HP FlexFabric 11900 Switch Series Fundamentals Command Reference Part number: 5998-5271 Software version: Release 2111 and later Document version: 6W100-20140110
Legal and notice information © Copyright 2014 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Contents Basic CLI commands ···················································································································································· 1 command-alias enable ············································································································································· 1 command-alias mapping ········································································································································· 1 displa
telnet server dscp ··················································································································································· 44 telnet server enable ··············································································································································· 44 telnet server ipv6 acl ············································································································································· 45 telnet
ftp client source ······················································································································································ 93 ftp client ipv6 source ············································································································································· 94 ftp ipv6 ···································································································································································
tar list ···································································································································································· 141 undelete ································································································································································ 142 Configuration file management commands ·········································································································· 143 backup st
reset install rollback oldest ································································································································· 215 Device management commands ···························································································································· 217 clock datetime ······················································································································································ 217 clock protocol ······
scheduler schedule ·············································································································································· 276 set asset-info ························································································································································· 277 shutdown-interval ················································································································································· 278 switc
Basic CLI commands command-alias enable Use command-alias enable to enable the command keyword alias function. Use undo command-alias enable to disable the command keyword alias function. Syntax command-alias enable undo command-alias enable Default The command keyword alias function is disabled. Views System view Predefined user roles network-admin mdc-admin Usage guidelines Configured command keyword aliases take effect only when the command keyword alias function is enabled.
Default A command keyword has no alias. Views System view Predefined user roles network-admin mdc-admin Parameters cmdkey: Specifies the first keyword of a non-undo command or the second keyword of an undo command. You must enter the keyword in its complete form. alias: Specifies an alias for the keyword, a string of 1 to 20 characters. It must be different from the first keyword of any non-undo command and the second keyword of any undo command.
Parameters command: Specifies the keywords and arguments of a display command. To display available keywords and arguments, enter display ?. begin: Displays the first line matching the specified regular expression and all subsequent lines. exclude: Displays all lines not matching the specified regular expression. include: Displays all lines matching the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
display vlan 999 | by-linenum 1: VLAN ID: 999 2: VLAN type: Static 3: Route interface: Configured 4: IP address: 192.168.2.1 5: Subnet mask: 255.255.255.0 6: Description: For LAN Access 7: Name: VLAN 0999 8: Tagged ports: 9: Untagged ports: 10: None Ten-GigabitEthernet1/0/1 # Display the first line that begins with "user-group" in the running configuration and all of the following lines.
# Verify the content of the vlan.txt file. more vlan.txt VLAN ID: 1 VLAN type: Static Route interface: Not configured Description: VLAN 0001 Name: VLAN 0001 Tagged ports: None Untagged ports: Ten-GigabitEthernet1/0/2 display >> Use display >> to append the output from a display command to the end of a file.
Name: VLAN 0001 Tagged ports: None Untagged ports: Ten-GigabitEthernet1/0/2 VLAN ID: 999 VLAN type: Static Route interface: Configured IP address: 192.168.2.1 Subnet mask: 255.255.255.0 Description: For LAN Access Name: VLAN 0999 Tagged ports: None Untagged ports: Ten-GigabitEthernet1/0/1 display command-alias Use display command-alias to display the status of the command keyword alias function and the configured command keyword alias.
display history-command Use display history-command to display all commands that are saved in the command history buffer for the current CLI session. Syntax display history-command Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Usage guidelines The system automatically saves commands you have successfully executed to the command history buffer for the current CLI session. You can view them and execute them again.
mdc-operator Usage guidelines The system automatically saves commands successfully executed by users to the command history buffer for all CLI sessions. Users can view them and execute them again. Up to 1024 commands can be saved in the command history buffer. When this number is reached, the system deletes the earliest commands to make room for newly executed commands. Examples # Display all commands saved in the command history buffer for all CLI sessions.
-System-reserved hotkeysCTRL_A Move the cursor to the beginning of the line. CTRL_B Move the cursor one character to the left. CTRL_C Stop the current command. CTRL_D Erase the character at the cursor. CTRL_E Move the cursor to the end of the line. CTRL_F Move the cursor one character to the right. CTRL_H Erase the character to the left of the cursor. CTRL_K Abort the connection request. CTRL_N Display the next command in the history buffer.
Predefined user roles network-admin mdc-admin Parameters CTRL_G: Assigns a command to Ctrl+G. CTRL_L: Assigns a command to Ctrl+L. CTRL_O: Assigns a command to Ctrl+O. CTRL_T: Assigns a command to Ctrl+T. CTRL_U: Assigns a command to Ctrl+U. command: Specifies the command to be assigned to the hotkey. Usage guidelines The system defines some hotkeys and provides five configurable command hotkeys. Pressing a hotkey executes the command assigned to the hotkey.
[Sysname] quit return Use return to return to user view from any other view. Syntax return Views Any view except user view Predefined user roles network-admin network-operator mdc-admin mdc-operator Usage guidelines Pressing Ctrl+Z has the same effect as the return command. Examples # Return to user view from Ten-GigabitEthernet 1/0/1 interface view.
Usage guidelines If you disable pausing between screens of output, all output is displayed. The screen is refreshed continuously until the final screen is displayed. This command takes effect only for the current session. When you are logged out, the default is restored. Examples # Disable pausing between screens of output for the current session. screen-length disable Related commands screen-length system-view Use system-view to enter system view from user view.
Login management commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. Some login management commands are available in both user line view and user line class view: • A setting in user line view is applied only to the user line. A setting in user line class view is applied to all user lines of the class.
• If the setting in user line view is not the default setting, the setting in user line view takes effect. • If the setting in user line view is the default setting but the setting in user line class view is not, the setting in user line class view takes effect. To display the shortcut key you have defined, use the display current-configuration | include activation-key command. Examples # Configure character s as the shortcut key for starting a terminal session on the user line AUX 1.
Predefined user roles network-admin mdc-admin Parameters none: Disables authentication. password: Performs local password authentication. scheme: Performs AAA authentication. For more information about AAA, see Security Configuration Guide. Usage guidelines When the authentication mode is none, any user can log in without authentication. To improve device security, use the password or scheme authentication mode.
auto-execute command CAUTION: After configuring this command for a user line, you might be unable to access the CLI through the user line. Make sure you can access the CLI through a different user line before you configure this command and save the configuration. Use auto-execute command to specify a command that is automatically executed when a user logs in through the current user line. Use undo auto-execute command to remove the configuration.
[Y/N]:y [Sysname-line-vty0] # To verify the configuration, Telnet to 192.168.1.40. The device automatically Telnets to 192.168.1.41, and the following output is displayed: C:\> telnet 192.168.1.40 ****************************************************************************** * Copyright (c) 2010-2013 Hewlett-Packard Development Company, L.P. * * Without the owner's prior written consent, * * no decompiling or reverse-engineering shall be allowed.
When both command accounting and command authorization are enabled, only authorized commands that are executed are recorded on the HWTACACS server. Invalid commands issued by users are not recorded. If the command accounting command is configured in user line class view, command accounting is enabled on all user lines in the class, and you cannot configure the undo command accounting command in the view of a user line in the class. Examples # Enable command accounting for user line VTY 0.
Related commands • command accounting • authorization command (Security Command Reference) databits Use databits to specify the number of data bits for each character. Use undo databits to restore the default. Syntax databits { 5 | 6 | 7 | 8 } undo databits Default Eight data bits are used for each character. Views User line view Predefined user roles network-admin mdc-admin Parameters 5: Uses five data bits for each character. 6: Uses six data bits for each character.
Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode and 0 to 71 in IRF mode. aux: Specifies the AUX line. vty: Specifies the VTY line. number2: Specifies the relative number of a user line. The value ranges are as follows: • AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode. • VTY line—0 to 63. summary: Displays summary information about user lines.
40:XXXX XXXX XXXX XXXX 56:XXXX XXXX XXXX XXXX 1 lines used. (U) 71 lines not used. (X) Table 2 Command output Fields number:status Description The number indicates the absolute number of the first user line of the user line class. The status indicates whether or not the user lines are being used (X for unused and U for used). For example, if "0:XUXX XXXX" is displayed, the user line class has eight user lines. The user lines use the absolute numbers 0 through 7.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode and 0 to 71 in IRF mode. aux: Specifies the AUX line. vty: Specifies the VTY line. number2: Specifies the relative number of a user line. The value ranges are as follows: • AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode. • VTY line—0 to 63.
# In IRF mode, display summary information about all user lines. display user-interface summary Line type : [AUX] 0:XUXX XXXX Line type : [VTY] 8:UXXX XXXX XXXX XXXX 24:XXXX XXXX XXXX XXXX 40:XXXX XXXX XXXX XXXX 56:XXXX XXXX XXXX XXXX 1 lines used. (U) 71 lines not used. (X) Table 4 Command output Fields Description The number indicates the absolute number of the first user line of the user line class.
VTY 0 : Location: 192.168.1.12 VTY 1 : Location: 192.168.1.26 + : Current operation user. F : Current operation user works in async mode. The output shows that two users have logged in to the device: one is using user line VTY 0 and the other (yourself) is using VTY 1. Your IP address is 192.168.1.26. Table 5 Command output Field Description Idx Absolute number of the user line. Line Type and relative number of the user line.
Usage guidelines Some commands might take a long time to complete in some situations, for example, when the ping command has 1000 packets to send or when the tracert command is used for an unreachable destination. Before such a command is completed, you can stop the command by pressing the shortcut key for terminating tasks. Whether a command can be terminated by Ctrl+C by default depends on the software implementation of the command. For more information, see the description of the command.
Syntax flow-control { hardware | none | software } undo flow-control Default The flow control mode is none. Views User line view Predefined user roles network-admin mdc-admin Parameters hardware: Performs hardware flow control. none: Disables flow control. software: Performs software flow control. Usage guidelines This command is not supported in VTY line view.
Parameters number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode and 0 to 71 in IRF mode. aux: Specifies the AUX line. vty: Specifies the VTY line. number2: Specifies the relative number of a user line. The value ranges are as follows: • AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode. • VTY line—0 to 63. Usage guidelines This command does not release the line you are using. Examples # Release user line VTY 1: 1. Display online users.
Parameters number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode and 0 to 71 in IRF mode. aux: Specifies the AUX line. vty: Specifies the VTY line. number2: Specifies the relative number of a user line. The value ranges are as follows: • AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode. • VTY line—0 to 63. Usage guidelines This command does not release the line you are using. This is an older command reserved for backward compatibility purposes.
Views User line view, user line class view Predefined user roles network-admin mdc-admin Parameters size-value: Specifies the maximum number of history commands the buffer can store, in the range of 0 to 256. Usage guidelines Each user line uses a separate command history buffer to save commands successfully executed by its user. The size of the buffer determines how many history commands the buffer can store.
Parameters minutes: Specifies the number of minutes for the idle timeout, in the range of 0 to 35791. The default is 10 minutes. seconds: Specifies the number of seconds for the idle timeout, in the range of 0 to 59. The default is 0 seconds. Usage guidelines The system automatically terminates the user connection on the user line if there is no information interaction between the device and the user within the idle-timeout interval. Setting the idle timeout to 0 disables the idle timeout function.
last-number2: Specifies the relative number of the last user line. This number cannot be smaller than first-number2. Usage guidelines To configure settings for a single user line, use this command to enter the user line view. To configure the same settings for multiple user lines, use this command to enter multiple user line views. Examples # Enter the view of user line AUX 1. system-view [Sysname] line aux 1 [Sysname-line-aux1] # Enter the views of user lines VTY 0 to VTY 4.
• A setting in user line view takes effect immediately and affects the online user. A setting in user line class view does not affect online users and takes effect only for users who log in after the configuration is completed. Examples # Set the user connection timeout to 15 minutes in VTY line class view. system-view [Sysname] line class vty [Sysname-line-class-vty] idle-timeout 15 # In AUX line class view, configure character s as the shortcut key for starting a terminal session.
Predefined user roles network-admin mdc-admin Usage guidelines This command is not supported in FIPS mode. After executing the lock command, enter the password for unlocking the user line and confirm the password by entering it again. To unlock the user line, press Enter and enter the correct password. Examples # Lock the current user line and then unlock it. lock Please input password<1 to 16> to lock current line: Password: Again: locked ! // The user line is locked.
Parameters even: Performs even parity check. mark: Performs mark parity check. none: Disables parity check. odd: Performs odd parity check. space: Performs space parity check. Usage guidelines This command is not supported in VTY line view. The configuration terminal and the device must be configured with the same parity check mode to communicate. Examples # Configure user line AUX 1 to perform odd parity check.
telnet: Supports Telnet only. Usage guidelines This configuration is effective only for a user who logs in through the user line after the configuration is completed. Before configuring a user line to support SSH, set the authentication mode to scheme for the user line. For more information, see authentication-mode. This command is available in both VTY line view and VTY line class view.
Parameters screen-length: Specifies the maximum number of lines to be displayed on a screen, in the range of 0 to 512. Setting this argument to 0 disables pausing between screens of output. Usage guidelines This command sets the maximum number of lines that can be displayed on one screen when the screen pause function is enabled. If the screen pause function is disabled, the system displays command output without any pause.
number2: Specifies the relative number of a user line. The value ranges are as follows: • AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode. • VTY line—0 to 63. Usage guidelines To end a message, press Enter. To cancel a message and return to user view, press Ctrl+C. Examples # Before you restart the device, send a notification to VTY 1 to inform the user. send vty 1 Input message, end with Enter; abort with CTRL+C: Your attention, please. I will reboot the system in 3 minutes.
Usage guidelines This command is not supported in FIPS mode. For security purposes, the password is hashed before being saved, whether you specify the hash or simple keyword. This command is available in both user line view and user line class view: • If the setting in user line view is not the default setting, the setting in user line view takes effect.
