ZyXEL Communications Network Router NOT AVAILABLE Uživatelský manuál

www.zyxel.comQuick Start GuideNXC SeriesWireless LAN ControllerVersions: 2.25, 4.00Edition 1, 06/2013Copyright © 2011 ZyXEL Communications Corporation

Table of ContentsNXC CLI Reference Guide10Chapter 23Device HA...

Chapter 13 Wireless Load BalancingNXC CLI Reference Guide100load-balancing beta <1..255> Sets the load balancing beta value.When the AP is overl

Chapter 13 Wireless Load BalancingNXC CLI Reference Guide10113.2.1 Wireless Load Balancing ExamplesThe following example shows you how to configure

Chapter 13 Wireless Load BalancingNXC CLI Reference Guide102

NXC CLI Reference Guide103CHAPTER 14 Dynamic GuestThis chapter shows you how to configure dynamic guest accounts.14.1 Dynamic Guest OverviewDynamic

Chapter 14 Dynamic GuestNXC CLI Reference Guide104[no] description description Sets the description for the specified user group. The no command clear

Chapter 14 Dynamic GuestNXC CLI Reference Guide10514.2.1 Dynamic Guest ExamplesThis example creates a guest-manager user account and a dynamic-guest

Chapter 14 Dynamic GuestNXC CLI Reference Guide106

NXC CLI Reference Guide107CHAPTER 15 ZonesSet up zones to configure network security and network policies in the NXC.  Use the configure terminal co

Chapter 15 ZonesNXC CLI Reference Guide10815.2 Zone Commands SummaryThe following table describes the values required for many zone commands. Other v

Chapter 15 ZonesNXC CLI Reference Guide10915.2.1 Zone Command ExamplesThe following commands add Ethernet interfaces ge1 and ge2 to zone A and block

Table of ContentsNXC CLI Reference Guide1128.1 AAA Server Overview ...

Chapter 15 ZonesNXC CLI Reference Guide110

NXC CLI Reference Guide111CHAPTER 16 ALGThis chapter covers how to use the NXC’s ALG feature to allow certain applications to pass through the NXC.16

Chapter 16 ALGNXC CLI Reference Guide11216.2 ALG Commands The following table lists the alg commands. You must use the configure terminal command to

NXC CLI Reference Guide113CHAPTER 17 Captive PortalThis chapter describes how to configure which HTTP-based network services default to the captive p

Chapter 17 Captive PortalNXC CLI Reference Guide11417.1.1.1 web-auth login setting Sub-commandsThe following table describes the sub-commands for the

Chapter 17 Captive PortalNXC CLI Reference Guide11517.1.1.2 web-auth policy Sub-commandsThe following table describes the sub-commands for several w

Chapter 17 Captive PortalNXC CLI Reference Guide116• Set web-auth policy 1 to use the SSID profile named SSIDprofile1• Set web-auth policy 1 to requir

NXC CLI Reference Guide117CHAPTER 18 RTLSUse the RTLS commands to use the managed APs as part of an Ekahau RTLS to track the location of Ekahau Wi-Fi

Chapter 18 RTLSNXC CLI Reference Guide118

NXC CLI Reference Guide119CHAPTER 19 FirewallThis chapter introduces the NXC’s firewall and shows you how to configure your NXC’s firewall.19.1 Fire

Table of ContentsNXC CLI Reference Guide1233.6 DNS Overview ...

Chapter 19 FirewallNXC CLI Reference Guide120Your customized rules take precedence and override the NXC’s default settings. The NXC checks the schedul

Chapter 19 FirewallNXC CLI Reference Guide121firewall zone_object {zone_object|EnterpriseWLAN} appendEnters the firewall sub-command mode to add a di

Chapter 19 FirewallNXC CLI Reference Guide12219.2.1 Firewall Sub-CommandsThe following table describes the sub-commands for several firewall commands

Chapter 19 FirewallNXC CLI Reference Guide12319.2.2 Firewall Command ExamplesThe following example shows you how to add a firewall rule to allow a M

Chapter 19 FirewallNXC CLI Reference Guide124The following command displays the firewall rule(s) (including the default firewall rule) that applies to

Chapter 19 FirewallNXC CLI Reference Guide125The following table describes the session-limit commands. You must use the configure terminal command to

Chapter 19 FirewallNXC CLI Reference Guide126

NXC CLI Reference Guide127CHAPTER 20 Application PatrolThis chapter describes how to set up application patrol for the NXC. 20.1 Application Patrol

Chapter 20 Application PatrolNXC CLI Reference Guide12820.2 Application Patrol Commands SummaryThe following table describes the values required for

Chapter 20 Application PatrolNXC CLI Reference Guide12920.2.2.1 Rule Sub-commandsThe following table describes the sub-commands for several applicat

Table of ContentsNXC CLI Reference Guide1335.6.2 Command Line FTP Configuration File Upload Example ...

