You are here: Home > CLI Commands > Just_CLI_Topics > show ap monitor debug

show ap monitor debug

show ap monitor debug counters|status {ap-name <ap-name>}|{bssid <bssid>}|{ip-addr <ip-addr>}|{ip6-addr <ip6-addr>}show ap monitor debug profile-config {ap-name <ap-name>}|{bssid <bssid>}|{ip-addr <ip-addr>}|{ip6-addr <ip6-addr>} am-scan|ap-radio|ap-system|arm|event-thresholds|ids-dos|ids-general|ids-impersonation|ids-signature-matching|ids-unauthorized-device|interference|regulatory-domain|rf-behavior

 

Description

Show information for an Air Monitor’s current status, message counters, or profile settings.

Syntax

Parameter

Description

counters

Show Air Monitor (AMAir Monitor. AM is a mode of operation supported on wireless APs. When an AP operates in the Air Monitor mode, it enhances the wireless networks by collecting statistics, monitoring traffic, detecting intrusions, enforcing security policies, balancing wireless traffic load, self-healing coverage gaps, and more. However, clients cannot connect to APs operating in the AM mode.) message counters.

status

Show the status of an Air Monitor.

ap-name <ap-name>

Show data for an AMAir Monitor. AM is a mode of operation supported on wireless APs. When an AP operates in the Air Monitor mode, it enhances the wireless networks by collecting statistics, monitoring traffic, detecting intrusions, enforcing security policies, balancing wireless traffic load, self-healing coverage gaps, and more. However, clients cannot connect to APs operating in the AM mode. with a specific name.

bssid <bssid>

Show data for an AMAir Monitor. AM is a mode of operation supported on wireless APs. When an AP operates in the Air Monitor mode, it enhances the wireless networks by collecting statistics, monitoring traffic, detecting intrusions, enforcing security policies, balancing wireless traffic load, self-healing coverage gaps, and more. However, clients cannot connect to APs operating in the AM mode. with a specific Basic Service Set Identifier (BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly.). The Basic Service Set Identifier (BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly.) is usually the AP’s MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address.

ip-addr <ip-addr>

Show data for an AMAir Monitor. AM is a mode of operation supported on wireless APs. When an AP operates in the Air Monitor mode, it enhances the wireless networks by collecting statistics, monitoring traffic, detecting intrusions, enforcing security policies, balancing wireless traffic load, self-healing coverage gaps, and more. However, clients cannot connect to APs operating in the AM mode. with a specific IP address by entering its IPv4 address in dotted-decimal format.

ip6-addr <ip6-addr>

Show data for an AMAir Monitor. AM is a mode of operation supported on wireless APs. When an AP operates in the Air Monitor mode, it enhances the wireless networks by collecting statistics, monitoring traffic, detecting intrusions, enforcing security policies, balancing wireless traffic load, self-healing coverage gaps, and more. However, clients cannot connect to APs operating in the AM mode. with a specific IP address by entering its IPv6 address in dotted-decimal format.

profile-config

Show an Air Monitor profile configuration.

am-scan

Show Air Monitor active scanning configuration.

ap-radio

Show the Air Monitor radio configuration parameters, as defined in the AMAir Monitor. AM is a mode of operation supported on wireless APs. When an AP operates in the Air Monitor mode, it enhances the wireless networks by collecting statistics, monitoring traffic, detecting intrusions, enforcing security policies, balancing wireless traffic load, self-healing coverage gaps, and more. However, clients cannot connect to APs operating in the AM mode.’s 802.11a802.11a provides specifications for wireless systems. Networks using 802.11a operate at radio frequencies in the 5 GHz band. The specification uses a modulation scheme known as orthogonal frequency-division multiplexing (OFDM) that is especially well suited to use in office settings. The maximum data transfer rate is 54 Mbps., 802.11b802.11b is a WLAN standard often called Wi-Fi and is backward compatible with 802.11. Instead of the Phase-Shift Keying (PSK) modulation method used in 802.11 standards, 802.11b uses Complementary Code Keying (CCK) that allows higher data speeds and makes it less susceptible to multipath-propagation interference. 802.11b operates in the 2.4 GHz band and the maximum data transfer rate is 11 Mbps., or high-throughput radio profiles.

ap-system

Show an Air Monitor’s system configuration settings, as defined in it’s AP System profile.

