The Cisco Wireless LAN solution command-line interface (CLI) enables operators to connect an ASCII console to the Cisco Wireless LAN Controller and configure the controller and its associated access points.
To display the number of automatic client handoffs after retries, use the show advanced client-handoff command.
show advanced client-handoff
Syntax Description
This command has no arguments or keywords.
Examples
This example shows how to display the client auto handoff mode after excessive retries:
> show advanced client-handoff
Client auto handoff after retries................ 130
Related Commands
config advanced client-handoff
config advanced 802.11 summary
show l2tp
To display Layer 2 Tunneling Protocol (L2TP) sessions, use the show l2tp command.
show l2tp {
summary |
ip_address}
Syntax Description
summary
Displays all L2TP sessions.
ip_address
IP address.
Command Default
None.
Examples
This example shows how to display a summary of all L2TP sessions:
> show l2tp summary
LAC_IPaddr LTid LSid RTid RSid ATid ASid State
---------- ---- ---- ---- ---- ---- ---- -----
show logging
To display the syslog facility logging parameters and buffer contents, use the show logging command.
show logging
Syntax Description
This command has no arguments or keywords.
Command Default
None.
Examples
This example shows how to display the current settings and buffer content details:
> show logging
Logging to buffer :
- Logging of system messages to buffer :
- Logging filter level.......................... errors
- Number of system messages logged.............. 67227
- Number of system messages dropped............. 21136
- Logging of debug messages to buffer ........... Disabled
- Number of debug messages logged............... 0
- Number of debug messages dropped.............. 0
Logging to console :
- Logging of system messages to console :
- Logging filter level.......................... errors
- Number of system messages logged.............. 0
- Number of system messages dropped............. 88363
- Logging of debug messages to console .......... Enabled
- Number of debug messages logged............... 0
- Number of debug messages dropped.............. 0
Logging to syslog :
- Syslog facility................................ local0
- Logging of system messages to syslog :
- Logging filter level.......................... errors
- Number of system messages logged.............. 67227
- Number of system messages dropped............. 21136
- Logging of debug messages to syslog ........... Disabled
- Number of debug messages logged............... 0
- Number of debug messages dropped.............. 0
- Number of remote syslog hosts.................. 0
- Host 0....................................... Not Configured
- Host 1....................................... Not Configured
- Host 2....................................... Not Configured
Logging of traceback............................. Disabled
Logging of process information................... Disabled
Logging of source file informational............. Enabled
Timestamping of messages.........................
- Timestamping of system messages................ Enabled
- Timestamp format.............................. Date and Time
- Timestamping of debug messages................. Enabled
- Timestamp format.............................. Date and Time
Logging buffer (67227 logged, 21136 dropped)
*Apr 03 09:48:01.728: %MM-3-INVALID_PKT_RECVD: mm_listen.c:5508 Received an invalid
packet from 1.100.163.51. Source member:0.0.0.0. source member unknown.
*Apr 03 09:47:34.194: %LWAPP-3-DECODE_ERR: spam_lrad.c:1271 Error decoding discovery
request from AP 00:13:5f:0e:d4:20
*Apr 03 09:47:34.194: %LWAPP-3-DISC_OTAP_ERR: spam_lrad.c:5554 Ignoring OTAP discovery
request from AP 00:13:5f:0e:d4:20, OTAP is disabled
Previous message occurred 2 times.
Related Commands
config logging syslog host
config logging syslog facility
config logging syslog level
show mobility anchor
To display the wireless LAN anchor export list for the Cisco wireless LAN controller mobility groups or to display a list and status of controllers configured as mobility anchors for a specific WLAN or wired guest LAN, use the show mobility anchor command.
show mobility anchor [
wlan wlan_id |
guest-lan guest_lan_id]
Syntax Description
wlan
(Optional) Displays wireless LAN mobility group settings.
wlan_id
Wireless LAN identifier from 1 to 512 (inclusive).
guest-lan
(Optional) Displays guest LAN mobility group settings.
guest_lan_id
Guest LAN identifier from 1 to 5 (inclusive).
Command Default
None.
Usage Guidelines
The status field display (see example) shows one of the following values:
UP—The controller is reachable and able to pass data.
CNTRL_PATH_DOWN—The mpings failed. The controller cannot be reached through the control path and is considered failed.
