What's New inArubaOS8.7.0.0

这s section lists the commands introduced, modified, or deprecated inArubaOS8.7.0.0.

New Commands inArubaOS8.7.0.0

The following commands were introduced inArubaOS8.7.0.0:

Command	Description
airslice	这s command is introduced to configure or modify an Air Slice profile.
ap debug radio-diag-log	这s command is introduced to collect WLAN firmware diagnostic logs to facilitate firmware debugging.
ap get-crash-dumps	这s command is introduced to allow AP crash dump files to be transferred to thecontrollerflash memory on demand from the AP flash memory.
ap mesh-accesslist-profile	这s command is introduced to configure or modify a mesh access list profile.
ap usb-acl-prof	这s command is introduced to configure an AP USB ACL profile.
ap usb-prof	这s command is introduced to configure an AP USB profile.
ble service-profile	这s command is introduced to configure BLE service profile.
ca-bundle	这s command is introduced to upgrade the trusted CA certificates.
dot1x-transactions-monitor	这s command is introduced to start or stop displaying the rate statistics under theshow dot1x-transactions-monitorcommand.
dot1x-transactions-monitor set	介绍了该命令提供sta率tistics interval duration and the total duration of a 802.1X transaction.
ip-reputation deny	这s command is introduced to deny connections matching malicious IP addresses.
lc-rap-pool-v6	这s command is introduced to configure theRemote APinner IPv6 pool for cluster deployment.
show airslice	这s command is introduced to display the details of an Air Slice profile.
show ap debug ble-input-filter-stats	这s command is introduced to display the input-filter information in the BLE table.
show ap debug client-info	这s command is introduced to display all the details of a specific client in WLAN driver, for client debugging.
show ap debug radio-diag-log status	这s command is introduced to display the current diagnostic logging status of an AP.
show ap debug usb-device-mgmt	这s command is introduced to display the debugging information of USB devices managed on an AP.
show ap get-crash-dumps-status	这s command is introduced to display the status of the crash dump file transfers to acontroller.
show ap mesh-accesslist-profile	这s command is introduced to display the details of a mesh access list profile.
show ap usb-acl-prof	这s command is introduced to display the AP USB ACL profile.
show ap usb-device-mgmt	这s command is introduced to display the USB devices managed on an AP.
show ap usb-prof	这s command is introduced to display AP USB profile.
show ble service-profile	这s command is introduced to display the details of a BLE service profile.
show ca-bundle version	这s command is introduced to display the version number of trusted CA certificates.
show dot1x-transactions-monitor	这s command is introduced to display the rate statistics, per second, for a 802.1X user.
show datapath cluster details	这s command is introduced to display detailed values of heartbeat sent or received count along with the sequence number of missed and delayed packets for all the connected peers.
show datapath cluster heartbeat counters	这s command is introduced to display information related to cluster heartbeat counters.
显示lc-clusterhistory	这s command is introduced to display the history of the connection and disconnection events with a reason and the time stamp.
show log peer-debug	这s command is introduced to display the logs of MAC-based debugging in IKE.
show zigbee service-profile	这s command is introduced to display the ZigBee service profile.
show zigbee socket-device-profile	这s command is introduced to display the ZigBee socket device profile.
show zigbee socket-inbound-profile	这s command is introduced to display the ZigBee socket inbound profile.
show zigbee socket-outbound-profile	这s command is introduced to display the ZigBee socket outbound profile.
zigbee service-profile	这s command is introduced to configure a ZigBee service profile.
zigbee socket-device-profile	这s command is introduced to configure a ZigBee socket device profile.
zigbee socket-inbound-profile	这s command is introduced to configure a ZigBee socket inbound profile.
zigbee socket-outbound-profile	这s command is introduced to configure a ZigBee socket outbound profile.

Modified Commands inArubaOS8.7.0.0

The following commands were modified inArubaOS8.7.0.0:

Command	Description
aaa authentication captive-portal	Captive portal authentication was supported for VAPs in the bridge forwarding mode.
aaa authentication via connection-profile	Theaddrsub-parameter is modified to include IPv6 address.
aaa profile	Theageout-bridge-userparameter is introduced.
airmatch profile	Thehe-pooling-client-densityparameter is introduced.
ap ble-init-action	The following parameters are introduced: input-filter-disable input-filter-enable
ap-group	The following parameters are introduced: airslice-profile airslice-visibility record-limit mesh-accesslist-profile usb-profile
ap mesh-cluster-profile	Therf-band allandrf-split5G-band-rangeparameters are introduced.
ap mesh-radio-profile	Theprefer-uplink-radioparameter is introduced.
ap-name	The following parameters are introduced: airslice-profile mesh-accesslist-profile
ap provisioning-profile	Themaster-preferenceparameter is introduced.
ap system-profile	The following parameters are introduced: disable-factory-reset he-pooling-enable itm-enable The following parameters were modified: telnet recovery-mode
controller-ble opmode	Thebeaconingparameter is removed.
crypto ipsec	Therekeyparameter is introduced to configure IPSec rekey interval.
crypto isakmp	Therekeyparameter is introduced to configure IKE rekey interval.
firewall	The following parameters are introduced: enable-gre-inner-pkt-frag deny-needfrag-df-gre-xmit-icmp deny-needfrag-df-gre deny-needfrag-gre-xmit-icmp deny-needfrag-gre
interface vlan	Thedns-slsub-parameter is added.
iot-manager	The following parameters are added: export replace-ap
iot transportProfile	The following parameters are introduced: ZSDFilter dataFilter The following device class filters are introduced: exposure-notification serial-data wiliot ZSD TheenableOnControllerparameter is removed.
lc-cluster group-profile	The default value of theheartbeat-thresholdparameter was changed to 900 ms.
logging	MAC-based debugging support in ISAKMPD is introduced. This feature will enable in debugging issues if APs are unable to form a tunnel with acontrollerin a scale setup.
mgmt-server	Theap-app-statsparameter is introduced.
provision-ap	Themaster-preferenceparameter was introduced.
rf arm-profile	The following parameters were added: cm-he-pooling-signal-delta cm-he-pooling-snr-thresh
show airgroup	The output of theshow airgroupcommand is modified to include the new sub-parameterppmunder the parameterinternal-state statistics.
show airgroupprofile	The output of theshow airgroupprofilecommand is modified to include the following sub-parameters under thenetwork defaultparameter: Enter MAC-Address or MAC-OUI to be blacklisted Configure max allowed IP per device. Default: 4 Configure max allowed tokens/cache per device (Default: 40)
show airmatch debug schedule	The output of theshow airmatch debug schedule switch-infocommand is modified to include IPv6 address.
show ap active	The output parametersRadio 0 Band Ch/EIRP/MaxEIRP/Clients, Radio 1 Band Ch/EIRP/MaxEIRP/Clients,andRadio 2 Band Ch/EIRP/MaxEIRP/Clientsinclude the following details: MPP: Indicates mesh-enabled radio of a mesh portal. MPC:The mesh point radio that has a parent link. MPA:The mesh point radio without a parent link.
show ap arm client-match history	The command output is modified to display information on clients having only IPv4 or IPv6 address, or a combination of both.
show ap database	The command displays two new flags,tandrto indicate Temperature Restriction and Power Restriction respectively.
show ap-group	The output is modified to include the following parameters: Mesh Accesslist Profile AirSlice Profile
show ap mesh active	The command displays a detailed output of all parameters only if mesh -enabled radios are configured.
show ap mesh neighbors	The output is modified to include theRadioparameter.
show ap mesh topology	The output is modified to include theRadioparameter.
show ap monitor	The following command outputs are modified to include ipv6 field: show ap monitor arp-cache ap-name show ap monitor debug status ap-name show ap monitor containment-info ap-name
show ap-name	The output is modified to include the following parameters: Mesh Accesslist Profile AirSlice Profile
show ap power-mgmt-statistics	The output is modified to display theITM Statusparameter.
show ap provisioning-profile	The output is modified to display the master preference of the AP.
show ap remote debug client-mgmt-counters	The followingASAP AP APP stats messagesandrecord countersare introduced: total null sap empty error queued sent
show ap virtual-beacon-report	The command output is modified to also display IPv6 address of the AP.
show controller-ip	The command output is modified to displaySwitch IPasSwitch IPv4.
show datapath	命令输出修改包括佛llowing: A new flag,Xis introduced forshow datapath tunnelcommand. Theshow datapath session dpicommand displays the AirSlice ID.
show firewall	The output was modified to include the following parameters: Enable GRE Inner Frame Fragmentation Drop Larger than GRE MTU DF frame, send ICMP Err Drop Larger than GRE MTU DF frame Drop Larger than GRE MTU frame, send ICMP Err Drop Larger than GRE MTU frame
show gsm debug	Thedual_controller_ipoutput parameter is introduced in theshow gsm debug channel clustercommand.
show gsm lookup	The output of the following commands are modified to display IPv6 address of the AP: show gsm lookup channel radio key radio_bssid show gsm lookup channel sta_mac_address
show interface tunnel	The following parameters are introduced: Tunnel stats last fetched from SOS RxBytes:, TxBytes:, Encaps:, Decaps:
show iot-manager	Theble-servicesparameter is added.
show iot transportProfile	The following parameters are introduced: Zigbee Socket Device Filter Data Filter The following device class filters are introduced: exposure-notification wiliot ZSD TheEnable BLE on Controllerparameter is removed.
show ip access-list	The following parameters are introduced for VAPs in bridge mode: captiveportalbridge logon-control-bridge Theglobal-geolocation-aclparameter is introduced.
显示lc-cluster	The functionality ofheartbeat countersparameter is modified.
show lc-rap-pool	The command output is modified to display IPv6 address used inRemote APinner pool.
show master-local stats / show conductor-local stats	The output of the command is modified to include IPv6 address.
show memory	Theas_visibilityparameter is introduced.
show ssh	Thehmac-sha2-256parameter is introduced.
show upgrade managed-devices	Theca-bundleparameter is introduced.
show vlan-assignment	TheIP Timeout CountandTime Fulloutput parameters are introduced.
show vlan mapping	TheIP Timeout, Max IP TimeoutsandFull Periodoutput parameters are introduced.
show whitelist-db cpsec-status/show allowlist-db cpsec-status	The output of the command is modified to include the following fields: My IPv6-Address Master IPv6-Address IPv6 LMS List
show wms rogue-ap	The output of theshow wms rogue-ap command is modified to display IPv6 address underMatch IPfield.
ssh	The command is modified to support SHA-2 authentication.
vlan-name	The ip-timeout, max-ip-timeoutsandfull-periodsub-parameters are introduced.
vpnip	Thev6 parameter is added.
web-server profile	TLS v1.2 is now the defaultssl-protocolin theweb-serverprofile. TLS v1 and TLS v1.1 is disabled by default.
wlan ssid-profile	Theadvertise-ap-nameparameter is modified to include AP names in probe response frames.
upgrade managed-devices	Theca-bundleparameter is introduced.