arm

Show an Air Monitor’s Adaptive Radio Management (ARMAdaptive Radio Management. ARM dynamically monitors and adjusts the network to ensure that all users are allowed ready access. It enables full utilization of the available spectrum to support maximum number of users by intelligently choosing the best RF channel and transmit power for APs in their current RF environment. ) settings, as defined in its current ARMAdaptive Radio Management. ARM dynamically monitors and adjusts the network to ensure that all users are allowed ready access. It enables full utilization of the available spectrum to support maximum number of users by intelligently choosing the best RF channel and transmit power for APs in their current RF environment. profile

event-thresholds

Show an Air Monitor Event Thresholds settings, as defined in its current RFRadio Frequency. RF refers to the electromagnetic wave frequencies within a range of 3 kHz to 300 GHz, including the frequencies used for communications or Radar signals. Event Thresholds profile

ids-dos

Show an Air Monitor IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. DoSDenial of Service. DoS is any type of attack where the attackers send excessive messages to flood traffic and thereby preventing the legitimate users from accessing the service. settings, as defined in its current IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. DoSDenial of Service. DoS is any type of attack where the attackers send excessive messages to flood traffic and thereby preventing the legitimate users from accessing the service. profile.

ids-general

Show an Air Monitor IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. General Configuration settings, as defined in its IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. General profile.

ids-impersonation

Show an Air Monitor IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. Impersonation Configuration settings, as defined in its IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. Impersonation profile.

ids-signature-matching

Show an Air Monitor IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. Signature Matching configuration settings, as defined in its IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. Signature Matching profile

ids-unauthorized-device

Show an Air Monitor IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. Unauthorized Device configuration settings, as defined in its IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. Unauthorized Device profile.

interference

Show an Air Monitor’s interference configuration settings, as defined in its current RFRadio Frequency. RF refers to the electromagnetic wave frequencies within a range of 3 kHz to 300 GHz, including the frequencies used for communications or Radar signals. Optimization profile.

regulatory-domain

Show an Air Monitor’s Regulatory Domain configuration settings, as defined in its Regulatory Domain profile.

rf-behavior

Show an Air Monitor RFRadio Frequency. RF refers to the electromagnetic wave frequencies within a range of 3 kHz to 300 GHz, including the frequencies used for communications or Radar signals. Behavior Configuration

Examples

The output of the following command includes the WLAN Interface, Data Structures, WLAN InterfaceSwitch Status and RTLS Configuration tables for the specified AP.

(host) #show ap monitor debug status ap-name ap12

WLAN Interface

--------------

bssid scan monitor probe-type phy-type task channel pkts

----- ---- ------- ---------- -------- ---- ------- ----

00:1a:1e:11:5f:10 enable enable sap 80211a-HT-40 tuned 153 496970814

00:1a:1e:11:5f:00 enable enable sap 80211b/g-HT-20 tuned 6 391278179

 

Wired Interface

---------------

mac ip gw-ip gw-mac status pkts

--- -- ----- ------ ------ ----

macs gw-macs tagged-pkts vlan

---- ------- ----------- ----

00:1a:1e:c9:15:f0 192.0.2.32.200 192.0.2.32.254 00:0b:86:08:e1:00 enable 101960

2 3 1 03

Global Counters

---------------

key value

--- -----

Packets Read 888248993

Bytes Read 2819670134

Num Interrupts 681037971

Num Buffer Overflows 591393

Max PPS 16239

Cur PPS 1130

Max PPI 20

Cur PPI 2

Uptime 3323085

AP Name AL12

LMS IP 192.0.2.250

Master IP 192.0.2.253

AP Type 125

Country Code 2

 

Starting from ArubaOS 8.4.0.0, the output of the command show ap monitor debug status includes the new counters to differentiate the distribution of DATA, MGMT, CTRL, and AGGR packets.