Chapter 20 Application PatrolNXC CLI Reference Guide13020.2.3 Exception Commands for Pre-defined ApplicationsThis table lists the commands for except

Chapter 20 Application PatrolNXC CLI Reference Guide13120.2.3.1 Exception Rule Sub-commandsThe following table describes the sub-commands for severa

Chapter 20 Application PatrolNXC CLI Reference Guide13220.2.5 Rule Commands for Other ApplicationsThis table lists the commands for rules in other ap

Chapter 20 Application PatrolNXC CLI Reference Guide13320.2.6 General Commands for Application Patrol You must register for the IDP/AppPatrol signa

Chapter 20 Application PatrolNXC CLI Reference Guide13420.2.6.1 General Command ExamplesThe following examples show the information that is displayed

Chapter 20 Application PatrolNXC CLI Reference Guide135Router# configure terminalRouter(config)# show app http configapplication: http active: yes

Chapter 20 Application PatrolNXC CLI Reference Guide136Router# configure terminalRouter(config)# show app other rule allindex: 1 activate: yes port:

NXC CLI Reference Guide137CHAPTER 21 Anti-VirusThis chapter introduces and shows you how to configure the anti-virus scanner. 21.1 Anti-Virus Overvi

Chapter 21 Anti-VirusNXC CLI Reference Guide13821.2.1 General Anti-virus CommandsThe following table describes general anti-virus commands. You must

Chapter 21 Anti-VirusNXC CLI Reference Guide139anti-virus rule <1..64> Enters the anti-virus sub-command mode to edit the specified direction s

Table of ContentsNXC CLI Reference Guide14Chapter 41Maintenance Tools...

Chapter 21 Anti-VirusNXC CLI Reference Guide14021.2.2.1 Zone to Zone Anti-virus Rule ExampleThis example shows how to configure (and display) a WAN t

Chapter 21 Anti-VirusNXC CLI Reference Guide14121.2.3.1 White and Black Lists ExampleThis example shows how to enable the white list and configure a

Chapter 21 Anti-VirusNXC CLI Reference Guide14221.2.4 Signature Search Anti-virus Command The following table describes the command for searching fo

Chapter 21 Anti-VirusNXC CLI Reference Guide14321.3.1 Update Signature ExamplesThese examples show how to enable/disable automatic anti-virus downlo

Chapter 21 Anti-VirusNXC CLI Reference Guide14421.4.1 Anti-virus Statistics ExampleThis example shows how to collect and display anti-virus statistic

NXC CLI Reference Guide145CHAPTER 22 IDP CommandsThis chapter introduces IDP-related commands.22.1 OverviewCommands mostly mirror web configurator f

Chapter 22 IDP CommandsNXC CLI Reference Guide146This table shows the IDP signature, anomaly, and system-protect activation commands.22.2.1.1 Activat

Chapter 22 IDP CommandsNXC CLI Reference Guide14722.3.1.1 Example of Global Profile CommandsIn this example we rename an IDP signature profile from

Chapter 22 IDP CommandsNXC CLI Reference Guide14822.3.2.1 Example of IDP Zone to Zone Rule CommandsThe following example creates IDP zone to zone rul

Chapter 22 IDP CommandsNXC CLI Reference Guide14922.3.4 Editing/Creating Anomaly ProfilesUse these commands to create a new anomaly profile or edit

NXC CLI Reference Guide15CHAPTER 1 Command Line InterfaceThis chapter describes how to access and use the CLI (Command Line Interface).1.1 Overview

Chapter 22 IDP CommandsNXC CLI Reference Guide150[no] scan-detection {ip-xxx} {activate | log [alert] | block}Activates or deactivates IP scan detecti

Chapter 22 IDP CommandsNXC CLI Reference Guide151udp-decoder {truncated-header | undersize-len | oversize-len} log [alert] Sets udp decoder log or al

Chapter 22 IDP CommandsNXC CLI Reference Guide152show idp anomaly profile flood-detection [all details]Shows all flood-detection settings for the spec

Chapter 22 IDP CommandsNXC CLI Reference Guide15322.3.4.1 Creating an Anomaly Profile ExampleIn this example we create a profile named “test”, confi

Chapter 22 IDP CommandsNXC CLI Reference Guide154 It is recommended you use the web configurator to search for signatures.Table 86 Signature Search

Chapter 22 IDP CommandsNXC CLI Reference Guide15522.3.6.1 Search Parameter TablesThe following table displays the command line severity, platform an

Chapter 22 IDP CommandsNXC CLI Reference Guide156• Is a scan policy type, DNS service• Is enabled• Generates logs.22.4 IDP Custom SignaturesUse these

Chapter 22 IDP CommandsNXC CLI Reference Guide15722.4.1 Custom Signature ExamplesThese examples show how to create a custom signature, edit one, dis

Chapter 22 IDP CommandsNXC CLI Reference Guide158This example shows you how to display custom signature details. Router(config)# show idp signatures c

Chapter 22 IDP CommandsNXC CLI Reference Guide159This example shows you how to display custom signature contents. Router(config)# show idp signatures

Chapter 1 Command Line InterfaceNXC CLI Reference Guide16 The NXC might force you to log out of your session if reauthentication time, lease time, or

Chapter 22 IDP CommandsNXC CLI Reference Guide160This example shows you how to display all details of a custom signature. This example shows you how t

Chapter 22 IDP CommandsNXC CLI Reference Guide16122.5.1 Update Signature ExamplesThese examples show how to enable/disable automatic IDP downloading

Chapter 22 IDP CommandsNXC CLI Reference Guide16222.6.1 IDP Statistics ExampleThis example shows how to collect and display IDP statistics. It also s

NXC CLI Reference Guide163CHAPTER 23 Device HADevice HA lets a backup NXC automatically take over if the master NXC fails. Figure 14 Device HA Bac

