Dell Instant 6.5.1.0-4.3.1.0 CLI Reference Guide

Summary

This document is the official manual for the Dell Inc. All rights reserved. Specifications in this manual. The manual provides comprehensive guidance on setup, configuration, and operation. It includes step-by-step setup and installation instructions. Technical specifications and compatibility details are included. Designed for network administrators and IT professionals who need detailed guidance on using and maintaining this server.

Revision History
The ArubaOS Command-Line Interface
- What’s New in ArubaOS 6.5.x
- About this Guide
- Connecting to the Controller
- CLI Access
- Saving Configuration Changes
- Typographic Conventions
- Command Line Editing
- Specifying Addresses and Identifiers in Commands
- Contacting Dell
aaa auth-survivability
aaa authentication captive-portal
aaa authentication dot1x
aaa authentication mac
aaa authentication mgmt
aaa authentication-server internal
aaa authentication-server ldap
aaa authentication-server radius
aaa authentication-server tacacs
aaa authentication-server windows
aaa authentication stateful-dot1x
aaa authentication stateful-dot1x clear
aaa authentication stateful-kerberos
aaa authentication stateful-ntlm
aaa authentication via auth-profile
aaa authentication via connection-profile
aaa authentication via global-config
aaa authentication via web-auth
aaa authentication vpn
aaa authentication wired
aaa authentication wispr
aaa bandwidth-contract
aaa derivation-rules
aaa dns-query-interval
aaa inservice
aaa ipv6 user add
aaa ipv6 user clear-sessions
aaa ipv6 user delete
aaa ipv6 user logout
aaa log
aaa password-policy mgmt
aaa profile
aaa query-user
aaa radius-attributes
aaa rfc-3576-server
aaa server-group
aaa tacacs-accounting
aaa test-server
aaa timers
aaa trusted-ap
aaa user add
aaa user clear-sessions
aaa user delete
aaa user fast-age
aaa user logout
aaa user monitor
aaa user purge-log
aaa user stats-poll
aaa xml-api
activate
activate-service-whitelist
- add ap arm client-match unsupported
adp
airgroup
airgroupservice
airgroup static mdns-record
am
amon msg-buffer-size
ap authorization-profile
ap consolidated-provision info
ap-crash-transfer
ap debug advanced-stats
ap debug client-trace start
ap debug client-trace stop
ap debug dot 11r remove-key
ap debug radio-event-log
ap debug radio-registers dump
ap enet-link-profile
ap flush-r1-on-new-r0
ap image-preload
ap-lacp-striping-ip
ap lldp med-network-policy-profile
ap lldp profile
ap mesh-cluster-profile
ap mesh-ht-ssid-profile
ap mesh-radio-profile
ap provisioning-profile
ap packet-capture
ap process restart
ap regulatory activate
ap regulatory-domain-profile
ap regulatory reset
ap spectrum clear-webui-view-settings
ap spectrum local-override
ap system-profile
ap wipe out flash
ap wired-ap-profile
ap wired-port-profile
apboot
apconnect
apdisconnect
apflash [deprecated]
ap-group
ap-leds
ap-move
ap-name
ap-regroup
ap-rename
app skype4b traffic-control
arm move-sta
arp
audit-trail
backup
banner motd
block-redirect-url
boot
cellular profile
cfgm
clear
clear aaa auth-survivability-cache
clear wms wired-mac
clock append
clock set
clock summer-time recurring
clock timezone
cluster-member-custom-cert
cluster-member-factory-cert
cluster-member-ip
cluster-root-ip
configure terminal
control-plane-security
controller-ip
controller-ipv6
copy
cp-bandwidth-contract
crypto-local ipsec sa-cleanup
crypto dynamic-map
crypto ipsec
crypto isakmp
crypto isakmp block-aruba-ca
crypto isakmp policy
crypto-local ipsec-map
crypto-local isakmp allow-via-subnet-routes
crypto-local isakmp ca-certificate
crypto-local isakmp certificate-group
crypto-local isakmp disable-aggressive-mode
crypto_local isakmp disable-ipcomp
crypto-local isakmp dpd
