DAP-3220 CLI manual - D-Link

F
DAP-3220
802.11b/g Access Point
Command Line Interface Reference Manual
First Edition (January 2006)
RECYCLABLE
Table of Contents
Using the CLI ....................................................................................................................................................................................................................................................... 1
Command Syntax ................................................................................................................................................................................................................................................. 5
Utility Commands ................................................................................................................................................................................................................................................ 7
Ethernet Commands ............................................................................................................................................................................................................................................ 8
Wireless Commands ............................................................................................................................................................................................................................................. 9
Multi-SSID and VLAN Commands ................................................................................................................................................................................................................... 14
Access Control List Commands ......................................................................................................................................................................................................................... 17
Radius & Accounting Server Commands .......................................................................................................................................................................................................... 18
DHCP Server Commands .................................................................................................................................................................................................................................. 20
Rogue AP Detection Commands ........................................................................................................................................................................................................................ 21
Snmp Commands................................................................................................................................................................................................................................................ 22
Trap Commands ................................................................................................................................................................................................................................................. 24
Time Display & SNTP Commands .................................................................................................................................................................................................................... 25
Telnet & SSH Commands .................................................................................................................................................................................................................................. 26
System Log Command ....................................................................................................................................................................................................................................... 28
SMTP Commands ............................................................................................................................................................................................................................................... 29
First-Time Configuration Examples ................................................................................................................................................................................................................. 30
802.11 b/g Access Point Command Line Interface Manual
1
U SING THE CLI
The DAP-3220 can be accessed by Telnet. Using Microsoft Windows Operation system as example, open the Command Prompt on the computer that will be used for
configuring and managing the AP and enter telnet and IP address of DAP-3220 in the first line. Using the default IP address as example, enter telnet 192.168.0.50 to
cause the following screen to open:
Press Enter in the screen above. The following screen opens:
1
802.11 b/g Access Point Command Line Interface Manual
Type “admin” for the D-Link Access Point login username in the screen above and press Enter. The following screen opens:
Press Enter as there is no initial password.
The following screen opens to indicates you have successfully logged into the DAP-3220.
Commands are entered at the command prompt, D-Link Access Point wlan1 – >
2
802.11 b/g Access Point Command Line Interface Manual
There are a number of helpful features included in the CLI. Entering the “?” command and then pressing Enter will display a list of all of the top-level commands. The same
information can also be displayed by entering “help”.
Press Enter to see a list of all the available commands. Alternatively, you may enter “help” and the press Enter.
3
802.11 b/g Access Point Command Line Interface Manual
When you enter a command without all of its required parameters, the CLI will prompt you with a list of possible completions. For example, if “tftp” was entered, the
following screen opens:
This screen displays all the possible command completions for “tftp”
When you enter a command without a variable or value that needs to be specified, the CLI will prompt you with further information about what is needed to complete the
command. For example, if “snmp authtrap” was entered, the following screen opens:
The missing value for the “snmp authtrap” command, “enable/disable,” is displayed in the screen above.
4
802.11 b/g Access Point Command Line Interface Manual
2
C OMMAND S YNTAX
The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the CLI
and available through the console interface uses the same syntax.
Note: All commands are case-insensitive.
<angle brackets>
Purpose
Encloses a variable or value that must be specified.
Syntax
set login <username>
Description
In the above syntax example, you must specify the username.
Do not type the angle brackets.
Example Command
set login accounting
[square brackets]
Purpose
Encloses a required value or set of required arguments. One
value or argument can be specified.
Syntax
get multi-authentication [index]
Description
In the above syntax example, you must specify an index to be
created. Do not type the square brackets.
Example Command
get multi-authentication 2
5
802.11 b/g Access Point Command Line Interface Manual
: colon
Purpose
Separates two or more mutually exclusive items in a list, one of
which must be entered.
Syntax
set antenna <1:2:best>
Description
In the above syntax example, you must specify either 1, 2 or
best. Do not type the colon.
Example Command
set antenna best
6
802.11 b/g Access Point Command Line Interface Manual
3
U TILITY C OMMANDS
Help Command:
help
Function
Display CLI Command List
Ping Command:
ping
reboot
quit
Addminstration Command:
get uptime
get login
set login
set password
get systemname
set systemname
get ifping
set ifping
get wlanManage
set wlanManage
ping <xxx.xxx.xxx.xxx>
Function
Syntax
Restore to Default Factory Settings
Reboot Access Point. It is necessary to reboot the AP after making
configuration changes for those changes to take effect.
Logoff
set factorydefault
reboot
quit
Function
Syntax
Displays the currently loaded firmware version
System Status Command:
get cpuloadlimit
get cpuloadperiod
set cpuloadlimit
set cpuloadperiod
Syntax
Ping
Version Display Command:
version
help or ?
