H3C WX Series Access Controllers. WLAN Command Reference. Hangzhou H3C Technologies Co., Ltd. Document Version: 6W

H3C WX Series Access Controllers WLAN Command Reference Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Document Version: 6W105-20101124

Copyright 2008-2010, Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. Trademarks H3C,, Aolynk,, H 3 Care,, TOP G,, IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V 2 G, V n G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners. Notice The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface The H3C WX series documentation set describes the commands and command syntax options available for the H3C WX Series Access Controllers. The WLAN Command Reference describes WLAN interface, WLAN service, WLAN security, WLAN roaming, WLAN RRM, WLAN IDS, WLAN QoS, and WLAN mesh link configuration commands. This preface includes: Audience Conventions About the H3C WX Series Documentation Set Obtaining Documentation Technical Support Documentation Feedback Audience This documentation is intended for: Network planners Field technical support and servicing engineers Network administrators working with the WX series Conventions This section describes the conventions used in this documentation set. Command conventions Convention Boldface italic [ ] { x y... } [ x y... ] { x y... } * [ x y... ] * &<1-n> Bold text represents commands and keywords that you enter literally as shown. Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none. Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one. Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you may select multiple choices or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times.

Convention # A line that starts with a pound (#) sign is comments. GUI conventions Boldface > Convention Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK. Multi-level menus are separated by angle brackets. For example, File > Create > Folder. Symbols Convention Means reader be extremely careful. Improper operation may cause bodily injury. Means reader be careful. Improper operation may cause data loss or damage to equipment. Means an action or information that needs special attention to ensure successful configuration or good performance. Means a complementary description. Means techniques helpful for you to make configuration with ease. Network topology icons Convention Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, an access controller module, or a switching engine on a unified switch. Represents an access point. Represents a mesh access point. Represents omnidirectional signals. Represents directional signals.

About the H3C WX Series Documentation Set The H3C WX series documentation set includes: Category Documents Purposes Product description and specifications Hardware specifications and installation Software configuration Operations and maintenance WX3000 Series Unified Wired and Wireless Switches Brochure WX5000 Series Access Controllers Brochure WX6000 Series Access Controllers Brochure LSWM1WCM10 Access Controller Module Card Manual LSWM1WCM20 Access Controller Module Card Manual LSRM1WCM2A1 Access Controller Module Card Manual LSQM1WCMB0 Access Controller Module Installation Manual LSBM1WCM2A0 Access Controller Module Installation Manual WX Series Access Controllers Getting Started Guides WX Series Access Controllers Configuration Guides WX Series Access Controllers Command References WX Series Access Controllers Web-based Configuration Guides WX3000 Series Unified Switches Release Notes WX5002 Series Access Controllers Release Notes WX5004 Series Access Controllers Release Notes WX6103 Series Access Controllers Release Notes Describe product specifications and benefits. Provide the hardware specifications of the cards, and describe how to install and remove the cards. Guide you through hardware specifications and installation methods to help you install your AC. Guide you through the main functions of your AC, and describes how to install and log in to your AC, perform basic configurations, maintain software, and troubleshoot your AC. Describe software features and configuration procedures. Provide a quick reference to all available commands. Describes configuration procedures through the web interface. Provide information about the product release, including the version history, hardware and software compatibility matrix, version upgrade information, technical support information, and software upgrading. Obtaining Documentation You can access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com. Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support & Documents > Technical Documents] Provides hardware installation, software upgrading, getting started, and software feature configuration and maintenance documentation.

[Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version. Technical Support customer_service@h3c.com http://www.h3c.com Documentation Feedback You can e-mail your comments about product documentation to info@h3c.com. We appreciate your comments.

Read Compatibility Matrixes before using an H3C WX series access controller. Support of the H3C WX series access controllers for features and commands may vary by AC model. For more information, see Feature Matrixes and Command Matrixes in Compatibility Matrixes. The term AC in this document refers to H3C access controllers, access controller modules, and H3C WX series unified switches' access controller engines. The interface types and the number of interfaces vary by AC model. This document uses GE interfaces to show how to configure Ethernet interfaces. The models listed in this manual are not applicable to all regions. Please consult your local sales office for the models applicable to your region.

Table of Contents 1 Applicable Models and Software Versions 1-1 2 Typical Network Scenarios 2-1 AC Networking 2-1 Access Controller Module Networking 2-1 Unified Switch Networking 2-2 3 Feature Matrixes 3-1 Feature Matrix for the WX5000 Series 3-1 Feature Matrix for the WX6000 Series 3-6 Feature Matrix for the WX3000 Series 3-11 4 Command Matrixes 4-1 Command Matrix for the WX5000 Series 4-1 Command Matrix for the WX6000 Series 4-14 Command Matrix for the WX3000 Series 4-24 5 WLAN Interface Configuration Commands 5-1 description 5-1 display interface wlan-dbss 5-2 display interface wlan-ess 5-2 display interface wlan-mesh 5-3 interface wlan-ess 5-4 interface wlan-mesh 5-5 6 WLAN Configuration Commands 6-1 WLAN Global Service Control Commands 6-1 wlan enable 6-1 802.11 MAC Configuration Commands 6-1 a-mpdu enable 6-1 a-msdu enable 6-2 ani enable 6-3 beacon ssid-hide 6-3 beacon-interval 6-4 bind wlan-ess 6-5 broadcast-probe reply 6-5 channel 6-6 channel band-width 6-7 channel lock 6-7 client dot11n-only 6-8 client idle-timeout 6-9 client forwarding-mode local 6-9 client max-count (service template view) 6-10 client max-count (radio policy view) 6-11 i

