F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Command Reference-6PW100

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module

261

262

263

264

265

266

267

268

269

270

Table Of Contents

Title Page
Table of Contents
Ethernet interface configuration commands
- General Ethernet interface and subinterface configuration commands
- Layer 2 Ethernet interface and subinterface configuration commands
- Layer 3 Ethernet interface and subinterface configuration commands
  - mtu
  - promiscuous
- Loopback and null interface configuration commands
Bulk interface configuration commands
- interface range
- interface range name
IPv4 addressing configuration commands
- display ip interface
- display ip interface brief
- ip address
VLAN configuration commands
- Basic VLAN configuration commands
- Port-based VLAN configuration commands
MAC address table configuration commands
- display mac-address
- display mac-address aging-time
- mac-address (interface view)
- mac-address (system view)
- mac-address max-mac-count
- mac-address timer
Spanning tree configuration commands
- active region-configuration
- check region-configuration
- display stp
- display stp abnormal-port
- display stp bpdu-statistics
- display stp down-port
- display stp history
- display stp region-configuration
- display stp root
- display stp tc
- instance
- region-name
- reset stp
- revision-level
- stp bpdu-protection
- stp bridge-diameter
- stp compliance
- stp config-digest-snooping
- stp cost
- stp edged-port
- stp enable
- stp loop-protection
- stp max-hops
- stp mcheck
- stp mode
- stp no-agreement-check
- stp pathcost-standard
- stp point-to-point
- stp port priority
- stp priority
- stp region-configuration
- stp root primary
- stp root secondary
- stp root-protection
- stp tc-protection
- stp tc-protection threshold
- stp timer forward-delay
- stp timer hello
- stp timer max-age
- stp timer-factor
- stp transmit-limit
- vlan-mapping modulo
PPP configuration commands
- PPP configuration commands
- VT interface configuration commands
PPPoE configuration commands
- PPPoE client configuration commands
Layer 2 forwarding configuration commands
- Normal Layer 2 forwarding configuration commands
  - display mac-forwarding statistics
  - reset mac-forwarding statistics
- Inline forwarding configuration commands
DHCP server configuration commands
- bims-server
- bootfile-name
- dhcp enable (for DHCP server)
- dhcp server apply ip-pool
- dhcp select server global-pool
- dhcp server client-detect enable
- dhcp server detect
- dhcp server forbidden-ip
- dhcp server ip-pool
- dhcp server ping packets
- dhcp server ping timeout
- dhcp server relay information enable
- dhcp server threshold
- display dhcp server conflict
- display dhcp server expired
- display dhcp server free-ip
- display dhcp server forbidden-ip
- display dhcp server ip-in-use
- display dhcp server statistics
- display dhcp server tree
- dns-list
- domain-name
- expired
- forbidden-ip
- gateway-list
- nbns-list
- netbios-type
- network
- network ip range
- network mask
- next-server
- option
- reset dhcp server conflict
- reset dhcp server ip-in-use
- reset dhcp server statistics
- static-bind client-identifier
- static-bind ip-address
- static-bind mac-address
- tftp-server domain-name
- tftp-server ip-address
- vendor-class-identifier
DHCP relay agent configuration commands
- dhcp enable (for DHCP relay agent)
- dhcp relay address-check enable
- dhcp relay check mac-address
- dhcp relay client-detect enable
- dhcp relay information circuit-id format-type
- dhcp relay information circuit-id string
- dhcp relay information enable
- dhcp relay information format
- dhcp relay information remote-id format-type
- dhcp relay information remote-id string
- dhcp relay information strategy
- dhcp relay release ip
- dhcp relay security static
- dhcp relay security refresh enable
- dhcp relay security tracker
- dhcp relay server-detect
- dhcp relay server-group
- dhcp relay server-select
- dhcp select relay
- display dhcp relay information
