Wireless Controller, Service Platform and Access Point

Configures network, VLAN, host, string, network-service, etc. aliases at the RF Domain level

For information on aliases, see alias.

Supported in the following platforms:

Access Points — AP7502, AP7522, AP7532, AP7562, AP7602, AP7612, AP7622, AP7632, AP7662, AP8163, AP8432, AP8533
Wireless Controller — RFS4010
Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

alias [address-range|encrypted-string|hashed-string|host|network|network-group|
network-service|number|string|vlan]

alias encrypted-string <ENCRYPTED-STRING-ALIAS-NAME> [0|2] <LINE>

alias hashed-string <HASHED-STRING-ALIAS-NAME> 1 <LINE>

alias address-range <ADDRESS-RANGE-ALIAS-NAME> <STARTING-IP> to <ENDING-IP>

alias host <HOST-ALIAS-NAME> <HOST-IP>

alias network <NETWORK-ALIAS-NAME> <NETWORK-ADDRESS/MASK>

alias network-group <NETWORK-GROUP-ALIAS-NAME> [address-range|host|network]

alias network-group <NETWORK-GROUP-ALIAS-NAME> [address-range <STARTING-IP> to 
<ENDING-IP> {<STARTING-IP> to <ENDING-IP>}|host <HOST-IP> {<HOST-IP>}|
network <NETWORK-ADDRESS/MASK> {<NETWORK-ADDRESS/MASK>}]

alias network-service <NETWORK-SERVICE-ALIAS-NAME> proto [<0-254>|<WORD>|eigrp|
gre|igmp|igp|ospf|vrrp] {(<1-65535>|<WORD>|bgp|dns|ftp|ftp-data|gopher|https|
ldap|nntp|ntp|pop3|proto|sip|smtp|sourceport|ssh|telnet|tftp|www)}

alias number <NUMBER-ALIAS-NAME> <0-4294967295>

alias network-service <NETWORK-SERVICE-ALIAS-NAME> proto [<0-254>|<WORD>|eigrp|gre|
igmp|igp|ospf|vrrp] {(<1-65535>|<WORD>|bgp|dns|ftp|ftp-data|gopher|https|ldap|nntp|
ntp|pop3|proto|sip|smtp|sourceport [<1-65535>|<WORD>]|ssh|telnet|tftp|www)}

alias string <STRING-ALIAS-NAME> <LINE>

alias vlan <VLAN-ALIAS-NAME> <1-4094>

Parameters

alias address-range <ADDRESS-RANGE-ALIAS-NAME> <STARTING-IP> to <ENDING-IP>

address-range <ADRESS-RANGE-ALIAS-NAME>

Creates a new address-range alias for this RF Domain. Or associates an existing address-range alias with this RF Domain. An address-range alias maps a name to a range of IP addresses.

<ADRESS-RANGE-ALIAS-NAME> – Specify the address range alias name.

Note: Alias name should begin with ‘$‘.

<STARTING-IP> to <ENDING-IP>

Associates a range of IP addresses with this address range alias

<STARTING-IP> – Specify the first IP address in the range.
- to <ENDING-IP> – Specify the last IP address in the range.

Note: Aliases defined at any given level can be overridden at the next lower level. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence.

alias encrypted-string <ENCRYPTED-STRING-ALIAS-NAME> [0|2] <LINE>

encrypted-string <ENCRYPTED-STRING-ALIAS-NAME>

Creates an alias for an encrypted string. Use this alias for string configuration values that are encrypted when "password-encryption" is enabled. For example, in the management-policy, use it to define the SNMP community string. For more information, see snmp-server.

<ENCRYPTED-STRING-ALIAS-NAME> – Specify the encrypted-string alias name.

Note: Alias name should begin with ‘$‘.

[0|2] <LINE>

Configures the value associated with the alias name specified in the previous step

[0|2] <LINE> – Configures the alias value

Note, if password-encryption is enabled, in the show > running-config output, this clear text is displayed as an encrypted string, as shown below:

nx9500-6C8809(config)#show running-config
!...............................
alias encrypted-string $enString 2 fABMK2is7UToNiZE3MQXbgAAA
AxB0ZIysdqsEJwr6AH/Da//
!
--More--
nx9500-6C8809

In the above output, the ‘2‘ displayed before the encrypted-string alias value indicates that the displayed text is encrypted and not a clear text.