Examples # Disable the terminal service for user line VTY 0 through VTY 4 so no user can log in to the device through the user lines. system-view [Sysname] line vty 0 4 [Sysname-line-vty0-4] undo shell Disable ui-vty0-4 , are you sure? [Y/N]:y [Sysname-line-vty0-4] speed Use speed to set the transmission rate (also called the "baud rate") on a user line. Use undo speed to restore the default. Syntax speed speed-value undo speed Default The transmission rate is 9600 bps.
Syntax stopbits { 1 | 1.5 | 2 } undo stopbits Default One stop bit is used. Views User line view Predefined user roles network-admin mdc-admin Parameters 1: Uses one stop bit. 1.5: Uses one and a half stop bits. The device does not support using one and a half stop bits. If you specify this keyword, two stop bits are used. 2: Uses two stop bits. Usage guidelines This command is not supported in VTY line view.
Parameters remote-host: Specifies the IPv4 address or host name of a remote host. A host name can be a case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits, hyphens (-), underscores (_), and dots (.). service-port: Specifies the TCP port number for the Telnet service on the remote host. The value range is 0 to 65535 and the default is 23.
Predefined user roles network-admin mdc-admin Parameters interface interface-type interface-number: Specifies a source interface. The primary IPv4 address of the interface will be used as the source IPv4 address for outgoing Telnet packets. ip ip-address: Specifies a source IPv4 address. Usage guidelines This command is not supported in FIPS mode. The source IPv4 address or source interface that is specified by this command applies to all Telnet connections.
vpn-instance vpn-instance-name: Specifies the VPN instance to which the remote host belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the remote host belongs to the public network, do not specify this option. dscp dscp-value: Specifies the DSCP value for IPv6 to use in outgoing Telnet packets to indicate the packet transmission priority, in the range of 0 to 63. The default is 48. Usage guidelines This command is not supported in FIPS mode.
Examples # Permit only the user at 1.1.1.1 to Telnet to the device. system-view [Sysname] acl number 2001 [Sysname-acl-basic-2001] rule permit source 1.1.1.1 0 [Sysname-acl-basic-2001] quit [Sysname] telnet server acl 2001 telnet server dscp Use telnet server dscp to set the DSCP value for IPv4 to use for outgoing Telnet packets on a Telnet server. Use undo telnet server dscp to restore the default.
Default The Telnet server function is disabled. Views System view Predefined user roles network-admin mdc-admin Usage guidelines This command is not supported in FIPS mode. Administrators can Telnet to the device only when the Telnet server function is enabled. Examples # Enable the Telnet server function. system-view [Sysname] telnet server enable telnet server ipv6 acl Use telnet server ipv6 acl to apply an IPv6 ACL to filter IPv6 Telnet logins.
This command is not effective for existing Telnet connections. If you execute this command multiple times, the most recent configuration takes effect. For more information about ACL, see ACL and QoS Configuration Guide. Examples # Permit only the user at 2000::1 to Telnet to the device.
Use undo terminal type to restore the default. Syntax terminal type { ansi | vt100 } undo terminal type Default The terminal display type is ANSI. Views User line view, user line class view Predefined user roles network-admin mdc-admin Parameters ansi: Specifies the terminal display type ANSI. vt100: Specifies the terminal display type VT100. Usage guidelines The device supports two terminal display types: ANSI and VT100.
last-number1: Specifies the absolute number of the last user line. This number cannot be smaller than first-number1. aux: Specifies the AUX line. vty: Specifies the VTY line. first-number2: Specifies the relative number of the first user line. The value ranges are as follows: • AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode. • VTY line—0 to 63. last-number2: Specifies the relative number of the last user line. This number cannot be smaller than first-number2.
Usage guidelines To configure the same settings for all user lines of a line class, use this command to enter the user line class view. Some login management commands are available in both user line view and user line class view: • A setting in user line view is applied only to the user line. A setting in user line class view is applied to all user lines of the class. • A non-default setting in either view takes precedence over a default setting in the other view.
Related commands user-interface user-role Use user-role to assign a user role to a user line so users logged in through the user line get the user role at login. Use undo user-role to remove a user role or restore the default. Syntax user-role role-name undo user-role [ role-name ] Default An AUX line user of the default MDC is assigned the user role network-admin. Users of other default MDC user lines are assigned the user role network-operator.
RBAC commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. description Use description to configure a description for a user role. Use undo description to delete the description of a user role. Syntax description text undo description Default A user role has no description.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters name role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. Usage guidelines If no user role name is specified, the command displays information about all user roles, including the predefined user roles. Examples # Display information about the user role 123.
Field Description VLAN policy of the user role: VLAN policy • deny—Denies access to any VLAN except permitted VLANs. • permit (default)—Default VLAN policy, which enables the user role to access any VLAN. Permitted VLANs VLANs accessible to the user role. Interface policy of the user role: Interface policy • deny—Denies access to any interface except permitted interfaces. • permit (default)—Default interface policy, which enables the user role to access any interface.
display role feature Use display role feature to display features available in the system. Syntax display role feature [ name feature-name | verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters name feature-name: Displays the commands of a feature. The feature-name argument specifies the feature name, and all its letters must be lower case. verbose: Displays the commands of each feature.
display default-configuration * display startup display this * (R) display archive configuration display bootrom-access clock datetime * reboot * save * (R) (R) (R) (R) (W) (W) (W) archive configuration (W) backup startup-configuration to * (W) restore startup-configuration from * reset saved-configuration * startup saved-configuration * display transceiver * bootrom * (W) (W) (W) (R) (W) bootrom-access * (W) system-view ; temperature-limit * system-view ; sysname * (W) (W) system-view
reset packet-drop * (W) debugging ifmgr * (W) display debugging ifmgr (R) debugging system-event * (W) display debugging system-event display interface * (R) (R) … # Display the commands of the aaa feature.
Field Description system-view ; password-control * All the commands that start with password-control in system view. (W) Command type is Write. A write command configures the system. (R) Command type is Read. A read command displays configuration or maintenance information. (X) Command type is Execute. An execute command executes a specific function. Related commands feature display role feature-group Use display role feature-group to display feature group information.
Feature: dldp (DLDP related commands) Feature: cfm (CFM related commands) Feature: eoam (EOAM related commands) Feature: smart-link (Smart-link related commands) Feature: monitor-link (Monitor-link related commands) Feature: loopbk-detect (Loopback-detection related commands) Feature: vlan (Virtual LAN related commands) Feature: evi-isis (EVI-ISIS related commands) Feature: evb (EVB related commands) … # Display the commands in each feature group.
display role feature-group name L3 Feature group: L3 Feature: route (Route management related commands) Feature: usr (Unicast static route related commands) Feature: ospf (Open Shortest Path First protocol related commands) Feature: rip (Routing Information Protocol related commands) Feature: isis (ISIS protocol related commands) Feature: bgp (Border Gateway Protocol related commands) Feature: l3vpn (Layer 3 Virtual Private Network related commands) Feature: multicast (Multicast rel
Related commands • display role feature • display role feature-group • role feature-group interface policy deny Use interface policy deny to enter user role interface policy view. Use undo interface policy deny to restore the default user role interface policy. Syntax interface policy deny undo interface policy deny Default A user role has access to any interface.
# Deny the user role role1 to access any interface but Ten-GigabitEthernet 1/0/1 to Ten-GigabitEthernet 1/0/5. system-view [Sysname] role name role1 [Sysname-role-role1] interface policy deny [Sysname-role-role1-ifpolicy] permit interface ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/5 Related commands • display role • permit interface • role permit interface Use permit interface to configure a list of interfaces accessible to a user role.
You can repeat the permit interface command to add permitted interfaces to a user role interface policy. The undo permit interface command removes the entire list of permitted interfaces if no interface is specified. Any change to a user role interface policy takes effect only on users who log in with the user role after the change. Examples 1.
Default No permitted VLANs are configured in user role interface policy view. Views User role VLAN policy view Predefined user roles network-admin mdc-admin Parameters vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each VLAN item specifies a VLAN by its VLAN ID or a range of VLANs in the form of vlan-id1 to vlan-id2. The value range for the VLAN IDs is 1 to 4094. If a VLAN range is specified, vlan-id2 must be greater than vlan-id1.
Related commands • display role • role • vlan policy deny permit vpn-instance Use permit vpn-instance to configure a list of VPNs accessible to a user role. Use undo permit vpn-instance to disable the access of a user role to specific VPNs. Syntax permit vpn-instance vpn-instance-name&<1-10> undo permit vpn-instance [ vpn-instance-name&<1-10> ] Default No permitted VPNs are configured in user role VPN instance policy.
# Verify that you can enter VPN1 view. system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] # Verify that you can assign the primary accounting server at 10.110.1.2 to the VPN in the RADIUS scheme radius1. system-view [Sysname] radius scheme radius1 [Sysname-radius-radius1] primary accounting 10.110.1.2 vpn-instance vpn1 # Verify that you cannot create the VPN vpn2 or enter its view. system-view [Sysname] ip vpn-instance vpn2 Permission denied.
You cannot delete the predefined user roles or change the permissions assigned to network-admin, network-operator, mdc-admin, mdc-operator, level-15, or security-audit. Level-0 to level-14 users can modify their own permissions for any commands except for the display history-command all command. Examples # Create the user role role1 and enter its view.
If AAA users have been assigned user roles, they log in with the user roles. Examples # Enable the default user role feature. system-view [Sysname] role default-role enable Related commands role role feature-group Use role feature-group to create a user role feature group and enter user role feature group view. Use undo role feature-group to delete a user role feature group.
• feature rule Use rule to create or change a user role rule for controlling command access. Use undo rule to delete a user role rule. Syntax rule number { deny | permit } { command command-string | { execute | read | write } * { feature [ feature-name ] | feature-group feature-group-name } } undo rule { number | all } Default A user-defined user role has no rules and cannot use any command.
• Command rule—Controls access to a command or a set of commands that match a regular expression. • Feature rule—Controls access to the commands of a feature by command type. • Feature group rule—Controls access to the commands of a group of features by command type. A user role can access the set of permitted commands specified in its rules. User role rules include predefined (identified by sys-n) and user-defined rules.
Rule Guidelines An asterisk represents zero or multiple characters. In a non-last segment, you can use an asterisk only at the end of the segment. Asterisk (*) is the wildcard. In the last segment, you can use an asterisk in any position of the segment. If the asterisk appears at the beginning, you cannot specify any printable characters behind it.
[Sysname-role-role1] rule 5 deny read feature aaa # Permit role1 to access all read, write, and execute commands of the feature group security-features. [Sysname-role-role1] rule 6 permit read write execute feature-group security-features Related commands • display role • display role feature • display role feature-group • role super Use super to obtain a user role that you are not logged in with.
Related commands • authentication super • super authentication-mode • super password super authentication-mode Use super authentication-mode to set an authentication mode when you obtain the user role that you are not logged in with. Use undo super authentication-mode to restore the default. Syntax super authentication-mode { local | scheme } * undo super authentication-mode Default Local password authentication applies.
# Enable remote-then-local authentication for the temporary user role authorization. system-view [Sysname] super authentication-mode scheme local Related commands • authentication super • super password super password Use super password to set a password for a user role. Use undo super password to restore the default.
The FIPS mode supports only the interactive mode for setting a password. Set a password if you configure local password authentication for temporary user role authorization. It is a good practice to specify different passwords for different user roles. Examples # Set the password to 123456TESTplat&! for the user role network-operator.
Any change to a user role VLAN policy takes effect only on users who log in with the user role after the change. Examples # Deny the access of role1 to any VLAN. system-view [Sysname] role name role1 [Sysname-role-role1] vlan policy deny [Sysname-role-role1-vlanpolicy] quit # Deny the access of role1 to any VLAN but VLANs 50 to 100.
• Enter its view. • Specify it in a feature command. Any change to a user role VPN instance policy takes effect only on users who log in with the user role after the change. Examples # Deny the access of user role role1 to any VPN. system-view [Sysname] role name role1 [Sysname-role-role1] vpn-instance policy deny [Sysname-role-role1-vpnpolicy] quit # Deny the access of user role role1 to any VPN but vpn2.
FTP commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. FTP is not supported in FIPS mode. FTP server commands display ftp-server Use display ftp-server to display FTP server configuration and status information.
display ftp-user Use display ftp-user to display detailed information about logged-in FTP users. Syntax display ftp-user Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display detailed information about logged-in FTP users. display ftp-user UserName HostIP Port HomeDir root 192.168.20.
Views User view Predefined user roles network-admin mdc-admin Parameters username: Specifies a username. You can use the display ftp-user command to display FTP user information. Examples # Release the FTP connections established by using the user account ftpuser. free ftp user ftpuser Are you sure to free FTP connection? [Y/N]:y free ftp user-ip Use free ftp user-ip to manually release the FTP connections established from a specific IPv4 address.
Views User view Predefined user roles network-admin mdc-admin Parameters ipv6-address: Specifies the source IPv6 address of an FTP connection. You can use the display ftp-user command to view the source IPv6 addresses of FTP connections. port port: Specifies the source port of an FTP connection. You can use the display ftp-user command to view the source ports of FTP connections. Examples # Release the FTP connections established from IPv6 address 2000::154.
system-view [Sysname] acl number 2001 [Sysname-acl-basic-2001] rule 0 permit source 1.1.1.1 0 [Sysname-acl-basic-2001] rule 1 deny source any [Sysname-acl-basic-2001] quit [Sysname] ftp server acl 2001 ftp server dscp Use ftp server dscp to set the DSCP value for IPv4 to use for outgoing FTP packets on an FTP server. Use undo ftp server dscp to restore the default.
Views System view Predefined user roles network-admin mdc-admin Examples # Enable the FTP server. system-view [Sysname] ftp server enable ftp server ipv6 dscp Use ftp server ipv6 dscp to set the DSCP value for IPv6 to use for outgoing FTP packets on an FTP server. Use undo ftp server ipv6 dscp to restore the default. Syntax ftp server ipv6 dscp dscp-value undo ftp server ipv6 dscp Default IPv6 uses the DSCP value 0 for outgoing FTP packets on an FTP server.
