WiFi Command Reference

Configuration Commands

•	WLAN-GW Commands

•	WLAN-GW Service Commands

•	RADIUS Server and Proxy Commands

•	LUDB Matching for RADIUS Proxy Cache

•	Data Plane Related Commands

•	Port Policy Commands

•	WIFI Aggregation and Offload – Migrant User Support Commands

•	Distributed Subscriber Management Commands

•	Show Commands

•	Tools Commands

•	Clear Commands

 

WLAN-GW Commands

Note that the wlan-gw commands apply only to the 7750 SR platform.

config

—	subscriber-mgmt

—

wlan-gw

—	distributed-sub-mgt

—	dsm-ip-filter filter-name [create]

—	no dsm-ip-filter filter-name

—	description description-string

—	no description

—	default-action {drop|forward}

—	no default-action

—	entry entry-id [create]

—	no entry entry-id

—	action {drop|forward|none}

—

no action

—	description description-string

—	no description

—	match protocol {any|icmp|tcp|udp|gre}

—

no match

—	dst-port operator port-number

—	no dst-port

—	dst-ip ip-prefix/length

—

no dst-ip

—	dsm-policer policer-name [type policer-type] [create]

—	no dsm-policer

—	action {permit-deny|priority-mark}

—

no action

—	adaptation-rule pir adaptation-rule [cir adaptation-rule]

—	no adaptation-rule

—	cbs burst-size

—

no cbs

—	mbs burst-size

—

no mbs

—	rate rate [cir rate]

—

no rate

—	mgw-profile profile-name [create]

—	no mgw-profile profile-name

—	description description-string

—	no description

—	interface-type {gn|s2a|s2b}

—	no interface-type

—	ip-ttl hops

—

no ip-ttl

—	keep-alive [interval seconds] [retry-count value] [timeout retry-seconds]

—	no keep-alive

—	message-retransmit [timeout timeout] [retry-count value]

—	no message-retransmit

—	report-wlan-location

—	no report-wlan-location

—	signalling-protocol protocol

—	no signalling-protocol

—	serving-network mcc mcc-value mnc mnc-value

—	no serving-network

—	virtual-chassis-identifier dual-homing-key

—	no virtual-chassis-identifier

 

configure

—

router

—

wlan-gw

—

apn apn

—

no apn

—	distributed-sub-mgmt

—	ipv6-tcp-mss-adjust segment-size

—	no ipv6-tcp-mss-adjust

—

mgw-map

—	address ip-prefix[/prefix-length] [mgw-profile profile-name]

—	no address ip-prefix[/prefix-length]

—	mobility-triggered-acct

—	interim-update

—	no interim-update

WLAN-GW Service Commands

configure

—

service

—	vprn service-id/ies service-id

—

wlan-gw

—

apn apn

—

no apn

—	distributed-sub-mgmt

—	ipv6-tcp-mss-adjust segment-size

—	no ipv6-tcp-mss-adjust

—

mgw-map

—	address ip-prefix[/prefix-length] [mgw-profile profile-name]

—	no address ip-prefix[/prefix-length]

—	mobility-triggered-acct

—	interim-update

—	no interim-update

—	subscriber-interface ip-int-name

—	group-interface ip-int-name [create]

—	group-interface ip-int-name [create] lns

—	group-interface ip-int-name [create] wlangw

—	no group-interface ip-int-name

—	ip-mtu octets

—

no ip-mtu

—

wlan-gw

—

—

egress

—	[no] agg-rate-limit

—	[no] limit-unused-bandwidth

—	[no] queue-frame-based-accounting

—	rate kilobits-per-second

—

no rate

—	hold-time infinite

—	hold-time [1..86400]

—	no hold-time

—	qos policy-id

—

no qos

—	scheduler-policy scheduler-policy-name

—	no scheduler-policy

—	[no] shape-multi-client-only

—	shaping {per-retailer|per-tunnel}

—	no shaping

—	gw-address ip-address

—	no gw-address

—	gw-ipv6-address ipv6-address

—	no gw-ipv6-address

—	l2-access-points

—	l2-ap sap-id [create]

