Cisco AireOS To Cisco IOS XE Command Mapping Reference, Cisco IOS XE Release 3SE

Cisco AireOS to Cisco IOS XE Command Mapping Reference, Cisco
IOS XE Release 3SE

First Published: January 29, 2013
Last Modified: October 07, 2013
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Text Part Number: OL-28819-02
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
2013
Cisco Systems, Inc. All rights reserved.
CONTENTS
Preface
Preface vii
Document Conventions vii
Related Documentation ix
Obtaining Documentation and Submitting a Service Request ix
CHAPTER 1
Using the Command-Line Interface 1

Information About Using the Command-Line Interface 1
Command Modes 1
Using the Help System 3
Understanding Abbreviated Commands 4
No and Default Forms of Commands 4
CLI Error Messages 4
Configuration Logging 5
How to Use the CLI to Configure Features 5
Configuring the Command History 5
Changing the Command History Buffer Size 6
Recalling Commands 6
Disabling the Command History Feature 7
Enabling and Disabling Editing Features 7
Editing Commands Through Keystrokes 8
Editing Command Lines That Wrap 9
Searching and Filtering Output of show and more Commands 10
Accessing the CLI Through a Console Connection or Through Telnet 11
CHAPTER 2
Cisco AireOS to Cisco IOS XE Configuration Mode Commands 13

802.11 Bands Parameter Commands 14
AAA Commands 16
Cisco AireOS to Cisco IOS XE Command Mapping Reference, Cisco IOS XE Release 3SE
OL-28819-02
iii
Contents
ACL Commands 17
Access Points Commands 17
Application Visibility and Control Commands 19
Band Select Commands 19
CDP Commands 20
CleanAir Commands 20
DHCP Commands 21
Guest-LAN Mapping Commands 22
IPv6 Commands 23
Licensing Commands 24
Local Auth Commands 24
Location Commands 25
Logging Commands 26
MAC Filter Commands 27
Multicast DNS Commands 27
Mobility Commands 28
NETWORK Commands 29
NMSP Commands 30
Paging Commands 31
PASSWD Commands 31
Port Commands 31
QoS Commands 32
Radio Resource Management Commands 32
Security Commands 34
SNMP Commands 37
Time Commands 37
TRAPFLAGS Commands 38
VLAN Commands 38
Voice, Video and VideoStream Commands 38
WebAuth Commands 41
WLAN Commands 41
CHAPTER 3
Cisco AireOS to Cisco IOS XE Privilege Executive Commands 45

Access Points Privilege EXEC Commands 45
Radio Resource Management Privilege EXEC Commands 48
iv
OL-28819-02
Contents
Syslog Privilege EXEC Commands 49
CHAPTER 4
Cisco AireOS to Cisco IOS XE Show commands 51

Show Wireless Clients Commands 51
Show Access Point Commands 52
Show Access Point Radios Commands 54
Show AVC Commands and NetFlow 55
Show Cisco CleanAir Commands 56
Show IPv6 Commands 56
Show Location Commands 56
Show Multicast Commands 57
Show NMSP Commands 57
Show VideoStream Commands 58
Show Workgroup Bridge Commands 58
Show Wireless Commands 58
Show Wireless Mobility Commands 59
Show WLAN and Guest LAN Commands 59
OL-28819-02
Contents
vi
OL-28819-02
Preface
Document Conventions, page vii
Related Documentation, page ix
Obtaining Documentation and Submitting a Service Request, page ix
Document Conventions
This document uses the following conventions:
Convention
Description
^ or Ctrl
Both the ^ symbol and Ctrl represent the Control (Ctrl) key on a keyboard. For
example, the key combination ^D or Ctrl-D means that you hold down the Control
key while you press the D key. (Keys are indicated in capital letters but are not
case sensitive.)
bold font
Commands and keywords and user-entered text appear in bold font.
Italic font
Document titles, new or emphasized terms, and arguments for which you supply
values are in italic font.
Courier
font
Bold Courier
Terminal sessions and information the system displays appear in courier font.
font
Bold Courier
font indicates text that the user must enter.
[x]
Elements in square brackets are optional.
...
An ellipsis (three consecutive nonbolded periods without spaces) after a syntax

element indicates that the element can be repeated.
A vertical line, called a pipe, indicates a choice within a set of keywords or

arguments.
[x | y]
Optional alternative keywords are grouped in brackets and separated by vertical

bars.
OL-28819-02
vii
Preface
Document Conventions
Convention
Description
{x | y}
Required alternative keywords are grouped in braces and separated by vertical

bars.
[x {y | z}]
Nested set of square brackets or braces indicate optional or required choices

within optional or required elements. Braces and a vertical bar within square
brackets indicate a required choice within an optional element.
string
A nonquoted set of characters. Do not use quotation marks around the string or
the string will include the quotation marks.
<>
Nonprinting characters such as passwords are in angle brackets.
[]
Default responses to system prompts are in square brackets.
!, #
An exclamation point (!) or a pound sign (#) at the beginning of a line of code
indicates a comment line.
Reader Alert Conventions

This document may use the following conventions for reader alerts:
Note
Tip
Caution
Timesaver
Warning
Means reader take note. Notes contain helpful suggestions or references to material not covered in the
manual.
Means the following information will help you solve a problem.
Means reader be careful. In this situation, you might do something that could result in equipment damage
or loss of data.
Means the described action saves time. You can save time by performing the action described in the
paragraph.
Means reader be warned. In this situation, you might perform an action that could result in bodily
injury.
viii
OL-28819-02
Preface
Related Documentation
Related Documentation
Note
Before installing or upgrading the controller, refer to the controller release notes.
Cisco 5700 Series Wireless Controller documentation, located at:
http://www.cisco.com/go/wlc5700_sw
Error Message Decoder, located at:
https://www.cisco.com/cgi-bin/Support/Errordecoder/index.cgi
Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information,
see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco
technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed
and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free
service and Cisco currently supports RSS version 2.0.
OL-28819-02
ix
Preface
Obtaining Documentation and Submitting a Service Request
x
OL-28819-02
CHAPTER
Using the Command-Line Interface

Information About Using the Command-Line Interface, page 1
How to Use the CLI to Configure Features, page 5
Information About Using the Command-Line Interface

Command Modes
The Cisco IOS user interface is divided into many different modes. The commands available to you depend
on which mode you are currently in. Enter a question mark (?) at the system prompt to obtain a list of commands
available for each command mode.
You can start a CLI session through a console connection, through Telnet, a SSH, or by using the browser.
When you start a session, you begin in user mode, often called user EXEC mode. Only a limited subset of
the commands are available in user EXEC mode. For example, most of the user EXEC commands are one-time
commands, such as show commands, which show the current configuration status, and clear commands,
which clear counters or interfaces. The user EXEC commands are not saved when the controller reboots.
To have access to all commands, you must enter privileged EXEC mode. Normally, you must enter a password
to enter privileged EXEC mode. From this mode, you can enter any privileged EXEC command or enter
global configuration mode.
Using the configuration modes (global, interface, and line), you can make changes to the running configuration.
If you save the configuration, these commands are stored and used when the controller reboots. To access the
various configuration modes, you must start at global configuration mode. From global configuration mode,
you can enter interface configuration mode and line configuration mode.
This table describes the main command modes, how to access each one, the prompt you see in that mode, and
how to exit the mode.
OL-28819-02

Command Modes
Table 1: Command Mode Summary
Mode
Access Method
User EXEC
Begin a session
using Telnet, SSH,
or console.
Prompt
Exit Method
About This Mode
Controller>
Enter logout or
quit.
Use this mode to

Change
terminal
settings.
Perform basic
tests.
Display
system
information.
Privileged EXEC
While in user EXEC

mode, enter the
enable command.
Global
configuration
While in privileged
EXEC mode, enter
the configure
command.
VLAN
configuration
While in global
configuration mode,
enter the vlan
vlan-id command.
Interface
configuration
While in global
configuration mode,
enter the interface
command (with a
specific interface).
Controller#
Controller(config)#
Controller(config-vlan)#
Controller(config-if)#
Enter disable to
exit.
Use this mode to

verify commands
that you have
entered. Use a
password to protect
access to this mode.
To exit to privileged
EXEC mode, enter
exit or end, or press
Ctrl-Z.
Use this mode to

configure
parameters that
apply to the entire
controller.
To exit to global
configuration mode,
enter the exit
command.
Use this mode to

configure VLAN
parameters. When
VTP mode is
transparent, you can
To return to
create
privileged EXEC
extended-range
mode, press Ctrl-Z
VLANs (VLAN IDs
or enter end.
greater than 1005)
and save
configurations in the
controller startup
configuration file.
To exit to global
Use this mode to
configuration mode, configure
enter exit.
parameters for the
Ethernet ports.
To return to
privileged EXEC
mode, press Ctrl-Z
or enter end.
2
OL-28819-02

Using the Help System
Mode
Access Method
Line configuration
While in global
configuration mode,
specify a line with
the line vty or line
console command.
Prompt
Exit Method
Controller(config-line)#
About This Mode
To exit to global
Use this mode to
configuration mode, configure
enter exit.
parameters for the
terminal line.
To return to
privileged EXEC
mode, press Ctrl-Z
or enter end.
Using the Help System

You can enter a question mark (?) at the system prompt to display a list of commands available for each
command mode. You can also obtain a list of associated keywords and arguments for any command.
SUMMARY STEPS
1. help
2. abbreviated-command-entry ?
3. abbreviated-command-entry <Tab>
4. ?
5. command ?
6. command keyword ?
DETAILED STEPS
Step 1
Command or Action
Purpose
help
Obtains a brief description of the help system in any

command mode.
Example:
Controller# help
Step 2
abbreviated-command-entry ?
Obtains a list of commands that begin with a particular

character string.
Example:
Controller# di?
dir disable disconnect
Step 3
abbreviated-command-entry <Tab>
Completes a partial command name.
Example:
Controller# sh conf<tab>
Controller# show configuration
OL-28819-02

Understanding Abbreviated Commands
Step 4
Command or Action
Purpose
Lists all commands available for a particular command

mode.
Example:
Controller> ?
Step 5
command ?
Lists the associated keywords for a command.
Example:
Controller> show ?
Step 6
command keyword ?
Lists the associated arguments for a keyword.
Example:
Controller(config)# cdp holdtime ?
<10-255> Length of time (in sec) that receiver
must keep this packet
Understanding Abbreviated Commands

You need to enter only enough characters for the controller to recognize the command as unique.
This example shows how to enter the show configuration privileged EXEC command in an abbreviated form:
Controller# show conf
No and Default Forms of Commands

Almost every configuration command also has a no form. In general, use the no form to disable a feature or
function or reverse the action of a command. For example, the no shutdown interface configuration command
reverses the shutdown of an interface. Use the command without the keyword no to reenable a disabled feature
or to enable a feature that is disabled by default.
Configuration commands can also have a default form. The default form of a command returns the command
setting to its default. Most commands are disabled by default, so the default form is the same as the no form.
However, some commands are enabled by default and have variables set to certain default values. In these
cases, the default command enables the command and sets variables to their default values.
CLI Error Messages

This table lists some error messages that you might encounter while using the CLI to configure your controller.
4
OL-28819-02

Configuration Logging
Table 2: Common CLI Error Messages
Error Message
Meaning
How to Get Help
% Ambiguous command: "show

con"
You did not enter enough

characters for your controller to
recognize the command.
Reenter the command followed by

a question mark (?) without any
space between the command and
the question mark.
The possible keywords that you can
enter with the command appear.
% Incomplete command.
You did not enter all of the

Reenter the command followed by
keywords or values required by this a question mark (?) with a space
command.
between the command and the
question mark.
% Invalid input detected at

^ marker.
You entered the command

Enter a question mark (?) to display
incorrectly. The caret (^) marks the all of the commands that are
point of the error.
available in this command mode.
Configuration Logging
You can log and view changes to the controller configuration. You can use the Configuration Change Logging
and Notification feature to track changes on a per-session and per-user basis. The logger tracks each
configuration command that is applied, the user who entered the command, the time that the command was
entered, and the parser return code for the command. This feature includes a mechanism for asynchronous
notification to registered applications whenever the configuration changes. You can choose to have the
notifications sent to the syslog.
Note
Only CLI or HTTP changes are logged.
How to Use the CLI to Configure Features