Syntax ftp timeout minute undo ftp timeout Default The FTP idle-timeout interval is 30 minutes. Views System view Predefined user roles network-admin mdc-admin Parameters minute: Specifies an idle-timeout interval in the range of 1 to 35791 minutes. Usage guidelines If no packet is exchanged on an FTP connection within the idle-timeout interval, the FTP server breaks the FTP connection to release resources. Examples # Set the idle-timeout interval to 36 minutes.
Parameters localfile: Specifies a local file on the FTP client. remotefile: Specifies a remote file on the FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Append the content of the local a.txt file to the b.txt file on the FTP server. ftp> append a.txt b.txt local: a.txt remote: b.txt 150 Connecting to port 50190 226 File successfully transferred 1657 bytes sent in 0.000736 seconds (2.
binary Use binary to set the file transfer mode to binary, which is also called the "flow mode." Syntax binary Default The file transfer mode is ASCII in versions prior to Release 2111, and binary in Release 2111 and later. Views FTP client view Predefined user roles network-admin mdc-admin Usage guidelines You can perform this operation only after you log in to the FTP server. The carriage return characters vary with operating systems. For example, HP and Windows use /r/n, and Linux uses /n.
Examples # Terminate the connection to the FTP server and return to user view. ftp> bye 221-Goodbye. You uploaded 2 and downloaded 2 kbytes. 221 Logout. Related commands quit cd Use cd to change the current working directory to another directory on the FTP server. Syntax cd { directory | ..
250 OK. Current directory is / # Change the working directory to the FTP root directory. ftp> cd / 250 OK. Current directory is / Related commands • cdup • pwd cdup Use cdup to enter the upper directory of the FTP server. This command does not change the working directory if the current directory is the FTP root directory. Syntax cdup Views FTP client view Predefined user roles network-admin mdc-admin Usage guidelines You can perform this operation only after you log in to the FTP server.
Predefined user roles network-admin mdc-admin Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Terminate the connection to the FTP server without exiting the FTP client view. ftp> close 221-Goodbye. You uploaded 0 and downloaded 0 kbytes. 221 Logout. ftp> Related commands disconnect debug Use debug to enable or disable FTP client debugging. Syntax debug Default FTP client debugging is disabled.
local: a.txt remote: a.txt ---> EPRT |2|8::124|50198| 200 PORT command successful ---> RETR a.txt 150 Connecting to port 50198 226 File successfully transferred 1569 bytes received in 0.0104 seconds (147.2 kbyte/s) Table 11 Command output Field Description FTP command. • 2—IPv6 (1 for IPv4). • 8::124—IPv6 address of the FTP server. • 50198—Port number of the FTP server. ---> EPRT |2|8::124|50198| 200 PORT command successful Received FTP reply code. 200 represents the reply code, defined in RFC 959.
Use dir remotefile to display detailed information about a specific file or directory on the FTP server. Use dir remotefile localfile to save detailed information about a specific file or directory on the FTP server to a local file. Syntax dir [ remotefile [ localfile ] ] Views FTP client view Predefined user roles network-admin mdc-admin Parameters remotefile: Specifies the name of a file or directory on the FTP server.
221 Logout. more s.txt -rwxr-xr-x 1 0 0 1481 Jul 7 12:34 a.txt Related commands ls disconnect Use disconnect to terminate the connection to the FTP server without exiting FTP client view. Syntax disconnect Views FTP client view Predefined user roles network-admin mdc-admin Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Terminate the connection to the FTP server without exiting the FTP client view. ftp> disconnect 221-Goodbye.
Examples # Display the source address settings on the FTP client. display ftp client source The source IP address of the FTP client is 1.1.1.1. The source IPv6 address of the FTP client is 2001::1. ftp Use ftp to log in to an FTP server and enter FTP client view.
Press CTRL+C to abort. Connected to 192.168.0.211 (192.168.0.211). 220 WFTPD 2.0 service (by Texas Imperial Software) ready for new user User (192.168.0.211:(none)): abc 331 Give me your password, please Password: 230 Logged in successfully Remote system type is MSDOS. 200 Type is Image (Binary) ftp> The message "200 Type is Image (Binary)" appears only in Release 2111 or later. ftp client source Use ftp client source to specify the source IPv4 address for outgoing FTP packets.
Examples # Specify the source IPv4 address for outgoing FTP packets as 192.168.20.222. system-view [Sysname] ftp client source ip 192.168.20.222 Related commands ftp ftp client ipv6 source Use ftp client ipv6 source to specify the source address for FTP packets sent by the IPv6 FTP client. Use undo ftp client ipv6 source to restore the default.
ftp ipv6 Use ftp ipv6 to log in to an FTP server and enter FTP client view. Syntax ftp ipv6 [ ftp-server [ service-port ] [ vpn-instance vpn-instance-name ] [ dscp dscp-value | source { ipv6 source-ipv6-address | interface interface-type interface-number } ] * [ -i interface-type interface-number ] ] Views User view Predefined user roles network-admin mdc-admin Parameters ftp-server: Specifies the IPv6 address or host name of an FTP server.
ftp ipv6 2000::154 Press CTRL+C to abort. Connected to 2000::154 (2000::154). 220 FTP service ready. User (2000::154): root 331 Password required for root. Password: 230 User logged in Remote system type is HP get Use get to download a file from the FTP server and save the file. Syntax get remotefile [ localfile ] Views FTP client view Predefined user roles network-admin mdc-admin Parameters remotefile: Specifies the name of the file to be downloaded.
1569 bytes received in 0.00527 seconds (290.6 kbyte/s) # In standalone mode, download file a.txt to the Flash root directory of the standby MPU (in slot 4 and save it as c.txt. ftp> get a.txt slot4#flash:/c.txt local: slot4#flash:/c.txt remote: a.txt 150 Connecting to port 47460 226 File successfully transferred 1569 bytes received in 0.0564 seconds (27.2 kbyte/s) # In IRF mode, download file a.txt to the Flash root directory of the MPU that resides in slot 5 of member device 1, and save it as c.txt.
cd get passive rename verbose cdup help put reset ? close lcd pwd restart # Display the help information for the dir command. ftp> help dir dir list contents of remote directory Related commands ? lcd Use lcd to display the local working directory of the FTP client. Use lcd directory to change the local working directory of the FTP client to the specified directory. Use lcd / to change the local working directory of the FTP client to the local root directory.
Syntax ls [ remotefile [ localfile ] ] Views FTP client view Predefined user roles network-admin mdc-admin Parameters remotefile: Specifies the file name or directory on the FTP server. localfile: Specifies the local file used to save the displayed information. Usage guidelines You can perform this operation only after you log in to the FTP server. In FTP client view, executing the ls command is the same as executing the dir command.
Related commands dir mkdir Use mkdir to create a subdirectory in the current directory on the FTP server. Syntax mkdir directory Views FTP client view Predefined user roles network-admin mdc-admin Parameters directory: Specifies the name of the directory to be created. Usage guidelines You can perform this operation only after you log in to the FTP server. You must have permission to perform this operation on the FTP server.
If the local file does not exist, this command downloads the file from the FTP server and saves it locally. If the remote file on the FTP server is not newer than the local file, this command does not update the local file. Examples # Update the local file with the file a.txt on the FTP server. ftp> newer a.txt local: a.txt remote: a.txt 150 Connecting to port 63513 226 File successfully transferred 1573 bytes received in 0.0293 seconds (52.
passive Use passive to set the FTP operation mode to passive. Syntax passive Default The FTP operation mode is passive. Views FTP client view Predefined user roles network-admin mdc-admin Usage guidelines FTP can operate in either of the following modes: • Active mode—The FTP server initiates the TCP connection. • Passive mode—The FTP client initiates the TCP connection. You can use this command multiple times to change between active and passive modes.
Usage guidelines You can perform this operation only after you log in to the FTP server. To upload a file in the working directory accessed by the ftp command, the localfile argument must specify a file name such as a.cfg. To upload a file in some other directory, the localfile argument must specify the target directory plus the file name such as flash:/subdirectory/a.cfg. Otherwise, the command fails to take effect. Examples # Upload the file a.
Views FTP client view Predefined user roles network-admin mdc-admin Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Display the currently accessed directory on the remote FTP server. ftp> cd subdir 250 OK. Current directory is /subdir ftp> pwd 257 "/subdir" is your current location quit Use quit to terminate the connection to the FTP server and return to user view.
Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters remotefile: Specifies the name of the file on the FTP server. localfile: Specifies the name of the local file. Usage guidelines You can perform this operation only after you log in to the FTP server. If a file download is not completed due to network problems or insufficient storage space, you can use the reget command to get the missing part of the file from the FTP server after you solve the problem.
• Method 1 ftp> rename (from-name) a.txt (to-name) b.txt 350 RNFR accepted - file exists, ready for destination 250 File successfully renamed or moved • Method 2 ftp> rename a.txt (to-name) b.txt 350 RNFR accepted - file exists, ready for destination 250 File successfully renamed or moved • Method 3 ftp> rename a.txt b.
Parameters marker: Specifies the retransmit marker. Usage guidelines You can perform this operation only after you log in to the FTP server. Support for this command varies with FTP servers. Examples # Retransmit the file h.c (82 bytes) from 2 bytes. ftp> restart 2 restarting at 2. execute get, put or append to initiate transfer ftp> put h.c h.c local: h.c remote: h.c 350 Restart position accepted (2). 150 Ok to send data. 226 File receive OK. 80 bytes sent in 0.000445 seconds (175.
XPWD LIST NLST MLSD PORT EPRT PASV EPSV REST RETR STOR APPE DELE MKD XMKD RMD XRMD ABOR SIZE RNFR RNTO 4 UNIX Type: L8 Table 12 Command output Field Description USER Username, corresponding to the xx command in FTP client view. PASS Password. NOOP Null operation. SYST System parameters. TYPE Request type. CWD Changes the current working directory. XCWD Extended command with the meaning of CWD. PWD Prints the working directory. CDUP Changes the directory to the upper directory.
Field Description RNTO New name. rmdir Use rmdir to permanently delete a directory on the FTP server. Syntax rmdir directory Views FTP client view Predefined user roles network-admin mdc-admin Parameters directory: Specifies the name of a directory on the remote FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server. To perform this operation, you must have delete permission on the FTP server.
mdc-admin Parameters remotefile: Specifies a directory or file on the FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server. Support for this command varies with FTP servers. Examples # Display FTP server status. ftp> rstatus 211-FTP server status: Connected to 192.168.20.
Table 14 Command output Field Description 213-Status follows: Beginning of the display of the file, where 213 specifies the FTP command. -rw-r--r-- • • • • • • • The first bit specifies the file type: -—Common. B—Block. c—Character. d—Directory. l—Symbol connection file. p—Pipe. s—socket. The second bit through the tenth bit are divided into three groups. Each group contains three characters, representing the access permission of the owner, group, and other users. • • • • -—No permission.
Not using any security mechanism. Mode: stream; Type: ascii; Form: non-print; Structure: file Verbose: on; Bell: off; Prompting: on; Globbing: off Store unique: off; Receive unique: off Case: off; CR stripping: on Ntrans: off Nmap: off Hash mark printing: off; Use of PORT cmds: on Table 15 Command output Field Description Connected to 192.168.1.56. IP address of the FTP server that is connected to the FTP client. Verbose: on; Bell: off; Prompting: on; Globbing: off Displays debugging information.
user Use user to change to another user account after login. Syntax user username [ password ] Views FTP client view Predefined user roles network-admin mdc-admin Parameters username: Specifies the username of the target user account. password: Specifies the password of the target user account. Usage guidelines You can perform this operation only after you log in to the FTP server. The username and password of the target user account must have been configured.
Predefined user roles network-admin mdc-admin Usage guidelines The verbose command takes effect only for the current FTP session. It is lost after the session is disconnected. Examples # Disable the device from displaying detailed information about FTP operations. ftp> verbose Verbose mode off. # Execute the get command. ftp> verbose Verbose mode off. ftp> get a.txt # Enable the device to display detailed information about FTP operations. ftp> verbose Verbose mode on. # Execute the get command.
Examples # Display all commands supported by the FTP client. ftp> ? Commands may be abbreviated. Commands are: append delete ls quit rmdir ascii debug mkdir reget status binary dir newer rstatus system bye disconnect open rhelp user cd get passive rename verbose cdup help put reset ? close lcd pwd restart # Display the help information for the dir command.
TFTP commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. TFTP is not supported in FIPS mode. tftp Use tftp to download a file from the TFTP server to the local device or upload a local file to the TFTP server in an IPv4 network.
dscp dscp-value: Specifies the DSCP value for IPv4 to use for outgoing TFTP packets to indicate the packet transmission priority, in the range of 0 to 63. The default is 0. source { interface interface-type interface-number | ip source-ip-address }: Specifies the source address for outgoing TFTP packets. If this keyword is not specified, the device uses the primary IPv4 address of the output interface for the route to the server as the source IPv4 address of outgoing TFTP packets.
Use undo tftp client source to restore the default. Syntax tftp client source { interface interface-type interface-number | ip source-ip-address } undo tftp client source Default No source IPv4 address is configured for outgoing TFTP packets. The device uses the primary IPv4 address of the output interface for the route to the server as the source IP address.
Views User view Predefined user roles network-admin mdc-admin Parameters tftp--server: Specifies the IPv6 address or host name of a TFTP server. The host name can be a case-insensitive string of 1 to 253 characters and can contain only letters, digits, hyphens (-), underscores (_), and dots (.). -i interface-type interface-number: Specifies an output interface by its type and number.
• interface interface-type interface-number: Specifies an interface by its type and number. The IPv6 address of this interface will be used as the source address for outgoing TFTP packets. Make sure the interface is up. Otherwise, the transmission fails. • ipv6 source-ipv6-address: Specifies an IPv6 address. This address must be the IPv6 address of an interface in up state. Otherwise, the transmission fails.