crypto-local isakmp key
crypto-local isakmp permit-invalid-cert
crypto-local isakmp sa-cleanup
crypto-local isakmp server-certificate
crypto-local isakmp xauth
crypto-local pki
crypto-local pki rcp
crypto map global-map
crypto
crypto
crypto pki-import
database synchronize
delete
destination
dialer group
dir
disable-whitelist-sync
dot1x
dpi
dynamic-ip
eject usb
enable
enable bypass
enable secret
encrypt
esi group
esi parser domain
esi parser rule
esi parser rule‑test
esi ping
esi server
exit
export
file syncing profile
fips
firewall
firewall cp
firewall cp-bandwidth-contract
firewall-visibility
gateway health-check disable
guest-access-email
ha
halt
help
hostname
iap del branch-key
iap trusted-branch-db
ids ap-classification-rule change
ids ap-rule-matching
ids dos-profile
ids general-profile
ids impersonation-profile
ids management-profile
ids profile
ids rate-thresholds-profile
ids signature-matching-profile
ids signature-profile
ids unauthorized-device-profile
ids wms-general-profile
ids wms-local system-profile
ifmap
Interface cellular
interface fastethernet | gigabitethernet
interface loopback
interface port-channel
interface-profile voip-profile
interface range
interface tunnel
interface vlan
interface vlan ipv6
interface vlan ip igmp proxy
ip access-list eth
ip access-list extended
ip access-list ip-geolocation
ip access-list mac
ip access-list route
ip access-list session
ip access-list standard
ip cp-redirect-address
ip default-gateway
ip dhcp excluded-address
ip dhcp pool
ip domain lookup
ip domain-name
ip igmp
ip local
ip mobile active-domain
ip mobile domain
ip mobile foreign-agent
ip mobile home-agent
ip mobile packet-trace
ip mobile proxy
ip mobile revocation
ip name-server
ip nat
ip nexthop-list
ip ospf
ip probe default
ip probe health-check
ip radius
ids rap-wml-server-profile
ids rap‑wml-table-profile
ip reputation
ip route
ipv6 cp-redirect-address
ipv6 default-gateway
ipv6 dhcp excluded-address
ipv6 dhcp pool
ipv6 enable
ipv6 firewall
ipv6 neighbor
ipv6 mld
ipv6 proxy-ra
ipv6 radius
ipv6 route
kernel coredump
lacp group
lacp port-priority
lacp system-priority
lacp timeout
lcd-menu
license
local-custom-cert
local-factory-cert
localip
local-userdb add
local-userdb-ap del
local-userdb-branch
local-userdb del
local-userdb export
local-userdb fix-database
local-userdb-guest add
local-userdb-guest del
local-userdb-guest modify
local-userdb-guest send-email
local-userdb import
local-userdb maximum-expiration
local-userdb modify
local-userdb-branch
local-userdb send-to-guest
local-userdb send-to-sponsor
location
location-server-feed
logging
logging facility
logging level
loginsession
logout
mac-address-table
master-redundancy master-vrrp
masterip
master-redundancy peer-ip
mgmt-server profile
mgmt-server type
mgmt-user
mobility-manager
netdestination
netdestination6
netexthdr
netservice
ntp authenticate
ntp authentication-key
ntp server
ntp standalone
ntp trusted-key
packet-capture
packet-capture-defaults
page
paging
pan active-profile
pan profile
panic
pan-options
papi-security
perf-test
pcap (deprecated)
phonehome
ping
pkt-trace
pkt-trace-global
pptp ip local pool
priority-map
process monitor
prompt
provision-ap
reload
rename
restore
rf am-scan-profile
rft
rf arm-rf-domain-profile
rf arm-profile
rf dot11a-radio-profile
rf dot11g-radio-profile
rf event-thresholds-profile
rf ht-radio-profile
rf optimization-profile
rf spectrum-profile
router mobile
router ospf
routing-policy-map
service
show aaa accounting tacacs
show aaa authentication all
show aaa authentication captive-portal
show aaa authentication captive-portal customization
show aaa authentication dot1x
show aaa authentication mac
show aaa authentication mgmt
show aaa authentication stateful-dot1x