Configuring the Command History
The software provides a history or record of commands that you have entered. The command history feature
is particularly useful for recalling long or complex commands or entries, including access lists. You can
customize this feature to suit your needs.
OL-28819-02

Configuring the Command History
Changing the Command History Buffer Size

By default, the controller records ten command lines in its history buffer. You can alter this number for a
current terminal session or for all sessions on a particular line. This procedure is optional.
SUMMARY STEPS
1. terminal history [size number-of-lines]
DETAILED STEPS
Step 1
Command or Action
Purpose
terminal history [size number-of-lines]
Changes the number of command lines that the controller records

during the current terminal session in privileged EXEC mode. You
can configure the size from 0 to 256.
Example:
Controller# terminal history size 200
Recalling Commands
To recall commands from the history buffer, perform one of the actions listed in this table. These actions are
optional.
Note
The arrow keys function only on ANSI-compatible terminals such as VT100s.
SUMMARY STEPS
1. Ctrl-P or use the up arrow key
2. Ctrl-N or use the down arrow key
3. show history
DETAILED STEPS
Command or Action
Purpose
Step 1
Ctrl-P or use the up arrow key
Recalls commands in the history buffer, beginning with the most recent command.
Repeat the key sequence to recall successively older commands.
Step 2
Ctrl-N or use the down arrow key Returns to more recent commands in the history buffer after recalling commands
with Ctrl-P or the up arrow key. Repeat the key sequence to recall successively
more recent commands.
6
OL-28819-02

Enabling and Disabling Editing Features
Step 3
Command or Action
Purpose
show history
Lists the last several commands that you just entered in privileged EXEC mode.
The number of commands that appear is controlled by the setting of the terminal
history global configuration command and the history line configuration
command.
Example:
Controller# show history
Disabling the Command History Feature

The command history feature is automatically enabled. You can disable it for the current terminal session or
for the command line. This procedure is optional.
SUMMARY STEPS
1. terminal no history
DETAILED STEPS
Step 1
Command or Action
Purpose
terminal no history
Disables the feature during the current terminal session in

privileged EXEC mode.
Example:
Controller# terminal no history

Although enhanced editing mode is automatically enabled, you can disable it and reenable it.
SUMMARY STEPS
1. terminal editing
2. terminal no editing
DETAILED STEPS
Step 1
Command or Action
Purpose
terminal editing
Reenables the enhanced editing mode for the current terminal

session in privileged EXEC mode.
Example:
Controller# terminal editing
OL-28819-02

Step 2
Command or Action
Purpose
terminal no editing
Disables the enhanced editing mode for the current terminal

session in privileged EXEC mode.
Example:
Controller# terminal no editing
Editing Commands Through Keystrokes

The keystrokes help you to edit the command lines. These keystrokes are optional.
Note
Table 3: Editing Commands
Editing Commands
Description
Ctrl-B or use the left arrow key
Moves the cursor back one character.
Ctrl-F or use the right arrow key
Moves the cursor forward one character.
Ctrl-A
Moves the cursor to the beginning of the command

line.
Ctrl-E
Moves the cursor to the end of the command line.
Esc B
Moves the cursor back one word.
Esc F
Moves the cursor forward one word.
Ctrl-T
Transposes the character to the left of the cursor with

the character located at the cursor.
Delete or Backspace key
Erases the character to the left of the cursor.
Ctrl-D
Deletes the character at the cursor.
Ctrl-K
Deletes all characters from the cursor to the end of

the command line.
Ctrl-U or Ctrl-X
Deletes all characters from the cursor to the beginning

of the command line.
Ctrl-W
Deletes the word to the left of the cursor.
8
OL-28819-02

Esc D
Deletes from the cursor to the end of the word.
Esc C
Capitalizes at the cursor.
Esc L
Changes the word at the cursor to lowercase.
Esc U
Capitalizes letters from the cursor to the end of the

word.
Ctrl-V or Esc Q
Designates a particular keystroke as an executable

command, perhaps as a shortcut.
Return key
Scrolls down a line or screen on displays that are

longer than the terminal screen can display.
Note
The More prompt is used for any output that

has more lines than can be displayed on the
terminal screen, including show command
output. You can use the Return and Space
bar keystrokes whenever you see the More
prompt.
Space bar
Scrolls down one screen.
Ctrl-L or Ctrl-R
Redisplays the current command line if the controller

suddenly sends a message to your screen.
Editing Command Lines That Wrap

You can use a wraparound feature for commands that extend beyond a single line on the screen. When the
cursor reaches the right margin, the command line shifts ten spaces to the left. You cannot see the first ten
characters of the line, but you can scroll back and check the syntax at the beginning of the command. The
keystroke actions are optional.
To scroll back to the beginning of the command entry, press Ctrl-B or the left arrow key repeatedly. You can
also press Ctrl-A to immediately move to the beginning of the line.
Note

The following example shows how to wrap a command line that extends beyond a single line on the screen.
SUMMARY STEPS
1. access-list
2. Ctrl-A
3. Return key
OL-28819-02

Searching and Filtering Output of show and more Commands
DETAILED STEPS
Step 1
Command or Action
Purpose
access-list
Displays the global configuration command entry that extends beyond

one line.
Example:
When the cursor first reaches the end of the line, the line is shifted ten
spaces to the left and redisplayed. The dollar sign ($) shows that the
line has been scrolled to the left. Each time the cursor reaches the end
of the line, the line is again shifted ten spaces to the left.
Controller(config)# access-list 101 permit

tcp 10.15.22.25 255.255.255.0 10.15.22.35
Controller(config)# $ 101 permit tcp
10.15.22.25 255.255.255.0 10.15.22.35
255.25
Controller(config)# $t tcp 10.15.22.25
255.255.255.0 131.108.1.20 255.255.255.0
eq
Controller(config)# $15.22.25 255.255.255.0
10.15.22.35 255.255.255.0 eq 45
Step 2
Ctrl-A
Checks the complete syntax.
Example:
The dollar sign ($) appears at the end of the line to show that the line
has been scrolled to the right.
Controller(config)# access-list 101 permit

tcp 10.15.22.25 255.255.255.0 10.15.2$
Step 3
Return key
Execute the commands.

The software assumes that you have a terminal screen that is 80
columns wide. If you have a different width, use the terminal width
privileged EXEC command to set the width of your terminal.
Use line wrapping with the command history feature to recall and
modify previous complex command entries.
Searching and Filtering Output of show and more Commands

You can search and filter the output for show and more commands. This is useful when you need to sort
through large amounts of output or if you want to exclude output that you do not need to see. Using these
commands is optional.
SUMMARY STEPS
1. {show | more} command | {begin | include | exclude} regular-expression
DETAILED STEPS
Step 1
Command or Action
Purpose
{show | more} command | {begin | include | exclude}

regular-expression
Searches and filters the output.
10
OL-28819-02

Accessing the CLI Through a Console Connection or Through Telnet
Command or Action
Purpose
Example:
Expressions are case sensitive. For example, if you enter

| exclude output, the lines that contain output are not
displayed, but the lines that contain output appear.
Controller# show interfaces | include protocol

Vlan1 is up, line protocol is up
Vlan10 is up, line protocol is down
GigabitEthernet1/0/1 is up, line protocol is down
GigabitEthernet1/0/2 is up, line protocol is up

Before you can access the CLI, you must connect a terminal or a PC to the controller console or connect a
PC to the Ethernet management port and then power on the controller, as described in the hardware installation
guide that shipped with your controller.
If your controller is already configured, you can access the CLI through a local console connection or through
a remote Telnet session, but your controller must first be configured for this type of access.
You can use one of these methods to establish a connection with the controller:
Connect the controller console port to a management station or dial-up modem, or connect the Ethernet
management port to a PC. For information about connecting to the console or Ethernet management
port, see the controller hardware installation guide.
Use any Telnet TCP/IP or encrypted Secure Shell (SSH) package from a remote management station.
The controller must have network connectivity with the Telnet or SSH client, and the controller must
have an enable secret password configured.
The controller supports up to 16 simultaneous Telnet sessions. Changes made by one Telnet user
are reflected in all other Telnet sessions.
The controller supports up to five simultaneous secure SSH sessions.
After you connect through the console port, through the Ethernet management port, through a Telnet
session or through an SSH session, the user EXEC prompt appears on the management station.
OL-28819-02
11

12
OL-28819-02
CHAPTER
Cisco AireOS to Cisco IOS XE Configuration Mode

Commands
This guide provides information that helps you to know the equivalent Cisco IOS XE release commands for
the Cisco AireOS commands. If you have upgraded the controller to Cisco IOS XE releases, you can easily
locate the equivalent Cisco IOS XE release commands based on Configuration mode and Privilege executive
mode commands. The sections that follow contain the commands in a tabular format, where the Cisco AireOS
commands are on the left and the equivalent Cisco IOS XE release commands on the right.
802.11 Bands Parameter Commands, page 14
AAA Commands, page 16
ACL Commands, page 17
Access Points Commands , page 17
Application Visibility and Control Commands, page 19
Band Select Commands, page 19
CDP Commands, page 20
CleanAir Commands, page 20
DHCP Commands, page 21
Guest-LAN Mapping Commands, page 22
IPv6 Commands, page 23
Licensing Commands, page 24
Local Auth Commands, page 24
Location Commands, page 25
Logging Commands, page 26
MAC Filter Commands, page 27
Multicast DNS Commands, page 27
Mobility Commands, page 28
OL-28819-02
13
Cisco AireOS to Cisco IOS XE Configuration Mode Commands

802.11 Bands Parameter Commands
NETWORK Commands, page 29

NMSP Commands, page 30
Paging Commands, page 31
PASSWD Commands, page 31
Port Commands, page 31
QoS Commands, page 32
Radio Resource Management Commands, page 32
Security Commands, page 34
SNMP Commands, page 37
Time Commands, page 37
TRAPFLAGS Commands, page 38
VLAN Commands, page 38
Voice, Video and VideoStream Commands, page 38
WebAuth Commands, page 41
WLAN Commands, page 41

802.11 Bands Commands
The following table lists the mapping commands used between the Cisco AireOS and Cisco IOS XE release
for 802.11 bands:
Cisco AireOS Command
Cisco IOS XE Release Command
config 802.11 {a |b} beaconperiod

time_unit
ap dot11 { 5ghz | 24ghz} beaconperiod time_unit
config 802.11 {a |b} fragmentation

threshold
ap dot11 { 5ghz | 24ghz} fragmentation threshold
config 802.11 {a |b} dtpc enable
ap dot11 { 5ghz | 24ghz} dtpc
config 802.11 {a |b} disable network
ap dot11 { 5ghz | 24ghz} shutdown
802.11n Commands
for 802.11n parameter:
14
OL-28819-02

config 802.11 { a | b } 11nSupport

enable
ap dot11 { 5ghz | 24ghz} dot11n

disable
no ap dot11 { 5ghz | 24ghz} dot11n

a-mpdu tx priority valueenable
ap dot11 { 5ghz | 24ghz} dot11n a-mpdu tx priority value
config 802.11 { a | b }11nSupport

a-mpdu tx priority valuedisable
no ap dot11 { 5ghz | 24ghz} dot11n a-mpdu tx priority value

a-mpdu tx priority all enable
ap dot11 { 5ghz | 24ghz} dot11n a-mpdu tx priority all

a-mpdu tx priority all disable
no ap dot11 { 5ghz | 24ghz} dot11n a-mpdu tx priority all

guard-interval { any | long }
[no] ap dot11 { 5ghz | 24ghz} dot11n guard-interval { any |

long }
config 802.11 { a | b } 11nSupport mcs

tx value enable
ap dot11 { 5ghz | 24ghz} dot11n mcs tx rate
config 802.11 { a | b } 11nSupport rifs

rx enable
ap dot11 { 5ghz | 24ghz} dot11n rifs rx
config 802.11 { a | b } 11nSupport rifs

rx disable
no ap dot11 { 5ghz | 24ghz} dot11n rifs rx

a-mpdu tx scheduler timeout rt
timeout-value
ap dot11 { 5ghz | 24ghz} a-mpdu tx scheduler timeout rt

timeout-value

no ap dot11 { 5ghz | 24ghz} a-mpdu tx scheduler
a-mpdu tx scheduler timeout rt disable
802.11h Commands
for 802.11h parameter:
config 802.11h channelswitch enable
ap dot11 5ghz channelswitch mode value
config 802.11h channelswitch disable
no ap dot11 5ghz channelswitch mode value
config 802.11h powerconstraint value
ap dot11 5ghz powerconstraint value
OL-28819-02
15