Usages guidelines If you execute this command multiple times, the most recent configuration takes effect. The source address specified with the tftp ipv6 command takes precedence over the source address specified with the tftp client ipv6 source command. The source address specified with the tftp client ipv6 source command applies to all TFTP connections. The source address specified with the tftp ipv6 command applies only to the current TFTP connection.
tftp-server ipv6 acl Use tftp-server ipv6 acl to use an ACL to control the device's access to TFTP servers in an IPv6 network. Use undo tftp-server ipv6 acl to restore the default. Syntax tftp-server ipv6 acl acl-number undo tftp-server ipv6 acl Default No ACL is used to control the device's access to TFTP servers. Views System view Predefined user roles network-admin mdc-admin Parameters acl-number: Specifies the number of a basic ACL, in the range of 2000 to 2999.
File system management commands IMPORTANT: • Before managing storage media, files, and directories, make sure you know the possible impacts. • A file or directory whose name starts with a period (.) is considered a hidden file or directory. Do not give a common file or directory a name that starts with a period. • Some system files and directories are hidden. A file name must be specified in one of the file name formats allowed. For more information, see Fundamentals Configuration Guide.
2 NONE Absent 0 NONE None 3 NONE Absent 0 NONE None 4 LSU1SUPB9 Master 0 11900-2111 None 5 LSU1SUPB9 Standby 0 11900-2111 None 6 NONE Absent 0 NONE None 7 NONE Absent 0 NONE None 8 NONE Absent 0 NONE None 9 NONE Absent 0 NONE None 10 LSU1FAB08D9 Normal 0 11900-2111 None 11 NONE Absent 0 NONE None 12 NONE Absent 0 NONE None 13 NONE Absent 0 NONE None The output shows that the slot number of the standby MPU is 4. 2.
copy Use copy to copy a file. Syntax copy fileurl-source fileurl-dest Views User view Predefined user roles network-admin mdc-admin Parameters fileurl-source: Specifies the name or URL of the file to be copied. If the file resides on an FTP or TFTP server rather than on the device, specify the URL of the file. Whether a URL is case sensitive depends on the server. fileurl-dest: Specifies the name or URL of the destination file or directory.
Examples # Copy the test.cfg file in the current folder and save it to the current folder as testbackup.cfg. copy test.cfg testbackup.cfg Copy flash:/test.cfg to flash:/testbackup.cfg?[Y/N]:y Copying file flash:/test.cfg to flash:/testbackup.cfg...Done. # Copy test.cfg from the working directory on FTP server 1.1.1.1 and save it to the local current folder as testbackup.cfg. In this example, the FTP username and password are user and private. copy ftp://user:private@1.1.1.1/test.
# In IRF mode, copy a configuration file of the standby MPU that resides in slot 5 of member device 1 to the Flash root directory of the standby MPU that resides in slot 5 of member device 2. copy chassis1#slot5#flash:/test.cfg chassis2#slot5#flash:/ Copy chassis1#slot5#flash:/test.cfg to chassis2#slot5#flash:/test.cfg?[Y/N]:y Copying file chassis1#slot5#flash:/test.cfg to chassis2#slot5#flash:/test.cfg...Done. delete Use delete to delete a file.
delete /unreserved 2.cfg The file cannot be restored. Delete flash:/2.cfg?[Y/N]:y Deleting the file permanently will take a long time. Please wait... Deleting file flash:/2.cfg...Done. # In standalone mode, remove the 1.cfg file from the root directory of the storage medium on the standby MPU (in slot 4): • Method 1 delete slot4#flash:/1.cfg Delete slot4#flash:/1.cfg?[Y/N]:y Deleting file slot4#flash:/1.cfg...Done. • Method 2 cd slot4#flash:/ delete 1.
Syntax dir [ /all ] [ file-url | /all-filesystems ] Views User view Predefined user roles network-admin mdc-admin Parameters /all: Displays all files and folders in the current directory, visible or hidden. If you do not specify this option, only visible files and folders are displayed. file-url: Displays a specific file or folder. The file-url argument can use the asterisk (*) as a wildcard. For example, to display files with the .txt extension in the current directory, enter dir *.txt.
Directory of chassis1#slot5#flash:/ ... # In IRF mode, display information about all files and folders in the storage medium of the standby MPU that resides in slot 5 of member device 1: • Method 1 dir /all chassis1#slot5#flash:/ Directory of chassis1#slot5#flash:/ ... • Method 2 cd chassis1#slot5#flash:/ dir /all Directory of chassis1#slot5#flash:/ ... Table 17 Command output Field Description Directory of Current directory.
mdc-admin Parameters alert: Prompts for confirmation when a destructive file or folder operation is being performed. quiet: Gives no confirmation prompt for file or folder operations. Usage guidelines In quiet mode, the system does not prompt for confirmation when a user performs a file or folder operation. The alert mode provides an opportunity to cancel a disruptive operation. Examples # Set the file and folder operation mode to alert.
Views User view Predefined user roles network-admin Parameters medium-name: Specifies the name of a storage medium. Usage guidelines This command is supported only on the default MDC. Formatting a storage medium permanently deletes all files on the storage medium. If a startup configuration file exists on the storage medium, back it up if necessary. You can format a storage medium only when no one is accessing the medium. Examples # Format the Flash.
gunzip system.bin.gz Decompressing file system.bin.gz... Done. 3. Verify the decompress operation. dir system.* Directory of flash: 1 -rw- 0 May 30 2012 11:42:25 system.bin 472972 KB total (472844 KB free) gzip Use gzip to compress a file. Syntax gzip filename Views User view Predefined user roles network-admin mdc-admin Parameters filename: Specifies the name of the file to be compressed. The compressed file will be saved to file filename.gz.
Syntax mkdir directory Views User view Predefined user roles network-admin mdc-admin Parameters directory: Specifies the name of a folder. Usage guidelines The name of the folder to be created must be unique in the specified directory. To use this command to create a folder, the specified directory must exist. For example, to create the flash:/test/mytest folder, the test folder must exist. Otherwise, the mytest folder is not created. Examples # Create the test folder in the current directory.
Parameters file-url: Specifies a file name. Examples # Display the contents of the test.txt file. more test.txt Have a nice day. # Display the contents of the testcfg.cfg file. more testcfg.cfg # version 7.1.045, Feature 2110L06 # mdc Admin id 1 # sysname Sysname # telnet server enable # ---- More ---- # In standalone mode, display the contents of the testcfg.cfg file on the standby MPU (in slot 5). more slot5#flash:/testcfg.cfg # version 7.1.
version 7.1.045, Feature 2110L06 # mdc Admin id 1 # sysname Sysname # telnet server enable # ---- More ---- move Use move to move a file. Syntax move fileurl-source fileurl-dest Views User view Predefined user roles network-admin mdc-admin Parameters fileurl-source: Specifies the name of the source file. fileurl-dest: Specifies the name of the destination file or folder.
Views User view Predefined user roles network-admin mdc-admin Examples # Display the current working directory. pwd flash: rename Use rename to rename a file or folder. Syntax rename fileurl-source fileurl-dest Views User view Predefined user roles network-admin mdc-admin Parameters fileurl-source: Specifies the name of the source file or folder. fileurl-dest: Specifies the name of the destination file or folder.
Parameters /force: Deletes all files in the recycle bin without prompting for confirmation. If you do not specify this option, the command prompts you to confirm the deletion. Usage guidelines The delete file-url command only moves a file to the recycle bin. To permanently delete the file, use the reset recycle-bin command to clear the recycle bin. If a file is corrupted, you might not be able to delete the file by using the reset recycle-bin command. In this case, use the reset recycle-bin /force command.
rmdir subtest/ Remove directory flash:/test/subtest and the files in the recycle-bin under this directory will be deleted permanently. Continue?[Y/N]:y Removing directory flash:/test/subtest... Done. sha256sum Use sha256sum to use the SHA-256 algorithm to calculate the digest of a file. Syntax sha256sum file-url Views User view Predefined user roles network-admin mdc-admin Parameters file-url: Specifies the name of a file.
archive-file fileurl-dest: Specifies the archive file name. If you specified the gz keyword, the suffix of this argument must be .tar.gz. If you did not specify the gz keyword, the suffix of this argument must be .tar. verbose: Displays the names of the successfully archived files and folders. source fileurl-source-list&<1-5>: Specifies the files and folders to be archived. The fileurl-source-list argument can be a space-separated list of up to five items. Each item can be a file or folder name.
Examples # Extract files and folders, and save them to the same folder as the archive file. tar extract archive-file a.tar.gz Extracting archive a.tar.gz …… Done. # Extract files and folders, and display their content on the screen. tar extract archive-file a.tar.gz verbose screen a.cfg # version 7.1.045, Feature 2110L06 # sysname HP # # Extract files and folders, save them to the same folder as the archive file, and display the names of the archived files and folders.
• tar extract undelete Use undelete to restore a file from the recycle bin. Syntax undelete file-url Views User view Predefined user roles network-admin mdc-admin Parameters file-url: Specifies the name of the file to be restored. Usage guidelines If another file that has the same name exists in the directory, the system prompts you about whether to overwrite the existing file. If you enter Y, the existing file is overwritten. If you enter N, the command is not executed. Examples # Restore the copy.
Configuration file management commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. backup startup-configuration Use backup startup-configuration to back up the main next-startup configuration file to a TFTP server.
undo configuration encrypt Default Configuration encryption is disabled. The running configuration is saved to a configuration file without encryption. Views System view Predefined user roles network-admin mdc-admin Parameters private-key: Encrypts configuration with a private key. Any HP device running Comware V7 software can decrypt the encrypted configuration file. public-key: Encrypts configuration with a public key. Any HP device can decrypt the encrypted configuration file.
interface [ interface-type [ interface-number ] ]: Displays interface configuration, where the interface-type argument represents the interface type and the interface-number argument represents the interface number. Usage guidelines Use this command to verify the running configuration you have made. Typically, this command does not display parameters that are set to their default settings.
Usage guidelines The device does not have factory defaults. When you execute this command, the device displays nothing. Examples # Display the factory defaults. display default-configuration display saved-configuration Use display saved-configuration to display the configuration saved to the configuration file for the next system startup.
---- More ---- Related commands • reset saved-configuration • save display startup Use display startup to display the current startup configuration file and the next-startup configuration files. Syntax display startup Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Usage guidelines Current startup configuration file is the configuration file that has been loaded. Next-startup configuration file is the configuration file used at the next startup.
Table 18 Command output Field Description MainBoard Displays the startup configuration files on the active MPU. Current Startup saved-configuration file Configuration file that the active MPU has started up with. Next main startup saved-configuration file Primary startup configuration file to be used at the next startup. Next backup startup saved-configuration file Backup startup configuration file to be used at the next startup.
Predefined user roles network-admin network-operator mdc-admin mdc-operator Usage guidelines Use this command to verify the configuration you have made in a certain view. Typically, this command does not display parameters that are set to their default settings. For some parameters that can be successfully configured even if their dependent features are not enabled, this command displays their settings after the dependent features are enabled.
Predefined user roles network-admin mdc-admin Parameters backup: Deletes the backup next-startup configuration file. main: Deletes the main next-startup configuration file. Usage guidelines CAUTION: Use this command with caution. In standalone mode, this command permanently deletes the next-startup configuration files from both MPUs. In IRF mode, this command permanently deletes the next-startup configuration files on all MPUs in the IRF fabric.
Related commands display saved-configuration restore startup-configuration Use restore startup-configuration to download a configuration file from a TFTP server and specify it as the main next-startup configuration file. Syntax restore startup-configuration from tftp-server src-filename Views User view Predefined user roles network-admin mdc-admin Parameters tftp-server: Specifies a TFTP server's IPv4 address or host name. The host name is a case-insensitive string of 1 to 253 characters.
save In standalone mode: Use save file-url [ all | slot slot-number ] to save the running configuration to a configuration file, without specifying the file as a next-startup configuration file. Use save [ safely ] [ backup | main ] [ force ] [ mdc-all ] to save the running configuration to a file in the root directory of the flash memory for each MDC or the MDC where you are logged in. This command automatically specifies the file as a next-startup configuration file.
chassis chassis-number slot slot-number: Saves the running configuration to an MPU. If you do not specify this option or the all keyword, the command saves the running configuration only to the global active MPU in the IRF fabric. (In IRF mode.) safely: Saves the configuration file in safe mode. If this keyword is not specified, the device saves the configuration file in fast mode. Safe mode is slower than fast mode, but more secure.
Configuration is saved to device successfully. # In standalone mode, save the running configuration to a file in the root directory of the flash memory on the active MPU, and specify the file as the main next-startup configuration file. save The current configuration will be written to the device. Are you sure? [Y/N]:y Please input the file name(*.cfg)[flash:/startup.cfg] (To leave the existing filename unchanged, press the enter key): Validating file. Please wait...
startup saved-configuration In standalone mode: Use startup saved-configuration to specify a file as a next-startup configuration file for both active MPU and standby MPU. Use undo startup saved-configuration to configure the active MPU and the standby MPU to start up with empty configuration at the next startup. In IRF mode: Use startup saved-configuration to specify a file as a next-startup configuration file for all MPUs in the IRF fabric.
If neither backup nor main is specified, the startup saved-configuration command specifies the main next-startup configuration file. Even though the main and backup next-startup configuration files can be the same one, specify them as separate files for high availability. The undo startup saved-configuration command changes the file attribute of the main and backup next-startup configuration files to NULL, but it does not delete the two configuration files.
Software upgrade commands boot-loader file Use boot-loader file to specify startup software image files.
main: Specifies the files as main startup files. The device always first attempts to start up with main startup files. Usage guidelines In standalone mode, use this command to upgrade the startup software images on both MPUs. To upgrade only the standby MPU, you can also use the boot-loader update command. In IRF mode, use this command to upgrade the startup software images on all MPUs in an IRF fabric. To upgrade only standby MPUs, you can also use the boot-loader update command.
