CLI Overview

This section describes the commands available within a device's CLI structure. CLI is available for access points, wireless controller, and service platforms.

You can access the CLI by using:

Configuration for connecting to a Controller using a terminal emulator

If connecting through the serial port, use the following settings to configure your terminal emulator:

Bits Per Second

19200 - For NX5500, NX7500, NX9500, NX9600, VX9000 model service platforms.

115200 - For AP410, AP460, AP505, AP510, AP560, AP7522, AP7532, AP7562, AP7612, AP7632, AP7662, AP8432, AP8533 model access points

Data Bits 8
Parity None
Stop Bit 1
Flow Control None

When a CLI session is established, complete the following (user input is in bold):

login as: <username>
administrator's login password: <password>

User Credentials

Use the following credentials when logging into a device for the first time:

User Name admin
Password admin123

When logging into the CLI for the first time, you are prompted to change the password. Reset the password and use it for subsequent logins.

Examples in this reference guide

Examples used in this reference guide are generic to the each supported wireless controller, service platform, and AP model. Commands that are not common, are identified using the notation "Supported in the following platforms." For an example, see below:

Supported in the following platforms:

The above example indicates the command is only available for a NX5500 model wireless controller.

The CLI is used for configuring, monitoring, and maintaining the network. The user interface allows you to execute commands on supported wireless controllers, service platforms, and APs, using either a serial console or a remote access method.

This chapter describes basic CLI features. Topics covered include an introduction to command modes, navigation and editing features, help features and command history.

The CLI is segregated into different command modes. Each mode has its own set of commands for configuration, maintenance, and monitoring. The commands available at any given time depend on the mode you are in, and to a lesser extent, the particular model used. Enter a question mark (?) at the system prompt to view a list of commands available for each command mode/instance.

Use specific commands to navigate from one command mode to another. The standard order is: USER EXEC mode, PRIV EXEC mode and GLOBAL CONFIG mode.

Click to expand in new window
Figure: Hierarchy of User Modes
GUID-9D50D2DB-80DF-4C5D-887B-89FC33E0B167-low.png

Command Modes

A session generally begins in the USER EXEC mode (one of the two access levels of the EXEC mode). For security, only a limited subset of EXEC commands are available in the USER EXEC mode. This level is reserved for tasks that do not change the device‘s (wireless controller, service platform, or AP) configuration.

ap505-13403B>

The system prompt signifies the device name and the last three bytes of the device MAC address.

To access commands, enter the PRIV EXEC mode (the second access level for the EXEC mode). Once in the PRIV EXEC mode, enter any EXEC command. The PRIV EXEC mode is a superset of the USER EXEC mode.

ap505-13403B>en
ap505-13403B#

Most of the USER EXEC mode commands are one-time commands and are not saved across device reboots. Save the command by executing ‘commit‘ command. For example, the show command displays the current configuration and the clear command clears the interface.

Access the GLOBAL CONFIG mode from the PRIV EXEC mode. In the GLOBAL CONFIG mode, enter commands that set general system characteristics. Configuration modes, allow you to change the running configuration. If you save the configuration later, these commands are stored across device reboots.

Access a variety of protocol specific (or feature-specific) modes from the global configuration mode. The CLI hierarchy requires you to access specific configuration modes only through the global configuration mode.

ap505-13403B#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
ap505-13403B(config)#

You can also access sub-modes from the global configuration mode. Configuration sub-modes define specific features within the context of a configuration mode.

ap505-13403B(config)#aaa-policy test
ap505-13403B(config-aaa-policy-test)#
To enter the logged device's configuration, execute the following command:
ap505-13403B(config)#self
ap505-13403B(config-device-94-9B-2C-13-40-38)#

The following table summarizes the available controller commands:

Table 1. Controller CLI Modes and Commands
User Exec Mode Priv Exec Mode Global Configuration Mode
captive-portal-page-upload archive aaa-policy
change-passwd boot aaa-tacacs-policy
clear captive-portal-page-upload alias
clock cd ap410
cluster change-passwd ap460
commit clear ap505
connect clock ap510
create-cluster cluster ap560
crypto commit ap7522
crypto-cmp-cert-update configure ap7532
database connect ap7562
database-backup copy ap7612
database-restore cpe (supported on NX7500, NX9500, NX9600, and VX9000) ap7632
debug create-cluster ap7662
device-upgrade crypto ap8432
disable crypto-cmp-cert-update ap8533
enable database application
file-sync database-backup application-group
help database-restore application-policy
join-cluster debug association-acl-policy
l2tpv3 delete auto-provisioning-policy
logging device-upgrade bgp
mint diff ble-data-export-policy
no dir bonjour-gw-discovery-policy
on disable bonjour-gw-forwarding-policy
opendns edit bonjour-gw-query-forwarding-policy
page enable captive-portal
ping erase clear
ping6 ex3500 (supported only on NX9500, NX9600, and VX9000) client-identity
revert factory-reset client-identity-group
service file-sync clone
show halt crypto-cmp-policy
ssh help customize
telnet join-cluster database-client-policy (supported only on VX9000)
terminal l2tpv3 database-policy (supported only on NX9500, NX9600, and VX9000)
time-it logging device
traceroute mint device-categorization
traceroute6 mkdir dhcp-server-policy
virtual-machine (supported only on NX9500, NX9600, and VX9000) more dhcpv6-server-policy
watch no dns-whitelist
write on event-system-policy
clrscr opendns ex3500
exit page ex3500-management-policy
ping ex3500-qos-class-map-policy
ping6 ex3500-qos-policy-map
pwd ex3524
raid (supported only on NX9500, NX9600, and NX7500) ex3548
re-elect firewall-policy
reload global-association-list
remote-debug guest-management
rename help
revert host
rmdir igmp-snoop-policy (This command has been deprecated. IGMP snooping is now configurable under the profile/device configuration mode. For more information, see ip.
self inline-password-encryption
service iot-device-type-imagotag-policy
set-personality ip
show ipv6
ssh ipv6-router-advertisement-policy
t5 (supported only on NX9500, NX9600, and VX9000) l2tpv3
telnet location-policy
terminal mac
time-it management-policy
traceroute meshpoint
traceroute6 meshpoint-qos-policy
trigger-smart-sensor mint-policy
upgrade nac-list
upgrade-abort no
virtual-machine (supported only on NX9500, NX9600 and VX9000) nsight-policy
watch NX5500 (supported only on NX9500, NX9600, and VX900 and )
write NX7500 (supported only on NX9500, NX9600, and VX9000)
clrscr NX9000 (supported only on NX9500, NX9600, and VX9000)
exit NX9600 (supported only on NX9600, and VX9000)
passpoint-policy
password-encryption
profile
purview-application-group
purview-application-policy
radio-qos-policy
radius-group
radius-server-policy
radius-user-pool-policy
rename
replace
rf-domain
roaming-assist-policy
role-policy
route-map
routing-policy
rtl-server-policy
schedule-policy
self
sensor-policy
smart-rf-policy
t5 (supported only on NX7500, NX9500, NX9600 and VX9000
url-filter (supported only on NX9500, NX9600, and VX9000)
url-list (supported only on NX9500, NX9600 and VX9000)
vx9000 (supported only on NX9500, NX9600, and VX9000)
web-filter-policy
wips-policy
wlan
wlan-qos-policy
write
clrscr
commit
do
end
exit
revert
service
show