Function
Restart and Exit Commands:
set factorydefault
Syntax
version
Function
Syntax
Get CPU load limit
Get CPU load period
Set CPU Load Limit
Set CPU Load Period
get cpuloadlimit
get cpuloadperiod
set cpuloadlimit [0-100]
set cpuloadperiod [0-100]
Function
Syntax
Display UpTime
Display Login User Name
Modify Login User Name
Modify Password
Display Access Point System Name
Specify Access Point System Name
Display Ping control status
Set ping Allowed to enable or disable
Display manage AP with WLAN Mode
Set manage AP with WLAN Mode
get uptime
get login
set login <username>
set password
get systemname
set systemname <name>
get ifping
set ifping
get wlanManage
set wlanManage [disable: enable]
7
802.11 b/g Access Point Command Line Interface Manual
4
E THERNET C OMMANDS
Get Command:
get hostipaddr
get ipaddr
get ipmask
get gateway
get lcp
get lcplink
get dhcpc
Function
Syntax
Display Host IP Address
Display IP Address
Display IP Network/Subnet Mask
Display Gateway IP Address
Display Link Integrate state
Display Ethernet Link State
Display DHCP Client State of enabled or disabled
Set Command:
get hostipaddr
get ipaddr
get ipmask
get gateway
get lcp
get lcplink
get dhcpc
Function
set ipaddr
Set IP Address
set ipmask
Set IP Network/Subnet Mask
set gateway
Set Gateway IP Address
set dhcpc
Set DHCP Client State of enable or disabled
Syntax
set ipaddr <xxx.xxx.xxx.xxx>
Explanation: <xxx.xxx.xxx.xxx> is IP address
set ipmask < xxx.xxx.xxx.xxx>
Explanation: <xxx.xxx.xxx.xxx> is Network mask
set gateway <xxx.xxx.xxx.xxx>
Explanation: <xxx.xxx.xxx.xxx> is IP address
set dhcpc [0:1]
Explanation: 0=disable:1=enable
8
802.11 b/g Access Point Command Line Interface Manual
5
W IRELESS C OMMANDS
Fundamental
Config Commands:
config wlan
Function
Syntax
Select WLAN Adapter to configure. DWL-3220AP only WLAN 1 is
available for configuration. This command is not necessary.
config wlan [0:1]
Find Commands:
find bss
find channel
find all
IGMP Command:
igmp state
igmp enable
igmp disable
igmp dump
igmp getrssi
igmp setrssi
igmp getportagingtime
igmp setportagingtime
Get Command:
get apmode
get ssid
get ssidsuppress
get station
get wdsap
get remoteAp
get association
get autochannelselect
get frequency
get channel
Perform Site Survey, Wireless service will be disrupted
Channel spanning to select the Preferred Channel
Perform Site Survey including Super G and Turbo, Wireless service will
be disrupted
find bss
find channel
find all
Function
Syntax
Display IGMP snooping state
Enable IGMP snooping
Disable IGMP snooping
Display IGMP MDB dump list
Display IGMP snooping rssi threshold
Set IGMP snooping rssi threshold
Display IGMP snooping port aging time
Set IGMP snooping port aging time
igmp state
igmp enable
igmp disable
igmp dump
igmp getrssi
igmp setrssi <0 - + >
igmp getportagingtime
igmp setportagingtime <0 - +
Function
>
Syntax
Display current AP Mode
Display Service Set ID
Display SSID Suppress Mode as enabled or disabled
Display Client Station Connection Status
Display WDS Access Point List
Display Remote AP's Mac Address
Display Association Table that indicates the information of associated
client devices
Display state of Auto Channel Selection feature (enabled, disabled)
Display Radio Frequency (MHz)
Display Radio Frequency (MHz) and Channel Designation
9
get apmode
get ssid
get ssidsuppress
get station
get wdsap
get remoteAp
get association
get autochannelselect
get frequency
get channel
802.11 b/g Access Point Command Line Interface Manual
get availablechannel
get rate
get beaconinterval
get dtim
get fragmentthreshold
get rtsthreshold
get power
get targetPower
get controlPower
get swPower
get SuperG
get wlanstate
get shortpreamble
get wirelessmode
get 11gonly
get antenna
get sta2sta
get eth2sta
get eth2wlan
get macaddress
get config
get countrycode
get hardware
get diap
get aging
get ratecontrol
get supportrate
Display available Radio channels
Display current Data Rate selection. Default is best.
Display Beacon Interval
Display Delivery Traffic Indication Message Beacon Rate
Display Fragment Threshold in bytes
Display RTS/CTS Threshold
Display Transmit Power Setting: Full, half, quarter, eighth, min
Display Target Power Setting
Display Control Power Setting
Display Software Power Setting
Display SuperG Feature Status of enabled or disabled
Display Wireless LAN state status (enabled or disabled)
Display Short Preamble Usage state: enabled or disabled
Display Wireless LAN Mode (11b or 11g)
Display 11g Only Mode operational state of enabled or disabled
Display Antenna Diversity of 1, 2, or best
Display wireless STAs to wireless STAs connect state
Display ethernet to wireless STAs connect state
Display Eth2Wlan Broadcast packet filter state
Display Mac Address
Display Current AP Configuration Settings
Display Country Code setting
Display Hardware Revisions of WLAN Components
Display DIAP State
Display Aging Interval in seconds
Display supported data rate state
Display supported data rate
Set Command:
Function
get availablechannel
get rate
get beaconinterval
get dtim
get fragmentationthreshold
get rtsthreshold
get power
get targetPower
get controlPower
get swPower
get SuperG
get wlanstate
get shortpreamble
get wirelessmode
get 11gonly
get antenna
get sta2sta
get eth2sta
get eth2wlan
get macaddress
get config
get countrycode
get hardware
get diap
get aging
get ratecontrol
get supportrate
Syntax
set apmode
Set AP Mode to Normal AP, Point to Point Bridge, Point to Multipoint
Bridge.
set ssid
Set Service Set ID
set ssidsuppress
set autochannelselect
set frequency
set rate
Set SSID Suppress Mode enable or disable
Set Auto Channel Selection to enable or disable
Set Radio Frequency (MHz)
Set Data Rate
set apmode [ap:p2p:p2mp:p2pwithoutap: p2mpwithoutap]
set ssid <SSID>
SSID should be less than 33 strings.