WLAN packet counters for DATA

------------------------------

Interface Data Pkts Data Bytes Data Max PPS Data Cur PPS Data Max BPS Data Cur BPS

--------- --------- ---------- ------------ ------------ ------------ ------------

18:64:72:7e:51:d0(wifi0) 67730 3045300 366 5 36600 140

18:64:72:7e:51:c0(wifi1) 0 0 0 0 0 0

 

WLAN packet counters for MGMT

------------------------------

Interface MGMT Pkts MGMT Bytes MGMT Max PPS MGMT Cur PPS MGMT Max BPS MGMT Cur BPS

--------- --------- ---------- ------------ ------------ ------------ ------------

18:64:72:7e:51:d0(wifi0) 2835404 750667644 217 31 60416 8512

18:64:72:7e:51:c0(wifi1) 0 0 0 0 0 0

 

WLAN packet counters for CTRL

------------------------------

Interface CTRL Pkts CTRL Bytes CTRL Max PPS CTRL Cur PPS CTRL Max BPS CTRL Cur BPS

--------- --------- ---------- ------------ ------------ ------------ ------------

18:64:72:7e:51:d0(wifi0) 5466191 106264680 6910 28 132428 512

18:64:72:7e:51:c0(wifi1) 0 0 0 0 0 0

 

WLAN packet counters for AGGR

------------------------------

Interface FIRST AGGR MIDDLE AGGR LAST AGGR TOTAL AGGR NUM NON AGGR

--------- ---------- ----------- --------- ---------- ------------

84:d4:7e:d1:d7:d0(wifi0) 4059 3452 4147 11658 95687

84:d4:7e:d1:d7:c0(wifi1) 0 0 0 0 0

 

Data Structures

----------------

ap sta pap psta ch msg-hash ap-l

-- --- --- ---- -- -------- ----

20 40 17 55 24 21 20

 

Other Parameters

-----------------

key value

--- -----

WMS on Master disabled

Stats Update Interval 60

Poll Interval 174000

Num Switches 1

Collect Stats enabled

 

WLAN Interface Switch Status

-----------------------------

Bssid Type Status Last-reg N-reg Last-update Next-update N-updates Last-ack

----- ---- ------ -------- ----- ----------- ----------- --------- --------

00:1a:1e:11:5f:10 local up 3321891 3821 3322965 197 10368 3322965

00:1a:1e:11:5f:00 local up 3321891 3821 3322917 187 10378 3322965

 

RTLS Configuration and State

-----------------------------

Type Server IP Port Freq Active Rpt-Tags Tag-Mcast-Addr

---- --------- ---- ---- ------ -------- --------------

MMS N/A N/A N/A disable 01:0c:cc:00:00:00

Aeroscout 2001::3 N/A 30 * disable 00:00:00:00:00:00

RTLS 2001::2 N/A 20 * disable 01:18:8e:00:00:00

 

Tags-Sent Rpt-Sta Incl-Unassoc-Sta Sta-Sent Cmpd-Msgs-Sent

--------- ------- ---------------- -------- --------------

N/A disable N/A N/A N/A

N/A enable disable 2610 265

N/A enable enable

The output of this command includes the following information:

Column

Description

bssid

The Basic Service Set Identifier (BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly.) for the AP. This is usually the AP’s MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address.

scan

Indicates whether or not if active scanning is enabled on this AP.

monitor

Indicates whether the AP radio is currently enabled or disabled.

probe-type

This parameter displays one of the following options to show the AP is configured.

sap: Default AP setting.

am: AP is configured as an Air Monitor.

m-portal: AP is configured as a Mesh portal.

m-point: AP is configured as a Mesh point.

task

This parameter displays one of the following options to show the radio’s current task:

scan: AP is scanning other channels.

tuned: AP is tuned on one channel.

locate: AP has been asked to locate a specific AP or client.

pcap: The AP is enabled with the Packet Capture feature.

channel

The radio channel currently used by an AP’s WLANWireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. interface.

pkts

Number of packets seen on the interface.

mac

MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address for the AP’s wired interface.

ip

The AP’s IP address.

gw-ip

IP address for the AP’s gatewayGateway is a network node that allows traffic to flow in and out of the network..

gw-mac

MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address for the AP’s gatewayGateway is a network node that allows traffic to flow in and out of the network..

status

Shows if the interface is currently enabled or disabled.

pkts

Number of packets seen on the AP’s wired interface.

macs

Number of MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses in the Wired MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. table for that interface.

gw-macs

Number of MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses in the Wired MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. table for that interface.

tagged-pkts

Number VLANVirtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN.-tagged packets sent to that interface.

vlan

The VLANVirtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. ID for the packets sent to that interface.

Packets read

Number of packets read by the AP since it was last reset.

Bytes read

Number of bytes read by the AP since it was last reset.

Num Intercepts

Number of interrupts from the AP’s driver.

Num Buffer Overflows

Number of times excessive traffic has filled the AP’s buffers.