DATA_PATH_DOWN—The epings failed. The controller cannot be reached and is considered failed.
CNTRL_DATA_PATH_DOWN—Both the mpings and epings failed. The controller cannot be reached and is considered failed.
Examples
This example shows how to display a mobility wireless LAN anchor list:
> show mobility anchor
Mobility Anchor Export List
WLAN ID IP Address Status
------- --------------- ------
12 192.168.0.15 UP
GLAN ID IP Address Status
------- --------------- -------
1 192.168.0.9 CNTRL_DATA_PATH_DOWN
Related Commands
config guest-lan mobility anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config mobility statistics reset
config wlan mobility anchor
debug mobility
show mobility anchor
show mobility statistics
show mobility foreign-map
show mobility summary
show mobility ap-list
To display the mobility AP list, use the show mobility ap-list command.
show mobility ap-list
Syntax Description
This command has no arguments or keywords.
Command Default
None.
Examples
This example shows how to display the mobility AP list:
> show mobility ap-list
AP Name AP Radio MAC address Controller Learnt From
------------------------------- ----------------------- --------------- ----------------
AP30e4.dbc5.38ab b8:62:1f:e5:33:10 9.7.104.10 Self
Related Commands
config mobility group
debug mobility
show mobility anchor
config wlan mobility foreign-map
config mobility group member
config wlan mobility anchor
show mobility summary
show mobility foreign-map
To display a mobility wireless LAN foreign map list, use the show mobility foreign-map command.
show mobility foreign-map wlan wlan_id
Syntax Description
wlan
Displays the mobility WLAN foreign-map list.
wlan_id
Wireless LAN identifier between 1 and 512.
Command Default
None.
Examples
This example shows how to get a mobility wireless LAN foreign map list:
> show mobility foreign-map wlan 2
Mobility Foreign Map List
WLAN ID Foreign MAC Address Interface
------- ------------------- ---------
2 00:1b:d4:6b:87:20 dynamic-105
Related Commands
debug mobility
show mobility anchor
config wlan mobility foreign-map
config mobility group member
config wlan mobility anchor
show mobility summary
show mobility group member
To display the details of the mobility group members in the same domain, use the show mobility group member command.
show mobility group member hash
Syntax Description
hash
Displays the hash keys of the mobility group members in the same domain.
Command Default
None.
Examples
This example shows how to display the hash keys of the mobility group members:
> show mobility group member hash
Default Mobility Domain.......................... new-mob
IP Address Hash Key
---------------------------------------------------------
9.2.115.68 a819d479dcfeb3e0974421b6e8335582263d9169
9.6.99.10 0974421b6e8335582263d9169a819d479dcfeb3e
9.7.7.7 feb3e0974421b6e8335582263d9169a819d479dc
Related Commands
show certificate ssc
show mobility group member
config certificate ssc
config mobility group member hash
debug mobility
show mobility anchor
config wlan mobility foreign-map
config mobility group member
config wlan mobility anchor
show mobility summary
show mobility statistics
To display the statistics information for the Cisco wireless LAN controller mobility groups, use the show mobility statistics command.
show mobility statistics
Syntax Description
This command has no arguments or keywords.
Command Default
None.
Examples
This example shows how to display statistics of the mobility manager:
> show mobility statistics
Global Mobility Statistics
Rx Errors..................................... 0
Tx Errors..................................... 0
Responses Retransmitted....................... 0
Handoff Requests Received..................... 0
Handoff End Requests Received................. 0
State Transitions Disallowed.................. 0
Resource Unavailable.......................... 0
Mobility Initiator Statistics
Handoff Requests Sent......................... 0
Handoff Replies Received...................... 0
Handoff as Local Received..................... 2
Handoff as Foreign Received................... 0
Handoff Denys Received........................ 0
Anchor Request Sent........................... 0
Anchor Deny Received.......................... 0
Anchor Grant Received......................... 0
Anchor Transfer Received...................... 0
Mobility Responder Statistics
Handoff Requests Ignored...................... 0
Ping Pong Handoff Requests Dropped............ 0
Handoff Requests Dropped...................... 0
Handoff Requests Denied....................... 0
Client Handoff as Local....................... 0
Client Handoff as Foreign ................... 0
Client Handoff Inter Group ................... 0
Anchor Requests Received...................... 0
Anchor Requests Denied........................ 0
Anchor Requests Granted....................... 0
Anchor Transferred............................ 0
Related Commands
config mobility group anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config mobility statistics reset
debug mobility
show mobility anchor
show mobility summary
show mobility summary
To display the summary information for the Cisco WLC mobility groups, use the show mobility summary command.
show mobility summary
Syntax Description
This command has no arguments or keywords.