- display dhcp relay security
- display dhcp relay security statistics
- display dhcp relay security tracker
- display dhcp relay server-group
- display dhcp relay statistics
- reset dhcp relay statistics
DHCP client configuration commands
- display dhcp client
- ip address dhcp-alloc
- display bootp client
- ip address bootp-alloc
IPv4 DNS configuration commands
- display dns domain
- display dns host
- display dns server
- display ip host
- dns domain
- dns proxy enable
- dns resolve
- dns server
- dns source-interface
- dns spoofing
- ip host
- reset dns host
DDNS configuration commands
- ddns apply policy
- ddns policy
- display ddns policy
- interval
- ssl client policy
- url
ARP configuration commands
- arp max-learning-num
- arp static
- arp timer aging
- display arp
- display arp ip-address
- display arp timer aging
- display arp vpn-instance
- naturemask-arp enable
- reset arp
Gratuitous ARP configuration commands
- arp send-gratuitous-arp
- gratuitous-arp-learning enable
- gratuitous-arp-sending enable
Proxy ARP configuration commands
- display local-proxy-arp
- display proxy-arp
- local-proxy-arp enable
- proxy-arp enable
Flow classification configuration commands
- display forwarding policy
- flow-classification enable
QoS policy commands
- Class commands
- Traffic behavior commands
- QoS policy configuration and application commands
Traffic policing commands
- display qos car interface
- display qos carl
- qos car
- qos carl
IP forwarding basics commands
- display fib
- display fib ip-address
IP forwarding mode configuration commands
- ip forwarding
- display ip forwarding mode
Static routing configuration commands
- delete static-routes all
- ip route-static
- ip route-static default-preference
RIP configuration commands
- checkzero
- default cost (RIP view)
- default-route
- display rip
- display rip database
- display rip interface
- display rip route
- filter-policy export (RIP view)
- filter-policy import (RIP view)
- host-route
- import-route (RIP view)
- maximum load-balancing (RIP view)
- network
- output-delay
- peer
- preference
- reset rip process
- reset rip statistics
- rip
- rip authentication-mode
- rip bfd enable
- rip bfd enable destination
- rip default-route
- rip input
- rip metricin
- rip metricout
- rip mib-binding
- rip output
- rip poison-reverse
- rip split-horizon
- rip summary-address
- rip version
- silent-interface (RIP view)
- summary
- timers
- validate-source-address
- version
OSPF configuration commands
- abr-summary (OSPF area view)
- area (OSPF view)
- asbr-summary
- authentication-mode
- bandwidth-reference (OSPF view)
- default
- default-cost (OSPF area view)
- default-route-advertise (OSPF view)
- description (OSPF/OSPF area view)
- display ospf abr-asbr
- display ospf asbr-summary
- display ospf brief
- display ospf cumulative
- display ospf error
- display ospf interface
- display ospf lsdb
- display ospf nexthop
- display ospf peer
- display ospf peer statistics
- display ospf request-queue
- display ospf retrans-queue
- display ospf routing
- display ospf vlink
- display router id
- enable link-local-signaling
- enable log
- enable out-of-band-resynchronization
- filter
- filter-policy export (OSPF view)
- filter-policy import (OSPF view)
- host-advertise
- import-route (OSPF view)
- ispf enable
- log-peer-change
- lsa-arrival-interval
- lsa-generation-interval
- lsdb-overflow-limit
- maximum load-balancing (OSPF view)
- network (OSPF area view)
- nssa
- opaque-capability enable
- ospf
- ospf authentication-mode
- ospf bfd enable
- ospf cost
- ospf dr-priority
- ospf mib-binding
- ospf mtu-enable
- ospf network-type
- ospf packet-process prioritized-treatment
- ospf timer dead
- ospf timer hello
- ospf timer poll
- ospf timer retransmit
- ospf trans-delay
- peer
- preference
- reset ospf counters
- reset ospf process
- reset ospf redistribution
- rfc1583 compatible
- router id
- silent-interface (OSPF view)
- snmp-agent trap enable ospf
- spf-schedule-interval
- stub (OSPF area view)
- stub-router