client keep-alive 6-11 display wlan client 6-12 display wlan radio-policy 6-15 display wlan service-template 6-18 display wlan statistics 6-20 dtim 6-24 fragment-threshold 6-24 long-retry threshold 6-25 max-power 6-26 max-rx-duration 6-26 power lock 6-27 preamble 6-27 radio 6-28 radio-policy 6-29 radio type 6-29 reset wlan statistics 6-30 reset wlan client 6-30 rts-threshold 6-31 service-template (Radio view) 6-32 service-template (service template view) 6-32 short-gi enable 6-33 short-retry threshold 6-33 ssid 6-34 wlan country-code 6-35 wlan radio 6-37 wlan radio-policy 6-38 wlan service-template 6-39 CAPWAP Configuration Commands 6-40 ap-name 6-40 backup-ac 6-40 cir 6-41 cpu-usage threshold 6-41 description 6-42 display wlan ap 6-42 display wlan ap reboot-log 6-47 display wlan ap-model 6-48 echo-interval 6-49 jumboframe enable 6-50 map-configuration 6-50 memory-usage threshold 6-51 priority level 6-51 reset wlan ap 6-52 reset wlan ap reboot-log 6-52 serial-id 6-53 wlan ap 6-53 ii

wlan ap-execute 6-54 wlan apdb 6-55 wlan auto-ap enable 6-55 wlan auto-ap persistent 6-56 wlan backup-ac 6-57 wlan lwapp discovery-policy 6-57 AP Group Configuration Commands 6-58 ap 6-58 description 6-58 display wlan ap-group 6-59 wlan ap-group 6-60 wlan permit-ap-group 6-60 SSID-Based Access Control Configuration Commands 6-61 wlan permit-ssid 6-61 Uplink Detection Commands 6-61 wlan uplink track 6-61 AC Hot Backup Configuration Commands 6-62 display hot-backup state 6-62 hot-backup enable 6-63 hot-backup hellointerval 6-64 hot-backup vlan 6-64 User Isolation Configuration Commands 6-65 display user-isolation statistics 6-65 reset user-isolation statistics 6-65 user-isolation 6-66 user-isolation vlan enable 6-66 user-isolation vlan permit-mac 6-67 7 WLAN Security Configuration Commands 7-1 authentication-method 7-1 cipher-suite 7-1 gtk-rekey client-offline enable 7-2 gtk-rekey enable 7-3 gtk-rekey method 7-3 ptk-lifetime 7-4 security-ie 7-5 tkip-cm-time 7-5 wep default-key 7-6 wep key-id 7-7 wep mode 7-8 8 WLAN Roaming Configuration Commands 8-1 WLAN Roaming Configuration Commands 8-1 display wlan client 8-1 display wlan client roam-track 8-3 IACTP Configuration Commands 8-4 iii

authentication mode 8-4 display wlan mobility-group 8-5 member 8-6 mobility-group enable 8-7 mobility-tunnel 8-7 source 8-8 wlan mobility-group 8-9 9 WLAN RRM Configuration Commands 9-1 WLAN RRM Configuration Commands 9-1 ap radio 9-1 autochannel-set avoid-dot11h 9-2 channel holddown-time 9-2 description 9-3 display wlan ap rrm-history 9-3 display wlan ap rrm-status 9-5 display wlan rrm 9-7 display wlan rrm-calibration-group 9-9 dot11a 9-10 dot11a adjacency-factor 9-11 dot11a calibrate-channel 9-11 dot11a calibrate-channel pronto 9-12 dot11a calibrate-channel self-decisive 9-12 dot11a calibrate-power 9-13 dot11a calibrate-power pronto 9-13 dot11a calibrate-power self-decisive 9-14 dot11a calibration-interval 9-14 dot11a crc-error-threshold 9-15 dot11a interference-threshold 9-16 dot11a tolerance-level 9-16 dot11b 9-17 dot11bg adjacency-factor 9-18 dot11bg calibrate-channel 9-18 dot11bg calibrate-channel pronto 9-19 dot11bg calibrate-channel self-decisive 9-19 dot11bg calibrate-power 9-20 dot11bg calibrate-power pronto 9-20 dot11bg calibrate-power self-decisive 9-21 dot11bg calibration-interval 9-22 dot11bg crc-error-threshold 9-22 dot11bg interference-threshold 9-23 dot11bg tolerance-level 9-23 dot11g 9-24 dot11g protection enable 9-25 dot11n mandatory maximum-mcs 9-25 iv

dot11n support maximum-mcs 9-26 power holddown-time 9-27 power-constraint 9-27 scan channel 9-28 scan report-interval 9-28 scan type 9-29 spectrum-management enable 9-30 wlan rrm 9-30 wlan rrm-calibration-group 9-31 WLAN Load Balancing Configuration Commands 9-31 ap radio 9-31 description 9-32 display wlan load-balance-group 9-33 load-balance session 9-33 load-balance traffic 9-34 wlan load-balance-group 9-35 10 WLAN IDS Configuration Commands 10-1 WLAN IDS Rogue Detection Configuration Commands 10-1 countermeasures enable 10-1 countermeasures mode 10-1 device aging-duration 10-2 device attack mac-address 10-3 device permit 10-3 device-detection enable 10-4 display wlan ids attack-list 10-5 display wlan ids detected 10-6 display wlan ids permitted 10-10 display wlan ids rogue-history 10-12 wlan ids 10-13 work-mode monitor 10-13 reset wlan ids detected 10-14 reset wlan ids rogue-history 10-14 WLAN IDS Attack Detection Configuration Commands 10-15 attack-detection enable 10-15 display wlan ids history 10-16 display wlan ids statistics 10-17 reset wlan ids history 10-18 reset wlan ids statistics 10-19 11 WLAN Frame Filtering Configuration Commands 11-1 WLAN Frame Filtering Configuration Commands 11-1 display wlan blacklist 11-1 display wlan whitelist 11-2 dynamic-blacklist enable 11-3 dynamic-blacklist lifetime 11-3 v