However, if password-encryption is disabled the clear text is displayed as is:

nx9500-6C8809(config)#show running-config
!...............................
!
alias encrypted-string $enString 0 test11223344
!
--More--
nx9500-6C8809

For more information on enabling password-encryption, see password-encryption.

alias hashed-string <HASHED-STRING-ALIAS-NAME> <LINE>

hashed-string <HASHED-STRING-ALIAS-NAME>

Creates an alias for a hashed string. Use this alias for configuration values that are hashed string, such as passwords. For example, in the management-policy, use it to define the privilege mode password. For more information, see privilege-mode-password.

<HASHED-STRING-ALIAS-NAME> – Specify the hashed-string alias name.

Note: Alias name should begin with ‘$‘.

<LINE>

Configures the hashed-string value associated with this alias.

nx9500-6C8809(config)#show running-config
!
alias encrypted-string $WRITE 2 sBqVCDAoxs3oByF5PCSuFAAA
AAd7HT2+EiT/l/BXm9c4SBDv
!
alias hashed-string $PriMode 1 faffdde27cb49ad634ea20df4f
7c8ef2685894d10ffcb1b2efba054112ecfc75
--More--
nx9500-6C8809

In the above show > running-config output, the ‘1‘ displayed before the hashed-string alias value indicates that the displayed text is hashed and not a clear text.

alias host <HOST-ALIAS-NAME> <HOST-IP>

host <HOST-ALIAS-NAME>	Creates a host alias for this RF Domain. Or associates an existing host alias with this RF Domain. A host alias maps a name to a single network host. <HOST-ALIAS-NAME> – Specify the host alias name. Note: Alias name should begin with ‘$‘.
<HOST-IP>	Associates the network host‘s IP address with this host alias <HOST-IP> – Specify the network host‘s IP address. Note: Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence.

alias network <NETWORK-ALIAS-NAME> <NETWORK-ADDRESS/MASK>

network <NETWORK-ALIAS-NAME>	Creates a network alias for this RF Domain. Or associates an existing network alias with this RF Domain. A network alias maps a name to a single network address. <NETWORK-ALIAS-NAME> – Specify the network alias name. Note: Alias name should begin with ‘$‘.
<NETWORK-ADDRESS/MASK>	Associates a single network with this network alias <NETWORK-ADDRESS/MASK> – Specify the network‘s address and mask. Note: Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence.

alias network-group <NETWORK-GROUP-ALIAS-NAME> [address-range <STARTING-IP> to <ENDING-IP> 
{<STARTING-IP> to <ENDING-IP>}|host <HOST-IP> {<HOST-IP>}|network <NETWORK-ADDRESS/MASK> 
{<NETWORK-ADDRESS/MASK>}]

network <NETWORK-GROUP-ALIAS-NAME>	Creates a network-group alias for this RF Domain. Or associates an existing network-group alias with this RF Domain. <NETWORK-GROUP-ALIAS-NAME> – Specify the network-group alias name. Note: Alias name should begin with ‘$‘. After specifying the name, specify the following: a range of IP addresses, host addresses, or a range of network addresses. Note: Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence.
address-range <STARTING-IP> to <ENDING-IP> {<STARTING-IP> to <ENDING-IP>}	Associates a range of IP addresses with this network-group alias <STARTING-IP> – Specify the first IP address in the range. to <ENDING-IP> – Specify the last IP address in the range. <STARTING-IP> to <ENDING-IP> – Optional. Specifies more than one range of IP addresses. A maximum of eight (8) IP address ranges can be configured.
host <HOST-IP> {<HOST-IP>}	Associates a single or multiple hosts with this network-group alias <HOST-IP> – Specify the hosts‘ IP address. <HOST-IP> – Optional. Specifies more than one host. A maximum of eight (8) hosts can be configured.
network <NETWORK-ADDRESS/MASK> {<NETWORK-ADDRESS/MASK>}	Associates a single or multiple networks with this network-group alias <NETWORK-ADDRESS/MASK> – Specify the network‘s address and mask. <NETWORK-ADDRESS/MASK> – Optional. Specifies more than one network. A maximum of eight (8) networks can be configured.

