Profile Config Commands

The following table summarizes profile configuration mode commands:

Click to expand in new window

Profiles Config Mode Commands

Command Description
adopter-auto-provisioning-policy-lookup Enables the use of a centralized auto provisioning policy on this profile
adoption Configures a minimum and maximum delay time in the initiation of the device adoption process
adoption-mode Sets the adoption mode for access points to Controller, cloud, or Extreme Services
alias Creates various types of aliases, such as network, VLAN, network-group, network-service, encrypted-string, hashed -string, etc. at the profile level
antenna-id (ap510e) Configures the antenna ID in the AP510e model access point profile and device contexts. Use this command to specify the antenna group and enable the access point radios.
antenna-id (ap560h) Configures the antenna ID in the AP560h model access point profile and device contexts. Use this command to specify which internal antenna to use (30/70 degree) and enable the access point radios.
application-policy Enables the RADIUS Change of Authorization (CoA) mechanism. Reinitiates authentication and changes attributes of active AAA session based on the rules defined by the application policy specified here.
Note: Supported only on WiNG 5.9.X devices.
area Sets the system‘s area of location (the area name)
arp Configures static address resolution protocol
auto-learn Enables controllers or service platforms to maintain a local configuration record of devices requesting adoption and provisioning. The command also enables learning of a device‘s host name via DHCP options.
autogen-uniqueid Auto-generates a unique local ID for devices using this profile. When executed in the device configuration mode, this command generates a unique ID for the logged device.
autoinstall Configures the automatic install feature
bridge Configures bridge specific parameters
captive-portal Configures captive portal advanced Web page upload on a device profile
cdp Enables Cisco Discovery Protocol (CDP) on a device
cluster Configures a cluster name
configuration-persistence Enables persistence of configuration across reloads
controller Configures a wireless controller or service platform
critical-resource Monitors resources that are critical to the health of the service platform, wireless controller, or access point managed network. These critical resources are identified by their configured IP addresses.
crypto Configures data encryption related protocols and settings
database Backs up captive-portal and/or NSight database to a specified location and file and configures a low-disk-space threshold value
device-onboard Configures the logo image file name and title displayed on the ExtremeGuest device-onboarding portal. This is the portal a vendor-admin user uses to onboard devices.
device-upgrade Configures device firmware upgrade settings on this profile
diag Enables looped packet logging
dot1x Configures 802.1x standard authentication controls
dpi Enables Deep Packet Inspection (DPI) on this profile
dscp-mapping Configures an IP DSCP to 802.1p priority mapping for untagged frames
eguest-server (VX9000 only) Enables the EGuest daemon when executed without the ‘host‘ option
eguest-server (NOC Only) Points to the EGuest server, when executed along with the ‘host‘ option
email-notification Configures e-mail notification settings
enforce-version Enables checking of a device‘s firmware version before attempting adoption or clustering
environmental-sensor Configures the environmental sensor settings on this profile (applicable to AP8132 model access point only)
events Enables system event logging and message generation. This command also configures event message forwarding settings.
export Enables export of startup.log file after every boot
file-sync Configures parameters enabling synching of trustpoint and/or wireless-bridge certificate between the staging-controller and adopted access point
floor Sets the floor name where the system is located
gre Enables Generic Routing Encapsulation (GRE) tunneling on this profile
http-analyze Configures HTTP analysis settings
interface Configures an interface (VLAN, radio, GE, etc.)
ip Configures IPv4 components
ipv6 Configures IPv6 components
l2tpv3 Defines the Layer 2 Tunnel Protocol (L2TP) for tunneling layer 2 payloads using Virtual Private Networks (VPNs)
l3e-lite-table Configures L3e Lite Table with this profile
led Turns device LEDs on or off
led-timeout Configures LED-timeout timer. This command is specific to the NX9500 series service platforms.
legacy-auto-downgrade Auto downgrades a legacy device firmware
legacy-auto-update Auto upgrades a legacy device firmware
lldp Configures Link Layer Discovery Protocol (LLDP) settings
load-balancing Configures load balancing parameters
logging Modifies message logging settings
mac-address-table Configures the MAC address table
mac-auth Enables 802.1x user authentication protocol on this profile
management-server Configures a management server with this profile
meshpoint-device Configures meshpoint device parameters
meshpoint-monitor-interval Configures meshpoint monitoring interval
min-misconfiguration-recovery-time Configures the minimum device connectivity verification time
mint Configures MiNT protocol settings
misconfiguration-recovery-time Verifies device connectivity after a configuration is received
neighbor-inactivity-timeout Configures neighbor inactivity timeout
neighbor-info-interval Configures neighbor information exchange interval
no Removes or reverts settings to their default. The no command, when used in the profile configuration mode, removes the selected profile‘s settings or reverts them to their default.
noc Configures NOC settings
nsight Configures NSight database related parameters
ntp Configures NTP server settings
otls Configures support for detection and forwarding of OmniTrail beacon tags
offline-duration Sets the duration, in minutes, for which a device remains un-adopted before it generates offline event
power-config Configures the power mode
preferred-controller-group Specifies the wireless controller or service platform group preferred for adoption
preferred-tunnel-controller Configures the tunnel wireless controller or service platform preferred by the system to tunnel extended VLAN traffic
purview-application-policy Enables the RADIUS Change of Authorization (CoA) mechanism. Reinitiates authentication and changes attributes of active AAA session based on the rules defined by the purview application policy specified here.
Note: Supported only on WiNG 7.1.2 APs.
radius Configures device-level RADIUS authentication parameters
raid Enables alarm on the array. This command is supported only on the NX9500 series service platform profile/device config modes.
rf-domain-manager Enables devices using this profile to be elected as RF Domain manager. Also sets the priority value for devices using this profile in the RF Domain manager election process.
router Configures dynamic router protocol settings
spanning-tree Configures spanning tree related settings
traffic-class-mapping Maps the IPv6 traffic class value of incoming IPv6 untagged packets to 802.1p priority
traffic-shape Enables traffic shaping and configures traffic shaping parameters
trustpoint (profile-config-mode) Configures the trustpoint assigned for validating a CMP auth Operator
tunnel-controller Configures the name of tunneled WLAN (extended VLAN) wireless controller or service platform
use (profile/device-config-mode-commands) Uses pre configured policies with this profile
vrrp Configures Virtual Router Redundancy Protocol (VRRP) group settings
vrrp-state-check Publishes interface via OSPF or BGP based on VRRP status
wep-shared-key-auth Enables support for 802.11 WEP shared key authentication
ws-controller Configures multiple ws-controller hosts and enables rediscovery of new controllers. This option is required for WiNG APs with 'adoption-mode' set to 'ws-controller'. That is WiNG APs adopting to the ExtremeCloud Appliance controller.
service Service commands are used to view and manage configurations. The service commands and their corresponding parameters vary from mode to mode.
zone Configures the zone for devices using this profile. The zone can also be configured on the device‘s self context.


For more information on common commands (clrscr, commit, help, revert, service, show, write, and exit), see Common Commands.


The input parameter <HOSTNAME>, wherever used in syntaxes across this chapter, cannot include an underscore (_) character. In other words, the name of a device cannot contain an underscore.