reset wlan dynamic-blacklist 11-4 static-blacklist mac-address 11-4 whitelist mac-address 11-5 12 WLAN QoS Configuration Commands 12-1 display wlan wmm 12-1 reset wlan wmm 12-4 wmm cac policy 12-5 wmm edca radio 12-6 wmm edca client (ac-vo and ac-vi) 12-7 wmm edca client (ac-be and ac-bk) 12-8 wmm enable 12-9 wmm svp map-ac 12-10 13 WLAN Mesh Link Configuration Commands 13-1 bind wlan-mesh 13-1 display wlan mesh-profile 13-1 display wlan mp-policy 13-2 link-backhaul-rate 13-4 link-initiation enable 13-4 link-keep-alive 13-5 link-hold-rssi 13-5 link-hold-time 13-6 link-saturation-rssi 13-6 link-switch-margin 13-7 link-maximum-number 13-8 link rate-mode 13-8 mesh-id 13-9 mesh-profile 13-9 mesh-profile enable 13-10 mesh peer-mac-address 13-10 mkd-service enable 13-11 mlsp enable 13-12 mlsp-proxy 13-12 mp-policy 13-13 portal-service enable 13-13 probe-request-interval 13-14 role-authenticator enable 13-14 wlan mesh-profile 13-15 wlan mkd-id 13-16 wlan mp-policy 13-16 14 Command Index 14-1 vi

1 Applicable Models and Software Versions H3C WX series access controllers include the WX3000 series unified switches, and WX5000 and WX6000 series access controllers. Table 1-1 shows the applicable models and software versions. Table 1-1 Applicable models and software versions Model Software version WX3024 unified switches WX3010 unified switches WX3008 unified switches WX3000-CMW520-R3111P03 LSWM1WCM20 access controller module WX5002 access controller LS8M1WCMA0 access controller module WX5002-CMW520-R1112 WX5002V2 access controller WX5004 access controller WX5004-CMW520-R2107P04 LSWM1WCM10 access controller module WX6103 access controller LSQM1WCMB0 access controller module LSBM1WCM2A0 access controller module WX6103-CMW520-R2115P08 LSRM1WCM2A1 access controller module 1-1

2 Typical Network Scenarios AC Networking As shown in the following figure, the AC is connected to Switch (Layer 2 or Layer 3) through GE1/0/1, which can be connected to APs directly or connected to APs over an IP network. Clients can be connected to the network through the APs to implement WLAN user access. Figure 2-1 AC networking Scheme 1 AC GE 1/0/1 Server IP network AP 1 AP 2 Client A Client B Access Controller Module Networking As shown in the following figure, installed with an access controller module, Switch (Layer 2 or Layer 3) can be connected to APs directly or connected to APs over an IP network. Clients can be connected to the network through the APs to implement WLAN user access. 2-1

Figure 2-2 Access controller module networking Unified Switch Networking As shown in Figure 2-3, Unified switch (functions as both an AC and a Layer 2 switch) can be connected to APs directly or connected to APs over an IP network. Clients can be connected to the network through the APs to implement WLAN user access. Figure 2-3 Unified switch networking diagram 2-2

3 Feature Matrixes In this document, Yes means a feature or command is, and No means not. Feature Matrix for the WX5000 Series The LS8M1WCMA0, LSWM1WCM10, and LSWM1WCM20 on the WX5000 series adopt the OAP architecture. Installed on the expansion slots of switches, they work as OAP cards to exchange data and status and control information with the switches through their internal service interfaces. Do not configure services such as QoS rate limiting and 802.1X authentication on GE interfaces on the LS8M1WCMA0, XGE 1/0/1 on the LSWM1WCM10, and the logical interface BAGG1 aggregated by GE 1/0/1 and GE 1/0/2 on the LSWM1WCM20. Table 3-1 Feature matrix for the WX5000 series Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 Fundamentals Configuration Guide Login configuration AUX user interface Yes No Yes No Yes Yes Console user interface No Yes No Yes No No Telnet Yes Yes Yes Yes Yes Yes User interface configuration User interface type Console user interface not AUX user interface not Yes AUX user interface not Console user interface not Console user interface not 3-1

Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 File system management configuration Configuration file encryption Storage media No No No No No Yes Flash CF Flash CF CF Flash Device management configuration License Supports 32 concurrent APs by default, and can be extended to support 64. No on the WX5002-12 8 Supports 32 concurrent APs by default, and can be extended to support 64. No Supports 64 concurrent APs by default, and can be extended to support 256. Supports 64 concurrent APs by default, and can be extended to support 256. Supports 32 concurrent APs by default, and can be extended to support 128. WLAN Configuration Guide WLAN services configuration Hot AC backup No Yes No Yes Yes No Maximum number of SSIDs 128 256 128 256 256 128 Layer 2 LAN Switching Configuration Guide Ethernet interface configuration Combo port configuration Shutting down an Ethernet interface Yes Yes No Yes No No Yes Yes Yes Yes Yes. Do not use the shutdown command on internal interfaces; otherwise, the normal operation of the device will be affected. Yes. Do not use the shutdown command on internal interfaces; otherwise, the normal operation of the device will be affected. Configuring flow control on an Ethernet interface Yes Yes Yes Yes No No 3-2

Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 Configuring loopback detection on an Ethernet interface Yes on GE interfaces only Yes on GE interfaces only Internal loopback testing on GE interfaces only Yes on GE interfaces only Internal loopback testing on XGE interfaces only Internal loopback testing on GE interfaces only Link aggregation configuration Link aggregation Yes Yes No Yes No Yes MSTP Configuration STP No Yes No Yes No No Layer 2 forwarding configuration Layer 2 forwarding Yes No Yes No No No Port mirroring configuration Port mirroring Remote port mirroring and cross-board mirroring not Remote port mirroring and cross-board mirroring not No Remote port mirroring and cross-boar d mirroring not No No DNS configuration IPv6 DNS configuration Yes Yes Yes Yes Yes Yes Layer 3 IP Services Configuration Guide IP performance optimization configuration Adjacency table configuration Configuring ICMP to send error packets Displaying and maintaining adjacency table Yes No No No No No No Yes No Yes Yes Yes IPv6 basics configuration IPv6 basics configuration Yes Yes Yes Yes Yes Yes IPv6 application configuration IPv6 application configuration Yes Yes Yes Yes Yes Yes Layer 3 IP Routing Configuration Guide IP routing basics configuration IPv6 static routing configuration IPv6 features Yes Yes Yes Yes Yes Yes IPv6 static routing configuration Yes Yes Yes Yes Yes Yes 3-3

Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 IP Multicast Configuration Guide MLD snooping configuration IPv6 multicast VLAN configuration MLD snooping Yes Yes Yes Yes Yes Yes IPv6 multicast VLAN Yes Yes Yes Yes Yes Yes ACL configuration IPv6 ACL Yes Yes Yes Yes Yes Yes ACL and QoS Configuration Configuring line rate Yes Yes Yes Yes Yes Yes Guide QoS Configuring CAR applicable to all traffic of online users No Yes No Yes Yes Yes Security Configuration Guide AAA Specifying the device ID to be used in stateful failover mode No Yes No Yes Yes No Configuring Layer 3 portal authentication No Yes No Yes Yes Yes Specifying the portal group to which the portal service backup interface belongs No Yes No Yes Yes No Portal configuration Specifying the device ID to be used in stateful failover mode No Yes No Yes Yes No Specifying the backup source IP address for RADIUS packets to be sent No Yes No Yes Yes No SSH2.0 configuration Specifying a source IPv6 address or interface for an SSH client Yes Yes Yes Yes Yes Yes Establishing a connection between an SSH client and an IPv6 SSH server Yes Yes Yes Yes Yes Yes 3-4

Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 Specifying a source IPv6 address or interface for an SFTP client Establishing a connection between an SFTP client and an IPv6 SFTP server Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IPv6 SFTP client Yes Yes Yes Yes Yes Yes Management protocol packets Telnet, SNMP, and web managemen t packets whose destination IP address is the local host ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host Telnet, SNMP, and web management packets whose destination IP address is the local host ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host Security protection configuration Other protocol packets 11MAC/802. 1X/ARP/DH CP/HWTAC AS/ICMP/IG MP/MLD/LW APP/ND/NT P/PIM/RADI US Data packets: all packets except the above packets. UDP/TCP/8 02.1X/DHCP /IGMP/NTP/ ARP/LWAP P/LooPback/ PPPoE/IAC TP/ACSEI/ STP/LWAPP _DATA/Defa ult 11MAC/802.1X/ ARP/DHCP/HW TACAS/ICMP/IG MP/MLD/LWAP P/ND/NTP/PIM /RADIUS Data packets: all packets except the above packets. UDP/TCP/ 802.1X/DH CP/IGMP/ NTP/ARP/ LWAPP/Lo opback/pp PoE/IACT P/ACSEI/ STP/LWA PP_DATA/ Default UDP/TCP/802.1 X/DHCP/IGMP/ NTP/ARP/LWA PP/LooPback/P PPoE/IACTP/A CSEI/ STP/LWAPP_D ATA/Default UDP/TCP/802.1 X/DHCP/IGMP/ NTP/ARP/LWA PP/LooPback/P PPoE/IACTP/A CSEI/ STP/LWAPP_D ATA/Default Enabling attack prevention for protocols Configuring rate limits for a protocol No Yes No Yes Yes Yes No Yes No Yes Yes Yes 3-5

Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 Network Management and Monitoring Configuration Guide Information center configuration Logfile No Yes No Yes Yes No OAA Configuration Guide OAA configuration OAP module configuration ACSEI server configuration ACSEI client configuration No Yes No Yes No No No Yes No Yes No No No Yes Yes Yes Yes Yes Access Controller Module Basic Configuration Guide Access Controller Module Basic Configuration Access Controller Module Basic Configuration No No Yes No Yes Yes Feature Matrix for the WX6000 Series The switch interface module on the WX6103, and the LSQM1WCMB0, LSBM1WCM2A0, and LSRM1WCM2A1 access controller modules on the WX6000 series adopt the OAP architecture. Installed on the expansion slots of switches, they work as OAP cards to exchange data and status and control information with the switches through their internal service interfaces. The XGE interfaces on the switch interface module on the WX6103, and the LSQM1WCMB0, LSBM1WCM2A0, and LSWM1WCM10 access controller modules are internal interfaces. Do not configure services such as QoS rate limiting and 802.1X authentication on them. 3-6