Command Default
None
Usage Guidelines
Some WLAN controllers may list no mobility security mode.
Examples
The following is a sample output of the show mobility summary command.
Device > show mobility summary
Symmetric Mobility Tunneling (current) .......... Disabled
Symmetric Mobility Tunneling (after reboot) ..... Disabled
Mobility Protocol Port........................... 16666
Mobility Security Mode........................... Disabled
Default Mobility Domain.......................... snmp_gui
Multicast Mode .................................. Disabled
Mobility Domain ID for 802.11r................... 0x66bd
Mobility Keepalive Interval...................... 10
Mobility Keepalive Count......................... 3
Mobility Group Members Configured................ 1
Mobility Control Message DSCP Value.............. 0
Controllers configured in the Mobility Group
MAC Address IP Address Group Name Multicast IP Status
00:1b:d4:6b:87:20 1.100.163.70 snmp_gui 0.0.0.0 Up
Related Commands
config guest-lan mobility anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config mobility statistics reset
config wlan mobility anchor
debug mobility
show mobility anchor
show mobility statistics
show pmipv6 domain
To display the summary information of a PMIPv6 domain, use theshow pmipv6 domaincommand.
show pmipv6 domain domain_name profile profile_name
Syntax Description
domain_name
Name of the PMIPv6 domain. The domain name can be up to 127 case-sensitive alphanumeric characters.
profile
Specifies the PMIPv6 profile.
profile_name
Name of the profile associated with the PMIPv6 domain. The profile name can be up to 127 case-sensitive alphanumeric characters.
Examples
This example shows how to display the summary information of a PMIPv6 domain:
To display the binding information of a Mobile Access Gateway (MAG), use theshow pmipv6 mag bindingcommand.
show pmipv6 mag bindings [
lma lma_name |
nai nai_string]
Syntax Description
lma
(Optional) Displays the binding details of the MAG to an Local Mobility Anchor (LMA).
lma_name
Name of the LMA. The LMA name is case-sensitive and can be up to 127 alphanumeric characters.
nai
(Optional) Displays the binding details of the MAG to a client.
nai_string
Network Access Identifier (NAI) of the client. The NAI is case-sensitive and can be up to 127 alphanumeric characters. You can use all special characters except a colon.
Examples
This example shows how to display the MAG bindings:
To display the statistics of the Mobile Access Gateway (MAG), use the show pmipv6 mag statscommand.
show pmipv6 mag stats [
domain domain_name peer lma_name]
Syntax Description
domain
(Optional) Displays the MAG statistics for a Local Mobility Anchor (LMA) in the domain.
domain_name
Name of the PMIPv6 domain. The domain name is case-sensitive and can be up to 127 alphanumeric characters.
peer
(Optional) Displays the MAG statistics for an LMA.
lma_name
Name of the LMA. The LMA name is case sensitive and can be up to 127 alphanumeric characters.
Usage Guidelines
This table lists the descriptions of the LMA statistics.
Table 1 Descriptions of the LMA Statistics:
LMA Statistics
Description
PBU Sent
Total number of Proxy Binding Updates (PBUs) sent to the LMA by the MAG.
PBU is a request message sent by the MAG to a mobile node’s LMA for establishing a binding between the mobile node’s interface and its current care-of address (Proxy-CoA).
PBA Received
Total number of Proxy Binding Acknowledgements (PBAs) received by the MAG from the LMA.
PBA is a reply message sent by an LMA in response to a PBU message that it receives from a MAG.
PBRI Sent
Total number of Proxy Binding Revocation Indications (PBRIs) sent by the MAG to the LMA.
PBRI Received
Total number of PBRIs received from the LMA by the MAG.
PBRA Sent
Total number of Proxy Binding Revocation Acknowledgements (PBRAs) sent by the MAG to the LMA.
PBRA Received
Total number of PBRAs that the MAG receives from the LMA.
Number of Handoff
Number of handoffs between the MAG and the LMA.
