Mobility Express Controller Commands

Application Visibility Commands

The following commands are used to configure Application Visibility on the Cisco Mobility Express controller.

Command

Description

Added in Release

config flexconnect group default-flexgroup avc 1 visibility { enable | disable }

To enable or disable Application Visibility in a WLAN

8.1.122.0

show flexconnect group detail default-flexgroup

To display the status of Application Visibility in each WLAN

8.1.122.0

show flexconnect avc statistics group default-flexgroup

To view Application Visibility statistics based on the flex group

8.1.122.0

show flexconnect avc statistics client client_MAC

To view Application Visibility statistics based on each client

8.1.122.0

Cisco Umbrella Commands

The following commands are used to configure Cisco Umbrella in the Cisco Mobility Express network.

Command

Description

Added in Release

config opendns {Enable | Disable}

To configure the Cisco Umbrella feature. You can enable or disable the feature.

<8.8 MR1>

config opendns api-token

To register the Cisco Umbrella API token on the network.

<8.8 MR1>

config opendns profile {create |delete | refresh}

To create, delete, or refresh a Cisco Umbrella profile that can be applied over a WLAN

<8.8 MR1>

config wlan opendns-profile <wlan-id> <profile-name> {enable | disable}

To map the Cisco Umbrella profile identity to a WLAN.

<8.8 MR1>

config wlan opendns-dhcp-opt6 <wlan-id> {enable | disable}

To enable or disable DHCP option 6 per WLAN.

<8.8 MR1>

config wlan opendns-mode <wlan-id> {ignore | forced}

To ignore or force the Cisco Umbrella mode on the WLAN.

<8.8 MR1>

show opendns summary

To display details of Cisco Umbrella.

<8.8 MR1>

CleanAir Commands

Command

Description

Added in Release

config 802.11b cleanair enable ap_MAC

To enable CleanAir on an associated AP. Not applicable to 1850 and 1830 series APs.

8.1.122.0

show 802.11b cleanair device ap ap_MAC

To list all the interference devices connected to the AP.

8.1.122.0

show 802.11b cleanair device type jammer

To jam a specific interference device.

8.1.122.0

CMX Cloud Commands

Command

Description

Added in Release

config cloud-services server id-token CMX_token

To specify a valid CMX server token.

8.3.102.0

config cloud-services server url url

To specify a valid CMX server URL.

8.3.102.0

config cloud-services cmx enable

To enable CMX analytics.

8.3.102.0

show cloud-services cmx summary

To view details of the configured CMX cloud services.

8.3.102.0

Commands for Collecting Log, Core, and Crash Files

Command

Description

Added in Release

  1. transfer upload datatype support-bundle

  2. transfer upload start

Use these commands in sequence to collect log, core and crash files.

The files of the following data types are collected, bundled into a .TAR file, and the uploaded to a configured TFTP or FTP server:
  • run-config

  • systemtrace

  • traplog

  • debug-file

  • crashfile

  • coredump

  • ap-crash-data

8.3.102.0

debug transfer all enable

To debug the code-flow, use this command before the transfer upload start command.

8.3.102.0

debug disable-all

To disable debugging of the code-flow.

8.3.102.0

Commands for Software Download from Cisco.com

Step

Command

Description

Added in Release

1

transfer download ap-images mode cco

To set the mode of download of software images to be from Cisco.com.

8.3.102.0

2

transfer download ap-images cco-username username cco-password password

To specify the Cisco.com credentials to be used.

8.3.102.0

3

transfer download ap-images version { suggested | latest }

To specify whether the suggested or the latest software version images are to be downloaded.

8.3.102.0

4

transfer download ap-images cco-auto-check { enable | disable }

To set the controller to automatically check for software image updates from Cisco.com.

8.3.102.0

5

transfer download start

To start the download.

8.3.102.0

Controller Image Upgrade Commands

The following commands are used when performing a Mobility Express controller software image upgrade.