- transmit-pacing
- vlink-peer (OSPF area view)
IS-IS configuration commands
- Feature and hardware compatibility
BGP configuration commands
- Feature and hardware compatibility
Basic IP routing configuration commands
- display ip routing-table
- display ip routing-table acl
- display ip routing-table ip-address
- display ip routing-table ip-prefix
- display ip routing-table protocol
- display ip routing-table statistics
- reset ip routing-table statistics protocol
- reset ipv6 routing-table statistics
Policy-based routing configuration commands
- apply default output-interface
- apply ip-address default next-hop
- apply ip-address next-hop
- apply ip-precedence
- apply output-interface
- apply output-interface ip-address next-hop dhcpc
- display ip policy-based-route
- display ip policy-based-route setup
- display ip policy-based-route statistics
- display policy-based-route
- if-match acl
- if-match packet-length
- ip local policy-based-route
- ip policy-based-route
- policy-based-route
- reset policy-based-route statistics
Multicast routing and forwarding configuration commands
- delete ip rpf-route-static
- display multicast boundary
- display multicast forwarding-table
- display multicast routing-table
- display multicast routing-table static
- display multicast rpf-info
- ip rpf-route-static
- mtracert
- multicast boundary
- multicast forwarding-table downstream-limit
- multicast forwarding-table route-limit
- multicast load-splitting
- multicast longest-match
- multicast routing-enable
- reset multicast forwarding-table
- reset multicast routing-table
IGMP configuration commands
- display igmp group
- display igmp host interface
- display igmp interface
- display igmp proxying group
- display igmp routing-table
- display igmp ssm-mapping
- display igmp ssm-mapping group
- display igmp ssm-mapping host interface
- fast-leave (IGMP view)
- host-tracking (IGMP view)
- igmp
- igmp enable
- igmp fast-leave
- igmp group-limit
- igmp group-policy
- igmp host-tracking
- igmp last-member-query-interval
- igmp max-response-time
- igmp proxying enable
- igmp proxying forwarding
- igmp require-router-alert
- igmp robust-count
- igmp send-router-alert
- igmp ssm-mapping enable
- igmp startup-query-count
- igmp startup-query-interval
- igmp static-group
- igmp timer other-querier-present
- igmp timer query
- igmp version
- last-member-query-interval (IGMP view)
- max-response-time (IGMP view)
- require-router-alert (IGMP view)
- reset igmp group
- reset igmp ssm-mapping group
- robust-count (IGMP view)
- send-router-alert (IGMP view)
- ssm-mapping (IGMP view)
- startup-query-count (IGMP view)
- startup-query-interval (IGMP view)
- timer other-querier-present (IGMP view)
- timer query (IGMP view)
- version (IGMP view)
PIM configuration commands
- auto-rp enable
- bsm-fragment enable (PIM view)
- bsr-policy (PIM view)
- c-bsr (PIM view)
- c-bsr admin-scope (PIM view)
- c-bsr global
- c-bsr group
- c-bsr hash-length (PIM view)
- c-bsr holdtime (PIM view)
- c-bsr interval (PIM view)
- c-bsr priority (PIM view)
- c-rp (PIM view)
- c-rp advertisement-interval (PIM view)
- c-rp holdtime (PIM view)
- crp-policy (PIM view)
- display pim bsr-info
- display pim claimed-route
- display pim control-message counters
- display pim grafts
- display pim interface
- display pim join-prune
- display pim neighbor
- display pim routing-table
- display pim rp-info
- hello-option dr-priority (PIM view)
- hello-option holdtime (PIM view)
- hello-option lan-delay (PIM view)
- hello-option neighbor-tracking (PIM view)
- hello-option override-interval (PIM view)
- holdtime assert (PIM view)
- holdtime join-prune (PIM view)
- jp-pkt-size (PIM view)
- jp-queue-size (PIM view)
- pim
- pim bsr-boundary
- pim dm
- pim hello-option dr-priority
- pim hello-option holdtime
- pim hello-option lan-delay
- pim hello-option neighbor-tracking
- pim hello-option override-interval
- pim holdtime assert
- pim holdtime join-prune
- pim neighbor-policy
- pim require-genid
- pim sm
- pim state-refresh-capable
