![Zyxel NWA5123-AC [83/144] Ssh implementation on the nwa wac](/img/pdf.png)
Zyxel NWA5123-AC [83/144] Ssh implementation on the nwa wac
![Zyxel NWA5123-AC [83/144] Ssh implementation on the nwa wac](/views2/1169061/page83/bg53.png)
Chapter 15 System Remote Management
NWA/WAC Series CLI Reference Guide
83
15.3 SSH
Unlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a secure
communication protocol that combines authentication and data encryption to provide secure
encrypted communication between two hosts over an unsecured network.
15.3.1 SSH Implementation on the NWA/WAC
Your NWA/WAC supports SSH versions 1 and 2 using RSA authentication and four encryption
methods (AES, 3DES, Archfour, and Blowfish). The SSH server is implemented on the NWA/WAC for
remote management on port 22 (by default).
15.3.2 Requirements for Using SSH
You must install an SSH client program on a client computer (Windows or Linux operating system)
that is used to connect to the NWA/WAC over SSH.
15.3.3 SSH Commands
The following table describes the commands available for SSH. You must use the configure
terminal
command to enter the configuration mode before you can use these commands.
15.3.4 SSH Command Examples
This command sets a certificate (Default) to be used to identify the NWA/WAC.
Table 49 Command Summary: SSH
COMMAND DESCRIPTION
[no] ip ssh server Allows SSH access to the NWA/WAC CLI. The no
command disables SSH access to the NWA/WAC CLI.
[no] ip ssh server cert certificate_name Sets a certificate whose corresponding private key is to
be used to identify the NWA/WAC for SSH connections.
The
no command resets the certificate used by the SSH
server to the factory default (
default).
certificate_name: The name of the certificate. You can
use up to 31 alphanumeric and
;‘~!@#$%^&()_+[]{}’,.=-
characters.
[no] ip ssh server port <1..65535> Sets the SSH service port number. The no command
resets the SSH service port number to the factory default
(22).
[no] ip ssh server v1 Enables remote management using SSH v1. The
no
command stops the NWA/WAC from using SSH v1.
show ip ssh server status Displays SSH settings.
Router# configure terminal
Router(config)# ip ssh server cert Default
Содержание
- 1 a b g n ac access point 1
- Cli reference guide 1
- Default login details 1
- Nwa wac series 1
- Quick start guide 1
- Do not use commands not documented in this guide 2
- Important read carefully before use keep this guide for future reference 2
- It is recommended you use the web configurator to configure the nwa wac 2
- Some commands or command options in this guide may not be available in your product see your product s user s guide for a list of supported features every effort has been made to ensure that the information in this guide is accurate 2
- Contents overview 3
- Introduction 11 3
- Reference 7 3
- Chapter 1 command line interface 3 4
- Chapter 2 user and privilege modes 4 4
- Contents overview 4
- Part i introduction 11 4
- Table of contents 4
- Chapter 3 object reference 9 5
- Chapter 4 status 1 5
- Chapter 5 interfaces 3 5
- Chapter 6 users 1 5
- Chapter 7 ap management 5 5
- Chapter 8 wireless lan profiles 0 5
- Part ii reference 27 5
- Chapter 10 wireless frame capture 8 6
- Chapter 11 dynamic channel selection 0 6
- Chapter 12 wireless load balancing 1 6
- Chapter 13 certificates 4 6
- Chapter 9 rogue ap 4 6
- Chapter 14 system 7 7
- Chapter 15 system remote management 1 7
- Chapter 16 aaa server 8 7
- Chapter 17 authentication objects 4 8
- Chapter 18 file manager 7 8
- Chapter 19 logs 110 8
- Chapter 20 reports and reboot 116 9
- Chapter 21 session timeout 21 9
- Chapter 22 leds 22 9
- Chapter 23 antenna switch 24 9
- Chapter 24 diagnostics 26 9
- Chapter 25 maintenance tools 27 9
- Chapter 26 watchdog timer 31 9
- Application watchdog 32 10
- Application watchdog commands example 32 10
- List of commands alphabetical 33 10
- Introduction 11
- Accessing the cli 13
- Command line interface 13
- Overview 13
- The configuration file 13
- Console port 14
- Note the default login username is admin and password is 1234 the username and password are case sensitive 14
- Telnet 14
- How commands are explained 15
- How to find commands in this guide 15
- Note the default login username is admin and password is 1234 the username and password are case sensitive 15
- Ssh secure shell 15
- Telnet 15
- Telnet 192 68 15
- Background information 16
- Changing the password 16
- Command examples 16
- Command input values 16
- Command summary 16
- Command syntax 16
- Note see the user s guide for background information about most features 16
- At the time of writing there is not much difference between user and privilege mode for admin users this is reserved for future use 17
- Chapter 1 command line interface 17
- Cli modes 17
- Nwa wac series cli reference guide 17
- See chapter 6 on page 41 for more information about the user types user users can only log in look at but not run the available commands in user mode and log out limited admin users can look at the configuration in the web configurator and cli and they can run basic diagnostics in the cli admin users can configure the nwa wac in the web configurator or cli 17
- Table 2 cli modes 17
- User privilege configuration sub command 17
- You run cli commands in one of several modes 17
- A list of valid commands can be found by typing 18
- At the command prompt to view a list of available commands within a command group enter 18