Table 3-2 Feature matrix for the WX6000 series Volume Module Feature WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 AUX user interface No No No Yes Login configuration Console user interface Yes Yes Yes Yes Telnet Yes Yes Yes (IPv6 telnet not ) Yes Fundamentals Configuration Guide User interface configuration File management configuration User interface type Configuration file encryption AUX user interface not AUX user interface not AUX user interface not No No No No AUX user interface not Storage media CF and USB CF and USB CF and USB CF and USB Device management configuration License 128 APs at most by default, and can be extended to 640 APs. 128 APs at most by default, and can be extended to 640 APs. 128 APs at most by default, and can be extended to 640 APs. 128 APs at most by default, and can be extended to 640 APs. WLAN Configuration Guide WLAN services configuration Hot AC backup Yes Yes Yes Yes Maximum number of SSIDs 512 512 512 512 Layer 2 LAN Switching Configuration Guide Combo port configuration The MPU does not support the Combo port. No No No Ethernet interface configuration Shutting down an Ethernet interface Configuring flow control on an Ethernet interface Loopback detection on an Ethernet interface Yes Yes Yes Yes Internal loopback testing on XGE interfaces only Internal loopback testing on XGE interfaces only Internal loopback testing on XGE interfaces only No No No No Internal loopback testing on XGE interfaces only Link aggregation configuration Link aggregation No No No No 3-7

Volume Module Feature WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 MSTP Configuration STP No No No No Layer 2 forwarding configuration Port mirroring configuration Layer 2 forwarding No No No No Port mirroring No No No No DNS configuration IPv6 DNS configuration Yes Yes No Yes IP performance optimization configuration Configuring ICMP to send error packets No No No No Layer 3 IP Services Configuration Guide Adjacency table configuration Displaying and maintaining adjacency table Yes Yes Yes Yes IPv6 basics configuration IPv6 basics configuration Yes Yes No Yes IPv6 application configuration IPv6 application configuration Yes Yes No Yes Layer 3 IP Routing Configuration Guide IP routing basics configuration IPv6 static routing configuration IPv6-related displaying and maintaining commands IPv6 static routing configuration Yes Yes No Yes Yes Yes No Yes IP Multicast Configuration Guide MLD snooping configuration IPv6 multicast VLAN configuration MLD snooping Yes Yes No No IPv6 multicast VLAN Yes Yes No No ACL configuration IPv6 ACL Yes Yes No Yes ACL and QoS Configuration Guide QoS Configuring line rate No No No No Configuring CAR applicable to all traffic of online users Yes Yes Yes Yes 3-8

Volume Module Feature WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 Security Configuration Guide AAA configuration Specifying the device ID to be used in stateful failover mode Yes Yes Yes Yes Configuring Layer 3 portal authentication Yes Yes Yes Yes Specifying the portal group to which the portal service backup interface belongs Yes Yes Yes Yes Portal configuration Specifying the device ID to be used in stateful failover mode Yes Yes Yes Yes Specifying the backup source IP address for RADIUS packets to be sent Yes Yes Yes Yes Specifying a source IPv6 address or interface for an SSH client Yes Yes No Yes Establishing a connection between an SSH client and an IPv6 SSH server Yes Yes No Yes SSH2.0 configuration Specifying a source IPv6 address or interface for an SFTP client Yes Yes No Yes Establishing a connection between an SFTP client and an IPv6 SFTP server Yes Yes No Yes IPv6 SFTP client Yes Yes No Yes 3-9

Volume Module Feature WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 Management protocol packets ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host Security protection configuration Other protocol packets UDP/TCP/802.1X/ DHCP/IGMP/NTP/ ARP/LWAPP/LooP back/pppoe/iact P/ACSEI/ STP/LWAPP_DAT A/Default UDP/TCP/802.1X/ DHCP/IGMP/NTP/ ARP/LWAPP/LooP back/pppoe/iact P/ACSEI/ STP/LWAPP_DAT A/Default UDP/TCP/802.1X/ DHCP/IGMP/NTP/ ARP/LWAPP/LooP back/pppoe/iact P/ACSEI/ STP/LWAPP_DAT A/Default UDP/TCP/802.1X/ DHCP/IGMP/NTP/ ARP/LWAPP/LooP back/pppoe/iact P/ACSEI/ STP/LWAPP_DAT A/Default Enabling attack prevention for protocols Configuring rate limits for a protocol Yes Yes Yes Yes Yes Yes Yes Yes Network Management and Monitoring Configuration Guide Information center configuration Logfile Yes No No No OAP module configuration Yes No No No OAA Configuration Guide OAA configuration ACSEI server configuration Yes No No No ACSEI client configuration Yes Yes Yes Yes Access Controller Module Basic Configuration Guide Access Controller Module Basic Configuration Access Controller Module Basic Configuration No Yes Yes Yes 3-10

Feature Matrix for the WX3000 Series The access controller engine and switching engine on the WX3000 series adopt the OAP architecture. The switching engine is integrated on the access controller engine as an OAP card. You actually log in to the access controller engine when you log in to the device by default. GE 1/0/1 interfaces on the WX3024, WX3010 and WX3008 are used to exchange data, status and control information with GE1/0/29 (WX3024), GE1/0/11 (WX3010) or GE1/0/9 (WX3008) on the switching engine. Do not configure services such as QoS rate limiting and 802.1X authentication on these interfaces. Table 3-3 Feature matrix for the WX3000 series Volume Module Feature WX3024 WX3010 WX3008 AUX user interface Yes Yes Yes Fundamentals Configuration Guide WLAN Configuration Guide Login configuration User interface configuration File management configuration Device management configuration WLAN services configuration Console user interface No No No Telnet User interface type Yes (IPv6 telnet not ) Console user interface not Yes (IPv6 telnet not ) Console user interface not Configuration file encryption Yes Yes Yes Storage media Flash Flash Flash License 24 APs at most by default, and can be extended to 48 APs. 12 APs at most by default, and can be extended to 24 APs. Hot AC backup No No No Maximum number of SSIDs 64 64 64 Yes (IPv6 telnet not ) Console user interface not No 3-11