Chapter 23 Device HANXC CLI Reference Guide16423.1.1 Before You Begin• Configure a static IP address for each interface that you will have device HA

Chapter 23 Device HANXC CLI Reference Guide165Virtual Router and Management IP Addresses• If a backup takes over for the master, it uses the master’s

Chapter 23 Device HANXC CLI Reference Guide166[no] device-ha ap-mode authentication {string key | ah-md5 key}Sets the authentication method the virtua

Chapter 23 Device HANXC CLI Reference Guide16723.4.2 Active-Passive Mode Device HA Command ExampleThis example configures a NXC to be a master NXC f

Chapter 23 Device HANXC CLI Reference Guide168

NXC CLI Reference Guide169CHAPTER 24 User/GroupThis chapter describes how to set up user accounts, user groups, and user settings for the NXC. You ca

Chapter 1 Command Line InterfaceNXC CLI Reference Guide17Enter the user name and password at the prompts. The default login username is admin and pa

Chapter 24 User/GroupNXC CLI Reference Guide17024.2 User/Group Commands SummaryThe following table identifies the values required for many username/g

Chapter 24 User/GroupNXC CLI Reference Guide17124.2.2 User Group CommandsThis table lists the commands for groups.24.2.3 User Setting CommandsThis

Chapter 24 User/GroupNXC CLI Reference Guide17224.2.3.1 User Setting Command ExamplesThe following commands show the current settings for the number

Chapter 24 User/GroupNXC CLI Reference Guide17324.2.4 MAC Auth CommandsThis table lists the commands for mappings MAC addresses to MAC address user

Chapter 24 User/GroupNXC CLI Reference Guide174• Use upper case letters in the account MAC addresses 24.2.5 Additional User CommandsThis table lists

Chapter 24 User/GroupNXC CLI Reference Guide17524.2.5.1 Additional User Command ExamplesThe following commands display the users that are currently

Chapter 24 User/GroupNXC CLI Reference Guide176The following commands display the users that are currently locked out and then unlocks the user who is

NXC CLI Reference Guide177CHAPTER 25 AddressesThis chapter describes how to set up addresses and address groups for the NXC. Use the configure termi

Chapter 25 AddressesNXC CLI Reference Guide17825.2 Address Commands SummaryThe following table describes the values required for many address object

Chapter 25 AddressesNXC CLI Reference Guide17925.2.1.1 Address Object Command ExamplesThe following example creates three address objects and then d

Chapter 1 Command Line InterfaceNXC CLI Reference Guide18The following table describes the elements in this screen.Before you use the Console, ensure

Chapter 25 AddressesNXC CLI Reference Guide18025.2.2.1 Address Group Command ExamplesThe following commands create three address objects A0, A1, and

NXC CLI Reference Guide181CHAPTER 26 ServicesUse service objects to define TCP applications, UDP applications, and ICMP messages. You can also create

Chapter 26 ServicesNXC CLI Reference Guide18226.2.1.1 Service Object Command ExamplesThe following commands create one service and display informatio

Chapter 26 ServicesNXC CLI Reference Guide18326.2.2.1 Service Group Command ExamplesThe following commands create service ICMP_ECHO, create service

Chapter 26 ServicesNXC CLI Reference Guide184

NXC CLI Reference Guide185CHAPTER 27 SchedulesUse schedules to set up one-time and recurring schedules for policy routes, firewall rules, application

Chapter 27 SchedulesNXC CLI Reference Guide186The following table lists the schedule commands.27.2.1 Schedule Command ExamplesThe following commands

NXC CLI Reference Guide187CHAPTER 28 AAA ServerThis chapter introduces and shows you how to configure the NXC to use external authentication servers.

Chapter 28 AAA ServerNXC CLI Reference Guide18828.2.1 aaa group server ad Commands The following table lists the aaa group server ad commands you use

Chapter 28 AAA ServerNXC CLI Reference Guide18928.2.2 aaa group server ldap Commands The following table lists the aaa group server ldap commands yo

Chapter 1 Command Line InterfaceNXC CLI Reference Guide192 Enter the IP address of the NXC and click OK. 3 Next, enter the user name of the accoun

Chapter 28 AAA ServerNXC CLI Reference Guide19028.2.3 aaa group server radius Commands The following table lists the aaa group server radius commands

Chapter 28 AAA ServerNXC CLI Reference Guide191[no] aaa group server radius group-nameSets a descriptive name for the RADIUS server group. The no com

Chapter 28 AAA ServerNXC CLI Reference Guide19228.2.4 aaa group server Command ExampleThe following example creates a RADIUS server group with two me

NXC CLI Reference Guide193CHAPTER 29 Authentication ObjectsThis chapter shows you how to select different authentication methods for user authenticat

Chapter 29 Authentication ObjectsNXC CLI Reference Guide19429.2.1 aaa authentication Command ExampleThe following example creates an authentication p

Chapter 29 Authentication ObjectsNXC CLI Reference Guide19529.3 test aaa CommandThe following table lists the test aaa command you use to teat a use

Chapter 29 Authentication ObjectsNXC CLI Reference Guide196

NXC CLI Reference Guide197CHAPTER 30 Authentication ServerThis chapter shows you how to configure the NXC as an authentication server for access poin

Chapter 30 Authentication ServerNXC CLI Reference Guide19830.2.1 Authentication Server Command ExamplesThe following example shows you how to enable