- Chapter 1 command line interface 18
- Figure 4 help available commands example 1 18
- Figure 5 help available command example 2 18
- List of available commands 18
- Nwa wac series cli reference guide 18
- Shortcuts and help 18
- Command history 19
- Configur 19
- Entering a in a command 19
- Entering partial commands 19
- List of sub commands or required user input 19
- Chapter 1 command line interface 20
- Command you use mss 536 to specify the mss value but to disable the mss setting you only need to type no mss instead of no mss 536 20
- Description 20
- Erase current command 20
- Input values 20
- Navigation 20
- Nwa wac series cli reference guide 20
- Table 3 input value formats for strings in cli commands 20
- Tag values legal values 20
- The following table provides more information about input values like 20
- The no commands 20
- To erase whatever you have currently typed at the prompt before pressing 20
- To move the cursor to the beginning of the line press 20
- To move the cursor to the end of the line 20
- You can use the or tab to get more information about the next input value that is required for a command in some cases the next input value is a string whose length and allowable characters may not be displayed in the screen for example in the following example the next input value is a string called 20
- Chapter 1 command line interface 21
- Nwa wac series cli reference guide 21
- Table 3 input value formats for strings in cli commands continued 21
- Tag values legal values 21
- Chapter 1 command line interface 22
- Nwa wac series cli reference guide 22
- Table 3 input value formats for strings in cli commands continued 22
- Tag values legal values 22
- Chapter 1 command line interface 23
- Command in user mode or privilege mode to log out of the cli 23
- Command to save the current configuration to the nwa wac 23
- Enter the 23
- Logging out 23
- Note always save the changes before you log out after each management session all unsaved changes will be lost after the system restarts 23
- Nwa wac series cli reference guide 23
- Or end command in configure mode to go to privilege mode 23
- Saving configuration changes 23
- Table 3 input value formats for strings in cli commands continued 23
- Tag values legal values 23
- Use the 23
- User and privilege modes 24
- Chapter 2 user and privilege modes 25
- Command mode description 25
- Debug commands 25
- Debug commands marked with an asterisk are not available when the debug flag is on and are for zyxel service personnel use only the debug commands follow a syntax that is linux based so 25
- Note these commands are for zyxel s internal manufacturing process 25
- Nwa wac series cli reference guide 25
- Subsequent chapters in this guide describe the configuration commands user privilege mode commands that are also configuration commands for example show are described in more detail in the related configuration command chapter 25
- Table 4 user u and privilege p mode commands continued 25
- Chapter 2 user and privilege modes 26
- Command syntax description linux command equivalent 26
- If there is a linux equivalent it is displayed in this chapter for your reference you must know a command listed here well before you use it otherwise it may cause undesired results 26
- Nwa wac series cli reference guide 26
- Table 5 debug commands 26
- Reference 27
- Object reference 29
- Object reference commands 29
- Chapter 3 object reference 30
- Nwa wac series cli reference guide 30
- Object reference command example 30
- This example shows the names of the wlan profiles and which security profile each is set to use 30
- Status 31
- Chapter 4 status 32
- Here are examples of the commands that display the mac address memory usage ram size and serial number 32
- Here are examples of the commands that display the system uptime and model firmware and build information 32
- Here is an example of the command that displays the listening ports 32
- Here is an example of the command that displays the open ports 32
- Nwa wac series cli reference guide 32
- This example shows the current led states on the nwa wac the sys led lights on and green 32
- Interface general commands summary 33
- Interface overview 33
- Interfaces 33
- Types of interfaces 33
- Basic interface properties and ip address commands 34
- Chapter 5 interfaces 34
- Command description 34
- Nwa wac series cli reference guide 34
- Table 9 interface general commands basic properties and ip address assignment 34
- This table lists basic properties and ip address commands 34
- Chapter 5 interfaces 35
- Command description 35
- Nwa wac series cli reference guide 35
- Table 9 interface general commands basic properties and ip address assignment continued 35
- Basic interface properties command examples 36
- Port commands 36
- Chapter 5 interfaces 37
- Command description 37
- Note in cli representative interfaces are also called representative ports 37
- Nwa wac series cli reference guide 37
- Port command examples 37
- Table 10 basic interface setting commands 37
- The following example shows port settings 37
- The following example shows port status 37
- Note vlan0 is the default vlan interface it cannot be deleted and its vid cannot changed 38
- Vlan interface specific commands 38
- Chapter 5 interfaces 39
- Command description 39
- Command to enter the configuration mode before you can use these commands 39
- Configure termina 39