AAA Commands
AAA Commands
for AAA:
config radius auth {add index

radius server server_name
ip_address port {ascii | hex} secret
[radius-server] address {ipv4 | ipv6} ip_address { acct-port
config radius acct {add index ip_address port | alias ipv4 _alias _address | auth-port port} key key
port {ascii | hex} secret
config radius auth keywrap add {ascii
| hex} key-encryption-key
message-authenticator-code-key index
radius-server host ip_address auth-port port acct-port port

key-wrap encryption-key {0 key | 7 key | key}
message-auth-code-key {0 key | 7 key | key} {format {ascii |
hex} key {0 key | 7 key | key} | key {0 key | 7 key | key}}
radius-server host ip_address key-wrap encryption-key {0
key | 7 key | key} message-auth-code-key {0 key | 7 key | key}
{format {ascii | hex} key {0 key | 7 key | key} | key {0 key | 7
key | key}}
config radius callstationIdType

{ap-group-name | ap-location |
ap-macaddr-only | ap-macaddr-ssid |
ap-name | ap-name-ssid | ipaddr |
macaddr | vlan-id}
wireless security dot1x radius call-station-id {ap-macaddress

| ap-macaddress-ssid | ipaddress | macaddress}
config tacacs acct add {index address

port {ascii | hex} secret}
config tacacs auth server-timeout
server_index timeout
tacacs server tacacs_server_name

[server-tacacs] address {ipv4 | ipv6} ip_address
config tacacs acct server-timeout

server_index timeout
[server-tacacs] key {0 key | 7 key | key}

[server-tacacs] timeout timeout
config wlan radius_server {auth | acct} [wlan] accounting-list name

enablewlan_id
[wlan] security dot1x authentication-list method_list_name
Note
AAA is implemented in different ways in the Cisco AireOS and Cisco IOS XE release.
For detailed information about AAA in Cisco AireOS and Cisco IOS XE release, you can refer the following
documents:
Cisco Wireless LAN Controller Configuration Guide
Security Configuration Guide, Cisco IOS XE Release 3SE (Cisco WLC 5700 Series)
16
OL-28819-02

ACL Commands
ACL Commands
ACL Commands
for ACL:
config acl create acl_name
ip access-list standard acl_name
config acl rule action rule_name

rule_index {permit | deny}
access-list acl_number {permit | deny} {any | host address |

address}
config acl delete acl_name
no access-list access-list-number
config ipv6 acl create ipv6_acl_name
ipv6 access-list ipv6_acl_name
config ipv6 acl rule action ipv6_acl_name ipv6 access-list ipv6_acl_name

index deny
[ipv6-acl] deny
config ipv6 acl rule action ipv6_acl_name [ipv6-acl] permit
index permit
config ipv6 acl rule add ipv6_acl_name [ipv6-acl] sequence number {deny | hardware | permit |
remark}
index
config wlan acl wlan-id [acl name | none] [wlan] ip access-group acl-name
show acl
show access-lists
Access Points Commands

for Access Points:
config auth-list ap-policy authorize-ap enable ap auth-list ap-policy authorize-ap

config auth-list ap-policy authorize-ap disable no ap auth-list ap-policy authorize-ap
config auth-list ap-policy authorize-lsc-ap
disable
no ap auth-list ap-policy authorize-lsc-ap
config auth-list ap-policy mic enable
ap auth-list ap-policy mic
config auth-list ap-policy mic disable
no ap auth-list ap-policy mic
OL-28819-02
17

config auth-list ap-policy ssc enable
ap auth-list ap-policy ssc
config auth-list ap-policy ssc disable
no ap auth-list ap-policy ssc
config ap bridging enable all
ap bridging
config ap bridging disable all
no ap bridging
config 802.11 {a | b} beaconperiod time
ap dot11 {5ghz | 24ghz} beaconperiod time
config 802.11 {a | b} beamforming global

enable
ap dot11 {5ghz | 24ghz} beamforming
config 802.11 {a | b} beamforming global

disable
no ap dot11 {5ghz | 24ghz} beamforming
config 802.11 {a | b} world-mode enable
ap dot11 {5ghz | 24ghz} world-mode
config 802.11 {a | b} world-mode disable
no ap dot11 {5ghz | 24ghz} world-mode
config ap mgmtuser add username

ap mgmtuser username username password
AP_username password AP_password secret password_type password
secret all
config ap tcp-adjust-mss enable all mss_size
ap tcp-adjust-mss size mss_size
config advanced max-1x-sessions

no_of_sessions
ap dot1x max-sessions no_of_sessions
config ap 802.1Xuser add username username ap dot1x username username password {0 | 8} password
password passwordall
config ap ethernet duplex {auto | half | full}
speed {speed | auto} all
ap ethernet duplex {auto | half | full} speed {speed |

auto}
config ap group-name groupname
ap group groupname
config wlan apgroup add groupname
ap group groupname
[apgroup] wlan wlan_name
config ap led-state enable
ap led
config ap link-encryption enable all
ap link-encryption
config ap link-latency enable all
ap link-latency
config ap link-latency reset all
ap link-latency reset
config ap power injector enable all

{Switch_port_MAC_address | installed |
override}
ap power injector {switch-mac-address

Switch_port_MAC_address | installed | override}
config ap power pre-standard enable all
ap power pre-standard
config ap reporting-period time
ap reporting-period time
config ap rst-button enable all
ap reset-button
18
OL-28819-02

Application Visibility and Control Commands
config ap static-IP add domain all

domain_name
ap static-ip domain domain_name
config ap syslog host global

syslog-host-ip-address
ap syslog host syslog-host-ip-address
config ap tcp-mss-adjust enable all size
ap tcp-adjust-mss size size
config ap tftp-downgrade tftp-server-ip

filename
ap tftp-downgrade tftp-server-ip filename
Application Visibility and Control Commands

The following table lists the mapping configuration mode commands used between the Cisco AireOS and
Cisco IOS XE release for Application Visibility and Control (AVC) and NetFlow:
config flow {add | delete} monitor

flow exporter exporter _name
monitor_name {exporter exporter_name flow monitor monitor_name
| record record_name}
flow record record _name
config wlan flow wlan_id monitor
monitor_name {enable | disable}
Note
[wlan] ip flow monitor monitor_name {input | output}
AVC is implemented in different ways in the Cisco AireOS and Cisco IOS XE release.
For detailed information about AVC in Cisco AireOS and Cisco IOS XE release, you can refer the following
documents:
System Management Configuration Guide, Cisco IOS XE Release 3SE (Cisco WLC 5700 Series)
Band Select Commands

for band select:
config band-select client-rssi rssi
wireless client band-select client-rssi rssi
config band-select cycle-count

cycle_count
wireless client band-select cycle-count count
OL-28819-02
19

CDP Commands
config band-select cycle-threshold

threshold
wireless client band-select cycle-threshold threshold
config band-select expire dual-band

timeout
wireless client band-select expire dual-band timeout
config band-select expire suppression

timeout
wireless client band-select expire suppression timeout
CDP Commands
for CDP:
config cdp advertise-v2 {enable |

disable}
no cdp advertise-v2
config cdp disable
no cdp run
config cdp enable
cdp run
config cdp holdtime interval
cdp holdtime interval
config cdp timer interval
cdp timer interval
config ap cdp interface{ethernet

interface_no | slot slot_no} enable
ap cdp interface{ethernet interface_no |

radioradio_interface_no}
CleanAir Commands
for CleanAir:
config 802.11 {a | b} cleanair enable

network
ap dot11 {24ghz | 5ghz} cleanair
config 802.11 {a | b} cleanair alarm

air-quality enable
ap dot11 {24ghz | 5ghz} cleanair alarm air-quality

air-quality threshold value
ap dot11 {24ghz | 5ghz} cleanair alarm air-quality threshold

value

device
ap dot11 {24ghz | 5ghz } cleanair alarm device
20
OL-28819-02

DHCP Commands
config 802.11 b cleanair alarm device

{bt-discovery |bt-link | canopy | cont-tx
| dect-like | fh | inv | jammer |mw-oven |
nonstd | superag | tdd-tx | video |
wimax-fixed | wimax-mobile | xbox |
zigbee} enable
ap dot11 24ghz cleanair alarm device {bt-discovery | bt-link

| canopy | cont-tx | dect-like | fh | inv | jammer | mw-oven |
nonstd | superag | tdd-tx | video | wimax-fixed | wimax-mobile
| xbox | zigbee}
config 802.11 a cleanair alarm device

{canopy | cont-tx | dect-like | inv |
jammer | nonstd | radar | superag |
tdd-tx | video | wimax-fixed |
wimax-mobile} enable
ap dot11 5ghz cleanair alarm device {canopy | cont-tx |

dect-like | inv | jammer | nonstd | radar | superag | tdd-tx |
video | wimax-fixed | wimax-mobile}
config 802.11 b cleanair device

{bt-discovery | bt-link | canopy | cont-tx
| dect-like | fh | inv | jammer | mw-oven
| nonstd | report | superag | tdd-tx | video
| wimax-fixed | wimax-mobile | xbox |
zigbee} enable
ap dot11 24ghz cleanair device {bt-discovery | bt-link | canopy

| cont-tx | dect-like | fh | inv | jammer | mw-oven | nonstd |
report | superag | tdd-tx | video | wimax-fixed | wimax-mobile
| xbox | zigbee}
config 802.11 a cleanair device {canopy ap dot11 5ghz cleanair device {canopy | cont-tx | dect-like |
| cont-tx | dect-like | inv | jammer |
inv | jammer | nonstd | radar | report | superag | tdd-tx | video
nonstd | radar | report | superag | tdd-tx | wimax-fixed | wimax-mobile}
| video | wimax-fixed | wimax-mobile}
enable
config advanced 802.11 { a | b } channel ap dot11 {24ghz | 5ghz} rrm channel cleanair-event
cleanair-event enable
config advanced 802.11 { a | b } channel ap dot11 {24ghz | 5ghz} rrm channel cleanair-event
cleanair-event sensitivity {low | high | sensitivity {low | high | medium}
medium}
DHCP Commands
for DHCP:
config dhcp enable name
service dhcp
config dhcp create-scope name

config dhcp enable scope
ip dhcp pool pool_name
config dhcp delete-scope name
no ip dhcp pool pool_name
config dhcp clear-lease ip-address

ip_address
clear ip dhcp binding
OL-28819-02
21

Guest-LAN Mapping Commands
config dhcp clear-lease all
clear ip dhcp binding
config dhcp address-pool scope start end ip dhcp pool pool_name

[dhcp] network subnet subnet-mask
config dhcp default-router scope
router_address_1 [router_address_2]
[router_address_3]
ip dhcp pool pool_name
config dhcp dns-servers scope

server_address_1 [server_address_2]
[server_address_3]
[dhcp] dns-server ip_address
config dhcp domain scope domain
[dhcp] domain-name name
config dhcp lease scope seconds
[dhcp] lease days hours minutes
config dhcp network scope

network_ip_address netmask
[dhcp] network network_ip_address netmask
[dhcp] default-router ip_address
config dhcp opt-82 {remote-id | format [dhcp] option 82 {ascii | hex | instance | ip}
{binary | ascii}}
config dhcp netbios-name-servers
scope_name wins1
[dhcp] netbios-name-server wins1
config interface dhcp interface type

interface name primary
dhcp_server_ip_address
[interface] ip helper-address dhcp_server_ip_address
config dhcp opt82 remote-id
[wlan] ip dhcp opt82-format add-ssid
config dhcp opt82 remote-id ap-ethmac [wlan] ip dhcp opt82-format ethmac

config wlan dhcp_server wlan-id
[wlan] ip dhcp server ip-address

dhcp_server_ip_address required
[wlan] ip dhcp required
Guest-LAN Mapping Commands