# In IRF mode, specify flash:/all.ipe as the backup startup image file for the MPU in slot 4 on IRF member device 1. boot-loader file flash:/all.ipe chassis 1 slot 4 backup Verifying image file......Done. Images in IPE: boot.bin system.bin ssh.bin This command will set the backup startup software images. Continue? [Y/N]:Y Add images to target slot. flash:/boot.bin already exists on chassis 1 slot 4. flash:/system.bin already exists on chassis 1 slot 4. flash:/ssh.
Usage guidelines You can use this command to synchronize startup images after adding new MPUs. The images used for synchronization are in the main or backup startup software images list instead of the current software images list (see the display boot-loader command). • The main images list is used if the active MPU or global active MPU started up with the main startup images. • The backup image list is used if the active MPU or global active MPU started up with the main startup images.
In IRF mode: bootrom backup chassis chassis-number slot slot-number-list Views User view Predefined user roles network-admin Parameters slot slot-number-list: Specifies a space-separated list of up to seven slot number items. Each item specifies a card by its slot number or a range of cards in the form of start-slot-number to end-slot-number. For example, slot 4 to 1 2. (In standalone mode.) chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.
Predefined user roles network-admin Parameters slot slot-number-list: Specifies a space-separated list of up to seven slot number items. Each item specifies a card by its slot number or a range of cards in the form of start-slot-number to end-slot-number. For example, slot 4 to 1 2. (In standalone mode.) chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.) slot slot-number-list: Specifies a space-separated list of up to seven slot number items.
slot slot-number-list: Specifies a space-separated list of up to seven slot number items. Each item specifies a card by its slot number or a range of cards in the form of start-slot-number to end-slot-number. For example, slot 4 to 1 2. (In standalone mode.) chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.) slot slot-number-list: Specifies a space-separated list of up to seven slot number items.
Predefined user roles network-admin Usage guidelines Before a BootWare image upgrade starts, this function examines the upgrade BootWare image for file validity and incompatibility with hardware. If the BootWare image passes the check, the upgrade process starts. If not, the system does not perform the upgrade. Examples # Enable BootWare image validity check.
flash:/11900-CMW710-SYSTEM-E2110L06.bin flash:/11900-CMW710-SSH-E2110L06.bin Backup startup software images: flash:/11900-CMW710-BOOT-E2110L06.bin flash:/11900-CMW710-SYSTEM-E2110L06.bin # In IRF mode, displays current software images and startup software images. display boot-loader Software images on chassis 0 slot 5: Current software images: flash:/11900-CMW710-BOOT-E2110L06.bin flash:/11900-CMW710-SYSTEM-E2110L06.bin Main startup software images: flash:/11900-CMW710-BOOT-E2110L06.
Views System view Predefined user roles network-admin Usage guidelines This command is available in standalone mode. To make sure the standby MPU always runs the same software images as the active MPU, configure both the version auto-update enable command and the undo version check ignore command. The startup software version check function examines the standby MPU's startup software images for version inconsistency with the active MPU's current software images at startup.
When the standby MPU starts up, this command disables the system to examine the standby MPU's startup software images for version inconsistency with the active MPU's current software images. The standby MPU can start up with a different software version than the active MPU. The startup software version check function might fail to work because the software versions of the MPUs are incompatible. To avoid problems, do not disable startup software version check for the standby MPU unless for software upgrade.
ISSU commands display install active Use display install active to display active software images. Syntax In standalone mode: display install active [ slot slot-number ] [ verbose ] In IRF mode: display install active [ chassis chassis-number slot slot-number ] [ verbose ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command is applied to all cards in the device.
flash:/system.bin flash:/feature1.bin # In IRF mode, display detailed information about active software images. display install active verbose Active packages on chassis 1 slot 5: flash:/boot.bin [Package] Vendor: HP Product: xxxx Service name: boot Platform version: 7.1.045 Product version: Release 2110 Patch version: 000 Supported board: mpu lpu PkgTime: Sep 25 2011 10:16:31 Version type: debug [Component] Component: boot Description: boot package flash:/system.
Table 21 Command output Field Description Active packages on slot n Active software images on the card in the specified slot. (In standalone mode.) Active packages on chassis m slot n Active software images on the card in the specified slot of the specified member. (In IRF mode.) [Package] Detailed information about the software image. Image type: Service name • • • • boot—Boot image. system—System image. patch—Patch image. Any other value indicates a feature image.
chassis chassis-number slot slot-number: Specifies a card on an IRF member. If you do not specify this option, the command is applied to all cards in the IRF fabric. (In IRF mode.) verbose: Displays detailed information. If you do not specify this keyword, the command displays only the names of the software images. Usage guidelines ISSU can change only main startup software images. To change backup startup software images, you must use the boot-loader file command.
Component: system Description: system package For command output descriptions, see Table 21. Related commands • boot-loader file • display install committed display install committed Use display install committed to display main startup software images.
flash:/boot-R2110.bin [Package] Vendor: HP Product: xxxx Service name: boot Platform version: 7.1.045 Product version: Release 2110 Supported board: mpu lpu Version type: debug [Component] Component: boot Description: boot package flash:/system-R2110.bin [Package] Vendor: HP Product: xxxx Service name: system Platform version: 7.1.045 Product version: Release 2110 Supported board: mpu lpu Version type: debug [Component] Component: system Description: system package flash:/feature1.
Syntax In standalone mode: display install inactive [ slot slot-number ] [ verbose ] In IRF mode: display install inactive [ chassis chassis-number slot slot-number ] [ verbose ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command is applied to all cards in the device. (In standalone mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member.
Related commands install deactivate display install ipe-info Use display install ipe-info to display the software images included in an .ipe file. Syntax display install ipe-info ipe-filename Views Any view Predefined user roles network-admin network-operator Parameters ipe ipe-filename: Specifies the name of an .ipe file in the active MPU's Flash root directory in the format flash:/xxx.ipe or the name of an .ipe file in the standby MPU's Flash root directory in the format slotn#flash:/xxx.
Predefined user roles network-admin network-operator Examples # In standalone mode, display ongoing ISSU activate, deactivate, and rollback operations. display install job JobID:5 Action:install activate flash:/feature1.bin on slot 5 The output shows that the device is executing the install activate flash:/feature1.bin slot 5 command. # In IRF mode, display ongoing ISSU activate, deactivate, and rollback operations. display install job JobID:5 Action:install activate flash:/feature1.
Install job 1 started by user root at 04/28/2001 08:39:29. Install activate flash:/ssh.bin on slot 5 Job 1 completed successfully at 04/28/2001 08:39:30. ----------------------------------------------------------Install job 2 started by user root at 04/28/2001 08:40:29. Job 2 completed successfully at 04/28/2001 08:40:29. Install job 2 started by user root at 04/28/2001 08:40:29. Install activate flash:/route.bin on slot 5 Job 2 completed successfully at 04/28/2001 08:40:30.
directory in the format chassismslotn#flash:/xxx.bin, for example, chassis1slot1#flash:/a.bin. It can be a case-insensitive string of 1 to 63 characters. (In IRF mode.) all: Specifies all software image files in the root directories of the active MPU's storage media. (In standalone mode.) all: Specifies all software image files in the root directories of the global active MPU's storage media. (In IRF mode.) verbose: Displays detailed information.
Predefined user roles network-admin network-operator Parameters point-id: Specifies a rollback point ID. Usage guidelines You can use the display install rollback command to view available rollback points. Examples # Display all rollback points. display install rollback Install rollback information 1 on slot 5: Update from flash:/route-1.bin to flash:/route-2.bin. Install rollback information 2 on slot 5: Deactivating flash:/route-2.
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command is applied to all cards in the device. (In standalone mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member. If you do not specify this option, the command is applied to all cards in the IRF fabric. (In IRF mode.) Usage guidelines A component is a collection of features related to each other. The features of a component are installed or uninstalled at the same time.
Rollback time remaining : 40 minutes # Display automatic-rollback timer information after the issu accept command is executed. display issu rollback-timer Rollback timer: Not working Rollback interval: 30 minutes # Display automatic-rollback timer information when no ISSU process is going on.
# In standalone mode, display ISSU status information while the issu load command is being executed. display issu state ISSU state: Loading Compatibility: Incompatible Work state: Normal Upgrade method: Card by card Upgraded slot: None Current upgrading slot: slot 5 Previous version list: boot: 7.1.045, Release 2110 system: 7.1.045, Release 2110 ssh: 7.1.045, Release 2110 Previous software images: flash:/boot.bin flash:/system.bin flash:/ssh.bin Upgrade version list: boot: 7.1.
flash:/boot02.bin flash:/system04.bin flash:/ssh04.bin # In IRF mode (single-chassis), display ISSU status information on the global active MPU after the issu load command is completed. display issu state ISSU state: Loaded Compatibility: Compatible Work state: Normal Upgrade method: Card by card Upgraded slot: chassis 1 slot 5 Current upgrading slot: None Previous version list: boot: 7.1.045, Release 2110 system: 7.1.045, Release 2110 ssh: 7.1.
Upgrade software images: flash:/system04.bin flash:/ssh04.bin Table 22 Command output Field Description ISSU status: ISSU state • • • • • • • • • Init—The ISSU process has not started or has finished. Loading—The system is executing the issu load command. Loaded—The issu load command is completed. Switching—The system is executing the issu run switchover command. Switchover—The issu run switchover command is completed. Accepted—The issu accept command is completed.
Field Previous software images Description Software images running on the device before the ISSU. If you execute this command on an original standby MPU during an ISSU for an incompatible version, the value of this field is Unknown. Software versions to upgrade to. Upgrade version list Upgrade software images If you execute this command on an original standby MPU during an ISSU for an incompatible version, the value of this field is Unknown. Software images used for the upgrade.
contain slot or chassis information. (In IRF mode.) ipe-filename: Specifies the name of an .ipe file in the root directory of the active MPU's Flash, in the format flash:/xxx.ipe. It can be a case-insensitive string of 1 to 63 characters and cannot contain slot information. (In standalone mode.) ipe-filename: Specifies the name of an .ipe file in the root directory of the global active MPU's Flash, in the format flash:/xxx.ipe.
Version: V700R001B45D012 Version compatibility list: V700R001B45D012 Version dependency boot list: 7.1.045 Feature image: flash:/feature-R2110.bin Version: V700R001B45D012 Version compatibility list: V700R001B45D012 Version dependency system list: V700R001B45D012 V700R001B45D014 Incompatible upgrade. # In standalone mode, display the compatibility information of cmw710-feature-R2110.bin and the ISSU methods to be used to upgrade the software to the specified version.
Influenced service according to following table on slot 5.1: flash:/cmw710-feature-R2110.bin feature # In IRF mode, display the compatibility information of cmw-feature-R2110.bin and the ISSU methods to be used to upgrade the software to the specified version. (In this example, the specified version is compatible with the running version.) display version comp-matrix file feature flash:/cmw710-feature-R2110.bin Feature image: flash:/cmw710-feature-R2110.
flash:/cmw710-feature-R2110.bin feature Influenced service according to following table on chassis 2 slot 6: flash:/cmw710-feature-R2110.bin feature Influenced service according to following table on chassis 2 slot 5: flash:/cmw710-feature-R2110.bin feature Table 23 Command output Field Description • When displayed under a system image, this field shows all system image Version compatibility list versions that are compatible with the system image.
Syntax install abort [ job-id ] Views User view Predefined user roles network-admin Parameters job-id: Specifies the job ID of an ISSU operation. If you do not specify this argument, the command aborts all ongoing software image activate, deactivate, and rollback operations. Usage guidelines After you issue the install activate, install add, install commit, install deactivate, install remove, or install rollback to command, the system creates a software image management job.
Parameters boot: Specifies a boot image file. For more information about software images, see Fundamental Configuration Guide. system: Specifies a system image file. feature: Specifies feature image files. &<1-30> indicates that you can specify a space-separated list of up to 30 feature image files. patch: Specifies a patch image file. filename: Specifies the name of a software image file in the root directory of the active MPU's Flash, in the format flash:/xxx.bin.
Influenced service according to following table: flash:/feature1.bin feature1 The output shows that a service upgrade will be used for the upgrade, and the feature1 module will be rebooted during the upgrade process. # In IRF mode, check for the ISSU method to be used for feature upgrade of the card in slot 4 on IRF member 1, with image file feature1.bin, and view the possible impact of the upgrade. install activate feature flash:/feature1.
Upgrade summary according to following table: flash:/route-feature.bin Running Version New Version None Release 2111 Chassis Slot Upgrade Way 1 4 Service Upgrade 1 5 Service Upgrade Upgrading software images to compatible versions. Continue? [Y/N]:y This operation maybe take several minutes, please wait.......................... .............................................Done. Table 24 Command output Field Description Upgrade summary according to following table Upgrade summary.
install add Use install add to decompress an .ipe file. Syntax install add ipe-filename medium-name: Views User view Predefined user roles network-admin Parameters ipe ipe-filename: Specifies the name of an .ipe file in the root directory of the active MPU's Flash, in the format flash:/xxx.ipe. It can be a case-insensitive string of 1 to 63 characters and cannot contain slot information. (In standalone mode.) ipe ipe-filename: Specifies the name of an .
Usage guidelines For an incremental upgrade, the install activate command changes only the current software configuration. To keep the changes after a reboot, you must use the install commit command to confirm the software changes. For a reboot or ISSU reboot upgrade, the install activate command changes both the current software configuration and the main startup software images. You do not need to use the install commit command to confirm the software changes.
the format flash:/xxx.bin. &<1-30> indicates that you can specify a space-separated list of up to 30 feature or patch image file names. It can be a case-insensitive string of 1 to 63 characters and cannot contain slot information. (In standalone mode.) filename: Specifies the name of a software image file in the root directory of the global active MPU's Flash, in the format flash:/xxx.bin. &<1-30> indicates that you can specify a space-separated list of up to 30 feature or patch image file names.