set ssidsuppress [disable: enable]
set autochannelselect [disable:enable]
set frequency <24xx>
set rate [best:1:2:5.5:6:9:11:12:18:24:36:48:54]
10
802.11 b/g Access Point Command Line Interface Manual
set beaconinterval
set dtim
set fragmentthreshold
set rtsthreshold
set power
set SuperG
set wlanstate
set shortpreamble
set wirelessmode
set 11gonly
set antenna
set aging
set channel
set diap
set eth2wlan
set sta2sta
set eth2sta
set ratecontrol
set supportrate
Modify Beacon Interval 20-1000
set beaconinterval [20-1000]
Set Delivery Traffic Indication Message Beacon Rate. Default is 1
set dtim <1-255>
Set Fragment Threshold
set fragmentationthreshold <xxxx>
Set RTS/CTS Threshold in bytes
set rtsthreshold <xxxx>
Set Transmit Power in predefined increments
set power [full:half:quarter:eighth:min]
Enable or Disable Super G Features
set SuperG [disable: enable]
Select the operational state of wlan: enabled or disabled
set wlanstate [disable: enable]
Set Short Preamble
set shortpreamble [disable: enable]
Used to select the wireless mode of operation for the AP: 11b, 11g, 108g set wirelessmode [11b:11g:108g]
Only 802.11g clients will be Allowed to connect to this BSS
set 11gonly [disable:enable]
Set Antenna selection of 1, 2, or best
set antenna [1:2:best]
Set Aging Interval
set aging <seconds>
Select Radio Channel of Operation
set channel [1:2:3:4:5:6:7:8:9:10:11]
Enable or Disable DIAP
set diap [disable:enable]
set eth2wlan [0:1]
Enable or Disable the Eth2Wlan Broadcast packet filter feature
Explanation: 0=disable:1=enable
Set wireless STAs to wireless STAs connect state (WLAN Partition)
set sta2sta [disable: enable]
Set ethernet to wireless STAs connect state
set eth2sta [disable: enable]
Enable/Disable supported data rate
set ratecontrol [disable:enable]
Modify supported data rate(bit mask)
set supportrate
Security
Del Command:
del key
Get Command:
get encryption
get authentication
get cipher
Function
Syntax
Delete Encryption key
del key [1-4]
Function
Syntax
Display (WEP) configuration state (enabled or disabled)
Display Authentication Type
Display Encryption cipher type
Explanation:
Response WEP for choosing WEP
Response Auto for choosing WPA-Auto
Response AES for choosing WPA-AES
Response TKIP for choosing WPA-TKI
11
get encryption
get authentication
get cipher
802.11 b/g Access Point Command Line Interface Manual
get keysource
get key
get keyentrymethod
get passphrase
get groupkeyupdate
Display Source Of Encryption Keys:
Explanation:
Response Flash Memory for static key
Response Key Server for dynamic key
Response mixed for mix static and dynamic key
Display specified WEP encryption Key
Display Encryption Key Entry Method ASCII or Hexadecimal
Display WPA Passphrase
Display WPA Group Key Update Interval (in Seconds)
Set Command:
get keysource
get key [1-4]
get keyentrymethod
get passphrase
get groupkeyupdate
Function
Syntax
set encryption
Enable or Disable Encryption Mode
set authentication
Set Authentication Type
set cipher
set groupkeyupdate
Set Cipher of wep, aes, tkip, or auto negotiate
Set Group Key Update Interval (in Seconds) for TKIP
set key
Used to set the specified wep key value and size
set keyentrymethod
set keysource
set passphrase
Select Between ASCII or HEX encryption key format
Select Source of Encryption Keys: static(flash), dynamic (server), mixed
Modify Passphrase
set encryption [disable:enable]
set authentication [open-system:shared-key:auto:WPA: WPA-PSK:
WPA2: WPA2-PSK:WPA-AUTo:WAP2-AUTP-PSK]
set cipher [wep:aes:tkip:auto]
set groupkeyupdate <seconds>
set key [1-4] default
set key [1-4] [40:104:128] < value>
set keyentrymethod [asciitext : hexadecimal]
set keysource [flash:server:mixed]
set passphrase
WMM
Get Command:
get wmm
get wmmParamBss ac
get wmmParam ac
Set Command:
Function
Syntax
Display WMM mode status (enabled or disabled)
Display WMM EDCA parameters used by STA in this BSS
Display WMM EDCA parameters used by this AP
Function
get wmm
get wmmParamBss
get wmmParam
Syntax
set wmm
Enable or Disable WMM Features
set wmmParamBss ac
Set WMM (EDCA) parameters used by STAs in this BSS
12
set wmm [disable:enable]
set wmmParamBss ac [AC number] [logCwMin] [logCwMax] [aifs]
[txOpLimit] [acm]
Explanation:
AC number: 0->AC_BE
1->AC_BK
2->AC_BK
3->AC_BK
Example:
set wmmParamBss ac 0 4 10 3 0 0
802.11 b/g Access Point Command Line Interface Manual
set wmmParam ac
set wmmParamBss ac [AC number] [logCwMin] [logCwMax] [aifs]
[txOpLimit] [acm] [ack-policy]
Expanation:
AC number: 0->AC_BE
1->AC_BK
2->AC_BK
3->AC_BK
Set WMM (EDCA) parameters used by this AP
13
802.11 b/g Access Point Command Line Interface Manual
6
M ULTI -SSID AND VLAN C OMMANDS
Get Command:
Function
Syntax
get vlanstate
get vlanManage
get nativevlan
get Vlanpristate