- Nwa wac series cli reference guide 39
- Table 12 command summary vlan interface profile 39
- The following table describes the commands available for vlan interface managment you must use the 39
- Vlan interface examples 40
- User account overview 41
- User commands summary 41
- User types 41
- Chapter 6 users 42
- Command description 42
- Nwa wac series cli reference guide 42
- Table 15 username commands summary users 42
- The first table lists the commands for users 42
- Username and user commands 42
- Chapter 6 users 43
- Command description 43
- Nwa wac series cli reference guide 43
- Table 16 users commands summary settings 43
- The following commands show the current settings for the number of simultaneous logins 43
- This table lists the commands for user settings 43
- User setting command examples 43
- User setting commands 43
- Additional user command examples 44
- Additional user commands 44
- Chapter 6 users 44
- Command description 44
- Nwa wac series cli reference guide 44
- Table 17 users commands summary additional 44
- The following commands display the users that are currently locked out and then unlocks the user who is displayed 44
- The following commands display the users that are currently logged in to the nwa wac and forces the logout of all logins from a specific ip address 44
- This table lists additional commands for users 44
- Ap management 45
- Ap management overview 45
- Ap management commands 46
- Chapter 7 ap management 46
- Command description 46
- Command to enter the configuration mode before you can use these commands 46
- Configure termina 46
- Label description 46
- Nwa wac series cli reference guide 46
- Table 18 input values for general ap management commands 46
- Table 19 command summary ap management 46
- The following table describes the commands available for ap managment you must use the 46
- The following table identifies the values required for many of these commands other input values are discussed with the corresponding commands 46
- Ap management client commands 47
- Chapter 7 ap management 47
- Command description 47
- Command to enter the configuration mode before you can use these commands 47
- Configure termina 47
- Nwa wac series cli reference guide 47
- Table 19 command summary ap management continued 47
- Table 20 command summary ap client commands 47
- The following table describes the commands available for configuring capwap client aps you must use the 47
- Ap management client commands example 48
- Chapter 7 ap management 48
- Command description 48
- Nwa wac series cli reference guide 48
- Table 20 command summary ap client commands continued 48
- The following example shows you how to configure the nwa wac management mode to allow it to be managed by an ap controller and check the nwa wac management mode 48
- Chapter 7 ap management 49
- Nwa wac series cli reference guide 49
- The following example shows you how to configure the interface of a managed ap set the ap conntroller ip address and displays the related settings 49
- Ap radio monitor profile commands 50
- Wireless lan profiles 50
- Wireless lan profiles overview 50
- Chapter 8 wireless lan profiles 51
- Command description 51
- Command to enter the configuration mode before you can use these commands 51
- Configure termina 51
- Label description 51
- Nwa wac series cli reference guide 51
- Table 21 input values for general radio and monitor profile commands continued 51
- Table 22 command summary radio profile 51
- The following table describes the commands available for radio and monitor profile managment you must use the 51
- Chapter 8 wireless lan profiles 52
- Command description 52
- Nwa wac series cli reference guide 52
- Table 22 command summary radio profile continued 52
- Chapter 8 wireless lan profiles 53
- Command description 53
- Nwa wac series cli reference guide 53
- Table 22 command summary radio profile continued 53
- Chapter 8 wireless lan profiles 54
- Command description 54
- Nwa wac series cli reference guide 54
- Table 22 command summary radio profile continued 54
- 2 g band and 802 1ac wireless mode with channel 6 55
- A beacon interval of 100ms 55
- A dtim period of 2 55
- A short guard interval 55
- Ampdu frame aggregation enabled 55
- Amsdu frame aggregation enabled 55
- An ampdu buffer limit of 65535 bytes 55
- An ampdu subframe limit of 64 frames 55
- An amsdu buffer limit of 4096 55
- Ap radio monitor profile commands example 55
- Block acknowledgement enabled 55
- Channel width of 20mhz 55
- Chapter 8 wireless lan profiles 55
- Label description 55
- Nwa wac series cli reference guide 55
- Ssid profile commands 55
- Table 23 input values for general ssid profile commands 55
- The following example shows you how to set up the radio profile named radio01 activate it and configure it to use the following settings 55
- The following table identifies the values required for many of these commands other input values are discussed with the corresponding commands 55
- Chapter 8 wireless lan profiles 56
- Command description 56
- Command to enter the configuration mode before you can use these commands 56
- Configure termina 56
- Label description 56
- Nwa wac series cli reference guide 56
- Table 23 input values for general ssid profile commands continued 56
- Table 24 command summary ssid profile 56
- The following table describes the commands available for ssid profile managment you must use the 56