show aaa authentication stateful-ntlm
show aaa authentication via auth-profile
show aaa authentication via connection-profile
show aaa authentication via web-auth
show aaa authentication vpn
show aaa authentication wired
show aaa authentication wispr
show aaa authentication-server all
show aaa authentication-server internal
show aaa authentication-server ldap
show aaa authentication-server radius
show aaa authentication-server tacacs
show aaa authentication-server windows
show aaa bandwidth-contracts
show aaa debug
show aaa derivation-rules
show aaa dns-query-interval
show aaa fqdn-server-names
show aaa load-balance statistics
show aaa main-profile
show aaa password-policy mgmt
show aaa profile
show aaa radius-attributes
show aaa rfc-3576-server
show aaa server-group
show aaa state ap-group
show aaa state configuration
show aaa state debug-statistics
show aaa state log
show aaa state messages
show aaa state station
show aaa state user
show aaa tacacs-accounting
show aaa timers
show aaa web admin-port
show aaa xml-api server
show aaa xml-api statistics
show acl ace-table
show acl acl-table
show acl hits
show activate-service-whitelist
show adp config
show adp counters
show airgroup
show airgroup active-domains
show airgroup blocked-queries
show airgroup blocked-service-id
show airgroup cache entries
show airgroup cppm
show airgroup cppm-server
show airgroup domain
show airgroup internal-state statistics
show airgroup global-credits
show airgroup multi-controller-table
show airgroup servers
show airgroup status
show airgroup users
show airgroup vlan
show airgroupservice
show ap active
show ap-group
show ap-name
show ap allowed-channels
show ap ap-group
show ap arm client-match history
show ap arm client-match neighbors
show ap arm client-match Pending
show ap arm client-match probe-report
show ap arm client-match restriction-table
show ap arm client-match summary
show ap arm client-match unsupported
show ap arm history
show ap arm neighbors
show ap arm rf-summary
show ap arm scan-times
show ap arm split-scan-history
show ap arm state
show ap arm status
show ap arm virtual-beacon-report
show ap association
show ap association remote
show ap authorization-profile
show ap blacklist-clients
show ap bss-table
show ap bw-report
show ap client status
show ap client trail-info
show ap config
show ap consolidated-provision info
show ap-crash-transfer
show ap database
show ap database-summary
show ap debug bandwidth-management
show ap debug ble-config
show ap debug ble-counters
show ap debug ble-log
show ap debug ble-table
show ap debug ble-update-status
show ap debug bss-config
show ap debug bss-stats
show ap debug client-deauth-reason-counters
show ap debug client-mgmt-counters
show ap debug client-stats
show ap debug client-table
show ap debug client-trace
show ap debug counters
show ap debug crash-info
show ap debug crypto
show ap debug datapath
show ap debug dot11r
show ap debug dot11r state
show ap debug driver-log
show ap debug gre-tun-stats
show ap debug gsm-counters
show ap debug ipc forwarding-statistics
show ap debug lacp
show ap debug lldp
show ap debug log
show ap debug config-msg-history
show ap debug dot11r state
show ap debug port status
show ap debug radar-logs
show ap debug radio-event-log status
show ap debug radio-info
show ap debug radio-registers
show ap debug radio-stats
show ap debug received-config
show ap debug shaping-table
show ap debug spanning-tree
show ap debug switching
show ap debug system-status
show ap debug trace-addr
show ap debug usb
show ap details
show ap enet-link-profile
show ap essid
show ap ht-rates
show ap image-preload-status (deprecated)
show ap image-preload status
show ap image version
show ap-lacp-striping-ip
(More items omitted...)