—	no l2-ap sap-id

—	encap-type {default|null|dot1q|qinq}

—	no encap-type

—	epipe-sap-template name

—	no epipe-sap-template

—	[no] shutdown

—	l2-ap-encap-type {null|dot1q|qinq}

—	no l2-ap-encap-type

—

mobility

—

arp-ap

—

no arp-ap

—	hold-time time in s

—	no hold-time

—	trigger [data] [iapp]

—	no trigger

—	[no] multi-tunnel-type

—	[no] oper-down-on-group-degrade

—	router router-instance

—

no router

—	[no] shutdown

—	tcp-mss-adjust segment-size

—	no tcp-mss-adjust

—	tunnel-encaps

—	learn-l2tp-cookie {if-match|never|always} [cookie hex string]

—	no learn-l2tp-cookie

—	vlan-tag-ranges

—	range start [0..4096] end [0..4096]

—	range default

—	no range start [0..4096] end [0..4096]

—	authenticate-on-dhcp

—	authentication

—	authentication-policy policy-name

—	no authentication-policy

—	hold-time [hrs hours] [min minutes] [sec seconds]

—	[no] data-triggered-ue-creation

—

dhcp

—	active-lease-time [hrs hours] [min minutes] [sec seconds]

—	no active-lease-time

—	initial-lease-time [hrs hours] [min minutes] [sec seconds]

—	no initial-lease-time

—	l2-aware-ip-address ip-address

—	no l2-aware-ip-address

—	primary-dns ip-address

—	no primary-dns

—	primary-nbns ip-address

—	no primary-nbns

—	secondary-dns ip-address

—	no secondary-dns

—	secondary-nbns ip-address

—	no secondary-nbns

—	[no] shutdown

—

dhcp6

—	active-preferred-lifetime [hrs hours] [min minutes] [sec seconds]

—	no active-preferred-lifetime

—	active-valid-lifetime [hrs hours] [min minutes] [sec seconds]

—	no active-valid-lifetime

—	initial-preferred-lifetime [hrs hours] [min minutes] [sec seconds]

—	no initial-preferred-lifetime

—	initial-valid-lifetime [hrs hours] [min minutes] [sec seconds]

—	no initial-valid-lifetime

—	[no] shutdown

—	distributed-sub-mgmt

—	accounting-policy policy-name

—	no accounting-policy

—	accounting-update-interval

—	accounting-update-interval [5..259200]

—	no accounting-update-interval

—	def-app-profile

—	def-app-profile profile-name

—	no def-app-profile

—	dsm-ip-filter

—	dsm-ip-filter dsm-ip-filter-name

—	no dsm-ip-filter

—	egress-policer

—	egress-policer [256 chars max]

—	no egress-policer

—	ingress-policer

—	ingress-policer policer-name

—	no ingress-policer

—	one-time-redirect

—	one-time-redirect url rdr-url-string port port-num

—	no one-time-redirect

—	[no] shutdown

—	idle-timeout action idle-timeout-action

—	no idle-timeout

—	http-redirect-policy policy-name

—	no http-redirect-policy

—	l2-service service-id

—	no l2-service

—	description description-string

—	no description

—	[no] shutdown

—	nat-policy policy-name

—	no nat-policy

—	retail-svc-id service-id

—	[no] router-advertisements

—	[no] current-hop-limit limit

—	[no] track-mobility

—	default-retail-svc-id service-id

—	no default-retail-svc-id

—	vlan start [0..4095] end [0..4095] retail-svc-id service-id

—	no vlan start [0..4095] end [0..4095]

—	wlan-gw-group group-id

—	no wlan-gw-group

—	no] shutdown

—	pool-manager

—	dhcpv6-client

—

ia-na

—	link-addr ipv6-address

—	no link-addr

—	pool-name name

—	no pool-name

—	[no] shutdown

—	lease-query [max-retry Max nbr of retries]

—	no lease-query

—	server ipv6-address [ipv6-address...(upto 8 max)]

—	no server [ipv6-address [ipv6-address...(upto 8 max)]]

—

slaac

—	link-addr ipv6-address

—	no link-addr

—	pool-name name

—	no pool-name

—	[no] shutdown

—	source-ip ipv6-address

—	no source-ip

—	watermarks high high-percentage low low-percentage

—	no watermarks

—	wlan-gw-group nat-group-id

—	no wlan-gw-group

—	redundancy

—	export ip-prefix/length

—

no export

—	monitor ip-prefix/length

—	no monitor

—	[no] shutdown

 

configure

—

service

—	vpls service-id

—

wlan-gw

—	description description-string

—	no description

—	sap-template sap template

—	no sap-template

—	[no] shutdown

 