NXC CLI Reference Guide199CHAPTER 31 ENCThis chapter shows you how to configure the NXC as an ENC agent and allow it to be managed by the ENC server

 IMPORTANT!READ CAREFULLY BEFORE USE.KEEP THIS GUIDE FOR FUTURE REFERENCE.This is a Reference Guide for a series of products intended for people who

Chapter 1 Command Line InterfaceNXC CLI Reference Guide205 If your login is successful, the command line appears and the status bar at the bottom of t

Chapter 31 ENCNXC CLI Reference Guide200enc-agent periodic-inform interval <10..86400>Sets how often (in seconds) the NXC sends Inform messages

Chapter 31 ENCNXC CLI Reference Guide20131.2.1 ENC-Agent Command ExamplesThe following example shows you how to turn on the ENC agent feature on the

Chapter 31 ENCNXC CLI Reference Guide202

NXC CLI Reference Guide203CHAPTER 32 CertificatesThis chapter explains how to use the Certificates.32.1 Certificates OverviewThe NXC can use certifi

Chapter 32 CertificatesNXC CLI Reference Guide20432.4 Certificates Commands SummaryThe following table lists the commands that you can use to display

Chapter 32 CertificatesNXC CLI Reference Guide205ca generate pkcs10 name certificate_name cn-type {ip cn cn_address|fqdn cn cn_domain_name|mail cn cn

Chapter 32 CertificatesNXC CLI Reference Guide20632.5 Certificates Commands ExamplesThe following example creates a self-signed X.509 certificate wit

NXC CLI Reference Guide207CHAPTER 33 SystemThis chapter provides information on the commands that correspond to what you can configure in the system

Chapter 33 SystemNXC CLI Reference Guide208Figure 16 Access Page Customization You can specify colors in one of the following ways:• color-rgb: Ent

Chapter 33 SystemNXC CLI Reference Guide20933.3 Host Name CommandsThe following table describes the commands available for the hostname and domain n

Chapter 1 Command Line InterfaceNXC CLI Reference Guide21Figure 4 SSH Login Example 1.3 How to Find Commands in this GuideYou can simply look for

Chapter 33 SystemNXC CLI Reference Guide21033.4.1 Date/Time CommandsThe following table describes the commands available for date and time setup. You

Chapter 33 SystemNXC CLI Reference Guide21133.5 Console Port Speed This section shows you how to set the console port speed when you connect to the

Chapter 33 SystemNXC CLI Reference Guide21233.6.2 DNS Command ExampleThis command sets an A record that specifies the mapping of a fully qualified do

NXC CLI Reference Guide213CHAPTER 34 System Remote ManagementThis chapter shows you how to determine which services/protocols can access which NXC zo

Chapter 34 System Remote ManagementNXC CLI Reference Guide21434.2 Common System Command Input ValuesThe following table identifies the values require

Chapter 34 System Remote ManagementNXC CLI Reference Guide21534.3.1 HTTP/HTTPS Command ExamplesThis following example adds a service control rule th

Chapter 34 System Remote ManagementNXC CLI Reference Guide216This command sets an authentication method used by the HTTP/HTTPS server to authenticate

Chapter 34 System Remote ManagementNXC CLI Reference Guide21734.4.4 SSH Command ExamplesThis command sets a service control rule that allowed the co

Chapter 34 System Remote ManagementNXC CLI Reference Guide21834.6 Telnet CommandsThe following table describes the commands available for Telnet. You

Chapter 34 System Remote ManagementNXC CLI Reference Guide21934.7 Configuring FTP You can upload and download the NXC’s firmware and configuration f

Chapter 1 Command Line InterfaceNXC CLI Reference Guide221.4.3 Command SummaryThis section lists the commands for the feature in one or more tables.1

Chapter 34 System Remote ManagementNXC CLI Reference Guide220This command displays FTP settings.34.8 SNMP Simple Network Management Protocol is a pro

Chapter 34 System Remote ManagementNXC CLI Reference Guide22134.8.3 SNMP CommandsThe following table describes the commands available for SNMP. You

Chapter 34 System Remote ManagementNXC CLI Reference Guide22234.8.4 SNMP Commands ExamplesThe following command sets a service control rule that allo

NXC CLI Reference Guide223CHAPTER 35 File ManagerThis chapter covers how to work with the NXC’s firmware, certificates, configuration files, custom I

Chapter 35 File ManagerNXC CLI Reference Guide224These files have the same syntax, which is also identical to the way you run CLI commands manually. A

Chapter 35 File ManagerNXC CLI Reference Guide225 “exit” or “!'” must follow sub commands if it is to make the NXC exit sub command mode.Line 3

Chapter 35 File ManagerNXC CLI Reference Guide226• When you change the configuration, the NXC creates a startup-config.conf file of the current config

Chapter 35 File ManagerNXC CLI Reference Guide22735.4 File Manager Commands SummaryThe following table lists the commands that you can use for file

Chapter 35 File ManagerNXC CLI Reference Guide22835.5 File Manager Command ExampleThis example saves a back up of the current configuration before ap

Chapter 35 File ManagerNXC CLI Reference Guide229 The firmware update can take up to five minutes. Do not turn off or reset the NXC while the firmwa