get Vlantag
get VlantagType
get ethnotag
get Vlanpri
get multi-state
get multi-ind-state [index]
get multi-ssid [index]
get multi-ssidsuppress [index]
get multi-wmm [index]
get multi-authentication [index]
get multi-cipher [index]
get multi-keyentrymethod
get multi-vlantag [index]
get multi-vlantagtype [index]
get multi-ethnotag [index]
get multi-vlanpri [index]
get multi-key [index]
Display Vlan State status (enabled or disabled)
Display manage AP with VLAN Mode
Display Native Vlantag
Display Vlan Priority State (enabled or disabled)
Display Primary SSID Vlantag
Display Primary SSID Vlantag Type
Display Primary SSID Ethernet without tag State
Display Primary SSID Vlan Priority
Display Multi-SSID Mode (enabled or disabled)
Display Individual Multi-SSID State
Display SSID of the specify Multi-SSID
Display SSID Suppress Mode of the specify Multi-SSID
Display WMM mode of specify Multi-SSID
Display Authentication Type for Multi-SSID
Display Encryption cipher for Multi-SSID
Display Encryption Key Entry Method for Multi-SID
Display Vlan tag for Multi-SSID
Display Vlan-Tag Type for Multi-SSID
Display Individual Multi-SSID Ethernet without tag Mode
Display Vlan-Priority for Multi-SSID
Display Encryption Key for Multi-SSID
get vlanstate
get vlanManage
get nativevlan
get Vlanpristate
get Vlantag
get VlantagType
get ethnotag
get Vlanpri
get multi-state
get multi-ind-state [index]
get multi-ssid [index]
get multi-ssidsuppress [index]
get multi-wmm [index]
get multi-authentication [index]
get multi-cipher [index]
get multi-keyentrymethod [index]
get multi-vlantag [index]
get multi-vlantagtype [index]
get multi-ethnotag [index]
get multi-vlanpri [index]
get multi-key [index]
get multi-keysource [index]
get multi-config [index]
get multi-passphrase [index]
Display Key Source for Mulit-SSID
Display AP Configuration for Multi-SSID
Display Passphrase for Multi-SSID
get multi-keysource [index]
get multi-config [index]
get multi-passphrase [index]
get multi-acct-state
get multi-idv-acct-sta [index]
get multi-idv-acct-srv [index]
Dislay Accounting State for Multi-SSID (enabled or disabled)
Dislay Individual Accounting State for Multi-SSID
Dislay Individual Accounting Server for Multi-SSID
get multi-acct-state
get multi-idv-acct-sta [index]
get multi-idv-acct-srv [index]
14
802.11 b/g Access Point Command Line Interface Manual
get multi-idv-acct-port [index]
Dislay Individual Accounting Server Port for Multi-SSID
Set Command:
get multi-idv-acct-port [index]
Function
Syntax
set vlanstate
Enable or Disable VLAN
set vlanManage
set nativevlan
set Vlanpristate
set Vlantag
Set manage AP with VLAN Mode
Set Native Vlan Tag
Set Vlan Priority State
Set Primary SSID VLAN Tag
set VlantagType
Modify Primary SSID Vlantag Type
set ethnotag
set Vlanpri
set multi-state
set multi-ind-state
set multi-ssid
set multi-ssidsuppress
set multi-wmm
Enable or Disable Primary SSID Ethernet without Tag State
Modify Primary SSID Vlan Priority
Enable or Disable Multi-SSID Features
Enable or Disable specifically Mulit-SSID
Set Service Set ID for Multi-SSID
Enable or Disable to broadcast SSID of Multi-SSID
Enable or Disable WMM mode of Multi-SSID
set multi-authentication
Set Authentication Type for Multi-SSID
set multi-cipher
set multi-encryption
Set Cipher for Multi-SSID
Set Encryption Mode for Multi-SSID
set vlanstate [disable:enable]
Note: Must Enable Multi-SSID firstly
set vlanManage [disable: enable]
set nativevlan
set Vlanpristate [disable:enable]
set vlantag <tag value>
set VlantagType [1:2]
Explanation: 1= Manual : 2= Dynamic
set ethnotag [disable:enable]
set Vlanpri <0-7>
set multi-state [disable:enable]
set multi-ind-state [disable:enable] [index]
set multi-ssid [index] <ssid name>
set multi-ssidsuppress [disable:enable] [index]
set multi-wmm [disable:enable] [index]
set multi-authentication [open-system:shared-key:wpa:wpapsk:wpa2:wpa2-psk:wpa-auto:wpa-auto-psk] [index]
set multi-cipher [wep:aes:tkip:auto] [index]
set multi-encryption [disable:enable] [index]
set multi-keyentrymethod
Select Encryption Key Entry Method for Multi-SSID
set multi-keyentrymethod [hexadecimal:asciitext] [index]
set multi-vlantag
Set VLAN Tag for Multi-SSID
set multi- vlantagtype
Set Vlan-Tag Type for Multi-SSID
set multi-ethnotag[index]
set multi-vlanpri [pri value]
[index]
set multi-key default
set multi-passphrase
set multi-acct-state
set multi-idv-acct-sta
set multi-idv-acct-srv
set multi-idv-acct-port
Enable or Disable Individual Ethernet without Tag State
set multi-vlantag <tag value> [index]
set multi- vlantagtype [1:2] [index]
Explanation: 1= Manual : 2= Dynamic
set multi-ethnotag [disable:enable] [index]
Set Vlan-Priorityi for Multi-SSID
set multi-vlanpri <0-7> [index]
Set Default Encryption Key