alias network-service <NETWORK-SERVICE-ALIAS-NAME> proto [<0-254>|<WORD>|eigrp|gre|igmp|
igp|ospf|vrrp] {(<1-65535>|<WORD>|bgp|dns|ftp|ftp-data|gopher|https|ldap|nntp|ntp|pop3|
proto|sip|smtp|sourceport [<1-65535>|<WORD>]|ssh|telnet|tftp|www)}

alias network-service <NETWORK-SERVICE-ALIAS-NAME>	Creates a network-service alias for this RF Domain. Or associates an existing network-service alias with this RF Domain. A network-service alias maps a name to network services and the corresponding source and destination software ports. <NETWORK-SERVICE-ALIAS-NAME> – Specify a network-service alias name. Note: Alias name should begin with ‘$‘. Note: Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence.
proto [<0-254>\| <WORD>\|eigrp\|gre\| igmp\|igp\|ospf\|vrrp]	Use one of the following options to associate an Internet protocol with this network-service alias: <0-254> – Identifies the protocol by its number. Specify the protocol number from 0 - 254. This is the number by which the protocol is identified in the Protocol field of the IPv4 header and the Next Header field of IPv6 header. For example, the User Datagram Protocol‘s (UDP's) designated number is 17. <WORD> – Identifies the protocol by its name. Specify the protocol name. eigrp – Selects Enhanced Interior Gateway Routing Protocol (EIGRP). The protocol number 88. gre – Selects Generic Routing Encapsulation (GRE). The protocol number is 47. igmp – Selects Internet Group Management Protocol (IGMP). The protocol number is 2. igp – Selects Interior Gateway Protocol (IGP). The protocol number is 9. ospf – Selects Open Shortest Path First (OSPF). The protocol number is 89. vrrp – Selects Virtual Router Redundancy Protocol (VRRP). The protocol number is 112.
<1-65535>\|<WORD>\| bgp\|dns\|ftp\|ftp-data\| gopher\|https\|ldap\|nntp\| ntp\|pop3\|proto\|sip\|smtp\| sourceport [<1-65535>\| <WORD>]\|ssh\|telnet\| tftp\|www)}	After specifying the protocol, you may configure a destination port for this service. These keywords are recursive and you can configure multiple protocols and associate multiple destination and source ports. <1-65535> – Optional. Configures a destination port number from 1 - 65535 <WORD> – Optional. Identifies the destination port by the service name provided. For example, the SSH service uses TCP port 22. bgp – Optional. Configures the default Border Gateway Protocol (BGP) services port (179) dns – Optional. Configures the default Domain Name System (DNS ) services port (53) ftp – Optional. Configures the default File Transfer Protocol (FTP ) control services port (21) ftp-data – Optional. Configures the default FTP data services port (20) gopher – Optional. Configures the default gopher services port (70) https – Optional. Configures the default HTTPS services port (443) ldap – Optional. Configures the default Lightweight Directory Access Protocol (LDAP ) services port (389) nntp – Optional. Configures the default Newsgroup (NNTP) services port (119) ntp – Optional. Configures the default Network Time Protocol (NTP ) services port (123) POP3 – Optional. Configures the default Post Office Protocol (POP3 ) services port (110) proto – Optional. Use this option to select another Internet protocol in addition to the one selected in the previous step. sip – Optional. Configures the default Session Initiation Protocol (SIP ) services port (5060) smtp – Optional. Configures the default Simple Mail Transfer Protocol (SMTP ) services port (25) sourceport [<1-65535>\|<WORD>] – Optional. After specifying the destination port, you may specify a single or range of source ports. <1-65535> – Specify the source port from 1 - 65535. <WORD> – Specify the source port range, for example 1-10. ssh – Optional. Configures the default SSH services port (22) telnet – Optional. Configures the default Telnet services port (23) tftp – Optional. Configures the default Trivial File Transfer Protocol (TFTP ) services port (69) www – Optional. Configures the default HTTP services port (80)

alias number <NUMBER-ALIAS-NAME> <0-4294967295>

alias number <NUMBER-ALIAS-NAME> <0-4294967295>

Creates a new number alias or applies an existing number, identified by the <NUMBER-ALIAS-NAME> keyword

<NUMBER-ALIAS-NAME> – Specify the number alias name.
- <0-4294967295> – Specify the number, from 0 - 4294967295, assigned to the number alias created.

Number aliases map a name to a numeric value. For example, ‘alias number $NUMBER 100‘.