Examples
This example shows how to display the LMA statistics:
> show pmipv6 mag stats
[M1]: Total Bindings : 1
[M1]: PBU Sent : 7
[M1]: PBA Rcvd : 4
[M1]: PBRI Sent : 0
[M1]: PBRI Rcvd : 0
[M1]: PBRA Sent : 0
[M1]: PBRA Rcvd : 0
[M1]: No Of handoff : 0
Related Commands
show pmipv6 domain
show wlan summary
show client summary
show pmipv6 mag globals
show pmipv6 mag bindings
config pmipv6 mag lma
config pmipv6 mag bri retries
config pmipv6 mag binding init-retx-time
config pmipv6 mag binding max-ret-time
config pmipv6 mag binding maximum
config pmipv6 mag binding lifetime
config pmipv6 mag binding refresh-time
config pmipv6 mag replay-protection
config pmipv6 mag bri delay
show pmipv6 profile summary
To display the summary of the PMIPv6 profiles, use theshow pmipv6 profile summarycommand.
show pmipv6 profile summary
Syntax Description
This command has no arguments or keywords.
Command Default
None.
Examples
This example shows how to display the summary of the PMIPv6 profiles:
> show pmipv6 profile summary
Profile Name WLAN IDS (Mapped)
------------ -----------------
Group1 6
Related Commands
show pmipv6 domain
show wlan summary
show client summary
show mag globals
config wlan pmipv6 profile-name
config Commands
This section lists the config commands to configure mobility.
Adds or changes a mobility anchor to a wireless LAN.
delete
Deletes a mobility anchor from a wireless LAN.
wlan
Specifies the wireless LAN anchor settings.
wlan_id
Wireless LAN identifier between 1 and 512 (inclusive).
guest-lan
Specifies the guest LAN anchor settings.
guest_lan_id
Guest LAN identifier between 1 and 5 (inclusive).
anchor_ip
IP address of the anchor controller.
Command Default
None.
Usage Guidelines
The wlan_id or guest_lan_id must exist and be disabled.
Auto-anchor mobility is enabled for the WLAN or wired guest LAN when you configure the first mobility anchor. Deleting the last anchor disables the auto-anchor mobility feature and resumes normal mobility for new associations.
Examples
This example shows how to add a mobility anchor with the IP address 192.12.1.5 to a wireless LAN ID 2:
> config mobility group anchor add wlan 2 192.12.1.5
This example shows how to delete a mobility anchor with the IP address 193.13.1.15 from a wireless LAN:
> config mobility group anchor delete wlan 5 193.13.1.5
Related Commands
config guest-lan mobility anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config mobility statistics reset
config wlan mobility anchor
debug mobility
show mobility anchor
show mobility statistics
show mobility summary
config mobility group domain
To configure the mobility domain name, use the config mobility group domain command.
config mobility group domain domain_name
Syntax Description
domain_name
Domain name. The domain name can be up to 31 case-sensitive characters.
Command Default
None.
Examples
This example shows how to configure a mobility domain name lab1:
> config mobility group domain lab1
Related Commands
config guest-lan mobility anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config mobility statistics reset
config wlan mobility anchor
debug mobility
show mobility anchor
show mobility statistics
show mobility summary
config mobility group keepalive count
To configure the Cisco WLC to detect failed mobility group members (including anchor Cisco WLCs), use the config mobility group keepalive count command.
config mobility group keepalive count count
Syntax Description
count
Number of times that a ping request is sent to a mobility group member before the member is considered unreachable. The range is from 3 to 20. The default is 3.
Command Default
3.
Examples
This example shows how to specify the number of times a ping request is sent to a mobility group member before the member is considered unreachable to three counts:
> config mobility group keepalive count 3
Related Commands
config guest-lan mobility anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config mobility statistics reset
config wlan mobility anchor
debug mobility
show mobility anchor
show mobility statistics
show mobility summary
config mobility group keepalive interval
To configure the controller to detect failed mobility group members (including anchor controllers), use the config mobility group keepalive command.
config mobility group keepalive interval
Syntax Description
interval
Interval of time between each ping request sent to a mobility group member. The range is from 1 to 30 seconds. The default value is 10 seconds.
Command Default
10 seconds.
