HP ProCurve MSM310 Reference Manual
Access points cli
Hide thumbs
Also See for ProCurve MSM310:
- Release notes (13 pages) ,
- Quick start manual (6 pages) ,
- Management and configuration manual (210 pages)
Related Manuals for HP ProCurve MSM310
Summary of Contents for HP ProCurve MSM310
- Page 1 Reference Guide for HP ProCurve MSM3xx / MSM4xx Access Points CLI ProCurve 5400zl Switches HP ProCurve MSM3xx / MSM4xx Access Points CLI Installation and Getting Started Guide Reference Guide...
- Page 3 HP ProCurve MSM3xx / MSM4xx Access Points CLI Reference Guide...
- Page 4 Hewlett-Packard. connection with the furnishing, performance, or use of this material. Publication Number The only warranties for HP products and services are set forth 5998-0327 in the express warranty statements accompanying such May 2010 products and services.
-
Page 5: Table Of Contents
Important terms .....................1-2 Typographical conventions ..................1-3 Command syntax ....................1-3 Management tool ....................1-3 New in this release .......................1-3 HP ProCurve Networking support ................1-3 Before contacting support ................1-4 Online documentation ....................1-4 CLI support in autonomous and controlled modes ..........1-4 Controlled mode ....................1-4 Autonomous mode ....................1-5... - Page 6 show license ......................2-3 show logging filtered.....................2-3 top..........................2-3 traceroute .......................2-3 Enable context......................2-4 reboot device......................2-4 show certificate .....................2-4 show certificate binding ..................2-4 iperf .........................2-4 ping ..........................2-4 arping ........................2-5 arp..........................2-5 end ...........................2-5 quit...........................2-5 rcapture........................2-5 show arp .........................2-5 show bridge ......................2-6 show bridge forwarding..................2-6 show dns cache......................2-6 show interfaces......................2-6 show ip........................2-6...
- Page 7 certificate binding....................2-9 certificate revocation ....................2-9 end ...........................2-9 factory settings ......................2-9 interface ethernet ....................2-9 network-profile ....................2-10 reboot device......................2-10 show certificate ....................2-10 show certificate binding ..................2-10 show config factory.....................2-10 show network-profiles ..................2-10 interface ip......................2-10 interface wireless ....................2-11 local mesh profile ....................2-11 interface gre ......................2-11 virtual ap .......................2-11 cap-switch to ......................2-11 admin local authentication.................2-12...
- Page 8 clock auto adjust dst ...................2-16 clock timezone .....................2-16 clock use custom dst rules .................2-16 ntp protocol......................2-16 ntp server......................2-17 clock custom dst begins ..................2-17 clock custom dst begins format.................2-17 clock custom dst ends ..................2-17 clock custom dst ends format................2-18 ntp server......................2-18 ntp server failure trap ..................2-18 config-update automatic ..................2-18 config-update operation..................2-19...
- Page 9 snmp-server version 3 ..................2-24 snmp-server access interface vlan ..............2-24 snmp-server access local mesh................2-24 snmp-server access interface gre ..............2-24 snmp-server access wireless ................2-25 snmp-server access port-2 ..................2-25 snmp-server user ....................2-25 snmp-server notification receiver ..............2-25 soap-server ......................2-25 soap-server access interface vlan..............2-26 soap-server access port-1 ...................2-26 soap-server access port-2 ...................2-26 soap-server allow....................2-26 soap-server http authentication.................2-26...
- Page 10 snmp-server trap syslog-matches regex ............2-31 snmp-server trap syslog-severity level..............2-31 snmp-server trap network-trace ................2-31 firmware-update automatic................2-31 firmware-update start ..................2-32 firmware-update time..................2-32 firmware-update uri ....................2-32 firmware-update weekday..................2-32 snmp-server trap firmware-update..............2-32 access-controller restrict location..............2-33 service-sensor ......................2-33 service-sensor ......................2-33 service-sensor poll....................2-33 service-sensor retry .....................2-34 service-sensor timeout..................2-34 ip name-server......................2-34 ip name-server cache ..................2-34...