Predefined user roles network-admin Parameters slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command is applied to all cards in the device. (In standalone mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member. If you do not specify this option, the command is applied to all cards in the IRF fabric. (In IRF mode.) filename: Specifies the name of a software image file, a case-insensitive string of 1 to 63 characters.
you can roll back the software configuration to a rollback point to cancel all software image upgrade-related operations performed after the rollback point. You can also roll back the software configuration to the original software configuration (the software configuration before you performed the ISSU). For an incremental upgrade, up to 50 rollback points are supported. After the limit is reached, the oldest rollback points are deleted to make room for newly created rollback points.
Views User view Predefined user roles network-admin Usage guidelines If some software images are not integral or some activated/deactivated software images are not confirmed, a switchover might not occur as expected, and the MPUs might run different versions of software images after a reboot or even cannot reboot correctly.
slot 5: Start to check active package completeness. flash:/boot-r2110.bin verification successful. flash:/system-r2110.bin verification successful. Start to check active package consistency. Active packages are consistent with committed packages on their own board. Active packages are consistent with the reference packages. Verification is done. issu accept Use issu accept to accept the upgrade to a compatible version and delete the automatic-rollback timer.
• For a single-MPU single-chassis IRF fabric, use issu commit to finish an ISSU to a compatible version. • For a multichassis IRF fabric, use issu commit to upgrade ungraded subordinate members (including the original master) during an ISSU to a compatible version.
issu commit slot 4 Upgrade summary according to following table: flash:/feature.bin Running Version New Version Release 2110 Release 2111 Slot Upgrade Way 4 Service Upgrade Upgrading software images to compatible versions. Continue? [Y/N]: # In standalone mode, finish the upgrade of the MPU to a compatible version. (In this example, the device only one MPU.) issu commit slot 4 # In IRF mode, upgrade the members that have not been upgraded during an ISSU to a compatible version.
Release 2110 Release 2111 Chassis Slot Upgrade Way 1 0 Service Upgrade 1 1 Service Upgrade 1 2 Service Upgrade 1 3 Service Upgrade 1 4 Service Upgrade Upgrading software images to compatible versions. Continue? [Y/N]:y # In IRF mode, upgrade the original active MPU to a compatible version. (In this example, the IRF fabric has a single member and the member has two MPUs.) issu commit chassis 1 slot 4 Upgrade summary according to following table: flash:/feature.
In IRF mode (single-chassis): issu load file { boot filename | system filename | feature filename&<1-30> } * chassis chassis-number slot slot-number issu load file ipe ipe-filename chassis chassis-number slot slot-number In IRF mode (multichassis): issu load file { boot filename | system filename | feature filename&<1-30> } * chassis chassis-number&<1-3> issu load file ipe ipe-filename chassis chassis-number&<1-3> Views User view Predefined user roles network-admin Parameters boot: Specifies a boot image
Usage guidelines In standalone mode, specify the slot number of the MPU for this command if the device has only one MPU. If the device has two MPUs, specify the slot number of the standby MPU for this command. In either case, this command performs the following operations: • Examines the compatibility of the specified images with the running versions. The result might be compatible or incompatible. • Determines the ISSU methods.
Examples # In standalone mode (dual-MPU), upgrade the standby MPU with the feature image file flash:/feature.bin. (In this example, the image is compatible with the running images.) issu load file feature flash:/feature.bin slot 5 This operation will delete the rollback point information for the previous upgrade and maybe get unsaved configuration lost. Continue? [Y/N]:Y Upgrade summary according to following table: flash:/feature.
# In standalone mode (single-MPU), upgrade the MPU with the feature image file flash:/feature.bin. (In this example, the image is incompatible with the running images.) issu load file feature flash:/feature.bin slot 4 This operation will delete the rollback point information for the previous upgrade and maybe get unsaved configuration lost. Continue? [Y/N]:Y Upgrade summary according to following table: flash:/feature.
3 1 Reboot 3 2 Reboot 3 3 Reboot 3 4 Reboot 4 0 Reboot 4 1 Reboot 4 2 Reboot 4 3 Reboot 4 4 Reboot Upgrading software images to incompatible versions. Continue? [Y/N]:y # In IRF mode (dual-MPU single-chassis), upgrade the standby MPU on member device 1 with the feature image file flash:/feature.bin. (In this example, the image is compatible with the running images.) issu load file feature flash:/feature.
Chassis Slot Upgrade Way 1 1 Service Upgrade 1 2 Service Upgrade 1 3 Service Upgrade 1 4 Service Upgrade Upgrading software images to compatible versions. Continue? [Y/N]:y # In IRF mode (single-MPU single-chassis), upgrade the MPU on member device 1 with the feature image file flash:/feature.bin. (In this example, the image is incompatible with the running images.) issu load file feature flash:/feature.
Predefined user roles network-admin Usage guidelines The device supports automatic rollback and manual rollback. This command performs a manual rollback. You can perform a manual rollback while an ISSU is in one of the following states: Loading, Loaded, Switching (during an upgrade to a compatible version), Switchover (during an upgrade to a compatible version), or Accepted.
Usage guidelines The automatic software version rollback function is only available on a dual-MPU device (in standalone mode), a multichassis IRF fabric, or a single-chassis dual-MPU IRF fabric during an ISSU to a compatible version. When you execute the issu run switchover command in a scenario where automatic rollback is supported, the system starts the automatic-rollback timer.
{ Incremental upgrade—Performs a process-level active/standby switchover for the processes to be upgraded. Reboot upgrade or ISSU upgrade—Reboots the current active MPU with the old software version to cause the upgraded MPU to become the new active MPU and upgrades the service cards and switching fabric cards.
• Use the display mdc command to verify that all MDCs are in active state. • Use the display system internal ha service-group command to verify that the Action field is 0 for each service. Examples # In standalone mode (dual-MPU), perform an active/standby switchover and upgrade the service cards and switching fabric cards to a compatible version. issu run switchover Upgrade summary according to following table: flash:/feature.
Upgrading software images to compatible versions. Continue? [Y/N]:y # In IRF mode (multichassis), perform a master/subordinate switchover and upgrade members that have not been upgraded (member 1 and member 2) during an ISSU to an incompatible version. issu run switchover Upgrade summary according to following table: flash:/feature.
Chassis Slot Upgrade Way 1 1 Reboot 1 2 Reboot 1 3 Reboot 1 4 Reboot Upgrading software images to incompatible versions. Continue? [Y/N]:y Table 26 Command output Field Description Switchover method: • Active standby process switchover—Switch from the active process to the standby process. Switchover Way • Active standby MPU switchover—Switch from the active MPU to the standby MPU. (In standalone mode.
Syntax reset install rollback oldest point-id Views User view Predefined user roles network-admin Parameters point-id: Specifies a rollback point by its ID. Usage guidelines This command clears the specified rollback point and all rollback points earlier than the specified one. Examples # Clear rollback point 2 and all rollback points older than rollback point 2.
Device management commands clock datetime Use clock datetime to set the UTC time. Syntax clock datetime time date Default The factory default UTC time is used. Views User view Predefined user roles network-admin Parameters time: Specifies a time in the format hh:mm:ss. The hh value is in the range of 0 to 23, the mm value is in the range of 0 to 59, and the ss value is in the range of 0 to 59. The leading zero in a segment can be omitted. If the seconds segment is 0 (hh:mm:00), you can omit it.
clock protocol Use clock protocol to specify the system time source. Use undo clock protocol to restore the default. Syntax clock protocol { none | ntp mdc mdc-id } undo clock protocol Default The default MDC on the device uses NTP to get the system time. Views System view Predefined user roles network-admin mdc-admin Parameters none: Uses the local clock. After you specify this keyword, you can use the clock datetime, clock timezone, or clock summer-time command to change the system time.
clock summer-time Use clock summer-time to configure the device to use daylight saving time during a specific period of time. Use undo clock summer-time to cancel the configuration. Syntax clock summer-time name start-time start-date end-time end-date add-time undo clock summer-time Default Daylight saving time is disabled.
{ month—Takes January, February, March, April, May, June, July, August, September, October, November or December. { week—Represents week of the month. It takes first, second, third, fourth, fifth, or last. { day—Takes Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, or Saturday. add-time: Specifies the time to be added to the standard time, in the format hh:mm:ss. The hh value is in the range of 0 to 23, the mm value is in the range of 0 to 59, and the ss value is in the range of 0 to 59.
add: Adds an offset to the UTC time. minus: Decreases the UTC time by an offset. zone-offset: Specifies an offset to the UTC time, in the format hh:mm:ss. The hh value is in the range of 0 to 23, the mm value is in the range of 0 to 59, and the ss value is in the range of 0 to 59. The leading zero in a segment can be omitted. If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds segments are 0 (hh:00:00), you can omit both of the segments.
Usage guidelines A job can have multiple commands. Commands in a job are uniquely identified by their IDs. A command with a smaller ID is executed earlier. If a command uses the ID of an existing command, the existing command is replaced. A job cannot contain any of these commands: telnet, ftp, ssh2, or monitor process. The system does not check the validity of the command argument. You must make sure the command is supported by the device, is input in the correct format, and uses valid values.
**************************************************************************** • When a console user quits user view, the device automatically tries to restart the console session and displays the following message: ************************************************************************** * Copyright (c) 2010-2013 Hewlett-Packard Development Company, L.P. * * Without the owner's prior written consent, * * no decompiling or reverse-engineering shall be allowed.
mdc-operator Parameters slot slot-number: Specifies a card by its slot number. Without this option, the command displays the alarm information of all cards. (In standalone mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device by its slot number and the member ID. Without this option, the command displays the alarm information of all cards in the IRF fabric. (In IRF mode.) Examples # In standalone mode, display alarm information.
display asset-info Use display asset-info to display the asset profile of a physical component, such as, the chassis, a card, a fan tray, or a power supply.
Usage guidelines To display an item in the asset profile of the chassis, a fan tray or a power supply, for example, asset ID or asset description, use the corresponding keyword in the command. If no corresponding keywords are specified, this command displays all asset profiles. If you specify a chassis, card, fan tray, or power supply to display its asset profile, but the user does not set any information for the specified chassis, card, fan tray, or power supply, the system displays an empty field.
• set asset-info display clock Use display clock to display the system time, date, local time zone, and daylight saving time. Syntax display clock Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display the system time and date when the local time zone is not specified. display clock 10:09:00 UTC Fri 03/16/2012 # Display the system time and date when the local time zone Z5 is specified.
Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display the copyright statement. display copyright display cpu-usage Use display cpu-usage to display CPU usage statistics.
0% in last 1 minute 0% in last 5 minutes Slot 2 CPU 0 CPU usage: 1% in last 5 seconds 1% in last 1 minute 1% in last 5 minutes Slot 3 CPU 0 CPU usage: 1% in last 5 seconds 1% in last 1 minute 1% in last 5 minutes Slot 5 CPU 0 CPU usage: 4% in last 5 seconds 4% in last 1 minute 4% in last 5 minutes Slot 10 CPU 0 CPU usage: 3% in last 5 seconds 3% in last 1 minute 3% in last 5 minutes # In IRF mode, display the current CPU usage statistics for all cards.
Chassis 2 Slot 10 CPU 0 CPU usage: 3% in last 5 seconds 3% in last 1 minute 3% in last 5 minutes Table 29 Command output Field Description 1% in last 5 seconds Average CPU usage during the last 5 seconds. 1% in last 1 minute Average CPU usage during the last minute. 1% in last 5 minutes Average CPU usage during the last 5 minutes. Slot x CPU y CPU usage Usage statistics for CPU y of the card in slot x. (In standalone mode.
display cpu-usage history Use display cpu-usage history to display the historical CPU usage statistics in charts. Syntax In standalone mode: display cpu-usage history [ job job-id ] [ slot slot-number [ cpu cpu-number ] ] In IRF mode: display cpu-usage history [ job job-id ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters job job-id: Specifies a process by its ID.
90%| 85%| 80%| 75%| 70%| 65%| 60%| 55%| 50%| 45%| 40%| 35%| 30%| 25%| 20%| 15%| # 10%| 5%| ### # ######## -----------------------------------------------------------10 20 30 40 50 60 (minutes) cpu-usage (CPU 0) last 60 minutes (SYSTEM) The output shows the historical CPU usage statistics for the entire system (with the name SYSTEM) in the last 60 minutes: • 5%: 12 minutes ago • 10%: 13 minutes ago • 15%: 14 minutes ago • 10%: 15 minutes ago • 5%: 16 and 17 minutes ago • 10%: 18 minu
35%| 30%| 25%| 20%| 15%| 10%| 5%| # -----------------------------------------------------------10 20 30 40 50 60 (minutes) cpu-usage (CPU 0) last 60 minutes (scmd) The output shows the historical CPU usage statistics of process 1 (with the process name scmd) in the last 60 minutes. A process name with square brackets ([ ]) means that the process is a kernel process. • 5%: 20 minutes ago • 2% or lower than 2%: Other time display device Use display device to display device information.
Examples # In standalone mode, display device information. display device Slot No.
1 8 NONE Absent 0 NONE None 1 9 NONE Absent 0 NONE None 1 10 LSU1FAB08D9 Normal 0 11900-2111 None 1 11 NONE Absent 0 NONE None 1 12 NONE Absent 0 NONE None 1 13 NONE Absent 0 NONE None 2 0 NONE Absent 0 NONE None 2 1 LSU1TGS32SF9 Normal 0 11900-2111 None 2 2 LSU1TGS32SF9 Normal 0 11900-2111 None 2 3 LSU1TGS32SF9 Normal 0 11900-2111 None 2 4 NONE Absent 0 NONE None 2 5 LSU1SUPB9 Standby 0 11900-2111 None 2 6 LSU1TGS32SF9 N
In IRF mode: display device manuinfo [ chassis chassis-number [ slot slot-number ] ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.) slot slot-number: Specifies a card by its slot number. Without this option, the command displays the electronic label information of all cards.