Guest-LAN Commands
The following table lists the mapping commands used between the Cisco Unified release and Cisco IOS XE
release for Guest-LAN:
Cisco AirOS Release Command
config guest-lan create guest-lan-id

guest-lan-name
[config] guest-lan guest-lan-name guest-lan-id
22
OL-28819-02

IPv6 Commands
Cisco AirOS Release Command
config guest-lan mobility anchor add

guest-lan-id ip_address
[guest-lan] mobility anchor ip_address
config guest-lan interface guest-lan-id

interface-name
[guest-lan] client vlan
config guest-lan aaa-override enable

guest-lan-id
[guest-lan] aaa-override
config guest-lan aaa-override disable

guest-lan-id
[no] aaa-override
config guest-lan acl guest-lan-id

acl_name
[guest-lan] acl acl_name
config guest-lan max-associated-clients [guest-lan] client association limit max-clients

max-clients guest-lan-id
config guest-lan ipv6 acl guest-lan-id
acl_name
[guest-lan] ipv6 acl acl_name
config guest-lan session-timeout

guest-lan-id timeout
[guest-lan] session-timeout timeout
config guest-lan qos guest-lan-id {bronze [guest-lan] qos {APF_VAP_QOS_BRONZE |

APF_VAP_QOS_GOLD | APF_VAP_QOS_INVALID |
| silver | gold | platinum}
APF_VAP_QOS_PLATINUM | APF_VAP_QOS_SILVER
| APF_VAP_QOS_URANIUM}
IPv6 Commands
for IPv6 access control list (ACL) over WLAN:
config ipv6 acl create ipv6_acl_name
ipv6 access-list ipv6_acl_name
config ipv6 neighbor-binding ra-throttle ipv6 neighbor tracking retry-interval time

interval-option {ignore | passthrough |
throttle}
config ipv6 acl rule action ipv6_acl_name ipv6 access-list ipv6_acl_name
index deny
[ipv6-acl] deny
config ipv6 acl rule action ipv6_acl_name [ipv6-acl] permit
index permit
config ipv6 acl rule add ipv6_acl_name [ipv6-acl] sequence number {deny | hardware | permit |
remark}
index
OL-28819-02
23

Licensing Commands
config ipv6 neighbor-binding timers

{down-lifetime down_lifetime |
reachable-lifetime reachable_lifetime |
stale-lifetime stale_lifetime}
[ipv6-acl] ipv6 neighbor binding {down-lifetime

down_lifetime | reachable-lifetime reachable_lifetime |
stale-lifetime stale_lifetime}
Licensing Commands
RTU Licensing Commands
for Right to Use (RTU) licensing:
Note
RTU licensing is not supported on Cisco 5500 Series Controllers. RTU is supported only on Cisco Flex
7500 Series and 8500 Series controllers. This feature allows you to enable an AP license count on the
controller without using any external tools after accepting an End User License Agreement (EULA).
license {activate | deactivate} ap-count license right-to-use {activate | deactivate}apcount evaluation

eval acceptEULA
acceptEULA
license add ap-count count
license right-to-use {activate | deactivate} apcount

count_adder_license
show license in-use
show license right-to-use detail
show license summary
show license right-to-use summary
Local Auth Commands

for Local auth:
config local-auth eap-profile add

profile_name
eap profile profile_name
config local-auth eap-profile method

add EAP-profile-method profile_name
eap profile profile_name

[eap-profile] method {fast | gtc | leap | md5 | mschapv2 | peap
| tls}
24
OL-28819-02

Location Commands
config local-auth eap-profile method fast eap method fast profile profile_name
{client-cert | local-cert} enable
[eap-profile] method fast profile profile
profile_name
[eap-method-profile] client-cert-required
[eap-method-profile] local-cert-required
config local-auth eap-profile method fast [eap-method-profile] allow-anon-prov
anon-prov enable
config local-auth method fast
authority-id id_hex id_info_ascii
[eap-method-profile] authority-id {identity id | information

info}
config local-auth method fast pac-ttl ttl [eap-method-profile] pac-ttl ttl

config local-auth method fast server-key [eap-method-profile] key key
key
config local-auth user-credentials local aaa authentication dot1x authentication_list group ldap local
ldap
Location Commands
for location:
config location algorithm rssi-average
location algorithm rssi-average
config location algorithm simple
location algorithm simple
config location expiry calibrating-client location expiry calibrating-client seconds

seconds
config location expiry client seconds
location expiry client seconds
config location expiry rogue-aps seconds location expiry rogue-aps seconds

config location expiry tags seconds
location expiry tags seconds
config location notify-threshold client

db
location notify-threshold client db
config location notify-threshold

rogue-aps db
location notify-threshold rogue-aps db
config location notify-threshold tags db location notify-threshold tags db

config location plm calibrating enable location plm calibrating {multiband | uniband }
{multiband | uniband }
OL-28819-02
25

Logging Commands
config location plm calibrating disable no location plm calibrating

{multiband | uniband }
config location plm client enable
burst-interval
location plm client burst-interval
config location plm client disable

burst-interval
no location plm client burst-interval
config rfid status enable
location rfid status
config rfid status disable
no location rfid status
config rfid timeout seconds
location rfid timeout seconds
config rfid vendor_name enable
location rfid vendor-name name
config rfid vendor_name disable
no location rfid vendor-name name
config location rssi-half-life

calibrating-client seconds
location rssi-half-life calibrating-client seconds
config location rssi-half-life client

seconds
location rssi-half-life client seconds
config location rssi-half-life rogue-aps

seconds
location rssi-half-life rogue-aps seconds
config location rssi-half-life tags seconds location rssi-half-life tags seconds
Logging Commands
Logging Commands
for logging:
config logging buffered {0-7 | alerts | critical |

logging buffered {0-7 | alerts | critical | debugging
debugging | emergencies | errors | informational | emergencies | errors | informational | notifications
| notifications | warnings}
| warnings}
config logging console {0-7 | alerts | critical |
logging console {0-7 | alerts | critical | debugging |
debugging | emergencies | errors | informational emergencies | errors | informational | notifications
| notifications | warnings}
| warnings}
config logging exception 512-2147483647
logging exception 512-2147483647
config logging fileinfo enable
logging facility syslog
26
OL-28819-02

MAC Filter Commands
config logging syslog facility { auth-private |

authorization | cron | daemon | ftp | kern | local0
| local1 | local2 | local3 | local4 | local5 | local6 |
local7 | lpr | mail | news | sys11| sys12 | sys13 | sys14
| sys9 | syslog | user | uucp}
logging facility { auth | cron | daemon | kern | local0

| local1 | local2 | local3 | local4 | local5 | local6 | local7
| lpr | mail | news | sys11| sys12 | sys13 | sys14 | sys9
| syslog | user | uucp}
config logging syslog host host_ip_address [delete] logging host host_ip_address
MAC Filter Commands

MAC filter is known as MAC authentication bypass (MAB) in the Cisco IOS XE release.
for MAC filter:
config wlan mac-filtering enable wlan_id
[wlan] mac-filtering mac-filter-name
config wlan mac-filtering disable wlan_id
[wlan] no mac-filtering mac-filter-name
config macfilter radius-compat {cisco | free |

other}
[sg-radius] subscriber mac-filtering security-mode

{mac | shared-secret | none}
config macfilter mac-delimiter {colon | hyphen | [sg-radius] mac-delimiter {colon | hyphen |

none}
single-hyphen | none}
Multicast DNS Commands

for Multicast DNS (mDNS):
config mdns snooping enable
service-routing mdns-sd
config mdns service create service_name

service_string origin {Wireless | Wired | All} lss
enable query enable
service-list mdns-sd service-list_name query
config mdns query interval interval_value
service-routing mdns-sd
[mdns] service-policy-query
service_list_query_name service_list_query_interval
config interface mdns-profile {all | interface_name} service-routing mdns-sd

profile_name
[mdns] service-policy service_policy_name {IN |
OUT}
OL-28819-02
27

Mobility Commands
Note
mDNS is implemented in different ways in the Cisco AireOS and Cisco IOS XE release.
For detailed information about mDNS in Cisco AireOS and Cisco IOS XE releases, you can refer the following
documents:
Multicast Configuration Guide, Cisco IOS XE Release 3SE (Cisco WLC 5700 Series)
Mobility Commands
Mobility Commands
for mobility:
config mobility switchPeerGroup create wireless mobility controller peer-group

peer-group-name
switch-peer-group-name
config mobility switchPeerGroup delete no wireless mobility controller peer-group
peer-group-name
switch-peer-group-name
config mobility switchPeerGroup
wireless mobility controller peer-group
member add peer-group-member-ip-addr switch-peer-group-name member ip ip-address [public-ip
peer-group-name
public-ip-address]
[public_IP_address_member]
multicast-mode peer-group-name
multicast mode

switch-peer-group-name multicast

multicast-address peer-group-name
peer-group-multicast-ip-addr

switch-peer-group-name multicast ip
peer-group-multicast-ip-addr

bridge-domain-id peer-group-name
bridge_domain_id

switch-peer-group-name bridge-domain-id bridge domain id
config mobility group member add

mac-address ip-address [group name]
wireless mobility group member ip ip-address [public-ip

public-ip-address] [group group-name]
config mobility dscp value
wireless mobility dscp value
config mobility group keepalive {count wireless mobility group keepalive {count number | interval
number | interval interval}
interval}
28
OL-28819-02

NETWORK Commands
config mobility group domain

domain_name
wireless mobility group name name
config mobility group multicast-address wireless mobility group multicast-address group_name ip

group_name ip_address
ip_address
config mobility oracle enable
wireless mobility oracle
config mobility oracle disable
no wireless mobility oracle
config mobility ip mo-ip-address
wireless mobility oracle ip mo-ip-address
NETWORK Commands
NETWORK Commands
for NETWORK:
config advanced backup-controller {primary |

secondary } controller-name controller-ip-addr
ap capwap backup {primary | secondary }

controller-name controller-ip-addr
config advanced timers ap-discovery-timeout

seconds
ap capwap timers discovery-timeout seconds
config advanced timers ap-heartbeat-timeout

seconds
ap capwap timers heartbeat-timeout seconds
config advanced timers

ap-primary-discovery-timeout seconds
ap capwap timers primary-discovery-timeout

seconds
config advanced timers primed-join-timeout

seconds
ap capwap timers primed-join-timeout seconds
config advanced timers ap-fast-heartbeat-timeout ap capwap timers fast-heartbeat-timeout local

seconds
seconds
config network arptimeout
arp timeout
config network ap-fallback enable
ap capwap fallback
config network ap-priority enable
ap capwap priority
config network broadcast enable
wireless broadcast
config network ip-mac-binding enable
[wlan] ip verify source mac-check
config network master-base disable
no ap capwap master
config network master-base enable
ap capwap master
OL-28819-02
29

NMSP Commands
config network mgmt-via-wireless disable
no wireless mgmt-via-wireless
config network mgmt-via-wireless enable
wireless mgmt-via-wireless
config network multicast igmp query interval

interval
ip igmp snooping last-member-query-interval

interval
config network multicast igmp snooping disable no ip igmp snooping

config network multicast igmp snooping enable
ip igmp snooping
config network multicast igmp timeout value
ip igmp snooping querier timer expiry
config network secureweb cipher-option high

disable
ip http secure-ciphersuite
config network secureweb disable
no ip http secure-server
config network secureweb enable
ip http secure-server
config network ssh disable
no ip ssh version {1 | 2}
config network ssh enable
ip ssh version {1 | 2}
config network webmode disable
no ip http server
config network webmode enable
ip http server
NMSP Commands
for Network Mobility Services Protocol (NMSP):
config nmsp notification interval rssi

clients interval
nmsp notification interval rssi clients interval

rfid interval
nmsp notification interval rssi rfid interval

rogues ap interval
nmsp notification interval rssi rogues ap interval

rogues client interval
nmsp notification interval rssi rogues client interval
30
OL-28819-02

Paging Commands
Paging Commands
Paging Commands
for paging:
config paging disable
terminal lenght 0
config paging enable
terminal lenght value
PASSWD Commands
for PASSWD:
config passwd-cleartext disable
passwd encryption off
config passwd-cleartext enable
passwd encryption on
Port Commands
Port Commands
for port:
config port admin-mode [port | all] disable
interface { Auto-Template | Capwap |

GigabitEthernet | GroupVI | InternalInterface |
Loopback | Port-channel | TenGigabitEthernet |
Tunnel | Vlan} interface number
[if] shutdown
config port admin-mode [port | all] enable
[if] no shutdown
config port linktrap [port | all] disable
[if] no snmp trap link-status permit duplicates
config port linktrap [port | all] enable
[if] snmp trap link-status permit duplicates
OL-28819-02
31