- Chapter 8 wireless lan profiles 57
- Command description 57
- Nwa wac series cli reference guide 57
- Ssid profile example 57
- Table 24 command summary ssid profile continued 57
- The following example creates an ssid profile with the name zyxel it makes the assumption that both the security profile security01 and the mac filter profile macfilter01 already exist 57
- Chapter 8 wireless lan profiles 58
- Command description 58
- Command to enter the configuration mode before you can use these commands 58
- Configure termina 58
- Label description 58
- Nwa wac series cli reference guide 58
- Security profile commands 58
- Table 25 input values for general security profile commands 58
- Table 26 command summary security profile 58
- The following table describes the commands available for security profile managment you must use the 58
- The following table identifies the values required for many of these commands other input values are discussed with the corresponding commands 58
- Chapter 8 wireless lan profiles 59
- Command description 59
- Nwa wac series cli reference guide 59
- Table 26 command summary security profile continued 59
- Chapter 8 wireless lan profiles 60
- Command description 60
- Nwa wac series cli reference guide 60
- Security profile example 60
- Table 26 command summary security profile continued 60
- The following example creates a security profile with the name security01 60
- Chapter 8 wireless lan profiles 61
- Command description 61
- Command to enter the configuration mode before you can use these commands 61
- Configure termina 61
- Label description 61
- Mac filter profile commands 61
- Mac filter profile example 61
- Nwa wac series cli reference guide 61
- Table 27 input values for general mac filter profile commands 61
- Table 28 command summary mac filter profile 61
- The following example creates a mac filter profile with the name macfilter01 61
- The following table describes the commands available for mac filter profile management you must use the 61
- The following table identifies the values required for many of these commands other input values are discussed with the corresponding commands 61
- Chapter 8 wireless lan profiles 62
- Command description 62
- Command to enter the configuration mode before you can use these commands 62
- Configure termina 62
- Label description 62
- Layer 2 isolation profile commands 62
- Layer 2 isolation profile example 62
- Nwa wac series cli reference guide 62
- Table 29 input values for general layer 2 isolation profile commands 62
- Table 30 command summary layer 2 isolation profile 62
- The following example creates a layer 2 isolation profile with the name test1 62
- The following table describes the commands available for layer 2 isolation profile managment you must use the 62
- The following table identifies the values required for many of these commands other input values are discussed with the corresponding commands 62
- Chapter 8 wireless lan profiles 63
- Command description 63
- Command to enter the configuration mode before you can use these commands 63
- Configure termina 63
- Label description 63
- Nwa wac series cli reference guide 63
- Table 31 input values for general wds profile commands 63
- Table 32 command summary wds profile 63
- The following example creates a wds profile with the name wds1 and shows the profile settings 63
- The following table describes the commands available for wds profile managment you must use the 63
- The following table identifies the values required for many of these commands other input values are discussed with the corresponding commands 63
- Wds profile commands 63
- Wds profile example 63
- Rogue ap 64
- Rogue ap detection commands 64
- Rogue ap detection overview 64
- Chapter 9 rogue ap 65
- Command description 65
- Nwa wac series cli reference guide 65
- Rogue ap detection examples 65
- Table 34 command summary rogue ap detection continued 65
- This example displays the rogue ap detection list 65
- This example sets the device associated with mac address 00 13 49 11 11 11 as a rogue ap and the device associated with mac address 00 13 49 11 11 22 as a friendly ap it then removes mac address from the rogue ap list with the assumption that it was misidentified 65
- Note containing a rogue ap means broadcasting unviable login data at it preventing legitimate wireless clients from connecting to it this is a kind of denial of service attack 66
- Rogue ap containment overview 66
- Chapter 9 rogue ap 67
- Command description 67
- Command to enter the configuration mode before you can use these commands 67
- Configure termina 67
- Label description 67
- Nwa wac series cli reference guide 67
- Rogue ap containment commands 67
- Rogue ap containment example 67
- Table 35 input values for rogue ap containment commands 67
- Table 36 command summary rogue ap containment 67
- The following table describes the commands available for rogue ap containment you must use the 67
- The following table identifies the values required for many of these commands other input values are discussed with the corresponding commands 67
- This example contains the device associated with mac address 00 13 49 11 11 12 then displays the containment list for confirmation 67
- Wireless frame capture 68
- Wireless frame capture commands 68
- Wireless frame capture overview 68
- Chapter 10 wireless frame capture 69
- Command description 69