Examples
This example shows how to specify the amount of time between each ping request sent to a mobility group member to 10 seconds:
> config mobility group keepalive 10
Related Commands
config guest-lan mobility anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config mobility statistics reset
config wlan mobility anchor
debug mobility
show mobility anchor
show mobility statistics
show mobility summary
config mobility group member
To add or delete users from the mobility group member list, use the config mobility group member command.
config mobility group member {
add MAC IP_address [
group_name] |
delete MAC IP _address |
hash IP _address {
key |
none}}
Syntax Description
add
Adds or changes a mobility group member to the list.
MAC
Member switch MAC address.
IP_address
Member switch IP address.
group_name
(Optional) Member switch group name (if different from the default group name).
delete
(Optional) Deletes a mobility group member from the list.
hash
Configures the hash key for authorization. You can configure the hash key only if the member is a virtual controller in the same domain.
key
Hash key of the virtual controller. For example, a819d479dcfeb3e0974421b6e8335582263d9169
none
Clears the previous hash key of the virtual controller.
Command Default
None.
Examples
This example shows how to add a mobility group member to the list:
> config mobility group member add 11:11:11:11:11:11 192.12.1.2
This example shows how to configure the hash key of a virtual controller in the same domain:
> config mobility group member hash 9.2.115.68 a819d479dcfeb3e0974421b6e8335582263d9169
Related Commands
config guest-lan mobility anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config mobility statistics reset
config wlan mobility anchor
debug mobility
show mobility anchor
show mobility statistics
show mobility summary
config mobility group multicast-address
To configure the multicast group IP address for nonlocal groups within the mobility list, use the config mobility group multicast-address command.
config mobility group multicast-address group_name IP_address
Syntax Description
group_name
Member switch group name (if different from the default group name).
IP_address
Member switch IP address.
Command Default
None.
Examples
This example shows how to configure the multicast group IP address 10.10.10.1 for a group named test:
> config mobility group multicast-address test 10.10.10.1
Related Commands
config guest-lan mobility anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config mobility statistics reset
config wlan mobility anchor
debug mobility
show mobility anchor
show mobility statistics
show mobility summary
config mobility multicast-mode
To enable or disable multicast mobility mode, use the config mobility multicast-mode command.
To configure the secure mode for mobility messages between Cisco wireless LAN controllers, use the config mobility secure-mode command.
config mobility secure-mode {
enable |
disable}
Syntax Description
enable
Enables the mobility group message security.
disable
Disables mobility group message security.
Command Default
None.
Examples
This example shows how to enable the secure mode for mobility messages:
> config mobility secure-mode enable
Related Commands
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility statistics reset
config wlan mobility anchor
debug mobility
show mobility anchor
show mobility statistics
show mobility summary
config mobility statistics reset
To reset the mobility statistics, use the config mobility statistics reset command.
config mobility statistics reset
Syntax Description
This command has no arguments or keywords.
Command Default
None.
Examples
This example shows how to reset the mobility group statistics:
> config mobility statistics reset
Related Commands
config mobility group anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config wlan mobility anchor
debug mobility
show mobility anchor
show mobility statistics
show mobility summary
config pmipv6 domain
To configure PMIPv6 and to enable Mobile Access Gateway (MAG) functionality on the controller, use the config pmipv6 domaincommand.
config pmipv6 domain domain_name
Syntax Description
domain_name
Name of the PMIPv6 domain. The domain name can be up to 127 case-sensitive, alphanumeric characters.
Command Default
None.
Examples
This example shows how to configure a domain name for a PMIPv6 WLAN:
> config pmipv6 domain floor1
Related Commands
config pmipv6 add profile
config pmipv6 mag lma
config pmipv6 delete
config wlan pmipv6 profile-name
config wlan pmipv6 mobility-type
config wlan pmipv6 default-realm
config pmipv6 domain
show wlan summary
config pmipv6 add profile
To create a Proxy Mobility IPv6 (PMIPv6) profile for the WLAN, use the config pmipv6 add profile command.
You can configure PMIPv6 profiles based on a realm or a service set identifier (SSID).
