Motorola Wing 5 Manual

							MINT-POLICY 16 - 7
Examples
The Mint Policy configured parameters before using the no command:
rfs7000-37FABE(config-mint-policy-global-default)#show context
mint-policy global-default
 udp port 1024
 mtu 996
 level 2 area-id 2000
rfs7000-37FABE(config-mint-policy-global-default)#
The no command is used to negate the configured MiNT Policy settings.
rfs7000-37FABE(config-mint-policy-global-default)#no level 2 area-id
rfs7000-37FABE(config-mint-policy-global-default)#
rfs7000-37FABE(config-mint-policy-global-default)#no mtu
rfs7000-37FABE(config-mint-policy-global-default)#
rfs7000-37FABE(config-mint-policy-global-default)#no udp port
rfs7000-37FABE(config-mint-policy-global-default)#
rfs7000-37FABE(config-mint-policy-global-default)#show context
mint-policy global-default
rfs7000-37FABE(config-mint-policy-global-default)#
Related Commands
levelConfigures global MiNT routing level
mtuConfigures global MiNT MTU
udpConfigures MiNT UDP/IP encapsulation parameters 
						

							16 - 8 WiNG CLI Reference Guide 
						

							CHAPTER 17 MANAGEMENT-POLICY
This chapter summarizes management policy commands within the CLI structure.
A management policy contains configuration elements for managing a device, such as access control, SNMP, admin user 
credentials, and roles.
Use the (config) instance to configure management policy related configuration commands. To navigate to the config 
management policy instance, use the following commands:
rfs7000-37FABE(config)#management-policy 
rfs7000-37FABE(config)#management-policy default
To commit a management-policy, at least one admin user account must always be present in the management-policy:
rfs7000-37FABE(config-management-policy-default)#user superuser password 1 symbol123
rfs7000-37FABE(config-management-policy-default)#commit
rfs7000-37FABE(config-management-policy-default)#
rfs7000-37FABE(config-management-policy-default)#?
Management Mode commands:
  aaa-login             Set authentication for logins
  banner                Define a login banner
  ftp                   Enable FTP server
  http                  Hyper Text Terminal Protocol (HTTP)
  https                 Secure HTTP
  idle-session-timeout  Configure idle timeout for a configuration session (UI
                        or mapsh)
  no                    Negate a command or set its defaults
  restrict-access       Restrict management access to the device
  snmp-server           SNMP
  ssh                   Enable ssh
  telnet                Enable telnet
  user                  Add a user account
  clrscr                Clears the display screen
  commit                Commit all changes made in this session
  do                    Run commands from Exec mode
  end                   End current mode and change to EXEC mode
  exit                  End current mode and down to previous mode
  help                  Description of the interactive help system
  revert                Revert changes
  service               Service Commands
  show                  Show running system information
  write                 Write running configuration to memory or terminal
rfs7000-37FABE(config-management-policy-default)# 
						

							17 - 2 WiNG CLI Reference Guide
17.1 management-policy
Table 17.1 summarizes management policy commands
Table 17.1management-policy Commands
Command Description Reference
aaa-loginSets authentication for loginspage 17-3
bannerDefines a login banner namepage 17-5
ftpEnables a FTP serverpage 17-6
httpEnables a HTTP serverpage 17-8
httpsEnables a secure HTTPS serverpage 17-9
idle-session-timeoutSets the interval after which a session is terminatedpage 17-10
noNegates a command or sets its defaultpage 17-11
restrict-accessRestricts management access to a set of hosts or subnetspage 17-14
snmp-serverSets the SNMP server parameterspage 17-17
sshEnables SSHpage 17-21
telnetEnables Telnetpage 17-22
userCreates a new user accountpage 17-23
clrscrClears the display screenpage 5-3
commitCommits (saves) changes made in the current sessionpage 5-4
doRuns commands from EXEC modepage 4-66
endEnds and exits the current mode and moves to the PRIV EXEC modepage 5-5
exitEnds the current mode and moves to the previous modepage 5-6
helpDisplays the interactive help systempage 5-7
revertReverts changes to their last saved configurationpage 5-13
serviceInvokes service commands to troubleshoot or debug 
(config-if) 
instance configurationspage 5-14
showDisplays running system informationpage 6-4
writeWrites information to memory or terminalpage 5-42 
						

							MANAGEMENT-POLICY 17 - 3
17.1.1 aaa-login
management-policy
Specifies the Authentication, Authorization and Accounting (AAA) authentication mode used with this management policy. 
The different modes are: local authentication or external RADIUS server authentication.
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
aaa-login [local|radius|tacacs]
aaa-login local
aaa-login radius [external|fallback|policy]
aaa-login radius [external|fallback]
aaa-login radius policy 
aaa-login tacacs [accounting|authentication|authorization|fallback|policy]
aaa-login tacacs [accounting|authentication|authorization|fallback|
policy ]
Parameters
• aaa-login local
• aaa-login radius [external|fallback|policy ]
local Sets local as the preferred authentication mode. Local authentication uses the local 
username database to authenticate a user.
radius Configures RADIUS server parameters
external Configures external RADIUS server as the preferred authentication mode 
						