QoS Commands
QoS Commands
The following table lists the mapping command used between the Cisco AireOS and Cisco IOS XE release
for Quality of Service (QoS):
config wlan qos wlan_id {bronze | silver [wlan] service-policy output {bronze | silver | gold | platinum}
| gold | platinum}
[wlan] service-policy input {bronze-up | silver-up | gold-up
| platinum-up}
config guest-lan qos guest-lan-id {bronze [guest-lan] qos {APF_VAP_QOS_BRONZE |
APF_VAP_QOS_GOLD | APF_VAP_QOS_INVALID |
| silver | gold | platinum}
APF_VAP_QOS_PLATINUM | APF_VAP_QOS_SILVER
| APF_VAP_QOS_URANIUM}
Note
QoS is implemented in different ways in the Cisco AireOS and Cisco IOS XE release.
For detailed information about QoS in Cisco AireOS and Cisco IOS XE release, you can refer the following
documents:
QoS Configuration Guide, Cisco IOS XE Release 3SE (Cisco WLC 5700 Series)
Radio Resource Management Commands

for Radio Resource Management (RRM):
Cisco AirOS Command
config advanced 802.11 { a | b } ccx

location-meas global enable
interval_seconds
ap dot11 {24ghz | 5ghz} rrm ccx location-measurement

interval
config advanced 802.11 { a | b } ccx

location-meas global disable
no ap dot11 {24ghz | 5ghz} rrm ccx location-measurement
config advanced 802.11 { a | b } channel ap dot11 {24ghz | 5ghz} rrm channel dca {anchor-time value
dca { anchor-time value | interval value | global { auto | once } |interval value | min-metric rssi-value
| min-metric value | sensitivity { high | | sensitivity { high | low | medium}}
low | medium}}
32
OL-28819-02

Cisco AirOS Command
config advanced 802.11 { a | b } channel ap dot11 {24ghz | 5ghz} rrm channel device
device enable
config advanced 802.11 { a | b } channel ap dot11 {24ghz | 5ghz} rrm channel dca { global { auto |
global { auto | once }
once }
config advanced 802.11a channel dca
chan-width-11n { 20 | 40 }
ap dot11 5ghz rrm channel dca chan-width-11n width
config advanced 802.11 { a | b } channel ap dot11 {24ghz | 5ghz} rrm channel dca number
add channel_number
config advanced 802.11 { a | b } channel no ap dot11 {24ghz | 5ghz} rrm channel dca number
delete channel_number
config advanced 802.11 { a | b } channel ap dot11 {24ghz | 5ghz} rrm channel { device | foreign | load
{ device | foreign | load | noise } enable | noise }
config advanced 802.11 { a | b } channel no ap dot11 {24ghz | 5ghz} rrm channel { device | foreign |
{ device | foreign | load | noise } disable load | noise }
config advanced 802.11 { a | b }
coverage { data | voice } { fail-rate
percent | packet-count packets |
rssi-threshold rssi }
ap dot11 {24ghz | 5ghz} rrm coverage { data | voice } {

fail-percentage percentage | packet-count count | rssi-threshold
threshold }

coverage exception global precent
ap dot11 {24ghz | 5ghz} rrm coverage exception global

exception level

coverage level global clients
ap dot11 {24ghz | 5ghz} rrm coverage level global clients

group-member add controller_name
controller_ip_address
ap dot11 {24ghz | 5ghz} rrm group-member group_name

ip_address

no ap dot11 {24ghz | 5ghz} rrm group-member group_name
group-member remove controller_name ip_address
controller_ip_address
config advanced 802.11 { a | b } logging ap dot11 {24ghz | 5ghz} rrm logging { channel | coverage |
{ channel | coverage | foreign | load |
foreign | load | noise | performance | txpower }
noise | performance | txpower } on
config advanced 802.11 { a | b } logging no ap dot11 {24ghz | 5ghz} rrm logging { channel | coverage
{ channel | coverage | foreign | load |
| foreign | load | noise | performance | txpower }
noise | performance | txpower } off
config advanced 802.11 { a | b } monitor ap dot11 {24ghz | 5ghz} rrm monitor channel-list { all |
channel-list { all | country | dca }
country | dca }
config advanced 802.11 { a | b } monitor ap dot11 {24ghz | 5ghz} rrm monitor { coverage interval |
{ coverage interval | load interval | noise load interval | noise interval | signal interval }
interval | signal interval }
OL-28819-02
33

Security Commands
Cisco AirOS Command
config advanced 802.11 { a | b } profile ap dot11 {24ghz | 5ghz} rrm profile { clients
{ clients | foreign | noise } { global }
cli_threshold_value | foreign int_threshold_value | noise
value
for_noise_threshold_value }
config advanced 802.11 { a | b } profile ap dot11 {24ghz | 5ghz} rrm profile { throughput
{ throughput | utilization } { global }
throughput_threshold_value | utilization rf_util_threshold_value
value
}
config advanced 802.11 { a | b } txPower ap dot11 {24ghz | 5ghz} rrm txPower { power-level | auto |
global { power-level | auto | max
max power-level | min power-level | once }
power-level | min power-level | once }
Security Commands
Security Commands
for security solutions:
config advanced eap eapol-key-retries

retries
wireless security dot1x eapol-key retries retries
config advanced eap eapol-key-timeout wireless security dot1x eapol-key timeout milliseconds
milliseconds
config advanced eap bcast-key-interval wireless security dot1x group-key interval seconds
seconds
config advanced eap
identity-request-retries retries
wireless security dot1x identity-request retries retries
config advanced eap

identity-request-timeout second
wireless security dot1x identity-request timeout seconds
config radius callStationIdType

wireless security dot1x radius call-station-id {ap-macaddress
{ap-macaddress | ap-macaddress-ssid | | ap-macaddress-ssid | ipaddress | macaddress}
ipaddress | macaddress}
config advanced eap request-retries
retries
wireless security dot1x request retries retries
config advanced eap request-timeout

seconds
wireless security dot1x request timeout seconds
config advanced eap key-index key-index wireless security dot1x wep key index {0 | 3}
config switchconfig strong-pwd
wireless security strong-password
34
OL-28819-02

Security Commands
for wps:
config wps ap-authentication enable
wireless wps ap-authentication
config wps ap-authentication disable
no wireless wps ap-authentication
config wps ap-authentication threshold wireless wps ap-authentication threshold value

threshold
config wps auto-immune enable
wireless wps auto-immune
config wps auto-immune disable
no wireless wps auto-immune
config wps cid-sensor add index
wireless wps cids-sensor index
config wps cid-sensor delete index
nowireless wps cids-sensor index
config wps cid-sensor add index ip-addr wireless wps cids-sensor index ip-address ip-addr username
username password
username password password-type password
config wps client-exclusion all enable
wireless wps client-exclusion all
config wps client-exclusion all disable
no wireless wps client-exclusion all
config wps client-exclusion 802.11-assoc wireless wps client-exclusion dot11-assoc

enable
config wps client-exclusion 802.11-assoc no wireless wps client-exclusion dot11-assoc
disable
config wps client-exclusion 802.11-auth wireless wps client-exclusion dot11-auth
enable
config wps client-exclusion 802.11-auth no wireless wps client-exclusion dot11-auth
disable
config wps client-exclusion 802.1x-auth wireless wps client-exclusion dot1x-auth
enable
config wps client-exclusion 802.1x-auth no wireless wps client-exclusion dot1x-auth
disable
config wps client-exclusion ip-theft
enable
wireless wps client-exclusion ip-theft
config wps client-exclusion ip-theft

disable
no wireless wps client-exclusion ip-theft
config wps client-exclusion web-auth

enable
wireless wps client-exclusion web-auth
config wps client-exclusion web-auth

disable
no wireless wps client-exclusion web-auth
config wps mfp infrastructure enable
wireless wps mfp infrastructure
config wps mfp infrastructure disable
no wireless wps mfp infrastructure
OL-28819-02
35

Security Commands
for rogue detection:
config rogue adhoc enable
wireless wps rogue adhoc
config rogue adhoc disable
no wireless wps rogue adhoc
config rogue adhoc auto-contain
wireless wps rogue adhoc auto-contain
config rogue adhoc alert all
no wireless wps rogue adhoc auto-contain
config rogue ap rldp enable alarm-only wireless wps rogue ap rldp alarm-only
config rogue ap rldp enable alarm-only wireless wps rogue ap rldp alarm-only monitor-ap-only
monitor-ap-only
config rogue ap rldp enable auto-contain wireless wps rogue ap rldp auto-contain
config rogue ap rldp enable auto-contain wireless wps rogue ap rldp auto-contain monitor-ap-only
monitor-ap-only
config rogue ap rldp retries
wireless wps rogue ap rldp retries count
config rogue ap rldp schedule enable
wireless wps rogue ap rldp schedule
config rogue ap rldp schedule disable
no wireless wps rogue ap rldp schedule
config rogue ap rldp schedule add
wireless wps rogue ap rldp schedule day day start start-time

end end-time
config rogue ap ssid auto-contain
wireless wps rogue ap ssid auto-contain
config rogue ap ssid alarm
no wireless wps rogue ap ssid auto-contain
config rogue ap timeout seconds
wireless wps rogue ap timeout seconds
config rogue ap valid-client auto-contain wireless wps rogue ap valid-client auto-contain

config rogue ap valid-client alarm
no wireless wps rogue ap valid-client auto-contain
config rogue auto-contain level level
wireless wps rogue auto-contain level level
config rogue auto-contain level level

monitor-ap-only
wireless wps rogue auto-contain level level monitor-ap-only
config rogue client aaa enable
wireless wps rogue client aaa
config rogue client aaa disable
no wireless wps rogue client aaa
config rogue detection min-rssi rssi
wireless wps rogue detection min-rssi rssi
config rogue detection monitor-ap

report-interval interval
wireless wps rogue detection report-interval interval
config rogue detection monitor-ap

transient-rogue-interval time
wireless wps rogue detection min-transient-time transtime
36
OL-28819-02

SNMP Commands
config rogue rule add ap priority

priority classify {friendly | malicious}
rule-name
wireless wps rogue rule rule-name
config rogue rule delete all
no wireless wps rogue rule
config rogue rule priority priority

rule-name
wireless wps rogue rule rule-name priority priority
config rogue rule enable all
wireless wps rogue rule shutdown
config rogue rule disable all
no wireless wps rogue rule shutdown
config rogue detection

transient-rogue-interval time
wireless wps rogue detection min-transient-time time
SNMP Commands
SNMP Commands
for SNMP:
config snmp community accessmode ro name
snmp-server community {ro name | rw name | word}
config snmp community accessmode rw name
snmp-server community rw name
config snmp community create name
snmp-server community word
config snmp community delete name
[no] snmp-server community word
Time Commands
Time Commands
for time:
config time manual mm:dd:yy hh:mm:ss
clock set mm:dd:yy hh:mm:ss
config time ntp auth disable server-index
[no] ntp authenticate
config time ntp auth enable server-index key-index ntp authenticate

config time ntp interval interval
ntp clock-period
OL-28819-02
37

TRAPFLAGS Commands
config time ntp key-auth add key-index md5 aascii ntp authentication-key key-index md5 key
key
auth-key-encryption-type
config time ntp key-auth add key-index md5 hex ntp authentication-key key-index md5 key
key
auth-key-encryption-type
config time ntp key-auth delete key-index
[no] ntp authentication-key key-index
config time ntp server index ip_address
ntp server ip_address
config time timezone delta delta_hrs delta_mins
clock timezone timezone delta_hrs delta_mins
config time timezone location location_index
clock timezone timezone
TRAPFLAGS Commands
TRAPFLAGS Commands
for TRAPFLAGS:
config trapflags ap authFailure [enable | disable] [no] trapflags client dot11 authfail
VLAN Commands
for VLAN:
config interface vlan interface_name

vlan_identifier
vlan vlan_identifier
[vlan] name name
interface vlan vlan_identifier
Voice, Video and VideoStream Commands