 

RADIUS Server and Proxy Commands

configure

—

aaa

—	acct-on-off-group group-name [create]

—	no acct-on-off-group group-name

—	description description-string

—	no description

—	radius-server-policy policy-name [create]

—	no radius-server-policy policy-name

—	accept-script-policy policy-name

—	no accept-script-policy

—	acct-on-off monitor-group group-name

—	acct-on-off oper-state-change [group group-name]

—	no acct-on-off

—	acct-request-script-policy policy-name

—	no acct-request-script-policy

—	auth-request-script-policy policy-name

—	no auth-request-script-policy

—	[no] buffering

—	acct-interim min min-val max max-val lifetime lifetime

—	no acct-interim

—	acct-stop min min-val max max-val lifetime lifetime

—	no acct-stop

—	description description-string

—	no description

—

servers

—	access-algorithm {direct | round-robin | hash-based}

—	no access-algorithm

—	hold-down-time [sec seconds] [min minutes]

—	no hold-down-time

—	ipv6-source-address ipv6-address

—	no ipv6-source-address

—	retry count

—

no retry

—	router router-instance

—	router service-name service-name

—

no router

—	server server-index name server-name

—	no server server-index

—	source-address ip-address

—	no source-address

—	timeout [sec seconds] [min minutes]

—	no timeout

 

configure

—

router

—	radius-server

—	server server-name [address ip-address] [secret key ] [hash|hash2] [port port] [create]

—	no server server-name

—	[no] accept-coa

—	acct-port port

—	[no] acct-port

—	auth-port port

—	[no] auth-port

—	coa-script-policy script-policy-name

—	no coa-script-policy

—	description description-string

—	no description

—	pending-requests-limit limit

—	no pending-requests-limit

 

 

configure

—

router

—	radius-proxy

—	server server-name [create] [purpose {[accounting | authentication ]}] [wlan-gw-group group-id]

—	no server server-name

—

cache

—	key packet-type {accept|request} attribute-type attribute-type [vendor vendor-id]

—

no key

—	[no] shutdown

—	timeout [hrs hours] [min minutes] [sec seconds]

—	no timeout

—	track-accounting [start] [stop] [interim-update] [accounting-on] [accounting-off]

—	no track-accounting

—	track-authentication [accept]

—	no track-authentication

—	track-delete-hold-time seconds

—	no track-delete-hold-time

—	default-accounting-server-policy policy-name

—	no default-accounting-server-policy

—	default-authentication-server-policy policy-name

—	no default-authentication-server-policy

—	description description-string

—	no description

—	[no] interface interface-name

—	load-balance-key [vendor vendor-id [vendor-id...(upto 5 max)]] attribute-type attribute-type [attribute-type...(upto 5 max)]

—	load-balance-key source-ip-udp

—	no load-balance-key

—	python-policy name

—	no python-policy

—	secret secret [hash|hash2]

—

no secret

—	[no] send-accounting-response

—	[no] shutdown

 

configure

—

service

—

vprn

—	radius-proxy

—	server server-name [create] [purpose {[accounting | authentication ]}] [wlan-gw-group group-id]

—	no server server-name

—	[no] accept-coa

—	acct-port port

—	no acct-port

—	auth-port port

—	no auth-port

—

cache

—	key packet-type {accept|request} attribute-type attribute-type [vendor vendor-id]

—

no key

—	[no] shutdown

—	timeout [hrs hours] [min minutes] [sec seconds]

—	no timeout

—	track-accounting [stop] [interim-update] [accounting-on] [accounting-off]

—	no track-accounting

—	coa-script-policy script-policy-name

—	no coa-script-policy

—	default-accounting-server-policy policy-name

—	no default-accounting-server-policy

—	default-authentication-server-policy policy-name

—	no default-authentication-server-policy

—	description description-string

—	no description

—	[no] interface interface-name

—	load-balance-key [vendor vendor-id [vendor-id...(upto 5 max)]] attribute-type attribute-type [attribute-type...(upto 5 max)]