- pim timer graft-retry
- pim timer hello
- pim timer join-prune
- pim triggered-hello-delay
- probe-interval (PIM view)
- prune delay (PIM view)
- register-policy (PIM view)
- register-suppression-timeout (PIM view)
- register-whole-checksum (PIM view)
- reset pim control-message counters
- source-lifetime (PIM view)
- source-policy (PIM view)
- spt-switch-threshold (PIM view)
- ssm-policy (PIM view)
- state-refresh-interval (PIM view)
- state-refresh-rate-limit (PIM view)
- state-refresh-ttl
- static-rp (PIM view)
- timer hello (PIM view)
- timer join-prune (PIM view)
MSDP configuration commands
- cache-sa-enable
- display msdp brief
- display msdp peer-status
- display msdp sa-cache
- display msdp sa-count
- encap-data-enable
- import-source
- msdp
- originating-rp
- peer connect-interface
- peer description
- peer mesh-group
- peer minimum-ttl
- peer password
- peer request-sa-enable
- peer sa-cache-maximum
- peer sa-policy
- peer sa-request-policy
- reset msdp peer
- reset msdp sa-cache
- reset msdp statistics
- shutdown (MSDP view)
- static-rpf-peer
- timer retry
IPv6 basics configuration commands
- display ipv6 fib
- display ipv6 fib ipv6-address
- display ipv6 interface
- display ipv6 neighbors
- display ipv6 neighbors count
- display ipv6 neighbors vpn-instance
- display ipv6 pathmtu
- display ipv6 prefix
- display ipv6 socket
- display ipv6 statistics
- display tcp ipv6 statistics
- display tcp ipv6 status
- display udp ipv6 statistics
- ipv6
- ipv6 address
- ipv6 address prefix-number
- ipv6 address anycast
- ipv6 address auto
- ipv6 address auto link-local
- ipv6 address eui-64
- ipv6 address link-local
- ipv6 fib-loadbalance-type hash-based
- ipv6 hoplimit-expires enable
- ipv6 icmp-error
- ipv6 icmpv6 multicast-echo-reply enable
- ipv6 mtu
- ipv6 nd autoconfig managed-address-flag
- ipv6 nd autoconfig other-flag
- ipv6 nd dad attempts
- ipv6 nd hop-limit
- ipv6 nd ns retrans-timer
- ipv6 nd nud reachable-time
- ipv6 nd ra halt
- ipv6 nd ra interval
- ipv6 nd ra no-advlinkmtu
- ipv6 nd ra prefix
- ipv6 nd ra router-lifetime
- ipv6 neighbor
- ipv6 neighbor stale-aging
- ipv6 neighbors max-learning-num
- ipv6 pathmtu
- ipv6 pathmtu age
- ipv6 prefix
- ipv6 redirects enable
- ipv6 unreachables enable
- local-proxy-nd enable
- proxy-nd enable
- reset ipv6 neighbors
- reset ipv6 pathmtu
- reset ipv6 statistics
- reset tcp ipv6 statistics
- reset udp ipv6 statistics
- tcp ipv6 timer fin-timeout
- tcp ipv6 timer syn-timeout
- tcp ipv6 window
DHCPv6 configuration commands
- DHCPv6 common configuration commands
  - display ipv6 dhcp duid
  - display ipv6 dhcp option-group
- DHCPv6 server configuration commands
- DHCPv6 relay agent configuration commands
- DHCPv6 client configuration commands
IPv6 DNS configuration commands
- display dns ipv6 server
- display ipv6 host
- dns server ipv6
- ipv6 host
IPv6 static routing configuration commands
- Feature and hardware compatibility
  - delete ipv6 static-routes all
  - ipv6 route-static
RIPng configuration commands
- Feature and hardware compatibility
OSPFv3 configuration commands
- Feature and hardware compatibility
IPv6 IS-IS configuration commands
- Feature and hardware compatibility
IPv6 BGP configuration commands
- Feature and hardware compatibility
IPv6 routing table displaying commands
- Feature and hardware compatibility
IPv6 policy-based routing configuration commands
- Feature and hardware compatibility
IPv6 multicast routing and forwarding configuration commands
- display multicast ipv6 boundary
- display multicast ipv6 forwarding-table
- display multicast ipv6 routing-table
- display multicast ipv6 rpf-info
- multicast ipv6 boundary
- multicast ipv6 forwarding-table downstream-limit
- multicast ipv6 forwarding-table route-limit
- multicast ipv6 load-splitting
- multicast ipv6 longest-match
- multicast ipv6 routing-enable
- reset multicast ipv6 forwarding-table
- reset multicast ipv6 routing-table
IPv6 PIM configuration commands
- bsm-fragment enable (IPv6 PIM view)
- bsr-policy (IPv6 PIM view)
- c-bsr (IPv6 PIM view)