DEVICE_SERIAL_NUMBER : 210231A0KGB MAC_ADDRESS : NONE MANUFACTURING_DATE : 2010-11-14 VENDOR_NAME : HP Slot 5 DEVICE_NAME : HP FlexFabric 11900 Main Processing Unit JG609A DEVICE_SERIAL_NUMBER : 210231A0U66 MAC_ADDRESS : NONE MANUFACTURING_DATE : 2011-5-25 VENDOR_NAME : HP Slot 10 DEVICE_NAME : HP FlexFabric 11908 1.
Slot 2 DEVICE_NAME : HP FlexFabric 11900 32-port 10GbE SFP+ SF Module JG611A DEVICE_SERIAL_NUMBER : 210231A0K8B MAC_ADDRESS : NONE MANUFACTURING_DATE : 2010-12-07 VENDOR_NAME : HP Slot 3 DEVICE_NAME : HP FlexFabric 11900 32-port 10GbE SFP+ SF Module JG611A DEVICE_SERIAL_NUMBER : 210231A0KGB MAC_ADDRESS : NONE MANUFACTURING_DATE : 2010-11-14 VENDOR_NAME : HP Slot 5 DEVICE_NAME : HP FlexFabric 11900 Main Processing Unit JG609A DEVICE_SERIAL_NUMBER : 210231A0U66 MAC_ADDRESS : NONE MANUFACTU
Syntax In standalone mode: display device manuinfo chassis-only In IRF mode: display device manuinfo chassis chassis-number chassis-only Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.) Examples # In standalone mode, display the electronic label information of the backplane.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.) fan-id: Specifies a fan by its ID. The value range for the ID depends on the device model. Examples # In standalone mode, display the electronic label information of fan 0.
network-operator mdc-admin mdc-operator Parameters chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.) power-id: Specifies a power supply by its ID. The value range for the power-id argument depends on the device model. Examples # In standalone mode, display the electronic label information of power supply 0.
infrastructure: Displays operating statistics for the fundamental modules. l2: Displays operating statistics for the Layer 2 features. l3: Displays operating statistics for the Layer 3 features. service: Displays operating statistics for upper-layer features. Usage guidelines For diagnostics or troubleshooting, you can use separate display commands to collect running status data module by module or use the display diagnostic-information command to bulk collect running data for multiple modules.
slot slot-number: Specifies a card by its slot number. Usage guidelines • If no card is specified, this command displays the temperature statistics for all temperature sensors on the device. (In standalone mode.) • If no IRF member device is specified, this command displays the temperature statistics for all temperature sensors in the IRF fabric.
Field Description Slot A number in this field indicates a card. (In standalone mode.) Slot The chassis-number/slot-number in this field indicates a card on an IRF member device. (In IRF mode.) Temperature Current temperature. Lower Low-temperature threshold. Warning High-temperature warning threshold. Alarm High-temperature alarming threshold. Shutdown High-temperature shutdown threshold. When the sensor temperature reaches the threshold, the system shuts down automatically.
Syntax In standalone mode: display memory [ slot slot-number ] In IRF mode: display memory [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters slot slot-number: Specifies a card by its slot number. Without this option, the command displays memory usage for all cards. (In standalone mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device by its slot number and the member ID.
-/+ Buffers/Cache: Swap: 324592 0 372492 0 0 Slot 10: Total Used Free Shared Buffers Cached FreeRatio 697084 270212 426872 0 0 12424 61.2% -/+ Buffers/Cache: 257788 439296 Mem: Swap: 0 0 0 # In IRF mode, display memory usage. display memory The statistics about memory is measured in KB: Chassis 1 Slot 4: Total Used Free Shared Buffers Cached FreeRatio 8135120 878444 7256676 0 68 357480 89.
Total Used Free Shared Buffers Cached FreeRatio 697084 270212 426872 0 0 12424 61.2% -/+ Buffers/Cache: 257788 439296 Mem: Swap: 0 0 0 Table 33 Command output Field Description Slot Slot number of a card. (In standalone mode.) Chassis x Slot x Slot number of a card on a member device. (In IRF mode.) Mem Memory usage information. Total size of the physical memory space that can be allocated. Total The memory space is virtually divided into two parts.
Parameters slot slot-number: Specifies a card by its slot number. Without this option, the command displays the memory usage thresholds and memory usage notification statistics for the active MPU. (In standalone mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device by its slot number and the member ID. Without this option, the command displays the memory usage thresholds and memory usage notification statistics for the global active MPU. (In IRF mode.
display power Use display power to display power supply information. Syntax In standalone mode: display power [ power-id ] In IRF mode: display power [ chassis chassis-number [ power-id ] ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters chassis chassis-number: Specifies an IRF member device by its member ID. Without this option, the command displays power supply information on all IRF member devices. (In IRF mode.
mdc-operator Parameters job-name: Specifies a job by its name, a case-sensitive string of 1 to 47 characters. Without this option, the command displays the configuration information of all jobs. Examples # Display the configuration information of all jobs. display scheduler job Job name: saveconfig copy startup.cfg backup.
[Sysname-if-range]shutdown Table 34 Command output Field Description Logfile Size Size of the log file, in bytes. Schedule name Schedule to which the job belongs. Execution time Time when the job was started. Completion time Time when the job was completed. If the job has never been executed or the job has no commands, this field is blank. Job output Commands in the job and their output.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters schedule-name: Specifies a schedule by its name, a case-sensitive string of 1 to 47 characters. Without this option, the command displays information about all schedules. Examples # Display information about all schedules.
Field Description Result of the most recent execution: • • • • • Last execution status Successful. Failed. Waiting—The device is executing the schedule and the job is waiting to be executed. In process—The job is being executed. -NA-—The execution time has not arrived yet. To view information about whether the commands in the job has been executed and the execution results, execute the display scheduler logfile command.
Slot No. Switch-Mode 0 NORMAL 3 STANDARD-IPV6 4 NONE 10 NONE Table 36 Command output Field Description Switch-Mode Operating mode of a card. NORMAL Normal mode. STANDARD-IPV6 IPv6 standard mode. NONE The card does not support operating mode configuration. Related commands switch-mode display system-working-mode Use display system-working-mode to display the current system working mode.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters interface [ interface-type interface-number ]: Specifies an interface by its type and number. If no interface is specified, this command displays the alarms present on every transceiver module. Usage guidelines Table 37 shows the common transceiver alarms. If no error occurs, "None" is displayed. Table 37 Common transceiver alarms Field Remarks SFP/SFP+: RX … Received …. TX … Transmitted ….
Table 38 Command output Field Description transceiver current alarm information Alarms present on the transceiver module. RX loss of signal Received signals are lost. RX power low Received power is low. display transceiver diagnosis Use display transceiver diagnosis to display the current values of the digital diagnosis parameters on transceiver modules.
Field Description Bias(mA) Bias current in mA, accurate to 0.01 mA. RX power(dBm) RX power in dBm, accurate to 0.01 dBm. TX power(dBm) TX power in dBm, accurate to 0.01 dBm. display transceiver interface Use display transceiver interface to display the key parameters of transceiver modules.
Field Description • Fiber transceiver: Central wavelength (in nm) of the transmit laser. If the transceiver supports multiple wavelengths, every two wavelength values are separated by a comma. Wavelength(nm) • Copper cable: Displayed as N/A. Transfer distance, with "xx" representing the distance unit: km (kilometers) for single-mode transceiver modules and m (meters) for other transceiver modules.
Ten-GigabitEthernet1/0/1 transceiver manufacture information: Manu. Serial Number : 213410A0000 Manufacturing Date : 2012-09-01 Vendor Name : HP Table 41 Command output Field Description Manu. Serial Number Serial number generated during production of the transceiver module. Manufacturing Date Date when the electronic label information was written to the transceiver module. display version Use display version to display system version information.
mdc-operator Usage guidelines The device records its current startup software version information and all subsequent version update information. Such information can survive reboots. A maximum of 10 records can be saved. Examples # Display the startup software image upgrade history records. display version-update-record Name Record 1 Version Compile time (updated on Jan 06 2014 at 09:06:03): 11900-CMW710-BOOT-R2111.bin 7.1.045P20 Release 2111 Dec 25 2013 14:47:32 11900-CMW710-SYSTEM-R2111.
Default An LPU performs load sharing by ingress interface. Views System view Predefined user roles network-admin Parameters destination-ip: Performs load sharing by destination IP address. destination-mac: Performs load sharing by destination MAC address. ingress-port: Performs load sharing by ingress interface. source-ip: Performs load sharing by source IP address. source-mac: Performs load sharing by source MAC address.
Parameters incoming: Configures the banner to be displayed before a modem dial-up user accesses user view. If authentication is required, the incoming banner appears after the authentication is passed. legal: Configures the banner to be displayed before a user inputs the username and password to access the CLI. login: Configures the banner displayed to be before password or scheme authentication is performed for a login user.
Welcome to motd(header motd) Welcome to login(header login) Login authentication Password: Welcome to shell(header shell) job Use job to assign a job to a schedule. Use undo job to revoke a job. Syntax job job-name undo job job-name Default No job is assigned to a schedule. Views Schedule view Predefined user roles network-admin mdc-admin Parameters job-name: Specifies the job name, a case-sensitive string of 1 to 47 characters. Usage guidelines You can assign multiple jobs to a schedule.
memory-threshold Use memory-threshold to set memory usage thresholds. Use undo memory-threshold to restore the defaults.
Usage guidelines To ensure correct operation and improve memory utilization, the system monitors the amount of free memory space in real time. When a threshold is exceeded, the system sends an alarm notification or an alarm-removed notification to affected feature modules or processes so they can take countermeasures. For more information about the conditions and rules for generating alarm notifications and alarm-removed notifications, see Fundamentals Configuration Guide.
Related commands • display cpu-usage • display cpu-usage configuration • display cpu-usage history • monitor cpu-usage interval monitor cpu-usage interval Use monitor cpu-usage interval to configure the interval at which the device samples CPU usage statistics. Syntax In standalone mode: monitor cpu-usage interval interval-value [ slot slot-number ] In IRF mode: monitor cpu-usage interval interval-value [ chassis chassis-number slot slot-number ] Default The sampling interval is 1 minute.
monitor handshake-timeout disable-port Use monitor handshake-timeout disable-port to enable the port-down function globally. Use undo monitor handshake-timeout disable-port to disable the function globally. Default The port-down function is enabled. Syntax monitor handshake-timeout disable-port undo monitor handshake-timeout disable-port Views System view Predefined user roles network-admin mdc-admin Examples # Enable the port-down function globally.
If password recovery capability is enabled, a console user can access the device configuration without authentication to configure new passwords. If password recovery capability is disabled, console users must restore the factory-default configuration before they can configure new passwords. Restoring the factory-default configuration deletes the next-startup configuration files. To enhance system security, disable password recovery capability.
Usage guidelines CAUTION: • Device reboot interrupts network services. • If the main startup software images are corrupted or missing, you must re-specify a set of main startup software images before using the reboot command to reboot the device. Otherwise, the device cannot start up. • Using the force keyword might cause file system corruption. HP recommends that you use this keyword only when the system fails or cannot start up.
This command will reboot the device. Continue? [Y/N]:y Now rebooting, please wait... # Reboot the device immediately without performing any software check. reboot force This command will reboot the device. Continue? [Y/N]:y Now rebooting, please wait... # In standalone mode, reboot the interface card in slot 2. reboot slot 2 This command will reboot the specified slot, Continue? [Y/N]:y Now rebooting, please wait... # In standalone mode, reboot the interface card in slot 2 by force.
Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters chassis: Clears the asset profile of the chassis. fan fan-id: Clears the asset profile of the specified fan tray. power power-id: Clears the asset profile of the specified power supply. slot slot-number: Clears the asset profile of the card in the specified slot. csn: Clears user asset ID. custom: Clears the customized asset profile. department: Clears the department name in the asset profile.
reset scheduler logfile Use reset scheduler logfile to clear job execution log information. Syntax reset scheduler logfile Default None Views User view Predefined user roles network-admin mdc-admin Examples # Clear job execution log information. reset scheduler logfile Related commands display scheduler logfile reset version-update-record Use reset version-update-record to clear the startup software image upgrade history records of the active MPU. (In standalone mode.
scheduler job Use scheduler job to create a job and enter job view. If the job already exists, you enter job view directly. Use undo scheduler job to delete a job. Syntax scheduler job job-name undo scheduler job job-name Default No job exists. Views System view Predefined user roles network-admin mdc-admin Parameters job-name: Specifies the job name, a case-sensitive string of 1 to 47 characters. Usage guidelines A job can be referenced by multiple schedules.
mdc-admin Parameters value: Sets the size of the job execution log file, in KB. The value range is 16 to 1024. Usage guidelines The job execution log file saves the execution information of jobs. If the file is full, old records will be replaced by new records. If the size of the log information to be written to the file is larger than the size of the file, the excessive part is not written to the file. Examples # Set the size of the job execution log file to 32 KB.
• If the reboot time is earlier than the current time, a reboot occurs at the reboot time the next day. For data security, if you are performing file operations at the reboot time, the system does not reboot. The device supports only one device reboot schedule. If you configure both the schedule reboot delay and schedule reboot delay commands or configure one of the commands multiple times, the most recent configuration takes effect. Examples # Configure the device to reboot at 12:00 p.m.
Examples # Configure the device to reboot after 88 minutes. This example assumes that the current time is 11:48 a.m. on June 6, 2013. scheduler reboot delay 88 Reboot system at 13:16 06/06/2013(in 1 hours and 28 minutes). Confirm? [Y/N]: scheduler schedule Use scheduler schedule to create a schedule and enter schedule view. If the schedule already exists, you enter schedule view directly. Use undo scheduler schedule to delete a schedule.
