gethostbyname

Use the following command to display the IP address of a known domain name.

gethostbyname host

Syntax Description

host Domain name of host.

Example

This command displays the IP address of example.com

gethostbyname example.com
209.165.200.224

hostname

To change the system host name, use the following command.

hostname name

Syntax Description

name New hostname for the WLSE. The name is case-sensitive and may be from 1 to 24 alphanumeric characters (A-Z, a-z, 0-9) and the minus sign (-).

Example

The following example changes the hostname to sandbox:

hostname sandbox

import

To import host files, or to map IP addresses to hostnames, use the following command:

import {host hostname ipaddress} | {hosts ftp-host username password path}

no import {host hostname ipaddress} | {hosts}

Syntax Description

host Maps one IP address to a hostname.

hostname Hostname to map IP address to.

hosts Imports host files from an FTP-accessible host.

ipaddress IP address to map Hostname to.

password Password used to access an FTP-accessible host.

path Path to an FTP-accessible host.

ftp-host IP address of an FTP-accessible host.

username username use to access an FTP-accessible host.

Usage Guidelines

To map a single hostname to an IP address:

import host hostname ipaddress

To import host files from an external, FTP- accessible server:

import hosts ftp-host username password path

To remove an individual IP address from a host file:

no import host hostname ipaddress

To remove an imported host file:

no import hosts

Example

The following command imports host files from the FTP- accessible server ftpserver_1. Ftpserver_1 has the username admin, the password pass, and the path /ftpserver_1/hosts.

import hosts ftpserver_1 admin pass /ftpserver_1/hosts

The following command deletes the hosts imported in the example above:

no import hosts

install configure

To define the repository that the WLSE uses to install software updates and images, use the following command. A repository is a remote or local server from where a system can download software updates and images. Only HTTP is supported.

install configure {URL URL Value | default | save}

Syntax Description

URL Sets the URL of the repository.

URL Value The URL of the repository. The URL should take the form of http://host:port/path (the path is not a requirement).

default Configures the Wireless LAN Solution Engine to be its own repository. The URL is http://localhost:9851.

save Saves the current configuration in the install.ini file.

Example

The following command configures the WLSE to use http://209.165.200.22, with port 9851, as a repository:

install configure URL http://209.165.200.224:9851

Related Commands

install update

install list

install list

To list software updates and images currently available on the configured repository, use the following command. A repository is a remote or local server from where a system can receive software.

install list [all | full | page | updates]

Syntax Description

all Displays all software updates and images on a configured repository. This command displays the name, the version, the requirements, the type, and a summary of the software.

full Displays only the complete images on a configured repository.This command displays the name, the version, the requirements, the type, and a summary of the image.

page Displays only the names of all software updates and images on a configured repository. All other information is omitted.

updates Displays only the updates on a configured repository. This command displays the name, the version, the requirements, the type, and a summary of the update.

Example

The following command lists all software updates in the repository:

install list all
Name            Version Requires        Type       Summary
 EX-1.02        1.02    HSE-1.0         UPDATE     Hosting Solution...
 EX-1.1aR       1.1aR   HSE-1.1         UPDATE     Hosting Solution...
 EX-1.1a        1.1a    HSE-1.1         UPDATE     Hosting Solution...
 EX-1.0a        1.0a    HSE-1.0         UPDATE     Hosting Solution...
 EX-1.0aR       1.0aR   HSE-1.0         UPDATE     Hosting Solution...
 EX-1.0-ROB     1.0     HSE-1.0         COMPLETE   Hosting Solution...
 EX-1.0         1.0     HSE-1.0         COMPLETE   Hosting Solution...

Related Commands

install configure

install update

install update

To install a software update or image, use the following command.

install update package name

Syntax Description

Package Name Name of the software update or image to be installed. To see the names of software updates and images available for installation, use the install list command. For more information, see install list.

Example

The following command installs the update EX-2.0:

install update EX-2.0

Related Commands

install configure

install list

interface

To configure an Ethernet interface, use the interface command.

interface eth[ernet][0-5] {[ up | down ] | ipaddress netmask
[ default-gateway address ] [ up | down ] }
[ auto | speed [10 | 100 | 1000]] duplex [half | full]

Syntax Description

eth[0-5] Name of the interface port to be configured. Acceptable values are eth0-eth5. On the WLSE 1130, eth0 corresponds to the port labeled A on the back panel, and eth1 corresponds to the port labeled B.

up Enables the interface (the default).

If you include the ipaddress parameter and want to enable the interface in the same command, either enter the up parameter after ipaddress and its required parameters, or do not specify the up or down parameters (up is the default).

down Disables the interface.

If you include the ipaddress parameter and want to disable the interface in the same command, enter the down parameter after ipaddress and its required parameters.