- Command to enter the configuration mode before you can use these commands 69
- Configure termina 69
- Nwa wac series cli reference guide 69
- Table 38 command summary wireless frame capture 69
- The following table describes the commands available for wireless frame capture you must use the 69
- This example configures the wireless frame capture parameters for an ap located at ip address 192 68 69
- This example shows frame capture status and configuration 69
- Wireless frame capture examples 69
- Dcs commands 70
- Dcs overview 70
- Dynamic channel selection 70
- Wireless load balancing 71
- Wireless load balancing commands 71
- Wireless load balancing overview 71
- Chapter 12 wireless load balancing 72
- Command description 72
- Note this parameter has been optimized for the nwa wac and should not be changed unless you have been specifically directed to do so by zyxel support 72
- Nwa wac series cli reference guide 72
- Table 40 command summary load balancing continued 72
- Chapter 12 wireless load balancing 73
- Nwa wac series cli reference guide 73
- The following example shows you how to configure ap load balancing in by station mode the maximum number of stations is set to 1 73
- The following example shows you how to configure ap load balancing in by traffic mode the traffic level is set to low and disassociate station is enabled 73
- Wireless load balancing examples 73
- Certificate commands 74
- Certificates 74
- Certificates commands input values 74
- Certificates overview 74
- Certificates commands summary 75
- Chapter 13 certificates 75
- Command description 75
- Command to enter the configuration mode to be able to use these commands 75
- Configure termina 75
- Label description 75
- Nwa wac series cli reference guide 75
- Table 41 certificates commands input values continued 75
- Table 42 ca commands summary 75
- The following table lists the commands that you can use to display and manage the nwa wac s summary list of certificates and certification requests you can also create certificates or certification requests use the 75
- Certificates commands examples 76
- Chapter 13 certificates 76
- Command description 76
- Nwa wac series cli reference guide 76
- Table 42 ca commands summary continued 76
- The following example creates a self signed x 09 certificate with ip address 10 8 as the common name it uses the rsa key type with a 512 bit key then it displays the list of local certificates finally it deletes the pkcs12request certification request 76
- Host name commands 77
- System 77
- System overview 77
- Time and date 77
- Configure termina 78
- Console port speed 78
- Date time commands 78
- Configure termina 79
- Dns commands 79
- Dns overview 79
- Dns command example 80
- Http https commands 81
- System remote management 81
- System timeout 81
- Chapter 15 system remote management 82
- Command description 82
- Defaul 82
- Http https command examples 82
- Nwa wac series cli reference guide 82
- Table 48 command summary http https continued 82
- This command sets an authentication method used by the http https server to authenticate the client s 82
- This following example sets a certificate named mycert used by the https server to authenticate itself to the ssl client 82
- Chapter 15 system remote management 83
- Command description 83
- Command to enter the configuration mode before you can use these commands 83
- Configure termina 83
- Defaul 83
- Nwa wac series cli reference guide 83
- Requirements for using ssh 83
- Ssh command examples 83
- Ssh commands 83
- Ssh implementation on the nwa wac 83
- Table 49 command summary ssh 83
- The following table describes the commands available for ssh you must use the 83
- This command sets a certificate default to be used to identify the nwa wac 83
- Unlike telnet or ftp which transmit data in clear text ssh secure shell is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network 83
- You must install an ssh client program on a client computer windows or linux operating system that is used to connect to the nwa wac over ssh 83
- Your nwa wac supports ssh versions 1 and 2 using rsa authentication and four encryption methods aes 3des archfour and blowfish the ssh server is implemented on the nwa wac for remote management on port 22 by default 83
- Chapter 15 system remote management 84
- Command description 84
- Command to enter the configuration mode before you can use these commands 84
- Configure termina 84
- Configuring ftp 84
- Nwa wac series cli reference guide 84
- Table 50 command summary telnet 84
- Telnet 84
- Telnet commands 84
- Telnet commands examples 84
- The following table describes the commands available for telnet you must use the 84
- This command displays telnet settings 84
- You can configure your nwa wac for remote telnet access 84
- You can upload and download the nwa wac s firmware and configuration files using ftp to use this feature your computer must have an ftp client 84
- Configure termina 85
- Ftp commands 85
- Ftp commands examples 85
- Supported mibs 85
- Chapter 15 system remote management 86
- Command description 86
- Command to enter the configuration mode before you can use these commands 86
- Configure termina 86
- Nwa wac series cli reference guide 86
- Object label object id description 86
- Snmp commands 86
- Snmp traps 86
- Table 52 snmp traps 86
- Table 53 command summary snmp 86
- The following table describes the commands available for snmp you must use the 86