Chapter 1 Command Line InterfaceNXC CLI Reference Guide23See Chapter 24 on page 169 for more information about the user types. User users can only lo

Chapter 35 File ManagerNXC CLI Reference Guide23035.6.4 Command Line FTP Configuration File Download ExampleThe following example gets a configuratio

Chapter 35 File ManagerNXC CLI Reference Guide23135.8 Notification of a Damaged Recovery Image or FirmwareThe NXC’s recovery image and/or firmware c

Chapter 35 File ManagerNXC CLI Reference Guide232Figure 23 Firmware Damaged35.9 Restoring the Recovery Image (NXC5200 Only)This procedure requires

Chapter 35 File ManagerNXC CLI Reference Guide233Figure 25 atuk Command for Restoring the Recovery Image4 Enter Y and wait for the “Starting XMODEM

Chapter 35 File ManagerNXC CLI Reference Guide234Figure 29 atgo Debug Command35.10 Restoring the Firmware This procedure requires the NXC’s firmwar

Chapter 35 File ManagerNXC CLI Reference Guide2358 After the transfer is complete, “Firmware received” or “ZLD-current received” displays. Wait (up t

Chapter 35 File ManagerNXC CLI Reference Guide236Figure 34 Restart Complete35.11 Restoring the Default System Database The default system database

Chapter 35 File ManagerNXC CLI Reference Guide237Figure 35 Default System Database Console Session Warning at Startup: Anti-virusFigure 36 Defaul

Chapter 35 File ManagerNXC CLI Reference Guide23835.11.1 Using the atkz -u Debug Command (NXC5200 Only) You only need to use the atkz -u command if

Chapter 35 File ManagerNXC CLI Reference Guide2398 Set the transfer mode to binary (type bin).9 Transfer the firmware file from your computer to the

Chapter 1 Command Line InterfaceNXC CLI Reference Guide24Figure 5 Help: Available Commands Example 1 Figure 6 Help: Available Command Example 2 1.

Chapter 35 File ManagerNXC CLI Reference Guide240Figure 44 Startup Complete

NXC CLI Reference Guide241CHAPTER 36 LogsThis chapter provides information about the NXC’s logs.  When the system log reaches the maximum number of

Chapter 36 LogsNXC CLI Reference Guide24236.1.1 Log Entries CommandsThis table lists the commands to look at log entries.36.1.2 System Log CommandsT

Chapter 36 LogsNXC CLI Reference Guide24336.1.2.1 System Log Command ExamplesThe following command displays the current status of the system log.36.

Chapter 36 LogsNXC CLI Reference Guide244This table lists the commands for the remote syslog server settings.36.1.4 E-mail Profile Log CommandsThis t

Chapter 36 LogsNXC CLI Reference Guide24536.1.4.1 E-mail Profile Command ExamplesThe following commands set up e-mail log 1.[no] logging mail <1.

Chapter 36 LogsNXC CLI Reference Guide24636.1.5 Console Port Log CommandsThis table lists the commands for the console port settings.36.1.6 Access P

Chapter 36 LogsNXC CLI Reference Guide247show wtp-logging status mail [ap_mac] Displays the logging status for the specified AP’s mail log.show wtp-l

Chapter 36 LogsNXC CLI Reference Guide248

NXC CLI Reference Guide249CHAPTER 37 Reports and RebootThis chapter provides information about the report associated commands and how to restart the

Chapter 1 Command Line InterfaceNXC CLI Reference Guide251.6.3 Entering Partial CommandsThe CLI does not accept partial or incomplete commands. You

Chapter 37 Reports and RebootNXC CLI Reference Guide25037.1.2 Report Command ExamplesThe following commands start collecting data, display the traffi

Chapter 37 Reports and RebootNXC CLI Reference Guide25137.2 Email Daily Report CommandsThe following table identifies the values used in some of the

Chapter 37 Reports and RebootNXC CLI Reference Guide252smtp-port <1..65535> Sets the SMTP service port.no smtp-port Resets the SMTP service port

Chapter 37 Reports and RebootNXC CLI Reference Guide25337.2.1 Email Daily Report ExampleThis example sets the NXC to send a daily report e-mail.Rout

Chapter 37 Reports and RebootNXC CLI Reference Guide254This displays the email daily report settings and has the NXC send the report now.37.3 RebootU

NXC CLI Reference Guide255CHAPTER 38 Session TimeoutUse these commands to modify and display the session timeout values. You must use the configure t

Chapter 38 Session TimeoutNXC CLI Reference Guide256

NXC CLI Reference Guide257CHAPTER 39 DiagnosticsThis chapter covers how to use the diagnostics feature. 39.1 DiagnosticsThe diagnostics feature pro

Chapter 39 DiagnosticsNXC CLI Reference Guide258

NXC CLI Reference Guide259CHAPTER 40 Packet Flow ExploreThis chapter covers how to use the packet flow explore feature. 40.1 Packet Flow ExploreUse

Chapter 1 Command Line InterfaceNXC CLI Reference Guide261.7 Input ValuesYou can use the ? or [TAB] to get more information about the next input valu

Chapter 40 Packet Flow ExploreNXC CLI Reference Guide26040.3 Packet Flow Explore Commands ExampleThe following example shows all routing related func

NXC CLI Reference Guide261CHAPTER 41 Maintenance ToolsUse the maintenance tool commands to check the conditions of other devices through the NXC. The