Command

Description

Added in Release

transfer download ap-images imagePath image_path

To set the path of the software image on the TFTP server

8.1.122.0

transfer download ap-images mode tftp

To set the file transfer mode as TFTP

8.1.122.0

transfer download ap-images serverIp ipv4_address

To specify the IP address of the TFTP server

8.1.122.0

transfer download start

To save the configuration and start the image download

8.1.122.0

transfer download stop

To stop the ongoing image download

8.3.102.0

debug transfer all { enable | disable }

To debug the transfer and download with all sub commands enabled

8.1.122.0

debug transfer tftp { enable | disable }

To debug transfer download of TFTP

8.1.122.0

debug transfer trace { enable | disable }

To debug transfer trace

8.1.122.0

DNS Commands

Command

Description

Added in Release

config network dns default To configure the default DNS servers.

8.2.100.1

show network summary To view a network summary, with the default DNS servers listed, if they are enabled.

8.2.100.1

DNS ACL Commands

The following commands are used while configuring DNS IPv4 ACLs and DNS IPv6 ACLs on the Cisco Mobility Express controller.

Table 1. DNS ACL Commands

Command

Description

Command History

config flexconnect acl create acl-name

Creates and configures the ACL.

Introduced in 8.6.101.0

config flexconnect ipv6 acl create acl-name

Creates and configures the IPv6 ACL.

Introduced in 8.6.101.0

config flexconnect acl url-domain url {snmptraps | | | radius}enable | | | disable

Configures secure tunnel application support.

Introduced in 8.6.101.0

config secure-tunnel network {snmptraps | | | radius}enable | | | disable

Configures the secure tunnel network.

Introduced in 8.6.101.0

config flexconnect acl url-domain add acl-nameindex

Adds the URL domain to the ACL.

Introduced in 8.6.101.0

config flexconnect ipv6 acl url-domain add acl-nameindex

Adds the URL domain to the IPv6 ACL.

config flexconnect acl url-domain url acl-nameindexurl-name

Configures the URL name in the ACL.

Introduced in 8.6.101.0

config flexconnect ipv6 acl url-domain url acl-nameindexurl-name

Configures the URL name in the IPv6 ACL.

config flexconnect acl url-domain delete acl-nameindex

Deletes the URL domain from the ACL.

Introduced in 8.6.101.0

config flexconnect ipv6 acl url-domain delete acl-nameindex

Deletes the IPv6 URL domain from the ACL.

config flexconnect acl url-domain action acl-nameindex permit| deny

Configures the action of an ACL rule.

Introduced in 8.6.101.0

config flexconnect ipv6 acl url-domain action acl-nameindex permit| deny

Configures the action of an IPv6 ACL rule.

config flexconnect group group-namepolicy acl {add | delete}acl-name

Adds or deletes policy IPv4 ACL on the Flexconnect group.

Introduced in 8.6.101.0

config flexconnect group group-namepolicy ipv6 acl {add | delete}acl-name

Adds or deletes policy IPv6 ACL on the Flexconnect group.

config flexconnect acl apply acl-name

Applies the IPv4 ACL to the APs.

config flexconnect ipv6 acl apply acl-name

Applies the IPv6 ACL to the APs.

config flexconnect group group-nameweb-auth wlanwlan-idaclacl-name{enable| disable}

Configures WLAN for web-auth IPv4 ACL on the Flexconnect group.

Introduced in 8.6.101.0

config flexconnect group group-nameweb-auth wlanwlan-id ipv6 aclacl-name{enable| disable}

Configures WLAN for web-auth IPv6 ACL on the Flexconnect group.

Introduced in 8.6.101.0

show flexconnect acl {summary | detailed acl-name}

Displays the summary of the Access Control Lists or the detailed Access Control List information.

Introduced in 8.6.101.0

show flexconnect ipv6acl {summary | detailed acl-name}

Displays the summary of the IPv6 Access Control Lists or the detailed IPv6 Access Control List information.