Voice commands
for voice:
38
OL-28819-02

config 802.11 {a | b} cac voice acm

enable
ap dot11{5ghz | 24ghz} cac voice acm
config 802.11 {a | b} cac voice

load-based enable
ap dot11{5ghz | 24ghz} cac voice load-based

max-bandwidth bandwidth
ap dot11 {5ghz | 24ghz} cac voice max-bandwidth bandwidth

roam-bandwidth bandwidth
ap dot11 {5ghz | 24ghz} cac voice roam-bandwidth bandwidth
config 802.11 {a | b} cac voice sip enable ap dot11 {5ghz | 24ghz} cac voice sip
config 802.11 {a | b} cac voice sip
bandwidth bandwidth sample-interval
number_msecs
ap dot11 {5ghz | 24ghz} cac voice sip bandwidthbandwidth

sample-interval number_msecs

stream-size value max-streams value
ap dot11 {5ghz | 24ghz} cac voice stream-size value

max-streams value

tspec-inactivity-timeout enable
ap dot11{5ghz | 24ghz} cac voice tspec-inactivity-timeout
Video commands
for video:
config 802.11 {a | b} cac video acm

{enable | disable}
ap dot11 {5ghz | 24ghz} cac video acm
config 802.11 {a | b} cac video

ap dot11 {5ghz | 24ghz} cac video load-based
cac-methodload-based {enable | disable}
max-bandwidth bandwidth
ap dot11 {5ghz | 24ghz} cac video max-bandwidth bandwidth

roam-bandwidth bandwidth
ap dot11 {5ghz | 24ghz} cac video roam-bandwidth bandwidth
config advanced sip-preferred-call-no

call_index call-no
wireless sip preferred-call-no callIndex call-no
config advanced sip-preferred-call-no

call_index none
wireless sip preferred-call-no callIndex
VideoStream Commands
for VideoStream:
OL-28819-02
39

config 802.11 {a | b} cac media-stream ap dot11 {5ghz | 24ghz} media-stream multicast-direct

multicast-direct enable
config 802.11 {a | b} cac media-stream no ap dot11 {5ghz | 24ghz} media-stream multicast-direct
multicast-direct disable
config 802.11 {a | b} cac media-stream ap dot11 {5ghz | 24ghz} cac media-stream multicast-direct
multicast-direct max_retry_percent
max_retry_percent retrypercentage
retrypercentage
config 802.11 {a | b} cac media-stream ap dot11 {5ghz | 24ghz} cac media-stream multicast-direct
multicast-direct min-client-rate rate
min-client-rate dot11rate
config 802.11 {a | b} media-stream
ap dot11 {5ghz | 24ghz} media-stream multicast-direct
multicast-direct radio-maximum value radio-maximum value
multicast-direct client-maximum value client-maximum value
multicast-direct admission-besteffort

admission-besteffort
config wlan media-stream

multicast-direct wlan_id enable
[ wlan ] media-stream multicast-direct

multicast-direct wlan_id disable
[ wlan ] no media-stream multicast-direct
config media-stream message
wireless media-stream message
config media-stream multicast-direct

enable
wireless media-stream multicast-direct
config media-stream multicast-direct

disable
no wireless media-stream multicast-direct
config media-stream add

multicast-direct stream-name
media_stream_name start_IP end_IP
wireless media-stream multicast-directstream-name

media_stream_name start_IP end_IP
config media-stream delete

media_stream_name
no wireless media-stream media_stream_name
EDCA Commands
for Enhanced distributed channel access (EDCA)parameters:
config advanced 802.11 {a | b}

ap dot11{5ghz | 24ghz} edca-parameters {custom-voice |
edca-parameters {custom-voice |
optimized-video-voice | optimized-voice | svp-voice |
optimized-video-voice | optimized-voice wmm-default}
| svp-voice | wmm-default}
40
OL-28819-02

WebAuth Commands
WebAuth Commands
Both the Cisco AireOS and Cisco IOS XE releases support WebAuth, however, it is implemented in different
ways. Local WebAuth, custom WebAuth and external WebAuth are supported on both platforms. Web
passthrough in Cisco AireOS release is known as web consent in Cisco IOS XE release.
For detailed information about WebAuth in Cisco AireOS and Cisco IOS XE releases, you can refer the
following documents:
Security Configuration Guide, Cisco IOS XE Release 3SE (Cisco WLC 5700 Series)
WLAN Commands
for WLAN:
config wlan create wlan-namewlan-id

[ssid]
wlan wlan-name wlan-id [ssid]
config wlan disable all
wlan shutdown
config wlan enable all
no wlan shutdown
config wlan aaa-override enable

[wlan-id]
[wlan] aaa-override
config wlan aaa-override disable

[wlan-id]
[wlan] no aaa-override
config wlan acl wlan-id [acl name | none] [wlan] ip access-group acl-name
config wlan broadcast-ssid enable
wlan-id
[wlan] broadcast-ssid
config wlan broadcast-ssid disable

wlan-id
[wlan] no broadcast-ssid
config wlan call-snoop disable wlan-id
[wlan] call-snoop
config wlan call-snoop enable wlan-id
[wlan] no call-snoop
config wlan ccx aironet-ie enable wlan-id [wlan] ccx aironet-iesupport

config wlan channel-scan defer-priority [wlan] channel-scan defer-priority priority
priority enable wlan-id
config wlan channel-scan defer-priority [wlan] no channel-scan defer-priority priority
priority disable wlan-id
OL-28819-02
41

WLAN Commands
config wlan channel-scan defer-time time [wlan] channel-scan defer-time time

wlan-id
config wlan chd wlan-id enable
[wlan] chd
config wlan chd wlan-id disable
[wlan] no chd
config wlan max-associated-clients

max_no._of_clients wlan-id
[wlan] client association limit max-clients
config wlan interface wlan-id

interface-name
[wlan] client vlan interface-name
config wlan diag-channel enable wlan-id [wlan] diag-channel

config wlan diag-channel disable wlan-id [wlan] no diag-channel
config wlan dtim { 802.11a | 802.11b}
value wlan-id
[wlan] dtim dot11 { 24ghz | 5ghz} dtim-period
config wlan exclusionlist wlan-id enabled [wlan] exclusionlist

config wlan exclusionlist wlan-id
disabled
[wlan] no exclusionlist
config wlan exclusionlist wlan-id seconds [wlan] exclusionlist seconds

config wlan security web-passthrough
acl wlan-id acl-name
[wlan] ip access-group web acl-name
config dhcp opt82 remote-id apmac:ssid [wlan] ip dhcp opt82-format add-ssid

config dhcp opt82 remote-id ap-ethmac [wlan] ip dhcp opt82-format ethmac
[wlan] ip dhcp server ip-address

dhcp_server_ip_address required
[wlan] ip dhcp required
config wlan load-balance allow enable

wlan-id
[wlan] load-balance
config wlan load-balance allow disable [wlan] no load-balance

wlan-id
config wlan band-select allow enable
[wlan] band-select
config wlan band-select allow disable
[wlan] no band-select
config wlan local-auth enable profile

wlan-id
[wlan] local-auth profile
config wlan local-auth disable wlan-id
[wlan] no local-auth
config wlan mac-filtering enable wlan-id [wlan] mac-filtering mac-filter-name

config wlan mac-filtering disable wlan-id [wlan] no mac-filtering mac-filter-name
42
OL-28819-02

WLAN Commands

multicast-direct wlan-id enable
[wlan] media-stream multicast-direct

multicast-direct wlan-id disable
[wlan] no media-stream multicast-direct
config wlan mfp client enable wlan-id
[wlan] mfp client
config wlan mfp client disable wlan-id
[wlan] no mfp client
config wlan mfp client enable wlan-id

required
[wlan] mfp client required
config wlan mfp client disable wlan-id
[wlan] no mfp client required
config wlan mfp

[wlan] mfp infrastructure-protection
infrastructure-protection enable wlan-id
config wlan mfp
[wlan] no mfp infrastructure-protection
infrastructure-protection disable wlan-id
config wlan mobility anchor add wlan-id [wlan] mobility anchor ip-address
ip-address
config wlan mobility anchor delete
wlan-id ip-address
[wlan] no mobility anchor ip-address
config wlan nac enable wlan-id
[wlan] nac
config wlan nac disable wlan-id
[wlan] no nac
config wlan peer-blocking drop wlan-id [wlan] peer-blocking drop

config wlan peer-blocking disable
wlan-id
[wlan] no peer-blocking
config wlan peer-blocking

forward-upstream wlan-id
[wlan] peer-blocking forward-upstream
config wlan radio wlan-id all
[wlan] radio all
config wlan radio wlan-id 802.11a
[wlan] radio dot11a
config wlan radio wlan-id 802.11ag
[wlan] radio dot11ag
config wlan radio wlan-id 802.11bg
[wlan] radio dot11bg
config wlan radio wlan-id 802.11g
[wlan] radio dot11g
config wlan security pmf {optional |

required | association-comeback
association-comeback_timeout |
saquery-retrytimeout
saquery-retrytimeout } wlan-id
[wlan] security pmf {optional | mandatory |

association-comeback association-comeback_timeout |
saquery-retrytimeout saquery-retrytimeout }
OL-28819-02
43

WLAN Commands
config wlan security pmf disable wlan-id [wlan] no security pmf {optional | mandatory |
association-comeback association-comeback_timeout |
saquery-retrytimeout saquery-retrytimeout }
config wlan security ft enable wlan-id
[wlan] security wpa
config wlan security ft enable wlan-id
[wlan] security wpa
config wlan security wpa akm ft {802.1x [wlan] security wpa akm ft {dot1x | psk}
| psk} enable wlan-id
config wlan security wpa akm ft disable [wlan] no security wpa akm ft {dot1x | psk}
wlan-id
config wlan security static-wep-key
authentication {open | shared-key}
enable wlan-id
[wlan] security static-wep-key authentication {open |

sharedkey}
config wlan security static-wep-key

encryption wlan-id {40 | 104} {hex |
ascii} key key-index enable
[wlan] security static-wep-key encryption wlan-id {40 | 104}

{hex | ascii} wep-key wep-key -index
config wlan security wpa enablewlan-id [wlan] security wpa

config wlan security wpa {wpa1 | wpa2} [wlan] security wpa {wpa1 ciphers | wpa2 ciphers} {aes |
tkip}
{aes | tkip} enable wlan-id
config wlan security 802.1X enable
wlan-id
[wlan] security 802.1X { aes | tkip}
config wlan multicast interface wlan-id [wlan] ip multicast vlanvlan-id

enable interface_name
config wlan timeout wlan-id time
[wlan] session-timeout time
config wlan max-radio-clients

max_radio_clients wlan-id
[wlan] client association limit radio max-client-connections
config wlan assisted-roaming

{neighbor-list | dual-list | prediction}
enablewlan-id
[wlan] assisted-roaming {neighbor-list | dual-list | prediction}
config assisted-roaming
wireless assisted-roaming {denial-maximum count | floor-bias
{denial-maximumcount | floor-bias RSSI RSSI | prediction-minimum number_of_APs}
| prediction-minimum number_of_APs}
config wlan wifidirect {allow | notallow} wlan-id
[wlan] wifidirect policy {deny | permit}
config wlan wifidirect disable wlan-id
no wifidirect policy
44
OL-28819-02
CHAPTER
Cisco AireOS to Cisco IOS XE Privilege Executive

Commands
Access Points Privilege EXEC Commands, page 45
Radio Resource Management Privilege EXEC Commands, page 48
Syslog Privilege EXEC Commands, page 49
Access Points Privilege EXEC Commands

for access points:
config ap crash-file clear-all
ap crash-file clear-all
config ap crash-file delete file-name
ap crash-file delete file-name
config ap group-name group-name Cisco ap name ap-name ap-groupname group-name

AP
config ap bhrate kbps Cisco AP
ap name ap-name bhrate kbps
config ap bridgegroupname set

bridgegroupname Cisco AP
ap name ap-name bridgegroupname bridgegroupname
config ap bridging enable Cisco AP
ap name ap-name bridging
config ap primary-base Switch Name