- c-bsr admin-scope (IPv6 PIM view)
- c-bsr hash-length (IPv6 PIM view)
- c-bsr holdtime (IPv6 PIM view)
- c-bsr interval (IPv6 PIM view)
- c-bsr priority (IPv6 PIM view)
- c-bsr scope
- c-rp (IPv6 PIM view)
- c-rp advertisement-interval (IPv6 PIM view)
- c-rp holdtime (IPv6 PIM view)
- crp-policy (IPv6 PIM view)
- display pim ipv6 bsr-info
- display pim ipv6 claimed-route
- display pim ipv6 control-message counters
- display pim ipv6 grafts
- display pim ipv6 interface
- display pim ipv6 join-prune
- display pim ipv6 neighbor
- display pim ipv6 routing-table
- display pim ipv6 rp-info
- embedded-rp
- hello-option dr-priority (IPv6 PIM view)
- hello-option holdtime (IPv6 PIM view)
- hello-option lan-delay (IPv6 PIM view)
- hello-option neighbor-tracking (IPv6 PIM view)
- hello-option override-interval (IPv6 PIM view)
- holdtime assert (IPv6 PIM view)
- holdtime join-prune (IPv6 PIM view)
- jp-pkt-size (IPv6 PIM view)
- jp-queue-size (IPv6 PIM view)
- pim ipv6
- pim ipv6 bsr-boundary
- pim ipv6 dm
- pim ipv6 hello-option dr-priority
- pim ipv6 hello-option holdtime
- pim ipv6 hello-option lan-delay
- pim ipv6 hello-option neighbor-tracking
- pim ipv6 hello-option override-interval
- pim ipv6 holdtime assert
- pim ipv6 holdtime join-prune
- pim ipv6 neighbor-policy
- pim ipv6 require-genid
- pim ipv6 sm
- pim ipv6 state-refresh-capable
- pim ipv6 timer graft-retry
- pim ipv6 timer hello
- pim ipv6 timer join-prune
- pim ipv6 triggered-hello-delay
- probe-interval (IPv6 PIM view)
- prune delay (IPv6 PIM view)
- register-policy (IPv6 PIM view)
- register-suppression-timeout (IPv6 PIM view)
- register-whole-checksum (IPv6 PIM view)
- reset pim ipv6 control-message counters
- source-lifetime (IPv6 PIM view)
- source-policy (IPv6 PIM view)
- spt-switch-threshold (IPv6 PIM view)
- ssm-policy (IPv6 PIM view)
- state-refresh-hoplimit
- state-refresh-interval (IPv6 PIM view)
- state-refresh-rate-limit (IPv6 PIM view)
- static-rp (IPv6 PIM view)
- timer hello (IPv6 PIM view)
- timer join-prune (IPv6 PIM view)
MLD configuration commands
- display mld group
- display mld host interface
- display mld interface
- display mld proxying group
- display mld routing-table
- display mld ssm-mapping
- display mld ssm-mapping group
- display mld ssm-mapping host interface
- fast-leave (MLD view)
- host-tracking (MLD view)
- last-listener-query-interval (MLD view)
- max-response-time (MLD view)
- mld
- mld enable
- mld fast-leave
- mld group-limit
- mld group-policy
- mld host-tracking
- mld last-listener-query-interval
- mld max-response-time
- mld proxying enable
- mld proxying forwarding
- mld require-router-alert
- mld robust-count
- mld send-router-alert
- mld ssm-mapping enable
- mld startup-query-count
- mld startup-query-interval
- mld static-group
- mld timer other-querier-present
- mld timer query
- mld version
- require-router-alert (MLD view)
- reset mld group
- reset mld ssm-mapping group
- robust-count (MLD view)
- send-router-alert (MLD view)
- ssm-mapping (MLD view)
- startup-query-count (MLD view)
- startup-query-interval (MLD view)
- timer other-querier-present (MLD view)
- timer query (MLD view)
- version (MLD view)
Routing policy configuration commands
- Common routing policy configuration commands
- IPv4 routing policy configuration commands
- IPv6 routing policy configuration commands
SSL configuration commands
- ciphersuite
- client-verify enable
- client-verify weaken
- close-mode wait
- display ssl client-policy
- display ssl server-policy
- handshake timeout
- pki-domain
- prefer-cipher
- server-verify enable
- session
- ssl client-policy
- ssl server-policy
- version
Support and other resources
- Contacting HP
  - Subscription service
- Related information
  - Documents
  - Websites
- Conventions
Index

244

Usage guidelines

Flow classification consumes many system resources. You can enable or disable this function to improve

device performance.

Examples

# Disable flow classification.

<Sysname> system

[Sysname] undo flow-classification enable