To delete a Proxy Mobility IPv6 (PMIPv6) profile, domain, or Local Mobility Anchor (LMA), use theconfig pmipv6 deletecommand.
config pmipv6 delete {
profile profile_name nai {
nai_id |
all }
|
domain domain_name |
lma lma_name}
Syntax Description
profile
Specifies the PMIPv6 profile.
profile_name
Name of the PMIPv6 profile. The profile name is case sensitive and can be up to 127 alphanumeric characters.
nai
Specifies the Network Access Identifier (NAI) of a mobile client.
nai_id
Network Access Identifier of a mobile client. The NAI is case sensitive and can be up to 127 alphanumeric characters.
all
Specifies all NAIs. When you delete all NAIs, the profile is deleted.
domain
Specifies the PMIPv6 domain.
domain_name
Name of the PMIPv6 domain. The domain name is case sensitive and can be up to 127 alphanumeric characters.
lma
Specifies the LMA.
lma_name
Name of the LMA. The LMA name is case sensitive and can be up to 127 alphanumeric characters.
Command Default
None.
Examples
This example shows how to delete a domain:
> config pmipv6 delete lab1
Related Commands
config pmipv6 add profile
config pmipv6 mag lma
config wlan pmipv6 profile-name
config wlan pmipv6 mobility-type
config wlan pmipv6 default-realm
config pmipv6 domain
show wlan summary
config pmipv6 mag binding init-retx-time
To configure the initial timeout between the proxy binding updates (PBUs) when the Mobile Access Gateway (MAG) does not receive the proxy binding acknowledgements (PBAs), use theconfig pmipv6 mag binding init-retx-timecommand.
config pmipv6 mag binding init-retx-time units
Syntax Description
units
Initial timeout between the PBUs when the MAG does not receive the PBAs. The range is from 100 to 65535 seconds.
Command Default
1000 seconds.
Examples
This example shows how to configure the initial timeout between the PBUs when the MAG does not receive the PBAs:
> config pmipv6 mag binding init-retx-time 500
Related Commands
config pmipv6 mag binding lifetime
config pmipv6 mag binding refresh-time
config pmipv6 mag binding max-ret-time
config pmipv6 mag
config pmipv6 delete
config wlan pmipv6 profile_name
config wlan pmipv6 mobility-type
config wlan pmipv6 default-realm
config pmipv6 domain
config pmipv6 mag binding lifetime
To configure the lifetime of the binding entries in the Mobile Access Gateway (MAG), use theconfig pmipv6 mag binding lifetimecommand.
config pmipv6 mag binding lifetime units
Syntax Description
units
Lifetime of the binding entries in the MAG. The binding lifetime must be a multiple of 4 seconds. The range is from 10 to 65535 seconds.
Command Default
65535 seconds.
Usage Guidelines
You must configure a Proxy Mobility IPv6 (PMIPv6) domain before you configure the lifetime of the binding entries in the controller.
Examples
This example shows how to configure the lifetime of the binding entries in the controller:
> config pmipv6 mag binding lifetime 5000
Related Commands
config pmipv6 mag binding lifetime
config pmipv6 mag binding refresh-time
config pmipv6 mag binding init-retx-time
config pmipv6 mag binding max-ret-time
config pmipv6 delete
config wlan pmipv6 profile-name
config wlan pmipv6 mobility-type
config wlan pmipv6 default-realm
config pmipv6 domain
show pmipv6 domain
show wlan summary
show client summary
config pmipv6 mag binding max-retx-time
To configure the maximum timeout between the proxy binding updates (PBUs) when the Mobility Access Gateway (MAG) does not receive the proxy binding acknowledgements (PBAs), use the config pmipv6 mag binding max-retx-time command.
config pmipv6 mag binding max-retx-time units
Syntax Description
units
Maximum timeout between the PBUs when the MAG does not receive the PBAs. The range is from 100 to 65535 seconds.
Command Default
32000 seconds.
Examples
This example shows how to configure the maximum timeout between the PBUs when the MAG does not receive the PBAs:
> config pmipv6 mag binding max-retx-time 50
Related Commands
config pmipv6 mag binding lifetime
config pmipv6 mag binding refresh-time
config pmipv6 mag binding init-retx-time
config pmipv6 add
config pmipv6 delete
config wlan pmipv6 profile-name
config wlan pmipv6 mobility-type
config wlan pmipv6 default-realm
config pmipv6 domain
config pmipv6 mag binding maximum
To configure the maximum number of binding entries in the Mobile Access Gateway (MAG), use theconfig pmipv6 mag binding maximumcommand.
config pmipv6 mag binding maximum units
Syntax Description
units
Maximum number of binding entries in the MAG. This number indicates the maximum number of users connected to the MAG. The range is from 0 to 40000.
Command Default
10000.