Set PassPhrase for Multi-SSID
Enable or Disable the Accounting Feature of Mulit-SSID mode
Enable or Disable the Individual Accounting Feature of Mulit-SSID mode
Set Individual Accounting Server of Mulit-SSID mode
Set Individual Accounting Server port of Mulit-SSID mode
set multi-key default [key index] [multi-ssid index]
set multi-passphrase [index] <passphrase>
set multi-acct-state [disable:enable]
set multi-idv-acct-sta [disable:enable] [index]
set multi-idv-acct-srv [index] < acct-srv name>
set multi-idv-acct-port [index] <port number>
15
802.11 b/g Access Point Command Line Interface Manual
Routing Commands (Spanning Tree Protocol)
Set Command:
rstp setstate
rstp getstate
rstp setstp
rstp getstp
rstp setport
rstp getport
rstp setdefault
Function
Syntax
Enable or Disable Spanning Tree Protocol supporting in VLAN / Multi- rstp setstate [0:1]
SSID
Explanation: 0=disable:1=enable
Show Spanning Tree State
rstp getstate
rstp setstp maxage [6 – 40]
rstp setstp hellotim [1-10]
rstp setstp forwarddely [4-30]
Modify Spanning Tree Settings
rstp setstp priority [0-61440], (note: 0 is the highest)
rstp setstp version [1:2], (note: 1 is stp and 2 is rstp)
rstp setstp txholdcount [1-10]
rstp setstp fbpdu[0-:1], (note: 0 is disduble and 1 is enable)
Show Spanning Tree Settings
rstp getstp
Modify STP Port Settings, includes cost , priority, edge, p2p and state rstp setport
parameters
Show STP Port Settings
rstp getport
Set Factory Default
rstp setdefault
16
802.11 b/g Access Point Command Line Interface Manual
7
A CCESS C ONTROL L IST C OMMANDS
Del Command:
del acl
del wdsacl
Function
Delete specified Access Control List entry
Delete specified WDS ACL entry: 1-8
Get Command:
get acl
get wdsacl
set acl strict
del acl [1-16]
del wdsacl [1-8]
Function
Syntax
Display Access Control Setting of Enabled or disabled
Display WDS Access Control List
Set Command:
set acl enable
set acl disable
set acl allow
set acl deny
Syntax
get acl
get wdsacl
Function
Syntax
Select ACL restricted access to specified MAC addresses
Select Unrestricted access
Add specified MAC address to the allow ACL
Add specified MAC address to the deny ACL
Select Restricted Access, only clients with authorized MAC will
communicate
set acl keymap
Add WEP Encryption Key mapping for MAC Address
set wdsacl allow
Add MAC Address to WDS List
IPfilter Command:
Display or Set Remote IP Acl State
ipfilter add
ipfilter del
ipfilter clear
Ipfilter list
Add a IP Range Entry
Del a IP Range Entry
Clear IP Pool
Display IP Pool
set acl strict
set acl keymap <xx:xx:xx:xx:xx:xx> [1-4]
set acl keymap <xx:xx:xx:xx:xx:xx> default
set acl keymap <xx:xx:xx:xx:xx:xx> [40:104:128] < value>
set wdsacl allow <xx:xx:xx:xx:xx:xx>
Function
ipfilter state
set acl enable
set acl disable
set acl allow <xx:xx:xx:xx:xx:xx>
set acl deny <xx:xx:xx:xx:xx:xx>
Syntax
ipfilter state
ipfilter state [on:off]
ipfilter add <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>
ipfilter del <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>
ipfilter clear
ipfilter list
17
802.11 b/g Access Point Command Line Interface Manual
8
R ADIUS & A CCOUNTING S ERVER C OMMANDS
Get Command:
get radiusname
get radiusport
get radiussecret
get radius2ndstate
get radiusname2nd
get radiusport2nd
get radiussecret2nd
get radiuscfgid
get accountingstate
get accountingname
get acountingport
get accounting2ndstate
get accounting2ndname
get accounting2ndport
get accountingcfgid
Function
Syntax
Display RADIUS server name or IP address
Display RADIUS port number
Display RADIUS shared secret
Display the second RADIUS Mode (enabled or disabled)
Display the second RADIUS server name or IP address
Display the second RADIUS port number
Display the second RADIUS shared secret
Display the configuration of radius now
Display Accounting Mode (enabled or disabled)
Display Accounting server name or IP address
Display Accounting port number
Display the second Accounting Mode (enabled or disabled)
Display the second Accounting server name or IP address
Display the second Accounting port number
Display the configuration of Accounting now
Set Command:
Function
set radiusname
Set RADIUS Server name or IP address
set radiusport
Set RADIUS port number
set radiussecret
set radius2ndstate
Set RADIUS shared secret
Enable or Disable the second RADIUS function
set radiusname2nd
Set the second RADIUS name or IP address
set radiusport2nd
Set the second RADIUS port number
set radiussecret2nd
set accountingstate
Set the second RADIUS shared secret
Enable or Disable Accounting server function
set accountingname
Set Accounting server name or IP address
get radiusname
get radiusport
get radiussecret
get radius2ndstate
get radiusname2nd
get radiusport2nd
get radiussecret2nd
get radiuscfgid
get accountingstate