—	load-balance-key source-ip-udp

—	no load-balance-key

—	pending-requests-limit limit

—	no pending-requests-limit

—	secret secret [hash|hash2]

—

no secret

—	[no] send-accounting-response

—	[no]shutdown

—	username [1..32] [prefix-string prefix-string] [accounting-server-policy policy-name] [suffix-string suffix-string]

—	no username [1..32]

LUDB Matching for RADIUS Proxy Cache

config

—	subscriber-mgmt

—	local-user-db local-user-db-name [create]

—	no local-user-db local-user-db-name

—

dhcp

—

host

—	match-radius-proxy-cache

—	fail-action {continue | drop}

—	no fail-action

—	mac-format mac-format

—	no mac-format

—	match {circuit-id|mac|remote-id}

—	match option [1..254]

—

no match

—	server [service service-id] name server-name

—

no server

 

Data Plane Related Commands

config

—

isa

—	wlan-gw-group wlan-gw-group-id [create]

—	no wlan-gw-group wlan-gw-group-id

—	active-iom-limit number

—	no active-iom-limit

—	description description-string

—	no description

—	[no] distributed-sub-mgmt

—	isa-aa-group aa-group-id

—	no isa-aa-group

—	iom slot-number

—

no iom

—

nat

—	radius-accounting-policy nat-accounting-policy

—	no radius-accounting-policy

—	session-limits

—	reserved num-sessions

—	no reserved

—	watermarks high percentage low percentage

—	no watermarks

—	[no] description

 

 

 

Port Policy Commands

config

—	port-policy policy-name [create]

—	no port-policy policy-name

—	description description-string

—	no description

—	egress-scheduler-policy port-sched-plcy

—	no egress-scheduler-policy

 

WIFI Aggregation and Offload – Migrant User Support Commands

configure

—	subscriber-mgmt

—	http-redirect-policy policy-name [create]

—	no http-redirect-policy policy-name

—	description description-string

—	no description

—	dst-port tcp-port

—	no dst-port

—	forward-entries

—	dst-ip ip-address protocol ip-protocol dst-port port-number

—	dst-ip ip-address protocol ip-protocol dst-port port-number prefix-length prefix-length

—	no dst-ip ip-address protocol ip-protocol dst-port port-number

—	portal-hold-time seconds

—	no portal-hold-time

—	url rdr-url-string

—

no url

 

 

Distributed Subscriber Management Commands

config

—

router

—	subscriber-management

—

wlan-gw

—	dsm-ip-filter name [create]

—	no dsm-ip-filter name

—	default-action {drop|forward}

—	no default-action

—	description description-string

—	no description

—	entry entry-id [create]

—	no entry entry-id

—	action {drop|forward|none}

—

no action

—	description description-string

—	no description

—	match protocol {any|icmp|tcp|udp|gre}

—

no match

—	dst-ip ip-prefix/length

—

no dst-ip

—	dst-port operator port-number

—	no dst-port

—

ipv6

—	default-action {drop|forward}

—	no default-action

—	entry entry-id [create]

—	no entry entry-id

—	action {drop|forward|none}

—

no action

—	description description-string

—	no description

—	match protocol {any|icmp|tcp|udp|gre}

—

no match

—	dst-ip ipv6-address/prefix-length

—

no dst-ip

—	dst-port operator port-number

—	no dst-port

—	dsm-policer policer-name [type policer-type] [create]

—	no dsm-policer policer-name

—	action {permit-deny|priority-mark}

—

no action

—	adaptation-rule pir adaptation-rule [cir {adaptation-rule}]

—	no adaptation-rule

—	cbs burst-size

—

no cbs

—	description description-string

—	no description

—	mbs burst-size

—

no mbs

—	rate rate [cir rate]

—

no rate

 

config

—

service

—	vprn service-id/ies service-id

—	subscriber-inteface

—	group-interface ip-int-name [create]

—	group-interface ip-int-name [create] lns

—	group-interface ip-int-name [create] wlangw

—	no group-interface ip-int-name

—

wlan-gw

—	vlan-tag-ranges

—	range start [0..4096] end [0..4096]

—	range default

—	no range start [0..4096] end [0..4096]