- The nwa wac will send traps to the snmp manager when any one of the following events occurs 86
- Chapter 15 system remote management 87
- Command description 87
- Nwa wac series cli reference guide 87
- Table 53 command summary snmp continued 87
- Aaa server 88
- Aaa server overview 88
- Authentication server command summary 88
- Radius server commands 88
- Aaa group server ad 89
- Aaa group server ad commands 89
- Chapter 16 aaa server 89
- Command description 89
- Commands you use to configure a group of ad servers 89
- Note you can not delete a server group that is currently in use 89
- Nwa wac series cli reference guide 89
- Radius server command example 89
- Table 54 radius server commands continued 89
- Table 55 aaa group server ad commands 89
- The following example sets the secret key and timeout period of the default radius server 172 3 0 00 to 87643210 and 80 seconds 89
- The following table lists the 89
- Aaa group server ldap 90
- Aaa group server ldap commands 90
- Chapter 16 aaa server 90
- Command description 90
- Commands you use to configure a group of ldap servers 90
- Note you can not delete a server group that is currently in use 90
- Nwa wac series cli reference guide 90
- Table 55 aaa group server ad commands continued 90
- Table 56 aaa group server ldap commands 90
- The following table lists the 90
- Chapter 16 aaa server 91
- Command description 91
- Nwa wac series cli reference guide 91
- Table 56 aaa group server ldap commands continued 91
- Aaa group server radius 92
- Aaa group server radius commands 92
- Chapter 16 aaa server 92
- Command description 92
- Commands you use to configure a group of radius servers 92
- Note you can not delete a server group that is currently in use 92
- Nwa wac series cli reference guide 92
- Table 57 aaa group server radius commands 92
- The following table lists the 92
- Aaa group server command example 93
- Chapter 16 aaa server 93
- Nwa wac series cli reference guide 93
- The following example creates a radius server group with two members and sets the secret key to 12345678 and the timeout to 100 seconds then this example also shows how to view the radius group settings 93
- Aaa authentication commands 94
- Authentication objects 94
- Authentication objects overview 94
- Aaa authentication command example 95
- Chapter 17 authentication objects 95
- Command description 95
- Command you use to teat a user account on an authentication server 95
- Note you must specify at least one member for each profile each type of member can only be used once in a profile 95
- Nwa wac series cli reference guide 95
- Table 58 aaa authentication commands continued 95
- Table 59 test aaa command 95
- Test aa 95
- Test aaa command 95
- The following example creates an authentication profile to authenticate users using the local user database 95
- The following table lists the 95
- Base dn dc zyxel dc com 96
- Bind dn zyxel engineerabc 96
- Chapter 17 authentication objects 96
- Ip address 172 6 0 96
- Login name attribute samaccountname 96
- Nwa wac series cli reference guide 96
- Password abcdefg 96
- Port 389 96
- Test a user account command example 96
- The following example shows how to test whether a user account named userabc exists on the ad authentication server which uses the following settings 96
- The result shows the account exists on the ad server otherwise the nwa wac returns an error 96
- Configuration files and shell scripts overview 97
- File directories 97
- File manager 97
- Chapter 18 file manager 98
- Comments in configuration files or shell scripts 98
- Errors in configuration files or shell scripts 98
- Figure 10 configuration file shell script example 98
- In a configuration file or shell script use or as the first character of a command line to have the nwa wac treat the line as a comment 98
- In the following example lines 1 and 2 are comments line 5 exits sub command mode 98
- Note exit or must follow sub commands if it is to make the nwa wac exit sub command mode 98
- Nwa wac series cli reference guide 98
- Table 61 configuration files and shell scripts in the nwa wac 98
- These files have the same syntax which is also identical to the way you run cli commands manually an example is shown below 98
- When you apply a configuration file or run a shell script the nwa wac processes the file line by line the nwa wac checks the first line and applies the line if no errors are detected then it 98
- While configuration files and shell scripts have the same syntax the nwa wac applies configuration files differently than it runs shell scripts this is explained below 98
- You have to run the example in table 10 on page 98 as a shell script because the first command is run in privilege mode if you remove the first command you have to run the example as a configuration file because the rest of the commands are executed in configuration mode see section 1 on page 17 for more information about cli modes 98
- Your configuration files or shell scripts can use exit or a command line consisting of a single to have the nwa wac exit sub command mode 98
- Configuration file flow at restart 99
- Nwa wac configuration file details 99
- Setenv startup stop on error of 99
- Setenv stop on error off 99
- Chapter 18 file manager 100
- Command description 100
- File manager commands input values 100
- File manager commands summary 100
- Label description 100