Usage Guidelines
You must configure a Proxy Mobility IPv6 (PMIPv6) domain before you configure the maximum number of binding entries in the MAG.
Examples
This example shows how to configure the maximum number of binding entries in the MAG:
> config pmipv6 mag binding maximum 20000
Related Commands
config pmipv6 mag binding lifetime
config pmipv6 mag binding refresh-time
config pmipv6 mag binding init-retx-time
config pmipv6 mag binding max-ret-time
config wlan pmipv6 profile-name
config wlan pmipv6 mobility-type
config wlan pmipv6 default-realm
config pmipv6 domain
show pmipv6 domain
show wlan summary
show client summary
show mag globals
config pmipv6 mag binding refresh-time
To configure the refresh time of the binding entries in the MAG, use theconfig pmipv6 mag binding refresh-time command.
config pmipv6 mag binding refresh-time units
Syntax Description
units
Refresh time of the binding entries in the MAG. The binding refresh time must be a multiple of 4. The range is from 4 to 65535 seconds.
Command Default
300 seconds.
Usage Guidelines
You must configure a PMIPv6 domain before you configure the refresh time of the binding entries in the MAG.
Examples
This example shows how to configure the refresh time of the binding entries in the MAG:
> config pmipv6 mag binding refresh-time 500
Related Commands
config pmipv6 mag binding lifetime
config pmipv6 mag binding maximum
config pmipv6 mag binding init-retx-time
config pmipv6 mag binding max-ret-time
config pmipv6 delete
config wlan pmipv6 profile-name
config wlan pmipv6 mobility-type
config wlan pmipv6 default-realm
config pmipv6 domain
show pmipv6 domain
show wlan summary
show client summary
config pmipv6 mag bri delay
To configure the maximum or minimum amount of time that the MAG waits before retransmitting a Binding Revocation Indication (BRI) message, use theconfig pmipv6 mag bri delaycommand.
config pmipv6 mag bri delay {
min |
max}
time
Syntax Description
min
Specifies the minimum amount of time that the MAG waits before retransmitting a BRI message.
max
Specifies the maximum amount of time that the MAG waits before retransmitting a BRI message.
time
Maximum or minimum amount of time that the Cisco WLC waits before retransmitting a BRI message. The range is from 500 to 65535 milliseconds.
Command Default
The default value of the maximum amount of time that the MAG waits before retransmitting a BRI message is 2 seconds.
The default value of the minimum amount of time that the MAG waits before retransmitting a BRI message is 1 second.
Examples
This example shows how to configure the minimum amount of time that the MAG waits before retransmitting a BRI message:
> config pmipv6 mag bri delay min 500
Related Commands
config pmipv6 mag binding lifetime
config pmipv6 mag binding refresh-time
config pmipv6 mag binding init-retx-time
config pmipv6 mag binding max-ret-time
config pmipv6 mag bri retries
config pmipv6 delete
config wlan pmipv6 profile-name
config wlan pmipv6 mobility-type
config wlan pmipv6 default-realm
config pmipv6 domain
show pmipv6 domain
show wlan summary
show client summary
show mag globals
config pmipv6 mag bri retries
To configure the maximum number of times that the MAG retransmits the Binding Revocation Indication (BRI) message before receiving the Binding Revocation Acknowledgement (BRA) message, use theconfig pmipv6 mag bri retriescommand
.
config pmipv6 mag bri retries retries
Syntax Description
retries
Maximum number of times that the MAG retransmits the BRI message before receiving the BRA message. The range is from 1 to 10 seconds.
Command Default
1 second.
Examples
This example shows how to configure the maximum number of times that the MAG retries:
> config pmipv6 mag bri retries 5
Related Commands
config pmipv6 mag binding lifetime
config pmipv6 mag binding refresh-time
config pmipv6 mag binding init-retx-time
config pmipv6 mag binding max-ret-time
config pmipv6 mag lma
config pmipv6 delete
config wlan pmipv6 profile-name
config wlan pmipv6 mobility-type
config wlan pmipv6 default-realm
config pmipv6 domain
show pmipv6 domain
show wlan summary
show client summary
show mag globals
config pmipv6 mag lma
To configure a Local Mobility Anchor (LMA) with the Mobile Access Gateway (MAG), use theconfig pmipv6 mag lma command.