get accountingname
get acountingport
get accounting2ndstate
get accounting2ndname
get accounting2ndport
get accountingcfgid
Syntax
set radiusname <DNS name::xxx.xxx.xxx.xxx>
Explanation: <xxx.xxx.xxx.xxx> is IP address
set radiusport <xxxxx>
Explanation: <xxxxx> is port number, default value is 1812
set radiussecret
set radius2ndstate [disable:enable]
set radiusname2nd <DNS name::xxx.xxx.xxx.xxx>
Explanation: <xxx.xxx.xxx.xxx> is IP address
set radiusport2nd <xxxxx>
Explanation: <xxxxx> is port number, default value is 1812
set radiussecret2nd
set accountingstate [disable:enable]
set accountingname <DNS name::xxx.xxx.xxx.xxx>
Explanation: <xxx.xxx.xxx.xxx> is IP address
18
802.11 b/g Access Point Command Line Interface Manual
set accountingport
Set Accounting port number
set accounting2ndstate
Enable or Disable the second Accounting server function
set accounting2ndname
Set the second Accounting name or IP address
set accounting2ndport
Set the second Accounting port number
19
set accountingport < xxxxx>
Explanation: < xxxxx> is port number, default value is 1813
set accounting2ndstate [disable:enable]
set accounting2ndname <DNS name::xxx.xxx.xxx.xxx>
Explanation: <xxx.xxx.xxx.xxx> is IP address
set accounting2ndport < xxxxx>
Explanation: < xxxxx> is port number, default value is 1813
802.11 b/g Access Point Command Line Interface Manual
9
DHCP S ERVER C OMMANDS
Command:
dhcps help
dhcps state
dhcps state <on|off>
dhcps dynamic info
dhcps dynamic ip
dhcps dynamic mask
dhcps dynamic gw
dhcps dynamic dns
dhcps dynamic wins
dhcps dynamic range
dhcps dynamic lease
dhcps dynamic domain
dhcps dynamic state
dhcps dynamic map
dhcps static info
dhcps static ip
dhcps static mask
dhcps static gw
dhcps static dns
dhcps static wins
dhcps static domain
dhcps static mac
dhcps static state
dhcps static map
Function
Syntax
Display DHCP Server Command Help
get DHCP Server state
set to on or off DHCP Server
get current settings
set start ip
set netmask
set gateway
set dns
set wins
set range
set lease time (sec.)
set domain name
set state
get mapping list
get setting from <0-255> to <0-255>
set static <id> pool start ip
set static <id> pool netmask
set static <id> pool gateway
set static <id> pool dns
set static <id> pool wins
set static <id> pool domain name
set static <id> pool mac
set static <id> pool state
get static <id> pool mapping list
dhcps help
dhcps state
dhcps state [on|off]
dhcps dynamic info
dhcps dynamic ip <x.x.x.x>
dhcps dynamic mask <x.x.x.x>
dhcps dynamic gw <x.x.x.x.>
dhcps dynamic dns <x.x.x.x>
dhcps dynamic wins <x.x.x.x>
dhcps dynamic range [0-255]
dhcps dynamic lease [60-31536000]
dhcps dynamic domain <string..>
dhcps dynamic state [on:off]
dhcps dynamic map
dhcps static info [0-255] [0-255]
dhcps static <id> ip <x.x.x.x>
dhcps static <id> mask <x.x.x.x>
dhcps static <id> gw <x.x.x.x.>
dhcps static <id> dns <x.x.x.x>
dhcps static <id> wins <x.x.x.x>
dhcps static <id> domain <string>
dhcps static <id> mac <xx:xx:xx:xx:xx:xx>
dhcps static <id> state [on:off]
dhcps static map
Note: The DHCP server function is to assign Dynamic IP to Wireless Client devices. It doesn’t assign IP to Ethernet port.
20
802.11 b/g Access Point Command Line Interface Manual
10
R OGUE AP D ETECTION C OMMANDS
Command
find rogue
rogue add
rogue del
rogue deleep
rogue list
rogue listeep
Function
Find rogue AP
find rogue
Add a Rogue Access Point Result Entry
rogue add <index>
Del a Rogue Access Point Result Entry from the scanned result(in
rogue del <index>
SDRAM).
Del a Rogue Access Point Result Entry ,which had been stored in Flash. rogue deleep <index>
Display Rogue Access Point Detection Result in the scanned result(in
rogue list
SDRAM).
Display Rogue Access Point Detection Result, which had been stored in
rogue listeep
Flash.
Get Command
get roguebsstype
get roguesecurity
get roguebandselect
get DeAssoEnable
Syntax
Function
Syntax
Display Rogue AP BSS type
Display Rogue AP Security Type
Display rogue AP Band Select
Display Rogue AP Protection State
Set Command
get roguebsstype
get roguesecurity
get roguebandselect
get DeAssoEnable
Function
set roguestatus
set roguebsstypestatus
set roguebsstype
set roguesecuritystatus
Enable or Disable Rogue AP function
Enable or Disable Rogue AP BSS Type function
Set Rogue AP BSS Type
Enable/Disable Rogue AP Security
set roguesecurity
Set Rogue AP Security Type
set roguebandselectstatus
Set Rogue AP Band Select status
set roguebandselect
Set ROGUE AP Band Select
set DeAssoEnable
Set Rogue AP Protection State
Syntax
set roguestatus [disable:enable]
set roguebsstypestatus [disable:enable]
set roguebsstype [apbss:adhoc:both]
set roguesecuritystatus [disable:enable]
set roguesecurity
Note: After enter this command, the CLI will list the security type for