—	distributed-sub-mgmt

—	accounting-policy policy-name

—	no accounting-policy

—	accounting-update-interval

—	accounting-update-interval [5..259200]

—	no accounting-update-interval

—	def-app-profile

—	def-app-profile profile-name

—	no def-app-profile

—	dsm-ip-filter

—	dsm-ip-filter dsm-ip-filter-name

—	no dsm-ip-filter

—	egress-policer

—	egress-policer [256 chars max]

—	no egress-policer

—	ingress-policer

—	ingress-policer policer-name

—	no ingress-policer

—	one-time-redirect

—	one-time-redirect url rdr-url-string port port-num

—	no one-time-redirect

—	[no] shutdown

 

 

 

Show Commands

show

—

router

—	radius-proxy-server server-name

—	radius-proxy-server server-name cache

—	radius-proxy-server server-name cache hex-key hex-string

—	radius-proxy-server server-name cache string-key string

—	radius-proxy-server server-name cache summary

—	radius-proxy-server server-name statistics

—	radius-proxy-server

—

wlan-gw

—	isa-subnets [detail]

—	isa-subnets [detail] interface interface-name

—	isa-subnets prefix ipv6-address/prefix-length

—	mgw-address-cache [arec] [snaptr] [srv]

—	mgw-address-cache apn apn-domain-string

—

mgw-map

—	mobile-gateway [mgw-profile profile-name] [local-address ip-address] [control protocol] [interface-type interface-type]

—	mobile-gateway remote-address ip-address [udp-port port]

—	mobile-gateway remote-address ip-address [udp-port port] statistics

—	soft-gre-tunnel-qos [detail]

—	soft-gre-tunnel-qos remote-ip ip-address [local-ip ip-address] [detail]

—	soft-gre-tunnels local-ip ip-address remote-ip ip-address ue

—	soft-gre-tunnels [local-ip ip-address] [remote-ip ip-address] [isa-group wlan-gw-group-id] [member [1..255]] [summary] [detail]

—	soft-gre-tunnels local-ip ip-address remote-ip ip-address ue

—	tunnels [local-ipip-address] [remote-ip ip-address] [isa-group wlan-gw-group-id] [member [1..255]] [summary] [detail]

—	tunnels local-ip ip-address remote-ip ip-address ue

 

show

—

aaa

—	acct-on-off-group group-name

—	radius-server-policy policy-name [acct-on-off]

—	radius-server-policy policy-name associations

—	radius-server-policy policy-name msg-buffer-stats

—	radius-server-policy policy-name statistics

—	radius-server-policy [acct-on-off]

 

show

—

isa

—	wlan-gw-group wlan-gw-group-id

—	wlan-gw-group wlan-gw-group-id associations

—	wlan-gw-group wlan-gw-group-id member [1..255] [statistics]

—	wlan-gw-group

 

 

show

—	subscriber-mgmt

—

wlan-gw

—	gtp-session imsi imsi apn apn-string

—	gtp-session [mgw-address ip-address] [mgw-router router-instance] [remote-control-teid teid] [local-control-teid teid] [detail]

—	gtp-session imsi imsi

—	gtp-statistics

—	mgw-profile profile-name

—	mgw-profile profile-name associations

—	mgw-profile

—

ssid

—	statistics

—	ue [vlan qtag] [mpls-label label] [retail-svc-id service-id] [ssid service-set-id] [previous-access-point ip-address]

—	ue mac ieee-address

 

Tools Commands

tools

—

perfrom

—

aaa

—	acct-on [radius-server-policy policy-name] [force]

—	acct-off acct-off [radius-server-policy policy-name] [force] [acct-terminate-cause number]

—

dump

—

aaa

—	radius-server-policy policy-name msg-buffer [session-id acct-session-id]]

—

wlan-gw

—

ue

 

Clear Commands

clear

—

aaa

—	radius-server-policy policy-name msg-buffer [acct-session-id acct-session-id]

—	radius-server-policy policy-name statistics [msg-buffer-only]

—	radius-server-policy policy-name server server-index statistics

 

clear

—

router

—

wlan-gw

—	isa-subnets all

—	isa-subnets interface intfip-int-name

—	isa-subnets prefix ipv6-address/prefix-length