Max PPS

Maximum throughput rate seen on the interface, in packets per second.

Cur PPS

Current throughput rate seen on the interface, in packets per second.

Max PPI

Maximum interrupt rate seen on the interface, in interrupts per second.

Cur PPI

Current interrupt rate seen on the interface, in interrupts per second.

Uptime

Number of seconds since the AP was last reset.

LMS IP

IP address of the AP’s managed device

Master IP

IP address of the AP’s Mobility Master.

AP type

AP model type.

Country Code

The AP’s country code. Valid radio channels for your wireless network are based on your country code. If you change the AP’s country code, the valid channels will be reset to the defaults for the new country.

ap

Number of other APs monitored by this AP.

sta

Number of clients and APs seen by this AP.

pap

Number of potential APs; APs which have transmitted a beacon, but have not yet been registered.

psta

Number of potential stations; AP has seen a MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address from the station but hasn’t yet received traffic from it.

ch

Number of channel entries in the channel table.

msg-hash

Number of different message types seen on the interface.

ap-l

(For internal use only)

WMS on Master

Indicates if the AP communicates to the wms process on Mobility Master or a managed device.

enabled: Communicates with Mobility Master.

disabled: Communicates with a managed device only.

Stats Update Interval

If the AP is collecting statistics, this value is the interval in seconds in which the AP sends statistics to the WMS process.

Poll Interval

Interval, in milliseconds, that the AP sends RSSIReceived Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values. updates to the WMS process.

Num Switches

Number of controllers to which this AP has access. If the value is 1, the AP has access to Mobility Master or a managed device. If the value is 2, the AP has access to Mobility Master andmanaged device.

Collect Stats

If enabled, the AP will collect statistics to send to the WMS process.

Bssid

BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly. of the radio.

Type

Indicates whether the controller type is master (Mobility Master) or local (managed device).

Status

If up, the AP can reach the managed device. If down, the AP cannot reach the managed device.

Last-reg

The time the AP last registered with the WMS process.

N-reg

Number of times the AP has registered with the WMS process.

Last-update

The last timer tick time the AP updated the WMS process.

Next-update

Interval between the last update and the next scheduled update.

N-updates

Number of updates sent to the WMS process.

Last-ack

Number of timer ticks since the AP received an acknowledgement from the WMS process.

Type

Type of RTLSReal-Time Location Systems. RTLS automatically identifies and tracks the location of objects or people in real time, usually within a building or other contained area. server used by the AP, such as MMS or Aeroscout.

Server IP

IP address of the RTLSReal-Time Location Systems. RTLS automatically identifies and tracks the location of objects or people in real time, usually within a building or other contained area. server.

Port

Port used by the RTLSReal-Time Location Systems. RTLS automatically identifies and tracks the location of objects or people in real time, usually within a building or other contained area. server.

Frequency

Rate, in seconds, at which RTLSReal-Time Location Systems. RTLS automatically identifies and tracks the location of objects or people in real time, usually within a building or other contained area. messages are sent to the server.

Active

Indicates if the server is active on the AP.

Rpt-Tags

Displays whether tag reporting is enabled or not.

Tag-Mcast-Addr

Displays MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. OUIOrganizationally Unique Identifier. Synonymous with company ID or vendor ID, an OUI is a 24-bit, globally unique assigned number, referenced by various standards. The first half of a MAC address is OUI. of the tags that are forwarded to the server.

Tags-Sent

Displays the cumulative count of the tag reports sent to server.

Rpt-Sta

Displays whether station reporting is enabled or not.

Incl-Unassoc-Sta

Displays whether unassociated stations are included in station reporting or not.

Sta-Sent

Displays cumulative count of station reports sent to server.

Cmpd-Msgs-Sent

Displays cumulative count of compound messages containing station reports sent to server.

Related Commands

Command

Description

show ap monitor

This command shows information for Aruba Air Monitors.

Command History

Command

Description

ArubaOS 8.4.0.0

The following changes were introduced:

The ip6-addr parameter was added.

The output of the show ap monitor debug status command displays both IPv4 and IPv6 addresses.

The output of the show ap monitor debug status command includes the new counters to differentiate the distribution of DATA, MGMT, CTRL, and AGGR packets.

ArubaOS 8.0.0.0

Command introduced.

Command Information

Platforms

Licensing

Command Mode

All platforms

Base operating system.

Enable or Config mode on Mobility Master.

/*]]>*/