Cisco AP Switch IP Addr
ap name ap-name controller primary controller-name

controller-ip-addr
config ap secondary-base Switch Name

ap name ap-name controller secondary controller-name

controller-ip-addr
config ap tertiary-base Switch Name

ap name ap-name controller tertiary controller-name

controller-ip-addr
OL-28819-02
45
Cisco AireOS to Cisco IOS XE Privilege Executive Commands

config ap core-dump enable

ap name ap-name core-dump tftp-ip-addr filename compress
tftp-server-IP filename compress AP name
config ap core-dump enable
tftp-server-IP filename uncompress AP
name
ap name ap-name core-dump tftp-ip-addr filename

uncompress
config ap country country-code Cisco AP ap name ap-name country country-code

config ap crash-file get-crash-data Cisco ap name ap-name crash-file get-crash-data
AP
config ap crash-file get-radio-core-dump ap name ap-name crash-file get-radio-core-dump slot {0 | 1}
slot id Cisco AP
config ap 802.1Xuser add username
ap nameap_name dot1x-user username username password
username password password ap_name password
config 802.11-abgn cleanair enable
ap_name band band
ap name ap_name dot11 dual-band {cleanair | shutdown}
config 802.11-abgn cleanair disable

ap_name band band
ap name ap_name no dot11 dual-band {cleanair | shutdown}
config ap ethernet duplex {auto | half | ap name ap_name ethernet duplex {auto | half | full} speed
full} speed {speed | auto} ap_name
{speed | auto}
config ap ethernet duplex int-num mode ap name ap_name ethernet duplex int-num mode {access |
{access | trunk} ap_name vlan_id
trunk} vlan_id
config ap link-encryption enable
ap_name
ap name ap_name link-encryption
config ap link-latency enable ap_name
ap name ap_name link-latency
config ap link-latency reset ap_name
ap name ap_name link-latency reset
config ap location location ap_name
ap name ap_name location location
config ap mgmtuser add username

AP_username password AP_password
secret secret ap_name
ap name ap_name mgmtuser username username password

password secret secret
config ap mode {local | monitor |

se-connect | sniffer} submode {none |
wips} Cisco AP
ap name ap-name {local | monitor | se-connect | sniffer}

submode {none | wips}
config ap monitor-mode {802.11b

fast-channel | no-optimization |
tracking-opt | wips-optimized} Cisco
AP
ap name ap-name monitor-mode{dot11b fast-channel

first_channel second channel| no-optimization | tracking-opt
| wips-optimized}
config ap name new_ap_name

old_ap_name
ap name old_ap_name name new_ap_name
46
OL-28819-02

config ap power pre-standard enable

ap_name
ap name ap_name power pre-standard
config ap priority value ap_name
ap name ap_name priority value
config ap reset ap_name
ap name ap_name reset
config ap rst-button enable ap_name
ap name ap_name reset-button
config ap {telnet | ssh} enable Cisco AP ap name ap-name {telnet | ssh}

config ap {telnet | ssh} disable Cisco AP no ap name ap-name {telnet | ssh}
config ap static-IP {add domain Cisco ap name ap-name static-ip {domain domain-name | ip-address
AP name domain-name | enable Cisco AP ip-address netmask netmask gateway gateway | nameserver
name AP IP addr IP netmask | add
ip-address }
nameserver Cisco AP name IP addr}
config ap stats-timer Cisco AP
ap name ap-name stats-timer timer-value
config ap syslog host specific ap_name

syslog_host-ipaddr
ap name ap-name syslog host syslog_host-ipaddr
config ap tcp-adjust-mss enable ap name ap name ap-name tcp-adjust-mss size size

size
config ap tftp-downgrade tftp-server-ip ap name ap-name tftp-downgrade tftp-server-ip filename
filename ap name
for access point radios:
config 802.11 {a | b} antenna

extAntGain antenna-gain Cisco AP
ap name ap-name dot11 {24ghz | 5ghz} antenna ext-ant-gain

gain
config 802.11 {a | b} antenna mode omni ap name ap-name dot11 {24ghz | 5ghz} antenna mode omni
Cisco AP
config 802.11 {a | b} antenna mode
{sectorA | sectorB Cisco AP
ap name ap-name dot11 {24ghz | 5ghz} antenna mode

{sectorA | sectorB
config 802.11 {a | b} antenna selection

{external | internal Cisco AP
ap name ap-name dot11 {24ghz | 5ghz} antenna selection

{external | internal
config {802.11a | 802.11b | 802.11-a49 | ap name ap-name dot11 {24ghz | 5ghz | 49ghz | 58ghz} channel
802.11-a58} channel ap Cisco AP channel number
config {802.11a | 802.11b | 802.11-a49 | ap name ap-name dot11 {24ghz | 5ghz | 49ghz | 58ghz} channel
802.11-a58} channel ap Cisco AP global auto
config 802.11 {a | b} 11nsupport
ap name ap-name dot11 {24ghz | 5ghz} dot11n antenna {A |
antenna Cisco AP {A | B | C | D} enable B | C | D}
OL-28819-02
47

Radio Resource Management Privilege EXEC Commands
config 802.11 {a | b} 11nsupport

ap name ap-name no dot11 {24ghz | 5ghz} dot11n antenna
antenna Cisco AP {A | B | C | D} disable {A | B | C | D}
config 802.11 {a | b} disable Cisco AP
ap name ap-name dot11 {24ghz | 5ghz} shutdown
config {802.11a | 802.11b | 802.11-a49 |

802.11-a58} txpower ap Cisco AP {
power-level | global}
ap name ap-name dot11 {24ghz | 5ghz | 49ghz |58ghz} txpower

{power-level | auto}
config {802.11-a49 | 802.11-a58} antenna ap name ap-name dot11 {49ghz | 58ghz} antenna extantgain
extAntGain Cisco AP
gain
config slot slot-number txpower ap
Cisco-AP {channel-level | global}
ap name ap-name slot slot-number txpower {channel-level |

global}
config ap sniff {802.11a | 802.11b}

enable chan sniff-server-ip-Addr
Cisco-AP-name
ap name ap-name sniff {dot11a | dot11b} channel

server-ip-address

for Radio Resource Management (RRM):

channel-update
ap dot11 {24ghz | 5ghz} rrm channel-update

txpower-update
ap dot11 {24ghz | 5ghz} rrm txpower-update
config advanced 802.11 {a | b} ccx

customize Cisco AP on
ap name ap-name dot11 {24ghz | 5ghz} rrm ccx customize
config advanced 802.11 {a | b} ccx

location-meas ap Cisco AP enable
ap name ap-name dot11 {24ghz | 5ghz} rrm ccx

location-measurement interval
config advanced 802.11 {a | b} coverage ap name ap-name dot11 {24ghz | 5ghz} rrm coverage
{exception | level} Cisco AP value
{exception value | level value}
config advanced 802.11 {a | b} profile ap name ap-name dot11 {24ghz | 5ghz} rrm profile {client
{client Cisco AP value | customize Cisco value | customize | foreign value | noise value | throughput
AP on | foreign Cisco AP value | noise
value | utilization value}
Cisco AP value | throughput Cisco AP
value | utilization Cisco AP value}
48
OL-28819-02

Syslog Privilege EXEC Commands

Syslog Commands
for logging:
config logging syslog facility {

auth-private | authorization | cron |
daemon | ftp | kern | local0 | local1 |
local2 | local3 | local4 | local5 | local6 |
local7 | lpr | mail | news | sys12 | sys13 |
sys14 | sys15 | syslog | user | uucp}
ap name ap-name syslog facility { auth | cron | daemon | kern

| local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7
| lpr | mail | news | sys10 | sys11 | sys12 | sys13 | sys14 | sys9 |
syslog | user | uucp}
config ap syslog host specific Cisco AP

name syslog-host-ip-address
ap name ap-name syslog host syslog-host-ip-address
config logging syslog level {0-7 | alerts | ap name ap-name syslog level { alert | critical | debug |
critical | debugging | emergencies |
emergency | errors | information}
errors | informational | notifications |
warnings}
OL-28819-02
49

50
OL-28819-02
CHAPTER
Cisco AireOS to Cisco IOS XE Show commands

Show Wireless Clients Commands, page 51
Show Access Point Commands, page 52
Show Access Point Radios Commands, page 54
Show AVC Commands and NetFlow, page 55
Show Cisco CleanAir Commands, page 56
Show IPv6 Commands, page 56
Show Location Commands, page 56
Show Multicast Commands, page 57
Show NMSP Commands, page 57
Show VideoStream Commands, page 58
Show Workgroup Bridge Commands, page 58
Show Wireless Commands, page 58
Show Wireless Mobility Commands, page 59
Show WLAN and Guest LAN Commands, page 59
Show Wireless Clients Commands

Show Wireless Clients Commands
for wireless clients associated to access points or controller:
show client ap {802.11a | 802.11b} all
show wireless client ap dot11 {24ghz | 5ghz}
show client ap {802.11a | 802.11b} Cisco AP
show wireless client ap name ap-name dot11 {24ghz

| 5ghz}
OL-28819-02
51

Show Access Point Commands
show client calls {active | rejected}
show wireless client calls {active | rejected}
show client calls {active | rejected} {802.11a |

802.11b}
show wireless client dot11 {24ghz | 5ghz} calls {active

| rejected}
show client location-calibration summary
show wireless client location-calibration
show call-control call-info client-mac
show wireless client mac-address mac-address

call-control call-info
show client ccx {client-capability | frame-data

| last-response-status | last-test-status |
log-response roam | log-response rsna |
log-response syslog | manufacturer-info |
operating-parameters | profiles | results} MAC
addr | stats-report
show wireless client mac-address mac-address ccx

{client-capability | frame-data | last-response-status
| last-test-status | log-response roam | log-response
rsna | log-response syslog | manufacturer-info |
operating-parameters | profiles | results | stats-report}
show client ccx rm MAC addr {report beacon | show wireless client mac-address mac-address ccx rm
report chan-load | report beacon frame | report {report beacon | report chan-load | report frame |
beacon noise-hist | report beacon pathloss |
report noise-hist | report pathloss | status}
status}
show client roam-history client-mac
show wireless client mac-address mac-address

roam-history
show client tclas {all | client-mac}
show wireless client mac-address mac-address tclas
show client {probing | summary | tclas |

advanced timers | username name}
show wireless client {probing | summary | tclas |

timers | username name}
show client voice diag {qos-map | roam-history show wireless client voice diagnostics {qos-map |
| rssi | status | tspec}
roam-history | rssi | status | tspec}

for access points:
show ap auth-list
show ap auth-list
show ap auto-rf dot11 {802.11a | 802.11b Cisco show ap name ap-name auto-rf dot11 {24ghz | 5ghz}
AP}
show cac voice summary
show ap cac voice

show ap name ap-name cac voice
show advanced backup controller
show ap capwap summary
show advanced timers
show ap capwap timers
52
OL-28819-02

show ap rm AP namestatus
show ap name ap-name ccx rm status
show ap cdp all
show ap cdp
show ap cdp neighbors all
show ap cdp neighbors
show ap cdp neighbors detail all
show ap cdp neighbors detail
show ap cdp Cisco AP
show ap name ap-name cdp
show ap cdp neighbors Cisco AP
show ap name ap-name cdp neighbors
show ap cdp neighbors detail Cisco AP
show ap name ap-name cdp neighbors detail
show ap channel Cisco AP
show ap name ap-name channel
show ap config {ethernet | general | slot slot-id show ap name ap-name config {ethernet | general |
} Cisco AP
slot slot-id }
show ap crash-file
show ap crash-file
show ap core-dump Cisco AP
show ap name ap-name core-dump
show ap join stats {detailed | summary} Cisco show ap mac-address mac-address join stats {detailed
| summary}
AP Mac
show ap join stats summary
show ap monitor-mode summary
show ap monitor-mode summary
show ap stats ethernet
show ap name ap-name ethernet statistics
show ap eventlog Cisco AP
show ap name ap-name eventlog
show ap inventory Cisco AP
show ap name ap-name inventory
show ap slots
show ap slots
show ap summary
show ap summary
show ap uptime
show ap uptime
for country code and channels configured on the controller:
show country {channels | configured | supported show wireless country {channels | configured |
| supported tx-power
supported | supported tx-power
for rogue access points:
OL-28819-02
53