Volume Module Feature WX3024 WX3010 WX3008 Combo port configuration No No No Ethernet interface configuration Shutting down an Ethernet interface Configuring flow control on an Ethernet interface No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine No No No No on GE1/0/1 of the access controller engine and GE1/0/29 on the switching engine Layer 2 LAN Switching Configuration Guide Loopback detection on an Ethernet interface Internal loopback testing on GE interfaces only Internal loopback testing on GE interfaces only Internal loopback testing on GE interfaces only Link aggregation configuration Link aggregation configuration No No No MSTP Configuration STP No No No Layer 2 forwarding configuration Layer 2 forwarding No No No Port mirroring configuration Port mirroring configuration No No No DNS configuration IPv6 DNS configuration No No No IP performance optimization configuration Configuring ICMP to send error packets No No No Layer 3 IP Services Configuration Guide Adjacency table configuration Displaying and maintaining an adjacency table Yes Yes Yes IPv6 basics configuration IPv6 basics configuration No No No IPv6 application configuration IPv6 application configuration No No No Layer 3 IP Routing Configuration Guide IP routing basics configuration IPv6 static routing configuration IPv6-related displaying and maintaining commands IPv6 static routing configuration No No No No No No 3-12

Volume Module Feature WX3024 WX3010 WX3008 IP Multicast Configuration Guide MLD snooping configuration MLS snooping No No No IPv6 multicast VLAN configuration IPv6 multicast VLAN No No No ACL configuration IPv6 ACL No No No ACL and QoS Configuration Guide QoS Configuring line rate No No No Configuring CAR applicable to all traffic of online users Yes Yes Yes Security Configuration Guide AAA configuration Specifying the device ID to be used in stateful failover mode No No No Configuring Layer 3 portal authentication Yes Yes Yes Portal configuration Specifying the portal group to which the portal service backup interface belongs Specifying the device ID to be used in stateful failover mode No No No No No No Specifying the backup source IP address for RADIUS packets to be sent No No No SSH2.0 configuration Specifying a source IPv6 address or interface for an SSH client No No No Establishing a connection between an SSH client and an IPv6 SSH server No No No Specifying a source IPv6 address or interface for an SFTP client No No No Establishing a connection between an SFTP client and an IPv6 SFTP server No No No 3-13

Volume Module Feature WX3024 WX3010 WX3008 IPv6 SFTP client No No No Management protocol packets ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host ICMP, IEC, Telnet, and SNMP packets whose destination IP address is the local host Security protection configuration Other protocol packets UDP/TCP/802.1X/DHC P/IGMP/NTP/ARP/LWA PP/LooPback/PPPoE/I ACTP/ACSEI/ STP/LWAPP_DATA/De fault UDP/TCP/802.1X/DHC P/IGMP/NTP/ARP/LWA PP/LooPback/PPPoE/I ACTP/ACSEI /STP/LWAPP_DATA/De fault UDP/TCP/802.1X/DHC P/IGMP/NTP/ARP/LWA PP/LooPback/PPPoE/I ACTP/ACSEI /STP/LWAPP_DATA/De fault Enabling attack prevention for protocols Configuring rate limits for a protocol Yes Yes Yes Yes Yes Yes Network Management and Monitoring Configuration Guide OAA Configuration Guide Information center configuration OAA configuration Logfile No No No OAP module configuration Yes Yes Yes ACSEI server configuration No No No ACSEI client configuration No No No Access Controller Module Basic Configuration Guide Access Controller Module Basic Configuration Access Controller Module Basic Configuration No No No 3-14

4 Command Matrixes In this document, Yes means a feature or command is, and No means not. Command Matrix for the WX5000 Series Table 4-1 Command matrix for the WX5000 series Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 Fundamentals Command Reference Login commands telnet ipv6 Yes Yes Yes Yes Yes Yes User Interface Commands display user-interface AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 5. Console and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 5. Console and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. 4-1

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 free user-interface AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 5. Console and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 5. Console and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. send AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 5. Console and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 5. Console and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. user-interface AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 5. Console and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 5. Console and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. AUX and VTY user interfaces are. When number is an absolute index, the value ranges from 0 to 6. 4-2

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 configuration encrypt No No No No No Yes ftp ipv6 Yes Yes Yes Yes Yes Yes File management commands mount No No No Yes No No open ipv6 No No No Yes No No tftp ipv6 Yes Yes Yes Yes Yes Yes umount No No No Yes No No display device cf-card, usb, subslot subslot-number not usb not cf-card, usb, subslot subslot-number not usb not usb and subslot subslot-number not cf-card, usb, subslot subslot-number not display fan fan-id takes the value of 1 or 2. fan-id ranges from 1 to 5. fan-id takes the value of 1 or 2. fan-id ranges from 1 to 5. No No Device management commands display power power-id takes the value of 1 or 2. power-id takes the value of 1 or 2. power-id takes the value of 1 or 2. power-id takes the value of 1 or 2. display rps No No No No No No No No license append No on the WX5002-128 Yes Yes Yes Yes Yes temperature-limit By default, lower-value is 5, and upper-value is 60 By default, lower-value is 0, and upper-value is 90 By default, lower-value is 5, and upper-value is 60 By default, lower-value is 0, and upper-value is 90 No By default, lower-value is 0, and upper-value is 60 Basic system configuration commands configure-user count number ranges from 1 to 6. number ranges from 1 to 7. number ranges from 1 to 6. number ranges from 1 to 7. number ranges from 1 to 7. number ranges from 1 to 7. 4-3