To configure the maximum amount of time difference between the time stamp in the received proxy binding acknowledgement (PBA) and the current time of the day for replay protection, use theconfig pmipv6 mag replay-protectioncommand.
Specifies the maximum time difference between the time stamp in the received PBA message and the current time of day.
time
Maximum time difference between the time stamp in the received PBA message and the current time of day. The range is from 1 to 300 milliseconds.
sequence-no
(Optional) Specifies the sequence number in a Proxy Binding Update message.
sequence
(Optional) Sequence number in the Proxy Binding Update message.
mobile_node_timestamp
(Optional) Specifies the time stamp of the mobile node.
mobile_node_timestamp
(Optional) Time stamp of the mobile node.
Command Default
300 milliseconds.
Usage Guidelines
This release supports only the time-stamp option.
Examples
This example shows how to configure the maximum amount of time difference in milliseconds between the time stamp in the received PBA message and the current time of day:
This command binds a profile name to the PMIPv6 WLAN or SSID. Each time that a mobile node associates with the controller, it uses the profile name and NAI in the trigger to the PMIPV6 module. The PMIPV6 module extracts all the profile specific parameters such as LMA IP, APN, and NAI and sends the PBU to the ASR5K.
Examples
This example shows how to create a profile named ABC01 on a PMIPv6 WLAN:
> config wlan pmipv6 profile_name ABC01 16
Related Commands
config wlan pmipv6 mobility-type
config wlan pmipv6 default-realm
config pmipv6 domain
show wlan summary
clear, debug and ping Commands
This section lists the config , debug , ping commands for mobility.
Configures the debugging of wireless mobility access point list.
config
Configures the debugging of wireless mobility configuration.
directory
Configures the debugging of wireless mobility error messages.
dtls
Configures the debugging of wireless mobility Datagram Transport Layer Security (DTLS) options.
handoff
Configures the debugging of wireless mobility handoff messages.
keep-alive
Configures the debugging of wireless mobility CAPWAP data DTLS keep-alive packets.
multicast
Configures the debugging of multicast mobility packets.
packet
Configures the debugging of wireless mobility packets.
peer-ip
Configures IP address of the mobility peer for which incoming and outgoing mobility messages should be displayed.
IP-address
IP address of the mobility peer for which incoming and outgoing mobility messages should be displayed.
pmk
Configures the debugging of wireless mobility pairwise master key (PMK).
pmtu-discovery
Configures the debugging of the wireless mobility path MTU discovery.
redha
Configures the debugging of the multicast mobility high availability.
enable
Enables the debugging of the wireless mobility feature.
disable
Disables the debugging of the wireless mobility feature.
Command Default
None
Examples
The following example shows how to enable the debugging of wireless mobility packets.
Device > debug mobility handoff enable
Related Commands
config guest-lan mobility anchor
config mobility group domain
config mobility group keepalive count
config mobility group keepalive interval
config mobility group member
config mobility group multicast-address
config mobility multicast-mode
config mobility secure-mode
config mobility statistics reset
config wlan mobility anchor
show mobility anchor
show mobility statistics
show mobility summary
eping
To test the mobility Ethernet over IP (EoIP) data packet communication between two controllers, use the eping command.
eping mobility_peer_IP_address
Syntax Description
mobility_peer_IP_address
IP address of a controller that belongs to a mobility group.
Command Default
None.
Usage Guidelines
This command tests the mobility data traffic over the management interface.
Note
This ping test is not Internet Control Message Protocol (ICMP) based. The term “ping” is used to indicate an echo request and an echo reply message.
Examples
This example shows how to test EoIP data packets and to set the IP address of a controller that belongs to a mobility group to 172.12.35.31:
> eping 172.12.35.31
Related Commands
mping
config logging buffered debugging
show logging
debug mobility handoff enable
mping
To test mobility UDP control packet communication between two controllers, use the mping command.
mping mobility_peer_IP_address
Syntax Description
mobility_peer_IP_address
IP address of a controller that belongs to a mobility group.
Command Default
None.
Usage Guidelines
This test runs over mobility UDP port 16666. It tests whether the mobility control packet can be reached over the management interface.
Note
This ping test is not Internet Control Message Protocol (ICMP) based. The term “ping” is used to indicate an echo request and an echo reply message.
Examples
This example shows how to test mobility UDP control packet communications and to set the IP address of a controller that belongs to a mobility group to 172.12.35.31: