CLI Reference Guide for HP ProCurve MSM3xx / MSM4xx Access Points ProCurve MSM3xx 5400zl Switches ProCurve / MSM4xx Access Points Installation and Getting Started Guide CLI Reference Guide
HP ProCurve MSM3xx / MSM4xx Access Points CLI Reference Guide
Copyright and Disclaimer Notices © Copyright 2009 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. This document contains proprietary information, which is protected by copyright. No part of this document may be photocopied, reproduced, or translated into another language without the prior written consent of Hewlett-Packard.
Contents In this Contents section, new to 5.3.x contexts and commands are preceded with an asterisk “*” and formatted in green like this: * new context * new command 1 Introduction About this guide ...........................................................................................................1-2 Products covered...................................................................................................1-2 HP ProCurve Product Naming ........................................................
ping ..........................................................................................................................2-2 ps .............................................................................................................................2-3 quit...........................................................................................................................2-3 show license .........................................................................................................
Config context ..............................................................................................................2-9 certificate................................................................................................................2-9 certificate binding..................................................................................................2-9 certificate revocation ............................................................................................2-9 end ............
* clock use custom dst rules..............................................................................2-15 ntp protocol..........................................................................................................2-16 ntp server..............................................................................................................2-16 * clock custom dst begins ..................................................................................2-16 * clock custom dst begins format .......
snmp-server access interface gre ......................................................................2-23 snmp-server access wireless ..............................................................................2-24 snmp-server access port-2..................................................................................2-24 * snmp-server user ..............................................................................................2-24 * snmp-server notification receiver ...........................
firmware-update automatic................................................................................2-30 firmware-update start .........................................................................................2-31 firmware-update time..........................................................................................2-31 firmware-update uri ............................................................................................2-31 firmware-update weekday...............................
add wireless ip-qos profile..................................................................................2-39 delete wireless ip-qos profile all ........................................................................2-39 delete wireless ip-qos profile .............................................................................2-39 wireless link qos ..................................................................................................2-39 sensor discovery mode ..............................
Wireless context .........................................................................................................2-48 end .........................................................................................................................2-48 radio active ...........................................................................................................2-48 rts threshold .........................................................................................................
authentication server radius ..............................................................................2-56 dot1x authentication ...........................................................................................2-56 wpa-psk.................................................................................................................2-57 authentication server accounting radius stationid case.................................2-57 authentication server accounting radius stationid delimiter ......
security .................................................................................................................2-66 VLAN interface context .............................................................................................2-67 end .........................................................................................................................2-67 ip address..............................................................................................................
radius-server message-authenticator ................................................................2-74 radius-server name ..............................................................................................2-74 radius-server nasid ..............................................................................................2-75 radius-server timeout ..........................................................................................2-75 radius-server timeout ...............................
* user name ..........................................................................................................2-82 * SNMP notification receiver context......................................................................2-83 * community ........................................................................................................2-83 * end......................................................................................................................2-83 * port ......................
Alphabetical list of commands In this alphabetical list, new to 5.3.
ip http port 2-12 ip https port 2-12 ip name-server 2-33 ip name-server cache 2-33 ip name-server dynamic 2-34 ip name-server interception 2-34 ip name-server switch-on-servfail 2-34 ip name-server switch-over 2-34 ip route gateway 2-37 iperf 2-2 iperf 2-4 ip-qos profile 2-36 layer3 mobility 2-63 level 2-80 level 2-80 local mesh name 2-69 local mesh profile 2-11 location-aware group 2-65 logging destination 2-19 logging facility 2-79 logging host 2-79 logging prefix 2-79 mac authentication 2-61 mac authenti
snmp-server access port-2 2-24 snmp-server access wireless 2-24 snmp-server allow 2-20 snmp-server chassis-id 2-20 snmp-server contact 2-20 snmp-server heartbeat period 2-20 snmp-server location 2-20 * snmp-server notification receiver 2-24 snmp-server port 2-21 snmp-server readonly 2-21 snmp-server readwrite 2-21 snmp-server trap 2-21 snmp-server trap certificate-expired 2-12 snmp-server trap certificate-expires-soon 2-12 snmp-server trap community 2-21 snmp-server trap config-change 2-18 snmp-server trap
xviii
Chapter 1: Introduction 1 Introduction Contents About this guide ...........................................................................................................1-2 Products covered...................................................................................................1-2 HP ProCurve Product Naming .............................................................................1-2 Important terms ............................................................................................
Introduction About this guide About this guide This guide explains how to work with the Command Line Interface (CLI) on HP ProCurve Networking MSM3xx and MSM4xx APs.
Introduction About this guide Colubris name HP ProCurve name MAP-320 MultiService Access Point MSM310 Access Point MAP-320R MultiService Access Point MSM310-R Access Point MAP-330 MultiService Access Point MSM320 Access Point MAP-330R MultiService Access Point MSM320-R Access Point MAP-330 AP+Sensor MultiService Access Point MSM325 Access Point with Sensor MAP-625 MultiService Access Point MSM422 Access Point MAP-630 AP+Sensor MultiService Access Point MSM335 Access Point with Sensor WCB-20
Introduction HP ProCurve Networking support Example Description end [force] Items enclosed in square brackets are optional. You can either include them or not. Do not include the brackets. In this example you can either include “force” or omit it. firewall mode (high|low|none) Items enclosed in parenthesis and separated by a vertical line indicate a choice. Specify only one of the items. In this example, you must specify ’high’, ’low’, or ’none’.
Introduction Online documentation Online documentation For the latest documentation, visit the HP ProCurve Networking manuals Web page at: www.procurve.com/manuals. CLI support in autonomous and controlled modes An AP operates in either controlled mode or autonomous mode. Controlled mode Controlled mode is the factory default mode for all APs. When in controlled mode, an AP establishes a control channel with a service controller.
Introduction Configuring CLI support Configuring CLI support Using the AP management tool, open the page Management > CLI. Use this page to enable/ disable CLI support via an SSH or serial connection. A maximum of three concurrent CLI sessions are supported regardless of the connection type. The CLI supports SSH on the standard TCP port (22). Connectivity and login credentials for SSH connections use the same settings as defined for the management tool manager on the Management > Management tool page.
Introduction Entering strings SSH client support The following SSH clients have been tested with the CLI. Others may work as well: OpenSSH Tectia SecureCRT Putty Entering strings When entering a value that contains spaces, you must enclose it in quotation marks. For example, if the command syntax is: ssid you must specify one of the following: ssid ANameWithNoSpaces ssid "A name with spaces" Context hierarchy CLI commands are grouped into functional contexts.
Introduction Sample CLI session Sample CLI session This sample CLI session shows you how to set the wireless port to support 802.11a on channel 60 with medium distance between access points. (The CLI prompt is shown in bold.
Chapter 2: CLI commands 2 CLI commands
CLI commands View context Path: View This is the root of the command tree. arping Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 arping [ -AbDfhqUV] [ -c ] [ -w ] [ -s ] -I Pings a destination on a device interface using ARP packets. enable Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 enable Switches to the enable context. iperf Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 iperf -c host [-t time] Runs a performance throughput test.
CLI commands ps Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ps Displays all running processes. quit Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 quit Quits the CLI. show license Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show license (eula | gpl | other) Displays license information. show logging filtered Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show logging [filtered] Displays the system log.
CLI commands Enable context Path: View > Enable This context provides access to various utilities. reboot device Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 reboot device Restarts the system. show certificate Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show certificate Display current certificates. show certificate binding Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show certificate binding Display how the certificates are used.
CLI commands arping Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 arping [ -AbDfhqUV] [ -c ] [ -w ] [ -s ] -I Pings a destination on a device interface using ARP packets.
CLI commands show bridge forwarding Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show bridge forwarding Show bridge forwarding information. show dns cache Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show dns cache [] Show DNS cache entries. Specify a serial number to display detailed information. show interfaces Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show interfaces Show networking interfaces.
CLI commands show dot11 associations Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show dot11 associations Show all current wireless associations. show dot11 statistics client-traffic Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show dot11 statistics client-traffic Show current client matrix statistics. show local mesh Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show local mesh Show current local mesh interfaces.
CLI commands show all config Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show all config Print all configuration that applies to this device.
CLI commands Config context Path: View > Enable > Config This is the root context for all configuration commands. certificate Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 certificate (authority | local) [] Add a new certificate to the store, using the friendly name. certificate binding Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 certificate binding (web-management | html-auth | soap | eap) Assign a certificate to a service.
CLI commands reboot device Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 reboot device Restarts the system. show certificate Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show certificate Display current certificates. show certificate binding Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show certificate binding Display how the certificates are used.
CLI commands local mesh profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 local mesh link Switches to the specified local mesh link context. Parameters Number of the local mesh link to configure. interface gre Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 interface gre Switches to the specified GRE interface or creates a new GRE interface with the specified name. no interface gre Deletes the specified GRE interface.
CLI commands admin radius authentication server Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 admin radius authentication server Sets the authentication of administrator logins to occur using RADIUS. ip http port Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ip http port Sets the port number to use for HTTP access to the AP. Parameters Port number. Range: 1 - 65535.
CLI commands snmp-server trap web-fail Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap web-fail Send a trap each time an administrator login is refused. no snmp-server trap web-fail Do not send a trap each time an administrator login is refused. snmp-server trap web-login Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap web-login Send a trap each time an administrator login is accepted.
CLI commands world-mode dot11 country code Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 world-mode dot11 country code Specifies the country the AP is operating in. Parameters An ISO3166 three-letter country code. web access port-1 Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 web access port-1 Enables access to the management tool via Port-2. no web access port-1 Blocks access to the management tool via Port-2.
CLI commands no web access interface gre Disables access to the management tool via the specified GRE tunnel. web access local mesh Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 web access local mesh Enables access to the management tool via the specified local mesh. no web access local mesh Disables access to the management tool via the specified local mesh. clock Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 clock
CLI commands ntp protocol Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ntp protocol (ntp | sntp) Sets the network time protocol to use. ntp server Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ntp server Enable this option to have the AP periodically contact a network time server to update its internal clock. no ntp server Disables the use of a network time server.
CLI commands clock custom dst ends Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 clock custom dst end
CLI commands config-update automatic Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 config-update automatic Enables scheduled configuration restore or backup. no config-update automatic Disables scheduled configuration restore or backup. The AP can automatically download the configuration file from a local or remote URL (restore). It is also possible to upload the current configuration to a given URL (backup). Theses operations can be done at preset times.
CLI commands no snmp-server trap config-change Do not send this trap. snmp-server trap config-update Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap config-update Send a trap whenever the firmware is updated. no snmp-server trap config-update Do not send this trap. logging destination Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 logging destination Creates a new remote destination for syslog. no logging destination Deletes the specified syslog destination.
CLI commands snmp-server allow Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server allow / Adds a host to the list of IP address from which access to the SNMP interface is permitted. no snmp-server allow / Removes a host from the list of IP address from which access to the SNMP interface is permitted. Parameters IP address. Subnet mask in CIDR format. Specifies the number of bits in the mask.
CLI commands Parameters Location where the AP is installed. snmp-server port Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server port Sets the port the AP will use to respond to SNMP requests. Parameters SNMP port number. Range 1 - 65535. snmp-server readonly Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server readonly Sets the read-only community string. no snmp-server readonly Deletes the read-only community string.
CLI commands snmp-server trap destination Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap destination <[port number]> Add a new trap destination. no snmp-server trap destination [] Deletes the specified trap destination. Parameters Sets the IP address or domain name of the host that the AP will send traps to. <[port number]> SNMP port number. Range 1 - 65535.
CLI commands snmp-server version 2c Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server version 2c Enable version 2c no snmp-server version 2c Disable version 2c snmp-server version 3 Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server version 3 Enable version 3 no snmp-server version 3 Disable version 3 snmp-server access interface vlan Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server access interface vlan Enables access to SNMP via the specified VLAN.
CLI commands snmp-server access wireless Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server access wireless Enables SNMP access on the wireless port. no snmp-server access wireless Blocks SNMP access on the wireless port. snmp-server access port-2 Supported on: MSM310 MSM320 snmp-server access port-2 Enables SNMP access on the upstream port. no snmp-server access port-2 Blocks SNMP access on the upstream port.
CLI commands soap-server access interface vlan Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server access interface vlan Enables access to SOAP via this VLAN. no soap-server access interface vlan Disables access to SOAP via this VLAN. soap-server access port-1 Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server access port-1 Enables SOAP access on the downstream port. no soap-server access port-1 Blocks SOAP access on the downstream port.
CLI commands soap-server http authentication password Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server http authentication password Set the SOAP server HTTP authentication password. soap-server http authentication username Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server http authentication username Set the SOAP server HTTP authentication username.
CLI commands soap-server access wireless Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server access wireless Enables SOAP access on the wireless port. no soap-server access wireless Blocks SOAP access on the wireless port. soap-server access local mesh Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server access local mesh Enables access to the management tool via the specified local mesh.
CLI commands snmp-server trap new-association interval Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap new-association interval Interval, in minutes, between notifications. snmp-server trap vpn-connection Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap vpn-connection Send a trap when a user establishes a VPN connection with the AP. no snmp-server trap vpn-connection Do not send this trap.
CLI commands snmp-server trap wireless-deauthentication-fail Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap wireless-deauthentication-fail Send a trap when a wireless client station fails to deauthenticate from the AP. no snmp-server trap wireless-deauthentication-fail Do not send this trap.
CLI commands no snmp-server trap wireless-reassociation-success Do not send this trap. snmp-server trap syslog-matches Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap syslog-matches Send a trap when syslog messages matches a specified regular expression. no snmp-server trap syslog-matches Do not send this trap.
CLI commands (Different means older or newer. This enables you to return to a previous firmware version if required). Configuration settings are preserved during the update unless stated otherwise in the release notes for the firmware. However, all active connections will be terminated. Users will have to log in again after the AP restarts firmware-update start Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 firmware-update start Upload the firmware based on a specified URI.
CLI commands access-controller restrict location Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 access-controller restrict location (gateway | mac ) Identifies the access controller the AP will communicate with. Parameters gateway Use the default gateway as the service controller. mac Use the specified MAC address as the gateway. MAC address. Specify 6 pairs of hexadecimal numbers separated by colons, with the values a to f in lowercase.
CLI commands service-sensor retry Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 service-sensor retry Specify how many retries the service sensor will attempt when polling the target device. When the retry limit is reached, the radio on the AP is turned off. Parameters Number of retries. Range: 0 - 100.
CLI commands ip name-server dynamic Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ip name-server dynamic Enables dynamic assignment of DNS servers. no ip name-server dynamic Disables dynamic DNS assignment. ip name-server interception Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ip name-server interception Intercepts all DNS requests from users and relays them to configured servers. no ip name-server interception Process DNS requests addressed to this device only.
CLI commands snmp-server trap unauthorized-ap interval Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap unauthorized-ap interval If set to 0, then traps are only sent when a rogue access point is detected. If set to 0, the entire list of rogue access points is sent each time the interval expires. wireless-scan Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 wireless-scan Enables wireless neighborhood scanning. no wireless-scan Disables wireless neighborhood scanning.
CLI commands The service controller will only accept authentication/location-aware information from satellites that have a matching shared secret to its own. radius-server profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radius-server profile Creates a new RADIUS profile or switches to the RADIUS context with the specified profile name. no radius-server profile Deletes the specified RADIUS profile.
CLI commands bridge priority Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 bridge priority Sets the bridge priority for the spanning tree. The spanning tree uses the bridge ID to elect the root bridge and the designated bridges. The bridge ID is built with the MAC address of the bridge and the bridge priority. The first 2 most significant bytes are the bridge priority and the next 6 bytes are the MAC address.
CLI commands dot1x reauth Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 dot1x reauth Enable this option to force 802.1X client stations to reauthenticate. no dot1x reauth Disables 802.1X reauthentication. dot1x reauth period Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 dot1x reauth period (15m | 30m | 1h | 2h | 4h | 8h | 12h) Sets the 802.1X reauthentication interval. Client stations must reauthenticate when this interval expires.
CLI commands dynamic key interval Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 dynamic key interval (5m | 10m | 15m | 30m | 1h | 2h | 4h | 8h | 12h) Specifies how often (in minutes or hours) that the group (broadcast) key is changed for 802.1X and WPA. add wireless ip-qos profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 add wireless ip-qos profile Adds the specified profile to the list of IP QoS profiles in effect for the wireless links.
CLI commands The AP must be able to reach the RF Manager Server via a network connected to port 1 or port 2. For example, you should be able to ping the RF Manager Server IP address from the AP. If there are any firewalls between the AP and the RF Manager Server, then TCP and UDP ports 3851 must be open bidirectionally. If using the hostname option, an entry must be created on the network DNS server that points to the IP address of the RF Manager Server.
CLI commands Port-2 interface context Path: View > Enable > Config > Port-2 interface This context provides commands for configuring Port-2. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. duplex Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 duplex (auto | half | full) Sets the duplex mode on Port-2. Parameters auto Lets the AP automatically set duplex mode based on the type of equipment it is connected to.
CLI commands vlan compatibility mode Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 vlan compatibility mode When this option is enabled, the AP sends all management traffic AND all untagged traffic on both the default VLAN and untagged. no vlan compatibility mode Disable VLAN and untagged compatibility mode. vlan-management filter Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 vlan-management filter Restricts the default VLAN to carry management traffic only.
CLI commands Port-1 interface context Path: View > Enable > Config > Port-1 interface This context provides commands for configuring Port-1. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. duplex Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 duplex (auto | half | full) Sets the duplex mode on Port-1. Parameters auto Lets the AP automatically set duplex mode based on the type of equipment it is connected to.
CLI commands vlan compatibility mode Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 vlan compatibility mode When this option is enabled, the AP sends all management traffic AND all untagged traffic on both the default VLAN and untagged. no vlan compatibility mode Disable VLAN and untagged compatibility mode. vlan-management filter Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 vlan-management filter Restricts the default VLAN to carry management traffic only.
CLI commands WAN IP interface context Path: View > Enable > Config > WAN IP interface This context provides commands for configuring various IP-networking related settings. pppoe client user Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 pppoe client user Sets the PPPoE username and password. no pppoe client user Deletes the PPPoE username. Parameters The username assigned to you by your ISP.
CLI commands no ip default-gateway Deletes the default gateway IP address. Parameters
IP address. ip address dhcp client-id Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ip address dhcp client-id Specifies an ID to identify the AP to a DHCP server. This parameter is not required by all ISPs. no ip address dhcp client-id Deletes the specified DHCP client id. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context.CLI commands Parameters Maximum size (in bytes) of a PPPoE packet when transmitting. Range: 500 - 1500 bytes. pppoe unnumbered Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 pppoe unnumbered Enable unnumbered mode. no pppoe unnumbered Disable unnumbered mode. This feature is useful when the AP is connected to the Internet and NAT is not being used. Instead of assigning two IP addresses to the AP, one to the Internet port and one to the LAN port, both ports can share a single IP address.
CLI commands Wireless context Path: View > Enable > Config > Wireless This context provides commands for configuring the wireless network. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. radio active Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radio active Enables the radio. no radio active Disables the radio. rts threshold Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 rts threshold Sets the RTS threshold.
CLI commands Use this parameter to adjust the receiver sensitivity of the AP. This parameter should only be changed if: you have more than one wireless access point installed in your location you are experiencing throughput problems In all other cases, use the default setting of Large. If you have installed multiple APs, reducing the receiver sensitivity of the AP from its maximum will help to reduce the amount of crosstalk between the wireless stations to better support roaming clients.
CLI commands Note: The actual transmit power used may less than the value specified. The AP determines the power to used based on the settings you made for regulatory domain, wireless mode, and operating frequency. antenna bidirectionnal Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 antenna bidirectionnal (diversity | main | auxiliary) Sets the antenna to transmit and receive on. Select diversity to transmit and receive on both antennas.
CLI commands no dot11 automatic frequency Disable automatic frequency selection. dot11 automatic frequency period Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 dot11 automatic frequency period (disabled | 1h | 2h | 4h | 8h | 12h | 24h) Specify how often the frequency setting is re-evaluated when automatic frequency selection is enabled.
CLI commands This is a global setting that is useful when creating wireless links to remote sites. However, it also applies to all wireless connection made with the radio, not just for wireless links. Therefore, if you are also using the radio to serve local wireless client stations, adjusting this setting may lower the performance for clients with marginal signal strength or when interference is present.
CLI commands bandwidth Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 bandwidth Enables bandwidth control. no bandwidth Disables bandwidth control. bandwidth max Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 bandwidth max Set the maximum data rate on the wireless port in kbps. Parameters Maximum data rate. Range: 50 - 500000 kbps.
CLI commands Virtual AP context Path: View > Enable > Config > Virtual AP This context provides commands for configuring Virtual AP profiles (VAP (VSC)s). By default one profile exists with the name "". This is the default profile and cannot be deleted.
CLI commands ssid name Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ssid name Specifies the WLAN name (SSID) for the profile. vlan Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 vlan Assigns a VLAN ID to this VAP (VSC). no vlan Deletes the VLAN ID for this VAP (VSC). Parameters VLAN ID. Range: 1 - 4094. encryption key 1 Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 encryption key Sets WEP key 1. no encryption key Deletes WEP key 1.
CLI commands transmit key Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 transmit key Sets the key the AP will use to encrypt transmitted data. All four keys are used to decrypt received data. Parameters Transmit key number. Range: 1 -4. authentication server access controller Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 authentication server access controller Use the access controller to authenticate 802.1X or WPA logins.
CLI commands wpa-psk Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 wpa-psk Sets the WPA preshared key. no wpa-psk Deletes the WPA preshared key. Parameters Specify a key that is between 8 and 63 alphanumeric characters in length. It is recommended that the preshared key be at least 20 characters long, and be a mix of letters and numbers.
CLI commands no wireless filters mac Deletes the MAC address of the upstream device to send traffic to. wireless filters rule input Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 wireless filters rule input Adds a custom filter definition for incoming wireless traffic. Use this command to define custom security filters for incoming wireless traffic. Filters are specified using standard pcap syntax (http://www.tcpdump.org/tcpdump_man.html) with the addition of a few -specific placeholders.
CLI commands custom Lets you define custom security filters and address for the upstream device. Description The AP features an intelligent bridge which can apply security filters to safeguard the flow of wireless traffic. The filters limit both incoming and outgoing traffic as defined below, and force the AP to exchange traffic with a specific upstream device.
CLI commands mac-filters Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 mac-filters
Adds an address to the MAC filter list. no mac-filters Remove the specified address from the MAC filter list. Parameters MAC address. Specify 6 pairs of hexadecimal numbers separated by colons, with the values a to f in lowercase. For example: 00:00:00:0a:0f:01 Description This feature enables you to control access to the AP based on the MAC address of client stations.CLI commands no mandatory authentication MAC-based authentication is not mandatory. mac authentication radius profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 mac authentication radius profile Specifies the name of the RADIUS profile to use for MAC-based authentication. no mac authentication radius profile Do not use a RADIUS profile.
CLI commands delete ip filter Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 delete ip filter / Deletes the specified address from the IP filter list. If the list is empty, then all wireless-to-wired LAN traffic is permitted. Where: IP address. Subnet mask in CIDR format. Specifies the number of bits in the mask. delete ip filter all Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 delete ip filter all Deletes all addresses from the IP filter list.
CLI commands beacon transmit power Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 beacon transmit power Advertise the current transmit power setting in the beacon. no beacon transmit power Do not advertise the current transmit power setting in the beacon. data rate Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 data rate (a | b | g | bg | n) Enable the given data rate for a particular PHY type. no data rate (a | b | g | bg | n) Disable the given data rate for a particular PHY type.
CLI commands delete ip-qos profile all Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 delete ip-qos profile all Clears the list of IP QoS profiles currently in effect for this VAP (VSC). delete ip-qos profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 delete ip-qos profile Removes the specified profile from the list of IP QoS profiles in effect for this VAP (VSC). Name of an existing IP QoS profile currently in the profile list for this VAP (VSC).
CLI commands vap0 to vap3 Allows a specific priority level to be specified for all traffic on a VAP (VSC) profile. This enables client stations without a QoS mechanism to set traffic priority by connecting to the appropriate SSID. If you enable this priority mechanism, it takes precedence regardless of the priority mechanism supported by associated client stations.
CLI commands security Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 security (none | wep | 802.1x [wep | static-wep] | wpa (psk | radius) [ v1 | v2 ] ) Sets the current wireless security policy. Parameters 2-66 none No wireless security. wep This option enables support for wireless users with WEP client software. 802.1x This option enables support for wireless users with 802.1X client software. The AP supports 802.1x client software that uses EAP-TLS, EAP-TTLS, EAP-SIM, and PEAP.