Chapter 41 Maintenance ToolsNXC CLI Reference Guide262Here are maintenance tool commands that you can use in configure mode.Table 153 Maintenance To

Chapter 41 Maintenance ToolsNXC CLI Reference Guide26341.1.1 Command ExamplesSome packet-trace command examples are shown below.snaplen <68..1512

Chapter 41 Maintenance ToolsNXC CLI Reference Guide264The following example creates an ARP table entry for IP address 192.168.1.10 and MAC address 01:

Chapter 41 Maintenance ToolsNXC CLI Reference Guide265Then configure the following settings to capture packets going through the NXC’s WAN1 interface

Chapter 41 Maintenance ToolsNXC CLI Reference Guide266

NXC CLI Reference Guide267CHAPTER 42 Watchdog TimerThis chapter provides information about the NXC’s watchdog timers. 42.1 Hardware Watchdog TimerTh

Chapter 42 Watchdog TimerNXC CLI Reference Guide268 The software-watchdog-timer commands are for support engineers. It is recommended that you not mo

Chapter 42 Watchdog TimerNXC CLI Reference Guide26942.3.1 Application Watchdog Commands ExampleThe following example displays the application watchd

Chapter 1 Command Line InterfaceNXC CLI Reference Guide27e-mail 1-64 alphanumeric or .@_-encryption key 16-648-32“0x” or “0X” + 16-64 hexadecimal val

Chapter 42 Watchdog TimerNXC CLI Reference Guide270The following example lists the processes that the application watchdog is monitoring.Router# confi

NXC CLI Reference Guide271CHAPTER 43 Managed AP CommandsConnect directly to a managed AP’s CLI (Command Line Interface) to configure the managed AP’s

Chapter 43 Managed AP CommandsNXC CLI Reference Guide27243.3 CAPWAP Client CommandsUse the CAPWAP client commands to configure the AP’s IP address an

Chapter 43 Managed AP CommandsNXC CLI Reference Guide27343.3.1 CAPWAP Client Commands ExampleThis example shows how to configure the AP’s management

Chapter 43 Managed AP CommandsNXC CLI Reference Guide27443.4 DNS Server CommandsThe following table describes commands for configuring the AP’s DNS s

Chapter 43 Managed AP CommandsNXC CLI Reference Guide27543.4.2 DNS Server Commands and DHCPThe AP in the example in Section 43.4.1 on page 274 uses

Chapter 43 Managed AP CommandsNXC CLI Reference Guide276

List of CommandsNXC CLI Reference Guide277List of CommandsThis section lists the root commands in alphabetical order.[no] 2g-scan-channel wireless_ch

List of CommandsNXC CLI Reference Guide278[no] app-watch-dog auto-recover ... 268[no] app-watch-dog con

List of CommandsNXC CLI Reference Guide279[no] destinationip address_object ... 122[no] device-ha activa

Chapter 1 Command Line InterfaceNXC CLI Reference Guide28password Used in user and ip1-63 alphanumeric or `~!@#$%^&*()_-+={}|\;:'<,>./U

List of CommandsNXC CLI Reference Guide280[no] interface {interface_name | EnterpriseWLAN} ... 67[no] interface interfa

List of CommandsNXC CLI Reference Guide281[no] logging mail <1..2> schedule {full | hourly} ... 245[no] logging ma

List of CommandsNXC CLI Reference Guide282[no] second-dns-server {ip | interface_name {1st-dns | 2nd-dns | 3rd-dns} | EnterpriseW-LAN} ...

List of CommandsNXC CLI Reference Guide283[no] source {address_object|any} ... 67[no] source address_ob

List of CommandsNXC CLI Reference Guide284[no] zone profile_name ... 108{11n | bg | a} ...

List of CommandsNXC CLI Reference Guide285app other insert rule_number ... 132app other move rule_n

List of CommandsNXC CLI Reference Guide286ch-width wlan_htcw ... 80clear ...

List of CommandsNXC CLI Reference Guide287debug ip dns ... 33debug ip virtual-serv

List of CommandsNXC CLI Reference Guide288exit ... 114exit ...

List of CommandsNXC CLI Reference Guide289| yes | no} log {any | no | log | log-alert} action action_mask ... 154idp search system-protect my

Chapter 1 Command Line InterfaceNXC CLI Reference Guide291.8 Saving Configuration Changes Use the write command to save the current configuration to

List of CommandsNXC CLI Reference Guide290load-balancing sigma <51..100> ... 100load-balancing t

List of CommandsNXC CLI Reference Guide291no ip dns server rule <1..64> ... 212no ip dns serve

List of CommandsNXC CLI Reference Guide292policy move policy_number to policy_number ... 67port <0..65535>

List of CommandsNXC CLI Reference Guide293setenv-startup stop-on-error off ... 228show ...

List of CommandsNXC CLI Reference Guide294show bwm activation ... 68show bwm-usage < [p

List of CommandsNXC CLI Reference Guide295show groupname [groupname] ... 171show hardware-watchdog

List of CommandsNXC CLI Reference Guide296show idp statistics ranking {signature-name | source | destination} ... 162show idp statistics su

List of CommandsNXC CLI Reference Guide297show port setting ... 59show port status ...

List of CommandsNXC CLI Reference Guide298show username [username] ... 170show users {username |

List of CommandsNXC CLI Reference Guide299test aaa ... 32test aaa {server|secu

Contents OverviewNXC CLI Reference Guide3Contents OverviewCommand Line Interface ...