Introduced in 8.6.101.0

EoGRE Commands

The following commands are available once Ethernet over GRE (EoGRE) configurations are enabled for the Cisco Mobility Express network. EoGRE tunnels in Cisco Mobility Express only support FlexConnect mode.

Command

Description

Added in Release

config tunnel

To add or delete custom CCX multicast addresses for RFID tag tracking.

The addresses that can be configured include 0x01, 0x40, 0x96, 0x00, and 0x03.

8.8.100.0

config tunnel

To

8.8.100.0

config tunnel

To

8.8.100.0

config tunnel

To

8.8.100.0

config tunnel profile rule add profile-name realm-filter realm-string eogre vlanvlan-id domain-name

To add a new rule to the profile.

8.8.100.0

config tunnel profile rule delete profile-name realm-filter realm-string

To delete an existing rule from the profile.

8.8.100.0

config tunnel profile rule modify profile-name realm-filter realm-string eogre vlanvlan-id domain-name

To modify an existing rule.

8.8.100.0

config tunnel

To

8.8.100.0

config tunnel

To

8.8.100.0

config tunnel

To

8.8.100.0

config tunnel

To

8.8.100.0

config tunnel

To

8.8.100.0

config tunnel

To

8.8.100.0

config rfid rate-limit

To configure the RFID message rate limit over a cycle of processing.

8.8.100.0

config rfid status {enable | disable}

To enable or disable RFID tag data collection.

8.8.100.0

config rfid timeout

To configure the RFID tag data timeout.

8.8.100.0

show rfid client

To display the summary of RFID tags that are clients.

8.8.100.0

show rfid config

To display the configuration options for RFID tag tracking.

8.8.100.0

show rfid detail

To display detailed information for a specified RFID tag.

8.8.100.0

show rfid summary

To display summary information for all known RFID tags.

8.8.100.0

Migration Commands

The following commands are used for converting an AP from Mobility Express software image to Lightweight CAPWAP AP software image, and vice-versa.

Command

Description

Added in Release

ap-type capwap

To convert ap-type from Mobility Express to CAPWAP

8.1.122.0

ap-type mobilityexpress tftp://tftp_server/file_name

To convert ap-type from CAPWAP to Mobility Express, when running an Mobility Express software image

8.1.122.0

config ap unifiedmode switch_name switch_IP_address

To convert all APs to type CAPWAP simultaneously from the switch

8.1.122.0

Next Preferred Master AP and Forced Failover

Command

Description

Added in Release

config ap next-preferred-master cisco_ap_name To set the next preferred master AP.

8.3.102.0

config ap next-preferred-master cisco_ap_name forced-failover To set the next preferred master AP and to manually trigger a failover to that AP.

8.3.102.0

NTP Commands

Command

Description

Added in Release

config time ntp server 1 FQDN_of_server To configure the fully qualified domain name of the NTP server having, for example here, NTP index 1.

8.2.100.1

config time ntp server 2 NTP_Server_IP_address To configure the IP address of the NTP server having, for example here, NTP index 2.

8.2.100.1

VRRP Commands

The following Virtual Router Redundancy Protocol (VRRP) commands are used during the Mobility Express controller failover and for the master AP.

Command

Description

Added in Release

config ap next-preferred-master

To configure the master AP that has been elected to take over as the new master AP

8.1.122.0

show ap next-preferred-master

To display the status of the master AP

8.1.122.0

clear ap next-preferred-master

To clear the configuration of the master AP

8.1.122.0

show mob-exp vrrp vrid

To display the VRID.

8.8.100.0

show mob-exp vrrp mac

To display the VRRP MAC

8.8.100.0

WLAN Security Commands

Command

Description

Added in Release

config wlan security wpa akm cckm {enable | disable} wlan_id

To enable or disable CCKM

8.2.100.1