selection
set roguebandselectstatus [disable:enable]
set roguebandselect
Note: After enter this command, the CLI will list the security type for
selection
set DeAssoEnable [disable:enable]
21
802.11 b/g Access Point Command Line Interface Manual
11
S NMP C OMMANDS
Command
Function
get snmp
set snmp
Display SNMP Agent Status
Set SNMP State
snmp adduser
Add User To SNMP Agent
snmp deluser
snmp showuser
snmp setauthkey
snmp setprivkey
Delete User From SNMP Agent
Show User list In SNMP Agent
Set User Auth Key
Set User Private Key
snmp addgroup
Add User Group
snmp delgroup
snmp showgroup
Delete User Group
Show SNMP Group Settings
snmp addview
Add User View
snmp delview
Delete User View
snmp showview
Show User View
Syntax
get snmp
set snmp [disable:enable]
snmp adduser <Username> <GroupName> [AuthProtocl] [Authkey]
[PrivProtocl] [PrivKey]
Explanation:
AuthProtocl: 1 Non, 2 MD5, 3 SHA
Autheky: Keystring or none
PrivProtocl:1 none, 2 DES
PrivKey: Key string or none
snmp deluser <username>
snmp showuser
snmp setauthkey <username> <Authkey>
snmp setauthkey <username> <Privkey>
snmp addgroup <GroupName>
[Security Level] <ReadView>
<WriteView> <NotifyView>
Explanation:
Security Level:1 no_auth no_priv, 2 auth no_priv, 3 auth priv
ReadView: <string> or NULL for None
WriteView: <string> or NULL for None
NotifyView: <string> or NULL for None
snmp delgroup <GroupName >
snmp showgroup
snmp addview <ViewName> <OID > [Type]
Explanation:
ViewName: <string>
OID:<string>
Type:1: included, 2: excluded
snmp delview <ViewName> <OID >
Explanation:
ViewName: <string>
OID: <string> or all for all OID
snmp showview
22
802.11 b/g Access Point Command Line Interface Manual
snmp editpubliccomm
snmp editprivatecomm
Edit public communication String
Edit private communication String
snmp addcomm
Add Communication String
snmp delcomm
snmp showcomm
Delete Community String
Show Community String Table
snmp addhost
Add Host To Notify List
snmp delhost
snmp showhost
snmp authtrap
snmp sendtrap
snmp status
snmp suspend
snmp resume
snmp load_default
Delete Host From Notify List
Show Host In Notify List
Set Auth Trap Status
Send Warm Trap
Display SNMP Agent status
Suspend SNMP Agent
Resume SNMP Agent
Load SNMP Default Settings
snmp editpubliccomm <publicCommunityString>
snmp editprivatecomm <publicCommunityString>
snmp addcomm <CommunityString> <ViewName> [Type]
Explanation:
CommunityString: <string>
ViewName:<string>
Type:1: Read-Only, 2: Read-Write
snmp delcomm <string>
snmp showcomm
snmp addhost TrapHostIP<string> [SnmpType] [AuthType]
<AuthString>
Explanation:
TrapHostIP: <string>
SnmpType:1: v1
2: v2c
3: v3
AuthType: 0: v1_v2c
1: v3_noauth_nopriv
2: v3_auth_nopriv
3 v3_auth_priv>
AuthString: <string>, CommunityString for v1,v2c or UserNam
for:v3
snmp delhost <TrapHostIP >
snmp showhost
snmp authtrap [enable:disable]
snmp sendtrap
snmp status
snmp suspend
snmp resume
snmp load_default
23
802.11 b/g Access Point Command Line Interface Manual
12
T RAP C OMMANDS
Get Command
get trap
Function
Display TRAP Information
Set Command
set trap
Syntax
get trap
Function
Syntax
set trap state 0/1
set trap sysstate 0/1
set trap wlanstate 0/1
set trap mempoor-period x(1~30 mins)
set trap bcflood-period x(1~30 mins)
set trap deauth-period x(1~60 mins)
set trap deauth-count x(1~1000 pkts)
set trap deassoc-period x(1~60 mins)
set trap deassoc-count x(1~1000 pkts)
Explanation: 1= Disable : 2= Enable
Set Trap settings
24
802.11 b/g Access Point Command Line Interface Manual
13
T IME D ISPLAY & SNTP C OMMANDS
Command:
timeofday
Function
Timeofday
Note: Need to set up SNTP/NTPserver firstly
Displays the Current Time of Day
Get Command
get sntpserver
get tzonelist
get tzone
get daylightsaving
Syntax
Function
Syntax
Display SNTP/NTP Server IP Address
Display Time Zone
Display Time Zone Setting
Display Day Light Saving Time
Set Command
get sntpserver
get tzonelist
get tzone
get daylightsaving
Function
set sntpserver
Set SNTP/NTP Server IP Address
set tzone
Set Time Zone Setting
set daylightsaving
Set Day Light Saving Time
Syntax
set sntpserver <xxx.xxx.xxx.xxx>
Explanation: <xxx.xxx.xxx.xxx> is IP address
set tzone [0=GMT]
Note: use get tzonelist to get tzone information
set daylightsaving [0:1]
Explanation: 0=disable:1=enable
25
802.11 b/g Access Point Command Line Interface Manual
14
T ELNET & SSH C OMMANDS
TFTP Commands:
Command:
Function
Syntax
tftp get
tftp uploadtxt
tftp srvip
tftp update
tftp info
get telnet
get timeout
Get a file from TFTP Server.
Upload the configuration of the device to TFTP Server.
Setup the TFTP Server IP address.
Update the file to the device.
Information about the TFTPC setting.
Display Telnet Status of current login, number of login attempts, etc.