📄 Preview 📖 Table of Contents Contents ‹ PAGE OF 2,390 ›

‹

Dell Instant 6.5.1.0-4.3.1.0 CLI Reference Guide - Page 1

›

Page 1 Text Content

Dell Networking W-Series Aruba OS 6.5.x Command-Line Interface

Re fe re nc ui de

Page Summary Contents For Dell Instant 6.5.1.0-4.3.1.0 CLI Reference Guide

Page 1 Dell Networking W-Series Aruba OS 6.5.x Command-Line Interface Re fe re nc ui de

Page 2 Copyright Information Copyright Hewlett Packard Enterprise Development LP. Dell™, the DELL™ logo, and Power Connect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are ...

Page 3 Revision History The following table provides the revision history of this document. Table 1: Revision History Revision Change Description Revision Initial release. Dell Networking W-Series Aruba OS 6...

Page 4 The Aruba OS Command-Line Interface The Dell Networking W-Series Aruba OS 6.5.x command-line interface (CLI) allows you to configure and manage Dell controllers. The CLI is accessible from local conso...

Page 5 Command Description show ucc dns-ip-learning This command displays the carrier’s evolved Packet Data Gateway (e PDG) IP address learned by the controller. This command is specific for Wi-Fi calling cl...

Page 6 Command Description ap wired-port-profile The portfast and portfast-trunk parameters are introduced. clear The port-security-error gigabitethernet <slot>/<module>/<port> parameter is...

Page 7 Command Description show ap arm history The Result column is introduced to the output of this command to indicate the status of the requested change in channel or EIRP by ARM. show ap debug port statu...

Page 8 Command Description show snmp trap-list The following parameters are introduced as part of the output of this command: wlsx APDown wlsx APUp show ucc call-info cdrs The Wi Fi-Calling application param...

Page 9 Usage Guidelines—Information to help you use the command, including: prerequisites, prohibitions, and related commands. Example—An example of how to use the command. Command History—The version of Aru...

Page 10 (host) User mode provides only limited access for basic operational testing such as running ping and traceroute. Certain management functions are available in enable (also called “privileged”) mode. T...

Page 11 The <cr> indicates that the command can be entered without additional parameters. Any other parameters are optional. Command Completion To make command input easier, you can usually abbreviate e...

Page 12 Both the startup and running configurations can also be saved to file or sent to TFTP server for backup or transfer to another system. Commands That Reset the Controller or AP If you use the CLI to mo...

Page 13 Table 3: Text Conventions Type Style Description Italics This style is used to emphasize important terms and to mark the titles of books. Boldface This style is used to emphasize command names and par...

Page 14 Table 4: Line Editing Keys Key Effect Description Ctrl Home Move the cursor to the beginning of the line. Ctrl or the Move the cursor one character left. arrow Ctrl Delete Delete the character to the ...

Page 15 Table 5: Addresses and Identifiers Address/Identifier Description IP address For any command that requires entry of an IP address to specify network entity, use IPv4 network address format in the conv...

Page 16 Contacting Dell Table 6: Contact Information Web Site Support Main Website dell.com Contact Information dell.com/contactdell Support Website dell.com/support Documentation Website dell.com/support/man...

Page 17 aaa auth-survivability aaa auth-survivability cache-lifetime enable server-cert Description This command configures Authentication Survivability on a controller. Syntax Parameter Description Default ...

Page 18 Command Information Platforms Licensing Command Mode W-7000 Series operating system Enable or Config mode on controllers 18| aaa auth-survivability Dell Networking W-Series Aruba OS 6.5.x | Reference...

Page 19 aaa authentication captive-portal aaa authentication captive-portal <profile> apple-cna-bypass auth-protocol mschapv2|pap|chap black-list <black-list> clone <source-profile> default-...

Page 20 Parameter Description Range Default black-list Name of an existing black list on an IPv4 or IPv6 network destination. The black list contains websites (unauthenticated) that guest cannot access. Speci...

Page 21 Parameter Description Range Default logon-wait Configure parameters for the logon 1-100 60% wait interval. cpu-threshold <percent> CPU utilization percentage above 1-100 60% which the logon wait...

