CLI Overview

The CLI is used for configuring, monitoring, and maintaining the network. The user interface allows you to execute commands on supported wireless controllers, service platforms, and APs, using either a serial console or a remote access method.

This chapter describes basic CLI features. Topics covered include an introduction to command modes, navigation and editing features, help features and command history.

The CLI is segregated into different command modes. Each mode has its own set of commands for configuration, maintenance, and monitoring. The commands available at any given time depend on the mode you are in, and to a lesser extent, the particular model used. Enter a question mark (?) at the system prompt to view a list of commands available for each command mode/instance.

Use specific commands to navigate from one command mode to another. The standard order is: USER EXEC mode, PRIV EXEC mode and GLOBAL CONFIG mode.

Click to expand in new window
GUID-9D50D2DB-80DF-4C5D-887B-89FC33E0B167-low.png

Figure: Hierarchy of User Modes

Command Modes

A session generally begins in the USER EXEC mode (one of the two access levels of the EXEC mode). For security, only a limited subset of EXEC commands are available in the USER EXEC mode. This level is reserved for tasks that do not change the device‘s (wireless controller, service platform, or AP) configuration.

rfs4000-6DB5D4>

The system prompt signifies the device name and the last three bytes of the device MAC address.

To access commands, enter the PRIV EXEC mode (the second access level for the EXEC mode). Once in the PRIV EXEC mode, enter any EXEC command. The PRIV EXEC mode is a superset of the USER EXEC mode.

rfs4000-6DB5D4>enable
rfs4000-6DB5D4#

Most of the USER EXEC mode commands are one-time commands and are not saved across device reboots. Save the command by executing ‘commit‘ command. For example, the show command displays the current configuration and the clear command clears the interface.

Access the GLOBAL CONFIG mode from the PRIV EXEC mode. In the GLOBAL CONFIG mode, enter commands that set general system characteristics. Configuration modes, allow you to change the running configuration. If you save the configuration later, these commands are stored across device reboots.

Access a variety of protocol specific (or feature-specific) modes from the global configuration mode. The CLI hierarchy requires you to access specific configuration modes only through the global configuration mode.

rfs4000-6DB5D4#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
rfs4000-6DB5D4(config)#

You can also access sub-modes from the global configuration mode. Configuration sub-modes define specific features within the context of a configuration mode.

rfs4000-6DB5D4(config)#aaa-policy test
rfs4000-6DB5D4(config-aaa-policy-test)#

The following table summarizes the available controller commands:

Table 1. Controller CLI Modes and Commands
User Exec Mode Priv Exec Mode Global Configuration Mode
captive-portal-page-upload archive aaa-policy
change-passwd boot aaa-tacacs-policy
clear captive-portal-page-upload alias
clock cd AP7502
cluster change-passwd AP7522
commit clear AP7532
connect clock AP7562
create-cluster cluster AP7602
crypto commit AP7612
crypto-cmp-cert-update configure AP7622
database connect AP7632
database-backup copy AP7662
database-restore cpe (supported on NX7500, NX9500, NX9600 and VX9000) AP8163
debug create-cluster AP8432
device-upgrade crypto AP8533
disable crypto-cmp-cert-updateted application
enable database application-group
file-sync database-backup application-policy
help database-restore auto-provisioning-policy
join-cluster debug bgp
l2tpv3 delete bonjour-gw-discovery-policy
logging device-upgrade bonjour-gw-forwarding-policy
mint diff bonjour-gw-query-forwarding-policy
no dir captive-portal
on disable clear
opendns edit client-identity
page enable client-identity-group
ping erase clone
ping6 factory-reset crypto-cmp-policy
revert file-sync customize
service halt database-client-policy (supported only on VX9000)
show help database-policy (supported only on NX9500, NX9600, and VX9000)
ssh join-cluster device
telnet l2tpv3 device-categorization
terminal logging dhcp-server-policy
time-it mint dhcp6-server-policy
traceroute mkdir dns-whitelist
traceroute6 more event-system-policy
virtual-machine (supported only on NX9500, NX9600 and VX9000) no firewall-policy
watch on global-association-list
write opendns guest-management
clrscr page help
exit ping host
ping6 igmp-snoop-policy (This command has been deprecated. IGMP snooping is now configurable under the profile/device configuration mode. For more information, see ip.
pwd inline-password-encryption
raid (supported only on NX7500, NX9500 and NX9600) ip
re-elect ipv6
reload ipv6-router-advertisement-policy
remote-debug l2tpv3
rename mac
revert management-policy
rmdir meshpoint
self meshpoint-qos-policy
service mint-policy
show nac-list
ssh no
t5 (supported only on RFS4010, NX9500, NX9600 and VX9000) nsight-policy
telnet NX5500 (supported only on NX9500, NX9600 and VX9000)
terminal NX7500 (supported only on NX9500, NX9600 and VX9000)
time-it NX9000 (supported only on NX9500, NX9600 and VX9000)
traceroute NX9600 (supported only on NX9600 and VX9000)
traceroute6 passpoint-policy
upgrade password-encryption
upgrade-abort profile
virtual-machine (supported only on NX9500, NX9600 and VX9000) radio-qos-policy
watch radius-group
write radius-server-policy
clrscr radius-user-pool-policy
exit rename
roaming-assist-policy
role-policy
route-map
routing-policy
rtl-server-policy
schedule-policy
self
sensor-policy
smart-rf-policy
t5 (supported only on NX7500, NX9500, NX9600 and VX9000)
url-filter (supported only on NX9500, NX9600 and VX9000)
url-list (supported only on NX9500, NX9600 and VX9000)
vx9000 (supported only on NX9500, NX9600 and VX9000)
web-filter-policy
wips-policy
wlan
wlan-qos-policy
write
clrscr
commit
do
end
exit
revert
service
show