Show Access Point Radios Commands
show wps ap-authentication summary
show wireless wps ap-authentication summary
show wps cids-sensor {detail index | summary} show wireless wps cids-sensor {index | summary}
show wps mfp {statistics | summary}
show wireless wps mfp {statistics | summary}
show rogue adhoc {detailed rogue-mac-addr |

summary}
show wireless wps rogue adhoc {detailed mac-addr |

summary}
show rogue ap {clients mac-addr | detailed

mac-addr | friendly summary | malicious
summary | rldp summary | summary |
unclassified summary}
show wireless wps rogue ap {clients mac-addr |

detailed mac-addr | friendly summary | malicious
summary | rldp summary | summary | unclassified
summary}
show rogue auto-contain
show wireless wps rogue auto-contain
show rogue client {detailed mac-addr |

summary}
show wireless wps rogue client {detailed mac-addr |

summary}
show rogue ignore-list
show wireless wps rogue ignore-list
show rogue rule {detailed rule-name | summary} show wireless wps rogue rule {detailed rule-name |
summary}
show wps shun-list
show wireless wps shun-list
show wps summary
show wireless wps summary
show wps wips { statistics | summary}
show wireless wps wips { statistics | summary}
Show Access Point Radios Commands

Show AP Radios Commands
for access point radios:
show advanced {802.11a | 802.11b} ccx global
show ap dot11 {24ghz | 5ghz} ccx
show advanced {802.11a | 802.11b} ccx ap AP

name
show ap name ap-name dot11 {24ghz | 5ghz} ccx
show advanced {802.11a | 802.11b} channel
show ap dot11 {24ghz | 5ghz} channel
show advanced {802.11a | 802.11b} coverage
show ap dot11 {24ghz | 5ghz} coverage
show ap config {802.11a | 802.11b | 802.11-a49

| 802.11a-58} Cisco AP
show ap name ap-name config dot11 {24ghz | 5ghz |

49ghz | 58ghz}
show call-control ap {802.11a | 802.11b } AP

name {call-info | metrics}
show ap name ap-name dot11 {24ghz | 5ghz}

call-control {call-info | metrics}
54
OL-28819-02

Show AVC Commands and NetFlow
show advanced {802.11a | 802.11b} group
show ap dot11 {24ghz | 5ghz} group
show {802.11a | 802.11b} l2roam rf-param
show ap dot11 {24ghz | 5ghz} l2roam rf-param
show {802.11a | 802.11b} l2roam statistics
show ap dot11 {24ghz | 5ghz} l2roam statistics
show {802.11a | 802.11b} l2roam statistics

mac-address
show ap dot11 {24ghz | 5ghz} l2roam mac-address

mac-address statistics
show advanced {802.11a | 802.11b} logging
show ap dot11 {24ghz | 5ghz} logging
show {802.11a | 802.11b} media-stream rrc
show ap dot11 {24ghz | 5ghz} media-stream rrc
show advanced {802.11a | 802.11b} monitor
show ap dot11 {24ghz | 5ghz} monitor
show {802.11a | 802.11b}
show ap dot11 {24ghz | 5ghz} network
show advanced {802.11a | 802.11b} profile Cisco show ap name ap-name dot11 {24ghz | 5ghz} profile
AP
show advanced {802.11a | 802.11b} receiver
show ap dot11 {24ghz | 5ghz} receiver
show ap stats {802.11a | 802.11b} AP name
show ap name ap-name dot11 {24ghz | 5ghz} stats
show advanced {802.11a | 802.11b} summary
show ap dot11 {24ghz | 5ghz} summary
show client tsm {802.11a | 802.11b} client-mac

{ap-mac | all}
show ap dot11 {24ghz | 5ghz} tsm {client-mac | all}
show advanced {802.11a | 802.11b} txpower
show ap dot11 {24ghz | 5ghz} txpower
show ap wlan {802.11a | 802.11b} Cisco AP
show ap name ap-name wlan dot11 {24ghz | 5ghz}
Show AVC Commands and NetFlow

for Application Visibility and Control (AVC) and NetFlow:
show avc statistics client client_MAC

{application application_name |
top-apps [upstream | downstream]}
show avc client client_MAC top number application

[aggregate | upstream | downstream]
show avc statistics wlan wlan_id

{application application_name |
top-apps-groups [upstream |
downstream] | top-apps [upstream |
downstream]}
show avc wlan ssid top number application [aggregate |

upstream | downstream]
show flow monitor summary
show flow monitor
show flow exporter statistics
show flow exporter statistics
OL-28819-02
55

Show Cisco CleanAir Commands

for Clean Air:
show {802.11a | 802.11b} cleanair air-quality

{summary | worst}
show ap dot11 {24ghz | 5ghz} cleanair air-quality

{summary | worst}
show {802.11a | 802.11b} cleanair {air-quality

| device} Cisco AP
show ap name ap-namedot11 {24ghz | 5ghz} cleanair

{air-quality | device}
show {802.11a | 802.11b} cleanair config
show ap dot11 {24ghz | 5ghz} cleanair config
show 802.11 a cleanair device type {all |canopy

| cont-tx | dect-like | inv | jammer |nonstd |
persistent |superag | tdd-tx | video | wimax-fixed
| wimax-mobile }
show ap dot11 5ghz cleanair device type {all |canopy

| cont-tx | dect-like | inv | jammer |nonstd | persistent
|superag | tdd-tx | video | wimax-fixed | wimax-mobile
}
show 802.11 b cleanair device type {all |

bt-discovery | bt-link | canopy | cont-tx | dect-like
| fh | inv | jammer | mw-oven | nonstd | persistent
|superag | tdd-tx | video | wimax-fixed |
wimax-mobile | xbox |zigbee}
show ap dot11 24ghz cleanair device type {all |

bt-discovery | bt-link | canopy | cont-tx | dect-like |
fh | inv | jammer | mw-oven | nonstd | persistent
|superag | tdd-tx | video | wimax-fixed | wimax-mobile
| xbox |zigbee}
Show IPv6 Commands

for IPv6:
show ipv6 acl detailed ipv6_acl_name
show ipv6 access-list ipv6_acl_name
show ipv6 neighbor-binding detailed
show ipv6 neighbors binding details
show ipv6 neighbor-binding ra-throttle statistics show ipv6 nd ra-throttler vlan vlan_id
vlan_id
Show Location Commands

for location settings:
56
OL-28819-02

Show Multicast Commands
show location ap-detect {all | client | rfid |

rogue-ap | rogue-client } ap-name
show location ap-detect {all | client | rfid | rogue-ap

| rogue-client } ap-name
show location detail mac-addr
show location detail mac-addr
show location plm
show location plm
show location rfid {client | config | detail

mac-addr | summary }
show location rfid {client | config | detail mac-addr |

summary }
show location statistics rfid
show location statistics rfid
show location summary
show location summary

for multicast mode and groups:
Show network summary
show wireless multicast
show network multicast mgid summary
show wireless multicast group summary
show network multicast mgid summary
show ip igmp snooping wireless mgid
Show NMSP Commands

for Network Mobility Services Protocol (NMSP):
show nmsp capability
show nmsp capability
show nmsp notification interval
show nmsp notification interval
show nmsp statistics {connection all | summary} show nmsp statistics {connection | summary}
show nmsp status
show nmsp status
show nmsp subscription {detail ip-addr | detail show nmsp subscription {detail ip-addr | detail |
| summary}
summary}
OL-28819-02
57

Show VideoStream Commands

for VideoStreams:
show media-stream client{detail | summary}
show wireless media-stream client{detail groupname

| summary}
show media-stream group{detail | summary}
show wireless media-stream group{detail groupname

| summary}
show media-stream message details
show wireless media-stream message details
show media-stream multicast-direct state
show wireless media-stream multicast-direct state
Show Workgroup Bridge Commands

Show Workgroup Bridge Commands
for Workgroup Bridge (WGB):
show wgb detail MAC addr
show wireless wgb mac-address mac-address detail
show wgb summary
show wireless wgb summary
Show Wireless Commands

Show Wireless Commands
for access points:
show band-select
show wireless band-select
show advanced dot11-padding
show wireless dot11-padding
show 802.11h
show wireless dot11h
show dtls connections
show wireless dtls connections
58
OL-28819-02

Show Wireless Mobility Commands
show exclusionlist
show wireless exclusionlist
show interface summary
show wireless interface summary
show linktest
show wireless linktest config
show linktest
show wireless linktest statistic
show load-balancing
show wireless load-balancing
show pmk-cache
show wireless pmk-cache
show pmk-cache mac-addr
show wireless pmk-cache mac-address mac-addr
show advanced probe
show wireless probe
show advanced sip-preferred-call-no
show wireless sip preferred-call-no
Show Wireless Mobility Commands

for mobility settings:
show mobility ap-list
show wireless mobility ap-list
show mobility controller client summary
show wireless mobility controller client summary
show mobility dtls
show wireless mobility dtls connections
show mobility statistics
show wireless mobility statistics
show mobility summary
show wireless mobility summary
show mobility oracle client summary
show wireless mobility oracle client summary
show mobility oracle client detail mac-addr
show wireless mobility oracle client detail mac-addr
show mobility oracle summary
show wireless mobility oracle summary
Show WLAN and Guest LAN Commands

Show WLAN Commands
for WLAN:
OL-28819-02
59

Show WLAN and Guest LAN Commands
show wlan summary
show wlan summary
show wlan wlan-id
show wlan id wlan-id
Show Guest LAN Commands

for guest access:
show guest-lan guest-lan-id
show guest-lan guest-lan-id
show guest-lan summary
show guest-lan summary
60
OL-28819-02
INDEX
A
aaa 16
acl 17
avc 19
AVC 55
mdns 27
mobility 28
N
NetFlow 55
network 29
nmsp 57
NMSP 30
C
cdp 20
CleanAir 20
dhcp 21
paging 31
passwd 31
port 31
guest-lan 22
qos 32
ipv6 23
Radio Resource Management 32

RTU licensing 24
L
licensing 24
local-auth 24
location 56
logging 26
S
snmp 37
T
M
time 37
trapflags 38
MAB 27
mac filter 27
OL-28819-02
IN-1
Index
vlan 38
WebAuth 41
IN-2
OL-28819-02

Cisco AireOS To Cisco IOS XE Command Mapping Reference, Cisco IOS XE Release 3SE

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Cisco AireOS To Cisco IOS XE Command Mapping Reference, Cisco IOS XE Release 3SE

Uploaded by

Copyright:

Available Formats

Cisco AireOS to Cisco IOS XE Command Mapping Reference, Cisco

IOS XE Release 3SE

Text Part Number: OL-28819-02

Cisco Systems, Inc. All rights reserved.

Using the Command-Line Interface 1

Cisco AireOS to Cisco IOS XE Configuration Mode Commands 13

Cisco AireOS to Cisco IOS XE Privilege Executive Commands 45

Syslog Privilege EXEC Commands 49

Cisco AireOS to Cisco IOS XE Show commands 51

Commands and keywords and user-entered text appear in bold font.

font indicates text that the user must enter.

Elements in square brackets are optional.

An ellipsis (three consecutive nonbolded periods without spaces) after a syntax

A vertical line, called a pipe, indicates a choice within a set of keywords or

Optional alternative keywords are grouped in brackets and separated by vertical

Required alternative keywords are grouped in braces and separated by vertical

Nested set of square brackets or braces indicate optional or required choices

Nonprinting characters such as passwords are in angle brackets.

Default responses to system prompts are in square brackets.

Reader Alert Conventions

Means the following information will help you solve a problem.

Obtaining Documentation and Submitting a Service Request

Using the Command-Line Interface

Information About Using the Command-Line Interface

Using the Command-Line Interface

Table 1: Command Mode Summary

About This Mode

Use this mode to

While in user EXEC

Use this mode to

Use this mode to

Use this mode to

Using the Command-Line Interface

About This Mode

Using the Help System

Obtains a brief description of the help system in any

Obtains a list of commands that begin with a particular

Completes a partial command name.

Using the Command-Line Interface

Lists all commands available for a particular command

Lists the associated keywords for a command.

Lists the associated arguments for a keyword.

Understanding Abbreviated Commands

No and Default Forms of Commands

CLI Error Messages

Using the Command-Line Interface

Table 2: Common CLI Error Messages

How to Get Help

% Ambiguous command: "show

You did not enter enough

Reenter the command followed by

You did not enter all of the

% Invalid input detected at

You entered the command

Only CLI or HTTP changes are logged.

How to Use the CLI to Configure Features

Using the Command-Line Interface

Changing the Command History Buffer Size

terminal history [size number-of-lines]

Changes the number of command lines that the controller records

The arrow keys function only on ANSI-compatible terminals such as VT100s.

Ctrl-P or use the up arrow key

Using the Command-Line Interface