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 WLAN Command Reference WLAN interface commands display interface wlan-ess interface wlan-ess interface-numbe r ranges from 0 to 127. interface-numbe r ranges from 0 to 127. interface-numb er ranges from 0 to 1023. interface-numb er ranges from 0 to 1023. interface-numbe r ranges from 0 to 127. interface-numbe r ranges from 0 to 127. interface-nu mber ranges from 0 to 1023. interface-nu mber ranges from 0 to 1023. interface-numbe r ranges from 0 to 1023. interface-numbe r ranges from 0 to 1023. interface-number ranges from 0 to 127. interface-number ranges from 0 to 127. All commands for hot AC backup No Yes No Yes No Yes bind wlan-ess interface-index ranges from 0 to 127. interface-index ranges from 0 to 1023. interface-index ranges from 0 to 127. interface-in dex ranges from 0 to 1023. interface-index ranges from 0 to 127. interface-index ranges from 0 to 1023. display wlan ap-group group-id ranges from 1 to 128. group-id ranges from 1 to 32. group-id ranges from 1 to 128. group-id ranges from 1 to 64. group-id ranges from 1 to 32. group-id ranges from 1 to 64. WLAN services commands hot-backup hellointerval No hellointerval ranges from 100 to 2000 milliseconds, and defaults to 2000 milliseconds. No hellointerva l ranges from 100 to 2000 millisecond s, and defaults to 2000 millisecond s. No hellointerval ranges from 100 to 2000 milliseconds, and defaults to 2000 milliseconds. wlan ap-group group-id ranges from 1 to 128. group-id ranges from 1 to 32. group-id ranges from 1 to 128. group-id ranges from 1 to 64. group-id ranges from 1 to 32. group-id ranges from 1 to 64. wlan permit-ap-group group-id ranges from 1 to 128. group-id ranges from 1 to 32. group-id ranges from 1 to 128. group-id ranges from 1 to 64. group-id ranges from 1 to 32. group-id ranges from 1 to 64. WLAN roaming commands display wlan client Yes Yes Yes Yes Yes Yes 4-4

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 display wlan mobility-group Yes Yes Yes Yes Yes Yes member Yes Yes Yes Yes Yes Yes mobility-tunnel Yes Yes Yes Yes Yes Yes undo member Yes Yes Yes Yes Yes Yes source Yes Yes Yes Yes Yes Yes Layer 2 LAN Switching Command Reference duplex Yes Yes Yes Yes No No display loopback-detecti on Yes Yes Yes Yes Yes No flow-control Yes Yes Yes Yes No No Ethernet interface commands jumboframe enable value ranges from 1600 to 9216 bytes and defaults to 1600 bytes. value ranges from 1600 to 4096 bytes and defaults to 1600 bytes. value ranges from 1600 to 4096 bytes and defaults to 1600 bytes. loopback Yes Yes Yes Yes value ranges from 1600 to 4096 bytes and defaults to 1600 bytes. value ranges from 1600 to 4096 bytes and defaults to 1600 bytes. Only internal is. value ranges from 1600 to 4096 bytes and defaults to 1600 bytes. Only internal is. loopback-detecti on control enable loopback-detecti on enable loopback-detecti on interval-time Yes Yes Yes Yes No No Yes Yes Yes Yes No No Yes Yes Yes Yes No No shutdown Yes Yes Yes Yes No No speed Yes Yes No Yes No No 4-5

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 VLAN commands interface vlan-interface The maximum value is 64. The maximum value is 64. The maximum value is 64. The maximum value is 512. The maximum value is 512. The maximum value is 64. MAC Address Table Commands mac-address max-mac-count count ranges from 0 to 4096. count ranges from 0 to 4096. count ranges from 0 to 4096. count ranges from 0 to 8192. count ranges from 0 to 8192. count ranges from 0 to 4096. Link aggregation commands MSTP commands Layer 2 forwarding commands Port mirroring commands All commands in the link aggregation commands manual All commands in the MSTP commands manual All commands in the Layer 2 commands manual All commands in the port mirroring commands manual Yes Yes No No No No No Yes No Yes No No Yes No Yes Yes No No Yes Yes No Yes No No Layer 2 WAN Command Reference PPP commands pppoe-server max-sessions local-mac pppoe-server max-sessions total number ranges from 1 to 2048. number ranges from 1 to 2048 and defaults to 1024. number ranges from 1 to 2048. number ranges from 1 to 4096 and defaults to 4096. number ranges from 1 to 2048. number ranges from 1 to 2048 and defaults to 1024. number ranges from 1 to 2048. number ranges from 1 to 65535 and defaults to 4096. number ranges from 1 to 4096. number ranges from 1 to 4096 and defaults to 4096. number ranges from 1 to 2048. number ranges from 1 to 2048 and defaults to 1024. Layer 3 IP Services Command Reference ARP commands arp max-learning-nu m number ranges from 0 to 2048. number ranges from 0 to 4096. number ranges from 0 to 2048. number ranges from 0 to 8192. number ranges from 0 to 2048. number ranges from 0 to 8192. 4-6