CLI commands VLAN interface context Path: View > Enable > Config > Port-2 interface > VLAN interface View > Enable > Config > Port-1 interface > VLAN interface View > Enable > Config > Local mesh > VLAN interface This context provides commands for configuring Virtual LANs (VLANs). In this context, VLANs can be added or edited.
CLI commands vlan name Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 vlan name Change the name of this VLAN interface.
CLI commands Local mesh context Path: View > Enable > Config > Local mesh This context provides commands for configuring local meshes. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. active Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 active Activates the local mesh. no active Deactivates the local mesh.
CLI commands security Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 security Enables wireless security. no security Disables wireless security. security mode Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 security mode (wep | tkip | ccmp) Set the security mode. security psk Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 security psk Sets the PSK secret. no security psk Clears the PSK secret.
CLI commands accept forced links Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 accept forced links May accept master orders for selection. no accept forced links ignore master orders for selection. allowed downtime Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 allowed downtime Set the allowed downtime for a connection (or a link) to a peer. dynamic local mesh Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 dynamic local mesh Use dynamic local mesh.
CLI commands preserve master link Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 preserve master link Preserve master link across reboots. no preserve master link Do not preserve master link across reboots. promiscuous mode Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 promiscuous mode Slave: Accept any group. no promiscuous mode Slave: Use only the slave’s group.
CLI commands RADIUS context Path: View > Enable > Config > RADIUS This context provides commands for configuring RADIUS profiles. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. radius-server accounting port Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radius-server accounting port Specifies the port to use for RADIUS accounting. Parameters Accounting port number. Range: 1 - 65535.
CLI commands radius-server deadtime Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radius-server deadtime Sets the retry interval for access and accounting requests that time-out. If no reply is received within this interval, the AP switches between the primary and secondary RADIUS servers (if defined). If a reply is received after the interval expires, it is ignored. Parameters Retry interval. Range: 2 - 60 seconds.
CLI commands radius-server nasid Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radius-server nasid Sets the network access server ID you want to use for the AP. By default, the serial number of the AP is used. The AP includes the NAS-ID attribute in all packets that it sends to the RADIUS server. radius-server timeout Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radius-server timeout Activates RADIUS timeout. no radius-server timeout Disables RADIUS timeout.
CLI commands IP_QOS context Path: View > Enable > Config > IP_QOS This context provides commands for configuring IP QoS profiles. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Returns to a previous context. end-port Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end-port Specifies the end port to use for this IP QoS profile. Parameters End port number.
CLI commands Parameters Start port number.
CLI commands GRE interface context Path: View > Enable > Config > GRE interface Details of the GRE interface. end force Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end [force] Quits the GRE context. gre name Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 gre name Renames the current GRE interface. ip address Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ip address / Set the local tunnel IP address and mask.
CLI commands Syslog destination context Path: View > Enable > Config > Syslog destination This context provides commands for configuring Syslog destinations. active Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 active Enables logging to the current destination. no active Disables logging to the current destination.
CLI commands end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. level Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 level Enables filtering of the log file by severity level. no level Disables filtering of the log file by severity level. level Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 level (lower | higher) (debug | info | notice | warning | error | critical | alert | emergency) Defines the severity of messages that will be logged.
CLI commands no message Disables filtering of the log file message field. message Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 message (matches | notmatches) Use this filter to include log messages. Use a regular expression to define the match criteria for the log file message field. no message Disables filtering of the log file message field. process Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 process Enables filtering of the log file by process name.
CLI commands SNMP user context Path: View > Enable > Config > SNMP user This context provides commands for configuring SNMP user. access level Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 access level (read-only | read-write) Specifies the access level for this SNMP user. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Returns to a previous context. password Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 password Specifies the password for this SNMP user.
CLI commands SNMP notification receiver context Path: View > Enable > Config > SNMP notification receiver This context provides commands for configuring SNMP notification receiver. community Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 community Specifies the community for this SNMP notification receiver. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Returns to a previous context.
CLI commands 2-84
ProCurve 5400zl Switches Installation and Getting Startd Guide Technology for better business outcomes To learn more, visit www.hp.com/go/procurve/ © Copyright 2009 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