• time at • time interval set asset-info Use set asset-info to clear the asset profile of a physical component, such as, the chassis, a card, a fan tray, or a power supply.
chassis chassis-number: Sets the asset profiles on the specified IRF member device. The chassis-number argument represents the IRF member ID of the switch. (In IRF mode.) Usage guidelines If you execute this command multiple times, the most recent configuration takes effect. If you specify a fan tray or power supply to set its asset profile, but the specified fan tray or power supply does not exist, the system prompts that the fan tray or power supply is not present.
to 30 seconds and you change it to 10 seconds (T1=10) two seconds after the port is shut down (T=2), this port will be recovered 8 seconds later. If the detection timer is set to 30 seconds and you change it to 2 seconds ten seconds after the port is shut down, this port is recovered immediately. Examples # Set the detection timer to 100 seconds.
switch-mode { normal | standard-ipv6 } chassis chassis-number slot slot-number undo switch-mode chassis chassis-number slot slot-number Views System view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters bridging: Specifies the extended MAC mode. normal: Specifies the normal mode. standard-ipv6: Specifies the IPv6 standard mode. routing: Specifies the extended routing mode. mix-bridging-routing: Specifies the extended hybrid mode.
undo sysname Default The default name is HP. Views System view Predefined user roles network-admin mdc-admin Parameters sysname: Specifies a name for the device, a string of 1 to 64 characters. Usage guidelines A device name identifies a device in a network and is used as the user view prompt at the CLI. For example, if the device name is Sysname, the user view prompt is . Examples # Set the name of the device to R2000.
Usage guidelines The supported features and the specifications of the supported features vary with the operating mode of the device. For example, the device supports FCoE only when it is operating in advanced mode. After changing the operating mode, you must reboot the device to make the device operate in the new mode. Examples # Set the operating mode to advanced. system-view [Sysname] system-working-mode advance The system working mode is changed, it will take effect after system restart.
Card type LSU1TGS32SF LSU1QGS4SF LSU1QGS8SF LSU1TGT24SF Sensor Low-temperature threshold Warning threshold Alarming threshold Shutdown threshold Hotspot 1 0°C (32°F) 68°C (154.4°F) 80°C (176°F) N/A Hotspot 2 0°C (32°F) 88°C (190.4°F) 100°C (212°F) 110°C (230°F) Views System view Predefined user roles network-admin mdc-admin Parameters chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.) slot slot-number: Specifies a card by its slot number.
Card type Sensor Low-temperature threshold Warning threshold Alarming threshold Hotspot 2 –5°C to +5°C (23°F to 41°F) 78°C to 93°C (172.4°F to 199.4°F) 90°C to 105°C (194°F to 221°F) –5°C to +5°C (23°F to 41°F) 58°C to 73°C (136.4°F to 163.4°F) 70°C to 85°C (158°F to 185°F) –5°C to +5°C (23°F to 41°F) 78°C to 93°C (172.4°F to 199.4°F) 90°C to 105°C (194°F to 221°F) Hotspot 1 –5°C to +5°C (23°F to 41°F) 58°C to 73°C (136.4°F to 163.
Syntax time at time date undo time Default No execution time or date is specified for a schedule. Views Schedule view Predefined user roles network-admin mdc-admin Parameters time: Specifies the schedule execution time in the format hh:mm, where hh is in the range of 0 to 23, and mm is in the range of 0 to 59. date: Specifies the schedule execution date in the format MM/DD/YYYY or YYYY/MM/DD.
Views Schedule view Predefined user roles network-admin mdc-admin Parameters at time: Specifies the execution time in the format hh:mm, where hh is in the range of 0 to 23, and mm is in the range of 0 to 59. month-date month-day: Specifies a day in the current month, in the range of 1 to 31. If you specify a day that does not exist in the current month, the configuration takes effect on that day in the next month. week-day week-day&<1-7>: Specifies one or more week days for the schedule.
Related commands scheduler schedule time repeating Use time repeating to specify an execution time table for a periodic schedule. Use undo time to remove the execution time configuration for a schedule. Syntax time repeating [ at time [ date ] ] interval interval-time time repeating at time [ month-date [ month-day | last ] | week-day week-day&<1-7> ] undo time Default No execution time table is specified for a schedule.
The time at command, the time once command, and the time repeating command overwrite one another, whichever is configured most recently takes effect. Examples # Configure the device to execute schedule saveconfig once a hour from 8:00 a.m. on. system-view [Sysname] scheduler schedule saveconfig [Sysname-schedule-saveconfig] time repeating at 8:00 interval 60 # Configure the device to execute schedule saveconfig at 12:00 p.m. every day.
Usage guidelines If you install a transceiver module that has no vendor name, the system repeatedly outputs traps and logs to notify the user to replace the module. To continue to use such a transceiver module that is manufactured or customized by HP but has no vendor information, you can disable alarm traps so the system stops outputting alarm traps. Examples # Disable alarm traps for transceiver modules.
Tcl commands tclsh Use tclsh to enter Tcl configuration view from user view. Syntax tclsh Views User view Predefined user roles network-admin mdc-admin Usage guidelines In Tcl configuration view, you can execute the following commands: • All Tcl 8.5 commands. • Comware commands. In this case, the Tcl configuration view is equivalent to the user view. You can use Comware commands in Tcl configuration view in the same way they are used in user view.
Executing the quit command in Tcl configuration view terminates your connection to the device. Examples # Return from Tcl configuration view to user view.
MDC commands MDC commands for the default MDC This section describes the MDC commands that you can use after logging in to the default MDC (the physical device). MDC view is the view of a non-default MDC. You can enter MDC view by using the mdc command. You can also enter the view of the default MDC by using the mdc Admin command, but you can execute only display commands in the view of the default MDC. Unless otherwise stated, the term "MDC" in this section refers to a non-default MDC.
• The interface must not be the console port. The console port of the device belongs to the default MDC. You cannot assign them to a non-default MDC. • The interface must not be the management Ethernet interface. The physical management Ethernet interface of the device belongs to the default MDC and cannot be assigned to a non-default MDC. When a non-default MDC is created, the system automatically creates a virtual management Ethernet interface for the MDC.
mdc-admin mdc-operator Parameters name mdc-name: Specifies an MDC by its name, a case-insensitive string of 1 to 15 characters. If you do not specify this option, the command displays all MDCs. Examples # Display all MDCs. display mdc ID Name Status --------------------------------1 Admin active 2 sub1 inactive Table 45 Command output Field Description Status of the MDC: Status • • • • inactive—The MDC is stopped or not started yet.
Examples # Display the interfaces of all MDCs.
slot slot-number: Specifies a card. If you do not specify this option, the command displays the usage on all cards. (In standalone mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device. If you do not specify this option, the command displays the usage on all cards in the IRF fabric. (In IRF mode.) Examples # In standalone mode, display the CPU, disk space, and memory usage of all MDCs on all cards. display mdc resource Memory: Slot 2: Used 35.2MB, Free 1279.
Disk: Slot 0: flash:: Used 474.1MB, Free 17.9MB, Total 492.0MB: ID Name Quota(MB) Used(MB) Available(MB) -------------------------------------------------------------1 Admin 492.0 474.1 17.9 2 sub1 492.0 0.0 17.9 # In IRF mode, display the CPU, disk space, and memory space usage of all MDCs on all cards in the IRF fabric. display mdc resource Memory: Chassis 1 Slot 2: Used 39.6MB, Free 1275.0MB, Total 1314.
Disk: Chassis 1 Slot 0: flash:: Used 316.9MB, Free 175.1MB, Total 492.0MB: ID Name Quota(MB) Used(MB) Available(MB) -------------------------------------------------------------1 Admin 492.0 316.9 175.1 Table 46 Command output Field Description Memory Memory usage. CPU CPU usage. Disk Disk space usage. Slot n Usage on a card. (In standalone mode.) Chassis n Slot m Usage on a card of an IRF member device. (In IRF mode.) Weight CPU weight.
the time for each of the other two MDCs. Specifying the following weights for the MDCs has the same effect: 2, 2, and 1. You can use this command to change the CPU weight for a non-default MDC. The CPU weight for the default MDC cannot be changed. Examples # Set the CPU weight of MDC sub1 to 2. system-view [Sysname] mdc sub1 [Sysname-mdc-2-sub1] limit-resource cpu weight 2 limit-resource disk Use limit-resource disk to specify a disk space percentage for an MDC.
Examples # In standalone mode, allow MDC sub1 to use up to 30 percent of the disk space on the MPU in slot 0. system-view [Sysname] mdc sub1 [Sysname-mdc-2-sub1] limit-resource disk slot 0 ratio 30 # In IRF mode, allow MDC sub1 to use up to 30 percent of the disk space on the MPU in slot 0 on IRF member device 2.
system-view [Sysname] mdc sub1 [Sysname-MDC-2-sub1] limit-resource memory slot 0 ratio 30 # In IRF mode, allow MDC sub1 to use up to 30 percent of the memory space on the MPU in slot 0 on IRF member device 2. system-view [Sysname] mdc sub1 [Sysname-MDC-2-sub1] limit-resource memory chassis 2 slot 0 ratio 30 location Use location to assign an interface card to an MDC. Use undo location to reclaim an interface card assigned to an MDC.
system-view [Sysname] mdc Admin [Sysname-mdc-1-Admin] undo location slot 3 The configuration associated with the specified slot of MDC will be lost. Conti nue? [Y/N]:y [Sysname-mdc-1-Admin] quit [Sysname] mdc sub1 [Sysname-mdc-2-sub1] location slot 3 # In IRF mode, authorize MDC sub1 to use the interface card in slot 3 on IRF member device 2.
display mdc ID Name Status --------------------------------2 sub1 active Related commands switchback mdc Use mdc to create an MDC and enter MDC view. If the MDC already exists, you enter the MDC view directly. Use undo mdc to delete an MDC. Syntax mdc mdc-name [ id mdc-id ] undo mdc mdc-name Default There is a default MDC with the name Admin and the ID 1.
Related commands display mdc mdc start Use mdc start to start an MDC. Use undo mdc start to stop an MDC. Syntax mdc start undo mdc start Views MDC view Predefined user roles network-admin Usage guidelines After an MDC is started, administrators of the MDC can log in to the MDC for MDC configuration and maintenance. Stop an MDC with caution. Stopping an MDC interrupts all services on the MDC and logs out all users of the MDC.
Predefined user roles mdc-admin mdc-operator Examples # Display the ID, name, and status of the current MDC. display mdc ID Name Status ---------------------------2 sub1 active Table 47 Command output Field Description MDC status: Status • • • • inactive—The MDC is stopped or not started yet. starting—The device is executing the mdc start command to start the MDC. active—The MDC is operating correctly.
display mdc resource [ cpu | disk | memory ] [ slot slot-number ] In IRF mode: display mdc resource [ cpu | disk | memory ] [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles mdc-admin mdc-operator Parameters cpu: Displays the CPU usage. disk: Displays the disk space usage. memory: Displays the memory space usage. slot slot-number: Specifies a card. If you do not specify this option, the command displays the usage on all cards. (In standalone mode.
---------------------------------------------------------------2 sub1 1314.7 8.2 1277.7 Chassis 1 Slot 0: Used 711.3MB, Free 7161.3MB, Total 7872.6MB: ID Name Quota(MB) Used(MB) Available(MB) ---------------------------------------------------------------2 sub1 2361.8 50.6 Weight Usage(%) 2311.
Predefined user roles mdc-admin mdc-operator Usage guidelines You can use the switchback command to return to the default MDC only after you use the switchto command to log in to a non-default MDC. A user who logs in to a non-default MDC by using any other method (such as Telnet) cannot use the switchback command to access the default MDC. Examples # Return from the current MDC to the default MDC.
Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.
Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. [] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x | y | ... } Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.
Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, a unified wired-WLAN module, or the switching engine on a unified wired-WLAN switch. Represents an access point.
Index ABCDEFGHIJLMNOPQRSTUV debug,88 A delete,89 activation-key,13 delete,127 allocate interface,292 description,51 append,83 dir,89 ascii,84 dir,128 authentication-mode,14 disconnect,91 auto-execute command,16 display | { begin | exclude | include },2 B display | by-linenum,3 backup startup-configuration,143 display >,4 binary,85 display >>,5 boot-loader file,157 display alarm,223 boot-loader update,159 display asset-info,225 bootrom backup,160 display boot-loader,164 bootrom res
display install committed,172 F display install inactive,173 fabric load-sharing mode,260 display install ipe-info,175 feature,59 display install job,175 file prompt,130 display install log,176 fixdisk,131 display install package,177 flow-control,25 display install rollback,178 format,131 display install which,179 free ftp user,78 display issu rollback-timer,180 free ftp user-ip,79 display issu state,181 free ftp user-ip ipv6,79 display line,19 free line,26 display mdc,304 free user-i
issu load,203 Q issu rollback,209 quit,104 issu rollback-timer,210 quit,10 issu run switchover,211 R J reboot,268 job,263 reget,104 L rename,137 lcd,98 rename,105 reset,106 limit-resource cpu,298 reset asset-info,270 limit-resource disk,299 reset install log-history oldest,215 limit-resource memory,300 reset install rollback oldest,215 line,30 reset recycle-bin,137 line class,31 reset saved-configuration,149 location,301 reset scheduler logfile,272 lock,32 reset version-update-r
telnet server ipv6 dscp,46 startup saved-configuration,155 status,111 temperature-limit,282 stopbits,39 terminal type,46 super,71 tftp,116 super authentication-mode,72 tftp client ipv6 source,120 super password,73 tftp client source,117 switchback,307 tftp ipv6,118 switch-fabric removal-signal-suppression,279 tftp-server acl,121 switch-mode,279 tftp-server ipv6 acl,122 switchto mdc,302 time at,284 sysname,280 time once,285 system,112 time repeating,287 system-view,12 transceiver phon