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 DNS commands All commands in IPv6 DNS configuration commands Yes Yes Yes Yes Yes Yes IP performance optimization commands ip redirects enable ip ttl-expires enable ip unreachables enable Yes No No No No No Yes No No No No No Yes No No No No No Adjacency table commands display adjacent-table No Yes No Yes Yes Yes All commands in IPv6 basics commands manual Yes Yes Yes Yes Yes Yes IPv6 basics commands ipv6 neighbors max-learning-nu m number ranges from 1 to 256 and defaults to 256. number ranges from 1 to 1024 and defaults to 1024. number ranges from 1 to 256 and defaults to 256. number ranges from 1 to 1024 and defaults to 1024. number ranges from 1 to 1024 and defaults to 1024. number ranges from 1 to 1024 and defaults to 1024. IPv6 application commands All commands in IPv6 application commands manual Yes Yes Yes Yes Yes Yes Layer 3 IP Routing Command IP routing basics commands display ipv6 routing-table Yes Yes Yes Yes Yes Yes 4-7

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 IPv6 static routing commands display ipv6 routing-table ipv6-address display ipv6 routing-table ipv6-address1 ipv6-address2 display ipv6 routing-table protocol display ipv6 routing-table statistics display ipv6 routing-table verbose reset ipv6 routing-table statistics All commands in IPv6 static routing commands manual Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IP Multicast Command Reference IGMP snooping commands igmp-snooping fast-leave Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view not Layer 2 aggregate interface view not Layer 2 aggregate interface view 4-8

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 igmp-snooping group-limit Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view not Layer 2 aggregate interface view not Layer 2 aggregate interface view igmp-snooping static-group Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view not Layer 2 aggregate interface view not Layer 2 aggregate interface view igmp-snooping static-router-port vlan Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view not Layer 2 aggregate interface view not Layer 2 aggregate interface view Multicast VLAN commands port multicast-vlan Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view not Layer 2 aggregate interface view not Layer 2 aggregate interface view MLD snooping commands MLD snooping commands IPv6 multicast VLAN commands Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IPv6 multicast VLAN commands port multicast-vlan ipv6 Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view Layer 2 aggregate interface view not Layer 2 aggregate interface view not Layer 2 aggregate interface view ACL and QoS Command Reference ACL Commands IPv6 ACL Configuration Commands Yes Yes Yes Yes Yes Yes 4-9

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 QoS Commands car pir peak-informatio n-rate not green action not remark-lp-pas s new-local-prece dence not pir peak-informatio n-rate not green action not remark-lppass new-local-p recedence not green action not remark-lp-pass new-local-prece dence not green action not remark-lp-pass new-local-prece dence not display qos lr interface Yes Yes Yes Yes Yes Yes display qos map-table dscp-lp not Yes dscp-lp not Yes Yes Yes if-match Yes classifier tcl-name not inbound-interf ace interface-type interface-numb er not local-preceden ce local-precedenc e-list not rtp start-port start-port-numb er end-port end-port-numb er not Yes classifier tcl-name not inbound-in terface interface-ty pe interface-nu mber not local-prece dence local-prece dence-list not rtp start-port start-port-n umber end-port end-port-nu mber not classifier tcl-name not inbound-interfa ce interface-type interface-numbe r not local-preceden ce local-precedenc e-list not rtp start-port start-port-numbe r end-port end-port-numbe r not classifier tcl-name not inbound-interfa ce interface-type interface-number not local-preceden ce local-precedenc e-list not rtp start-port start-port-numbe r end-port end-port-number not 4-10

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 qos pql inbound-interfac e Yes No Yes No No No qos pql protocol Yes No Yes No No No qos cql inbound-interfac e Yes No Yes No No No qos cql protocol Yes No Yes No No No qos car No Yes No Yes Yes Yes qos map-table dscp-lp not Yes dscp-lp not Yes Yes Yes qos lr Yes [ ebs excess-burst-si ze ] not Yes No [ ebs excess-burst-siz e ] not [ ebs excess-burst-siz e ] not redirect No Yes No Yes Yes Yes Security Command Reference AAA commands 802.1X commands nas device-id device-id dot1x max-user No Yes No Yes Yes No user-number ranges from 1 to 2048. user-number ranges from 1 to 4096. user-number ranges from 1 to 2048. user-numb er ranges from 1 to 4096. user-number ranges from 1 to 4096. user-number ranges from 1 to 2048. MAC authentication commands mac-authenticati on max-user user-number user-number ranges from 1 to 1024 and defaults to 1024. user-number ranges from 1 to 4096 and defaults to 4096. user-number ranges from 1 to 1024 and defaults to 1024. user-numb er ranges from 1 to 4096 and defaults to 4096. user-number ranges from 1 to 4096 and defaults to 4096. user-number ranges from 1 to 2048 and defaults to 2048. Portal commands portal server server-name method { direct layer3 redhcp } layer3 not layer3 layer3 not layer3 layer3 layer3 4-11

Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 portal backup-group group-id nas device-id device-id radius nas-backup-ip ip-address radius scheme radius-scheme-na me nas-backup-ip ip-address No Yes No Yes Yes No No Yes No Yes Yes No No Yes No Yes Yes No No Yes No Yes Yes No portal max-user max-number max-number ranges from 1 to 2048. max-number ranges from 1 to 4096. max-number ranges from 1 to 2048. max-numbe r ranges from 1 to 4096. max-number ranges from 1 to 4096. max-number ranges from 1 to 2048. ssh client ipv6 source Yes Yes Yes Yes Yes Yes SSH2.0 commands ssh2 ipv6 Yes Yes Yes Yes Yes Yes sftp client ipv6 source Yes Yes Yes Yes Yes Yes sftp ipv6 Yes Yes Yes Yes Yes Yes Security protection commands anti-attack protocol enable anti-attack protocol threshold No Yes No Yes Yes Yes No Yes No Yes Yes Yes 4-12