Display Telnet Timeout in seconds
tftp get Filename<string>
tftp uploadtxt Filename<string>
tftp srvip <xxx.xxx.xxx.xxx>
tftp update
tftp info
get telnet
get timeout
set telnet <0:1:2>
Explanation:
0=disable telnet and enable SSL
1=enable telnet and disable SSL
2 = disable both telnet and SSL
set telnet
Set Telnet Access/SSL Mode to enabled or disabled
set timeout
Set Telnet Timeout in seconds, 0 is never and 900 seconds is the
set timeout <0-900>
maximum <0-900>
SSH Commands
Command:
Function
ssh showuser
Show SSH User
ssh setrekey
Set SSH Rekey
ssh loaddefault
ssh showalgorithm
Load SSH Default Setting
Show SSH Algorithm
Syntax
ssh showuser
ssh setrekey [0-3]
Explanation:
0:10Min
1:30Min
2:60Min
3:Never)
ssh loaddefault
ssh showalgorithm
26
802.11 b/g Access Point Command Line Interface Manual
ssh setalgorithm
ssh setalgorithm [0 -12] [enable/disable]
Explanation:
Algorithm: 0:3DES
1:AES128
2:AES192
3:AES256
4:Arcfour
5:Blowfish
6:Cast128
7:Twofish128
8:Twofish192
9:Twofish256
10:MD5
11:SHA1
12:Password)
Example:
1. Disable 3DES algorithm support
ssh setalgorithm 0 disable
Set SSH Algorithm
27
802.11 b/g Access Point Command Line Interface Manual
15
S YSTEM L OG C OMMAND
Get Command
get syslog
Function
Display Syslog Information
Set Command
set syslog
Syntax
get syslog
Function
Syntax
set syslog remoteip <xxx.xxx.xxx.xxx>
set syslog remotestate [0:1]
set syslog localstate [0:1]
set syslog sysstate [0:1]
set syslog wirelessstate [0:1]
set syslog otherstate [0:1]
set syslog clear all
Explanation: 0=disable:1=enable
Set Syslog setting
28
802.11 b/g Access Point Command Line Interface Manual
16
SMTP C OMMANDS
Get Command
get smtplog
get smtpserver
get smtpsender
get smtprecipient
Function
Syntax
Display SMTP with Log Status (enabled or disabled)
Display SMTP server (IP or Name)
Display Sender
Display Recipient Email Address
Set Command
get smtplog
get smtpserver
get smtpsender
get smtprecipient
Function
set smtpserver
Set SMTP Server
set smtpsender
set smtprecipient
Set SMTP Sender Account
Set SMTP Recipient Email Address
set smtplog
Set SMTP With Log Status
Syntax
set smtpserver <DNS name::xxx.xxx.xxx.xxx>
Explanation: <xxx.xxx.xxx.xxx> is IP address
set smtpsender <sender Email address>
set smtprecipient <recipient Email address>
set smtplog 0/1
Explanation: 0=disable:1=enable
29
802.11 b/g Access Point Command Line Interface Manual
17
F IRST-T IME C ONFIGURATION E XAMPLES
The following AP configuration examples are provided to help first-time users get started. The user commands are in bold for easy reference.
Many users will want to set a new IP address for the DAP-3220. This will also require setting an IP mask and a Gateway IP address. The following is an example in which
the AP’s default IP address of 192.168.0.50 is changed to 192.168.0.55.
D-Link Access Point wlan1 -> set ipaddr 192.168.0.55
IP Address: 192.168.0.55
D-Link Access Point wlan1 -> set ipmask 255.255.255.0
IP Subnet Mask: 255.255.255.0
D-Link Access Point wlan1 -> set gateway 192.168.0.254
Gateway IP Address: 192.168.0.254
D-Link Access Point wlan1 -> set channel 6
Radio Frequency: 2437 MHz (IEEE 6)
D-Link Access Point wlan1 -> set ssid myAP-8200
Once the user has determined what type of authentication is best for their wireless network, follow the appropriate instructions below.
The following is an example in which authentication is set to Open System.
D-Link Access Point wlan1 -> set authentication open-system
Authentication Type: Open-System
D-Link Access Point wlan1 -> set encryption disable
Encryption: Disabled
30
802.11 b/g Access Point Command Line Interface Manual
The following is an example in which the authentication is set to Shared-Key.
D-Link Access Point wlan1 -> set authentication shared-key
Authentication Type: Shared-Key
D-Link Access Point wlan1 -> set key 1 40 1234567890
Shared Key 1, size 40: 1234567890
D-Link Access Point wlan1 -> set key 1 default
Default Key: 1
D-Link Access Point wlan1 -> set encryption enable
Encryption: Enabled
The following is an example in which the authentication is set to WPA-PSK.
D-Link Access Point wlan1 -> set authentication wpa-psk
Authentication Type: WPA-PSK
D-Link Access Point wlan1 -> set encryption enable
Encryption: Enabled
D-Link Access Point wlan1 -> set cipher auto
Cipher selection: AUTO
D-Link Access Point wlan1 -> set passphrase
Old Passphrase->
New Passphrase-> **********
Type passphrase again to confirm-> **********
31
802.11 b/g Access Point Command Line Interface Manual
Passphrase confirmed
The following is an example in which the authentication is set to WPA.
D-Link Access Point wlan1 -> set authentication wpa
Authentication Type: WPA
D-Link Access Point wlan1 -> set encryption enable
Encryption: Enabled
D-Link Access Point wlan1 -> set cipher auto
Cipher selection: AUTO
D-Link Access Point wlan1 -> set radiusname 192.168.0.99
RADIUS server name: 192.168.0.99
D-Link Access Point wlan1 -> set radiussecret
Old RADIUS shared secret->
New RADIUS shared secret-> **********
Type RADIUS secret again to confirm-> **********
RADIUS shared secret confirmed
D-Link Access Point wlan0 -> set keysource server
Key Source: server
Once the user has set up the AP to their satisfaction, the device must be rebooted to save settings.
D-Link Access Point wlan1 -> reboot
32
802.11 b/g Access Point Command Line Interface Manual
33