The number alias name is: $NUMBER
The value assigned is: 100

Note: The value referenced by alias $NUMBER, wherever used, is 100.

alias string <STRING-ALIAS-NAME> <LINE>

alias string <STRING-ALIAS-NAME>

Creates a string alias for this RF Domain. Or associates an existing string alias with this RF Domain. String aliases map a name to an arbitrary string value. For example, ‘alias string $DOMAIN test.example_company.com‘. In this example, the string alias name is: $DOMAIN and the string value it is mapped to is: test.example_company.com. In this example, the string alias refers to a domain name.

<VLAN-ALIAS-NAME> – Specify the string alias name.
- <LINE> – Specify the string value.

Note: Alias name should begin with ‘$‘.

Note: Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence.

alias vlan <VLAN-ALIAS-NAME> <1-4094>

alias vlan <VLAN-ALIAS-NAME>	Creates a VLAN alias for this RF Domain. Or associates an existing VLAN alias with this RF Domain. A VLAN alias maps a name to a VLAN ID. <VLAN-ALIAS-NAME> – Specify the VLAN alias name. Note: Alias name should begin with ‘$‘.
<1-4094>	Maps the VLAN alias to a VLAN ID <1-4094> – Specify the VLAN ID from 1 - 4094. Note: Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence.

Examples

rfs4000-229D58(config)#show context
!
! Configuration of RFS4000 version 5.9.2.0-008B

!
!
version 2.5
!
!
alias network-group $TestNetGrpAlias network 192.168.13.0/24 192.168.16.0/24
alias network-group $TestNetGrpAlias address-range 192.168.13.7 to 192.168.13.16 
192.168.13.20 to 192.168.13.25
!
alias network $TestNetworkAlias 192.168.13.0/24
!
alias host $TestHostAlias 192.168.13.10
!
alias address-range $TestAddRanAlias 192.168.13.10 to 192.168.13.13
!
alias network-service $NetworkServAlias proto udp
!
alias network-service $kerberos proto tcp 749 750 80 proto udp 68 sourceport 67
!
alias vlan $TestVLANAlias 1
--More--
rfs4000-229D58(config)#

In the following examples the global aliases ‘$kerberos‘ and ‘$TestVLANAlias‘ are associated with the RF Domain ‘test‘ and overrides applied:

rfs4000-229D58(config-rf-domain-test)#alias network-service $kerberos proto tcp
749 750 80

rfs4000-229D58(config-rf-domain-test)#alias vlan $TestVLANAlias 10

vrfs4000-229D58(config-rf-domain-test)#show context
rf-domain test
 no country-code
 alias network-service $kerberos proto tcp 749 750 80
 alias vlan $TestVLANAlias 10
rfs4000-229D58(config-rf-domain-test)#

nx9500-6C8809(config-rf-domain-test)#alias string $test example_company.com

nx9500-6C8809(config-rf-domain-test)#show context
rf-domain test
 no country-code
 alias string $test example_company.com
nx9500-6C8809(config-rf-domain-test)#

Example 1:

In the following examples, the network-group alias ‘$test‘ is configured to include hosts 192.168.1.10 and 192.168.1.11, networks 192.168.2.0/24 and 192.168.3.0/24 and address-range 192.168.4.10 to 192.168.4.20.

rfs4000-229D58(config)#alias network-group $test host 192.168.1.10 192.168.1.11

rfs4000-229D58(config)#alias network-group $test network 192.168.2.0/24 192.168.3.0/24

rfs4000-229D58(config)#alias network-group $test address-range 192.168.4.10 to 192.168.4.20

Associate this network-group alias ‘$test‘ to the RF Domain ‘test‘ and override the ‘host‘ element of the alias.

rfs4000-229D58rfs4000-229D58(config-rf-domain-test)#alias network-group $test host 192.168.10.10

rfs4000-229D58#show context
rf-domain test
 no country-code
 alias network-service $kerberos proto tcp 749 750 80
  alias network-group $test host 192.168.10.10
  alias network-group $test network 192.168.2.0/24 192.168.3.0/24
  alias network-group $test address-range 192.168.4.10 to 192.168.4.20
  alias vlan $TestVLANAlias 10
rfs4000-229D58(config-rf-domain-test)#

In the preceding example, the ‘host‘ element of the network-group alias ‘$test‘ has been overridden. But the ‘network‘ and ‘address-range‘ elements have been retained as is.

Related Commands

no (rf-domain-config-mode)

Removes a network, network-group, network-service, VLAN, or string alias from this RF Domain