Page 22 Parameter Description Range Default server-group <group-name> Name of the group of servers used to authenticate Captive Portal users. See aaa server-group on page 107. show-fqdn Allows the user ...

Page 23 Parameter Description Range Default welcome-page <url> URL of the page that appears after /auth/welcome logon and before redirection to the .html web URL. This can be set to any URL. white-list ...

Page 24 Command Information Platforms Licensing Command Mode All platforms operating system, except Config mode on master controllers for noted parameters 24| aaa authentication captive-portal Dell Networking...

Page 25 aaa authentication dot1x aaa authentication dot1x {<profile>|countermeasures} ca-cert <certificate> cert-cn-lookup clear clone <profile> delete-keycache eapol-logoff enforce-suite-b-...

Page 26 Syntax Parameter Description Range Default <profile> Name that identifies an “default” instance of the profile. The name must be 1-63 characters. clear Clear the Cached PMK, Role and VLAN entrie...

Page 27 Parameter Description Range Default framed-mtu <MTU> Sets the framed MTU 500- attribute sent to the authentication server. heldstate-bypass-counter <number> (This parameter is applicable 0...

Page 28 Parameter Description Range Default machine-default-role <role> Default role assigned to the guest user after completing only machine authentication. user-default-role <role> Default role ...

Page 29 Parameter Description Range Default reauthentication Select this option to force the disabled client to do 802.1X reauthentication after the expiration of the default timer for reauthentication. (The ...

Page 30 Parameter Description Range Default enable-token If you select EAP-GTC as the disabled -caching inner EAP method, you can enable the controller to cache the username and password of each authenticated...

Page 31 Parameter Description Range Default keycache-tmout Set the per BSSID PMKSA 1-2000 hours cache interval. Cache is (hours) deleted within hours of the interval. mkey-rotation-period <seconds> Inte...

Page 32 Parameter Description Range Default validate-pmkid This parameter instructs the disabled controller to check the pairwise master key (PMK) ID sent by the client. When this option is enabled, the clien...

Page 33 Examples The following example enables authentication of the user’s client device before user authentication. If machine authentication fails but user authentication succeeds, the user is assigned the...

Page 34 aaa authentication mac aaa authentication mac <profile> case upper|lower clone <profile> delimiter {colon|dash|none} max-authentication-failures <number> no reauthentication timer re...

Page 35 denying access to all other devices. Users may be required to authenticate themselves using other methods, depending upon the network privileges. Example The following example configures MAC authentic...

Page 36 aaa authentication mgmt aaa authentication mgmt default-role {guest-provisioning|location-api-mgmt|network-operations|no-access|read- only|root} enable no server-group <group> Description This c...

Page 37 Example The following example configures management authentication profile that authenticates users against the controller’s internal database. Users who are successfully authenticated are assigned th...

Page 38 aaa authentication-server internal aaa authentication-server internal use-local-switch Description This command specifies that the internal database on local controller be used for authenticating clie...

Page 39 aaa authentication-server ldap aaa authentication-server ldap <server> admin-dn <name> admin-passwd <string> allow-cleartext authport <port> base-dn <name> clone <serv...

Page 40 Parameter Description Range Default clone <server> Name of an existing LDAP server configuration from which parameter values are copied. enable Enables the LDAP server. filter <filter> Fil...

Manual Details

Brand	Dell
Pages	2,390
File Size	8.36 MB
Published	June 28, 2026

3 views

Enter the captcha to get the download link:

Frequently Asked Questions

How do I access the CLI?

Access it via a local console on the serial port or through Telnet/SSH from a remote workstation.

Is Telnet access enabled by default?

No, Telnet is disabled by default. To enable it, use the telnet CLI command or navigate to Configuration>Management>General in the WebUI.

How do I move from enable to config mode?

Enter the command config terminal. To exit, type exit.

What new commands were added in version 6.5.0.0?

New commands include ap consolidated-provision, ip reputation, ntp standalone, and various show commands for health-check and web-proxy.