- Nwa wac series cli reference guide 100
- Table 62 file manager command input values 100
- Table 63 file manager commands summary 100
- The following table explains the values you can input with the file manager commands 100
- The following table lists the commands that you can use for file management 100
- Chapter 18 file manager 101
- Command description 101
- Command line ftp file upload 101
- Connect to the nwa wac 101
- Enter bin to set the transfer mode to binary 101
- File manager command example 101
- Ftp file transfer 101
- Nwa wac series cli reference guide 101
- Table 63 file manager commands summary continued 101
- This example saves a back up of the current configuration before applying a shell script file 101
- You can upload the firmware after you log in through ftp to upload other files use cd to change to the corresponding directory 101
- You can use ftp to transfer files to and from the nwa wac for advanced maintenance and support 101
- Command line ftp configuration file upload example 102
- Command line ftp file download 102
- Note uploading a custom signature file named custom rules overwrites all custom signatures on the nwa wac 102
- The firmware update can take up to five minutes do not turn off or reset the nwa wac while the firmware update is in progress if you lose power during the firmware upload you may need to refer to section 18 on page 104 to recover the firmware 102
- Boot module 103
- Chapter 18 file manager 103
- Command line ftp configuration file download example 103
- Figure 12 ftp configuration file download example 103
- Figure 13 nwa wac file usage at startup 103
- Firmware 103
- Nwa wac file usage at startup 103
- Nwa wac series cli reference guide 103
- Recovery image 103
- The boot module performs a basic hardware test you cannot restore the boot module if it is damaged the boot module also checks and loads the recovery image the nwa wac notifies you if the recovery image is damaged 103
- The following example gets a configuration file named today conf from the nwa wac and saves it on the computer as current conf 103
- The nwa wac uses the following files at system startup 103
- The recovery image checks and loads the firmware the nwa wac notifies you if the firmware is damaged 103
- Note do not press any keys at this point wait to see what displays next 104
- Notification of a damaged recovery image or firmware 104
- Note you only need to use this section if you need to restore the recovery image 105
- Restoring the recovery image 105
- Note you only need to use the atuk or atur command if the recovery image is damaged 106
- Note this section is not for normal firmware uploads you only need to use this section if you need to recover the firmware 107
- Restoring the firmware 107
- Log commands summary 110
- Chapter 19 logs 111
- Command description 111
- Log entries commands 111
- Nwa wac series cli reference guide 111
- System log commands 111
- Table 65 logging commands log entries 111
- Table 66 logging commands system log settings 111
- This table lists the commands for the system log settings 111
- This table lists the commands to look at log entries 111
- Chapter 19 logs 112
- Command description 112
- Debug log commands 112
- Nwa wac series cli reference guide 112
- System log command examples 112
- Table 67 logging commands debug log settings 112
- Table 68 logging commands remote syslog server settings 112
- The following command displays the current status of the system log 112
- This table lists the commands for the debug log settings 112
- This table lists the commands for the remote syslog server settings 112
- Chapter 19 logs 113
- Command description 113
- E mail profile log commands 113
- Nwa wac series cli reference guide 113
- Table 68 logging commands remote syslog server settings continued 113
- Table 69 logging commands e mail profile settings 113
- This table lists the commands for the e mail profile settings 113
- Access point logging commands 114
- Chapter 19 logs 114
- Command description 114
- Console port log commands 114
- E mail profile command examples 114
- Nwa wac series cli reference guide 114
- Table 69 logging commands e mail profile settings continued 114
- Table 70 logging commands console port settings 114
- The following commands set up e mail log 1 114
- This table lists the commands for the access point settings 114
- This table lists the commands for the console port settings 114
- Chapter 19 logs 115
- Command description 115
- Note for the purposes of this device s cli access points are referred to as wtps 115
- Nwa wac series cli reference guide 115
- Table 71 logging commands access point settings 115
- Report commands 116
- Report commands summary 116
- Reports and reboot 116
- Chapter 20 reports and reboot 117
- Command description 117
- Command to enter the configuration mode before you can use these commands 117
- Configure termina 117
- Email daily report commands 117
- Label description 117
- Nwa wac series cli reference guide 117
- Report command examples 117
- Table 73 input values for email daily report commands 117
- Table 74 email daily report commands 117
- The following commands start collecting data display the traffic reports and stop collecting data 117
- The following table identifies the values used in some of these commands other input values are discussed with the corresponding commands 117