							17 - 4 WiNG CLI Reference Guide
• aaa-login tacacs [accounting|authentication|authorization|fallback|
policy ]
Usage Guidelines
Use AAA login to determine whether management user authentication must be performed against a local user database 
or an external RADIUS server.
Examples
rfs7000-37FABE(config-management-policy-test)#aaa-login radius external
rfs7000-37FABE(config-management-policy-test)#
rfs7000-37FABE(config-management-policy-test)#aaa-login radius policy test
rfs7000-37FABE(config-management-policy-test)#
rfs7000-37FABE(config-management-policy-test)#show context
management-policy test
 http server
 no ssh
 aaa-login radius external
 aaa-login radius policy test
rfs7000-37FABE(config-management-policy-test)#
fallback Configures RADIUS server authentication as the primary authentication mode. When 
RADIUS server authentication fails, the system uses local authentication. This command 
configures local authentication as a backup mode.
policy 
Uses a specified AAA policy
  – Sets the name of the AAA policy. The AAA policy determines 
if a client is granted access to the network
tacacs Configures Terminal Access Control Access-Control System (TACACS) server parameters
accounting Configures TACACS accounting
authentication Configures TACACS authentication
authorization Configures TACACS authorization
fallback Configures TACACS as the primary authentication mode. When TACACS authentication 
fails, the system uses local authentication. This command configures local 
authentication as a backup mode.
policy 
Uses a specified AAA TACACS policy
  – Sets the name of the TACACS policy 
						

							MANAGEMENT-POLICY 17 - 5
17.1.2 banner
management-policy
Configures the login banner message. Use this command to display messages to users as they as login.
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
banner motd 
Parameters
• banner motd 
Examples
rfs7000-37FABE(config-management-policy-test)#banner motd “Have a Good Day”
rfs7000-37FABE(config-management-policy-test)#
rfs7000-37FABE(config-management-policy-test)#show context
management-policy test
 http server
 no ssh
 aaa-login radius external
 aaa-login radius policy test
 banner motd “Have a Good Day”
rfs7000-37FABE(config-management-policy-test)#
Related Commands
motd  Sets the message of the day (motd) banner
  – Defines the message string
noRemoves the motd banner 
						

							17 - 6 WiNG CLI Reference Guide
17.1.3 ftp
management-policy
Enables File Transfer Protocol (FTP) on this management policy
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
ftp {password|rootdir|username}
ftp {password [1 |]}
ftp {rootdir []}
ftp {username [] password [1 |] 
[rootdir ]}
Parameters
• ftp {password [1 |]}
• ftp {rootdir []}
ftp password Optional. Configures the FTP server password
1  Configures an encrypted password
  – Sets the password
 Configures a clear text password
ftp rootdir  Optional. Configures the root directory for FTP logins
  – Sets the root directory path 
						

							MANAGEMENT-POLICY 17 - 7
• ftp {username [] password [1 |] [rootdir 
]}
Usage Guidelines
The string size of encrypted password (option 1, Password is encrypted with a SHA1 algorithm) must be exactly 40 
characters.
Examples
rfs7000-37FABE(config-management-policy-test)#ftp password 1 motorola@123
rfs7000-37FABE(config-management-policy-test)#
rfs7000-37FABE(config-management-policy-test)#ftp rootdir dir
rfs7000-37FABE(config-management-policy-test)#
rfs7000-37FABE(config-management-policy-test)#ftp username superuser password 1 word 
rootdir dir
rfs7000-37FABE(config-management-policy-test)#
rfs7000-37FABE(config-management-policy-test)#show context
management-policy test
 http server
 ftp username root password 1 word rootdir dir
 user superuser password 1 
4e03aaf1065294ba86d19da984347e38dfbaa9955335dc354748cb4f9a16e0a9
rfs7000-37FABE(config-management-policy-test)#
Related Commands
ftp username  Optional. Configures new user account on the FTP server. The FTP user file lists users 
with FTP server access.
  – Sets the username
password 1  rootdir Configures an encrypted password
  – Sets the password
After specifying the password, configure the FTP root directory.
 rootdir – Configures the root directory for FTP logins
  – Sets the root directory path
 rootdir  Configures a clear text password
After specifying the password, configure the FTP root directory.
 rootdir – Configures the root directory for FTP logins
  – Sets the root directory path
noDisables FTP and its settings, such as the server password, root directory, and users 
						

							17 - 8 WiNG CLI Reference Guide
17.1.4 http
management-policy
Enables the Hyper Text Transport Protocol (HTTP) server
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
http 
Parameters
• http 
Examples
rfs7000-37FABE(config-management-policy-test)#http server
rfs7000-37FABE(config-management-policy-test)#
Related Commands
http  Enables HTTP on this management policy
  – Sets the HTTP server name
noDisables the HTTP server