Chapter 1 Command Line InterfaceNXC CLI Reference Guide30

List of CommandsNXC CLI Reference Guide300wlan-macfilter-profile rename macfilter_profile_name1 macfilter_profile_name2 ... 88wlan-monitor-profile r

NXC CLI Reference Guide31CHAPTER 2 User and Privilege ModesThis chapter describes how to use these two modes.2.1 User And Privilege Modes This is th

Chapter 2 User and Privilege ModesNXC CLI Reference Guide32Subsequent chapters in this guide describe the configuration commands. User/privilege mode

Chapter 2 User and Privilege ModesNXC CLI Reference Guide332.1.1 Debug CommandsDebug commands marked with an asterisk (*) are not available when the

Chapter 2 User and Privilege ModesNXC CLI Reference Guide34

NXC CLI Reference Guide35CHAPTER 3 Object ReferenceThis chapter describes how to use object reference commands.3.1 Object Reference CommandsThe obje

Chapter 3 Object ReferenceNXC CLI Reference Guide363.1.1 Object Reference Command ExampleThis example shows how to check which configuration is using

NXC CLI Reference Guide37CHAPTER 4 StatusThis chapter explains some commands you can use to display information about the NXC’s current operational s

Chapter 4 StatusNXC CLI Reference Guide38Here are examples of the commands that display the CPU and disk utilization. Here are examples of the command

Chapter 4 StatusNXC CLI Reference Guide39Here is an example of the command that displays the open ports. Router(config)# show socket openNo. Proto

Contents OverviewNXC CLI Reference Guide4Diagnostics ...

Chapter 4 StatusNXC CLI Reference Guide40Here are examples of the commands that display the system uptime and model, firmware, and build information.T

NXC CLI Reference Guide41CHAPTER 5 RegistrationThis chapter introduces myzyxel.com and shows you how to register the NXC for IDP/AppPatrol and anti-v

Chapter 5 RegistrationNXC CLI Reference Guide42When using the trial, you can switch from one engine to the other in the Registration screen. There is

Chapter 5 RegistrationNXC CLI Reference Guide435.2 Registration CommandsThe following table identifies the values required for many of these command

Chapter 5 RegistrationNXC CLI Reference Guide445.2.1 Command ExamplesThe following commands allow you to register your device with an existing accoun

Chapter 5 RegistrationNXC CLI Reference Guide45019 Bangladesh 020 Barbados021 Belarus 022 Belgium023 Belize 024 Benin025 Bermuda 026 Bhutan027 Bolivi

Chapter 5 RegistrationNXC CLI Reference Guide46095 Guyana 096 Haiti097 Heard and McDonald Islands 098 Holy See (City Vatican State)099 Honduras 100 Ho

Chapter 5 RegistrationNXC CLI Reference Guide47171 Poland 172 Portugal173 Puerto Rico 174 Qatar175 Reunion Island 176 Romania177 Russian Federation 1

Chapter 5 RegistrationNXC CLI Reference Guide48

NXC CLI Reference Guide49CHAPTER 6 InterfacesThis chapter shows you how to use interface-related commands.6.1 Interface OverviewIn general, an inter

Table of ContentsNXC CLI Reference Guide5Table of ContentsContents Overview ...

Chapter 6 InterfacesNXC CLI Reference Guide50The following sections introduce commands that are supported by several types of interfaces.6.2.1 Basic

Chapter 6 InterfacesNXC CLI Reference Guide516.2.1.1 Basic Interface Properties Command ExamplesThe following commands make Ethernet interface ge1 a

Chapter 6 InterfacesNXC CLI Reference Guide52This example shows how to modify the name of interface ge4 to “VIP”. First you have to check the interfac

Chapter 6 InterfacesNXC CLI Reference Guide536.2.2 DHCP Setting CommandsThis table lists DHCP setting commands. DHCP is based on DHCP pools. Create

Chapter 6 InterfacesNXC CLI Reference Guide54[no] client-identifier mac_address Specifies the MAC address that appears in the DHCP client list. The no

Chapter 6 InterfacesNXC CLI Reference Guide55[no] starting-address ip pool-size <1..65535>Sets the IP start address and maximum pool size of th

Chapter 6 InterfacesNXC CLI Reference Guide566.2.2.1 DHCP Setting Command ExamplesThe following example uses these commands to configure DHCP pool DH

Chapter 6 InterfacesNXC CLI Reference Guide576.2.3 Connectivity Check (Ping-check) CommandsUse these commands to have an interface regularly check t

Chapter 6 InterfacesNXC CLI Reference Guide586.2.3.1 Connectivity Check Command ExampleThe following commands show you how to set the WAN1 interface

Chapter 6 InterfacesNXC CLI Reference Guide596.4 Port CommandsThis section covers commands that are specific to ports. In CLI, representative inter

Table of ContentsNXC CLI Reference Guide6Chapter 3Object Reference ...

Chapter 6 InterfacesNXC CLI Reference Guide606.5 Port Role CommandsThe following table describes the commands available for port role identification.

Chapter 6 InterfacesNXC CLI Reference Guide61 For the NXC which supports more than one USB ports, these commands only apply to the USB storage devic

Chapter 6 InterfacesNXC CLI Reference Guide626.6.1 USB Storage General Commands ExampleThis example shows how to display the status of the connected

Chapter 6 InterfacesNXC CLI Reference Guide63The following table describes the commands available for VLAN interface management. You must use the con

Chapter 6 InterfacesNXC CLI Reference Guide646.7.1 VLAN Interface ExamplesThis example creates a VLAN interface called ‘vlan0’.. This example changes

NXC CLI Reference Guide65CHAPTER 7 RouteThis chapter shows you how to configure policies for IP routing and static routes on your NXC.7.1 Policy Rou

Chapter 7 RouteNXC CLI Reference Guide66The following table describes the commands available for policy route. You must use the configure terminal com

Chapter 7 RouteNXC CLI Reference Guide67no dscp-marking Use this command to have the NXC not modify the DSCP value of the route’s outgoing packets. [

Chapter 7 RouteNXC CLI Reference Guide687.2.1 Assured Forwarding (AF) PHB for DiffServAssured Forwarding (AF) behavior is defined in RFC 2597. The AF

Chapter 7 RouteNXC CLI Reference Guide697.2.2 Policy Route Command ExampleThe following commands create two address objects (TW_SUBNET and GW_1) and

Table of ContentsNXC CLI Reference Guide77.4 Static Route Commands ...

Chapter 7 RouteNXC CLI Reference Guide70Figure 10 Example of Static Routing Topology7.4 Static Route CommandsThe following table describes the comm

Chapter 7 RouteNXC CLI Reference Guide717.5 Learned Routing Information CommandsThis table lists the commands to look at learned routing information

Chapter 7 RouteNXC CLI Reference Guide72

NXC CLI Reference Guide73CHAPTER 8 AP ManagementThis chapter shows you how to configure wireless AP management options on your NXC.8.1 AP Management

Chapter 8 AP ManagementNXC CLI Reference Guide748.2 AP Management CommandsThe following table identifies the values required for many of these comman

Chapter 8 AP ManagementNXC CLI Reference Guide75slot_name monitor-profile profile_nameSets the specified radio (slot_name) to monitor mode and assign

Chapter 8 AP ManagementNXC CLI Reference Guide768.2.1 AP Management Commands ExampleThe following example shows you how to add an AP to the managemen

NXC CLI Reference Guide77CHAPTER 9 Wireless LAN ProfilesThis chapter shows you how to configure wireless LAN profiles on your NXC.9.1 Wireless LAN

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide78The following table describes the commands available for radio and monitor profile management.

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide79band {2.4G |5G} band-mode{11n | bg | a}Sets the radio band (2.4 GHz or 5 GHz) and band mode f

Table of ContentsNXC CLI Reference Guide8Chapter 13Wireless Load Balancing ...

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide80beacon-interval <40..1000> Sets the beacon interval for this profile.When a wirelessly n

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide812g-support-speed {disable | wlan_2g_support_speed}Disables or sets the 2.4 GHz support rate.T

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide829.2.1 AP & Monitor Profile Commands ExampleThe following example shows you how to set up

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide839.3 SSID Profile CommandsThe following table identifies the values required for many of thes

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide849.3.1 SSID Profile ExampleThe following example creates an SSID profile with the name ‘ZyXEL’

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide85The following table describes the commands available for security profile management. You mus

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide86mac-auth delimiter calling-station-id {colon | dash | none}Select the separator the external

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide879.4.1 Security Profile ExampleThe following example creates a security profile with the name

Chapter 9 Wireless LAN ProfilesNXC CLI Reference Guide88The following table describes the commands available for security profile management. You must

NXC CLI Reference Guide89CHAPTER 10 Rogue APThis chapter shows you how to set up Rogue Access Point (AP) detection and containment.10.1 Rogue AP Det

Table of ContentsNXC CLI Reference Guide9Chapter 20Application Patrol...

Chapter 10 Rogue APNXC CLI Reference Guide9010.2.1 Rogue AP Detection ExamplesThis example sets the device associated with MAC address 00:13:49:11:11

Chapter 10 Rogue APNXC CLI Reference Guide91This example shows the friendly AP detection list. This example shows the combined rogue and friendly AP

Chapter 10 Rogue APNXC CLI Reference Guide92 Containing a rogue AP means broadcasting unviable login data at it, preventing legitimate wireless clien

NXC CLI Reference Guide93CHAPTER 11 Wireless Frame CaptureThis chapter shows you how to configure and use wireless frame capture on the NXC.11.1 Wir

Chapter 11 Wireless Frame CaptureNXC CLI Reference Guide94The following table describes the commands available for wireless frame capture. You must us

NXC CLI Reference Guide95CHAPTER 12 Dynamic Channel SelectionThis chapter shows you how to configure and use dynamic channel selection on the NXC.12.

Chapter 12 Dynamic Channel SelectionNXC CLI Reference Guide9612.2.1 DCS ExamplesThis example creates a DCS configuration. dcs 5g-selected-channel 5g

Chapter 12 Dynamic Channel SelectionNXC CLI Reference Guide97This example displays the DCS configuration created in the previous example. Router(con

Chapter 12 Dynamic Channel SelectionNXC CLI Reference Guide98

NXC CLI Reference Guide99CHAPTER 13 Wireless Load BalancingThis chapter shows you how to configure wireless load balancing.13.1 Wireless Load Balanc