- Use these commands to have the nwa wac e mail you system statistics every day you must use the 117
- Chapter 20 reports and reboot 118
- Command description 118
- Nwa wac series cli reference guide 118
- Table 74 email daily report commands continued 118
- Chapter 20 reports and reboot 119
- Command description 119
- Email daily report example 119
- Nwa wac series cli reference guide 119
- Table 74 email daily report commands continued 119
- This example sets the nwa wac to send a daily report e mail 119
- Chapter 20 reports and reboot 120
- Command to restart the device 120
- Command to save the configuration before you reboot otherwise the changes are lost when you reboot 120
- If you made changes in the cli you have to use the 120
- Nwa wac series cli reference guide 120
- Reboot 120
- This displays the email daily report settings and has the nwa wac send the report now 120
- Use the 120
- Use this to restart the device for example if the device begins behaving erratically 120
- Session timeout 121
- Session timeout commands 121
- Session timeout commands example 121
- Led suppression commands 122
- Led suppression commands example 122
- Led suppression mode 122
- Chapter 22 leds 123
- Command description 123
- Led locator 123
- Led locator commands 123
- Led locator commands example 123
- Nwa wac series cli reference guide 123
- Table 77 led locator commands 123
- The following example turns on the led locator feature and displays the settings 123
- The led locator feature identifies the location of your wac among several devices in the network you can run this feature and set a timer 123
- Use these commands to run the led locator feature you must use the configure terminal command before you can use these commands 123
- Antenna switch 124
- Antenna switch commands 124
- Antenna switch overview 124
- Antenna switch commands example 125
- Chapter 23 antenna switch 125
- Nwa wac series cli reference guide 125
- The following example enables software control of the antenna switch and displays the settings 125
- Diagnosis commands 126
- Diagnosis commands example 126
- Diagnostics 126
- Diagnostics overview 126
- Maintenance tools 127
- Chapter 25 maintenance tools 128
- Command description 128
- Command examples 128
- Note if you have existing capture files you may need to set this size larger or delete existing capture files 128
- Nwa wac series cli reference guide 128
- Some packet trace command examples are shown below 128
- Table 80 maintenance tools commands in privilege mode continued 128
- Chapter 25 maintenance tools 129
- Command description 129
- Here are maintenance tool commands that you can use in configure mode 129
- Nwa wac series cli reference guide 129
- Table 81 maintenance tools commands in configuration mode 129
- The following example creates an arp table entry for ip address 192 68 0 and mac address 01 02 03 04 05 06 then it shows the arp table and finally removes the new entry 129
- Chapter 25 maintenance tools 130
- Check current packet capture status and list all packet captures the nwa wac has performed 130
- Exit the sub command mode and have the nwa wac capture packets according to the settings you just configured 130
- Manually stop the running packet capturing 130
- Nwa wac series cli reference guide 130
- Packet capture command example 130
- The following examples show how to configure packet capture settings and perform a packet capture first you have to check whether a packet capture is running this example shows no other packet capture is running then you can also check the current packet capture settings 130
- You can use ftp to download a capture file open and study it using a packet analyzer tool for example ethereal or wireshark 130
- Hardware watchdog timer 131
- Software watchdog timer 131
- Watchdog timer 131
- App watchdog 132
- Application watchdog 132
- Application watchdog commands example 132
- Chapter 26 watchdog timer 132
- Command description 132
- Command to enter the configuration mode to be able to use these commands 132
- Commands use the 132
- Configure termina 132
- Nwa wac series cli reference guide 132
- Table 84 app watchdog commands 132
- The application watchdog has the system restart a process that fails these are the 132
- The following example displays the application watchdog configuration and lists the processes that the application watchdog is monitoring 132
- List of commands alphabetical 133
Похожие устройства
- HP ac150 Инструкция по эксплуатации
- HP ac200 Инструкция по эксплуатации
- Zyxel WAC6103D-I Инструкция по эксплуатации
- Zyxel WAC6103D-I Технические характеристики
- Zyxel WAC6103D-I Справочник командного интерфейса
- Zyxel WAC6103D-I Инструкция по установке
- HP laserjet pro mfp m177fw Инструкция по эксплуатации
- HP designjet z3200 Инструкция по эксплуатации
- HP designjet t2500 emfp Инструкция по эксплуатации
- HP designjet t2500ps emfp Инструкция по эксплуатации
- HP designjet t1500 (cr356a) Инструкция по эксплуатации
- HP designjet t1500ps (cr357a) Инструкция по эксплуатации
- HP laserjet pro mfp m125rnw (cz178a) Инструкция по эксплуатации
- HP probook 430, e9y89ea Инструкция по эксплуатации
- HP pavilion 15-n056sr, e7g11ea Инструкция по эксплуатации
- HP pavilion 15-n058sr, e7g13ea Инструкция по эксплуатации
- HP probook 450, h6r43ea Инструкция по эксплуатации
- HP h2300 Инструкция по эксплуатации
- HP 15-g001sr, f7r95ea Инструкция по эксплуатации
- HP 15-d050sr, f7r69ea Инструкция по эксплуатации