- Page 11 lldp run........................2-39 show lldp config....................2-39 show lldp info local-device.................2-39 show lldp info remote-device................2-39 show lldp stats .....................2-39 lldp local-mesh .....................2-40 discovery protocol....................2-40 discovery protocol device-id................2-40 service controller discovery interface internet-port ........2-40 service controller discovery interface lan-port ..........2-40 bridge priority ......................2-41 bridge protocol ieee ....................2-41 bridge protocol ieee vlan ..................2-41 ip route gateway ....................2-41...
- Page 12 show mac lockout ....................2-46 supplicant 802dot1x ....................2-46 supplicant anonymous identity................2-46 supplicant eap ......................2-46 Port 2 port interface context ..................2-47 end .........................2-47 duplex ........................2-47 speed ........................2-47 vlan ........................2-47 vlan compatibility mode ..................2-48 vlan-management filter ..................2-48 interface vlan......................2-48 Port 1 port interface context ..................2-49 end .........................2-49 duplex ........................2-49 speed ........................2-49...
- Page 13 transmit power.....................2-55 antenna bidirectionnal ..................2-56 antenna gain ......................2-56 autochannel skip....................2-56 beacon interval ....................2-56 dot11 automatic frequency.................2-56 dot11 automatic frequency period ..............2-57 dot11 automatic frequency time ................2-57 dot11 automatic transmit-power ...............2-57 dot11 automatic transmit-power period ............2-57 maximum clients ....................2-57 multicast rate .......................2-57 station distance....................2-58 dot11 mode ......................2-58 spectralink view....................2-58...
- Page 14 authentication server accounting radius stationid delimiter ......2-63 wireless filters......................2-63 wireless filters mac .....................2-63 wireless filters rule input..................2-63 wireless filters rule output .................2-64 wireless filters type .....................2-64 mac-filters local ....................2-65 mac-filters......................2-65 mac-filters mode ....................2-66 mac authentication accounting .................2-66 mac authentication accounting radius profile ..........2-66 mac authentication radius profile ..............2-66 mac authentication radius stationid case............2-66 mac authentication radius stationid delimiter..........2-67...
- Page 15 active ........................2-73 interface ........................2-73 local mesh name ....................2-73 remote mac......................2-73 security .........................2-74 security mode.......................2-74 security psk ......................2-74 security wep ......................2-74 speed ........................2-74 interface vlan......................2-74 accept forced links ....................2-75 allowed downtime ....................2-75 dynamic local mesh.....................2-75 dynamic mode......................2-75 initial discovery time...................2-75 mesh id........................2-76 minimum snr ......................2-76 preserve master link....................2-76 promiscuous mode ....................2-76...
- Page 16 priority ........................2-81 profile name ......................2-81 protocol.........................2-81 start-port .......................2-81 GRE interface context ....................2-83 end force .......................2-83 gre name .......................2-83 ip address......................2-83 peer ip address.....................2-83 remote ip address ....................2-83 Syslog context ......................2-84 active ........................2-84 logging facility......................2-84 logging host ......................2-84 logging prefix .......................2-84 name ........................2-84 end .........................2-85 level ........................2-85...
- Page 17 Network profile context ....................2-89 end .........................2-89 name ........................2-89 vlan ........................2-89 vlan ........................2-89 LLDP agent context ....................2-90 admin-status ......................2-90 basic-tlv-enable ....................2-90 basic-tlv-enable port_desc..................2-90 basic-tlv-enable system_cap................2-90 basic-tlv-enable system_descr ................2-90 basic-tlv-enable system_name ................2-91 dot3-tlv-enable .....................2-91 end .........................2-91 ip-addr-enable.......................2-91 med-application-type...................2-91 medtlv-enable capabilities..................2-91 medtlv-enable location-id ...................2-92 medtlv-enable network-policy ................2-92 medtlv-enable poe ....................2-92...
- Page 19 Alphabetical list of commands accept forced links ............2-75 data rate .................2-68 access controller shared secret ......... 2-36 delete ip filter all............2-67 access level..............2-87 delete ip filter ..............2-67 access-controller restrict location......2-33 delete ip-qos profile all..........2-69 active ................2-68 delete ip-qos profile............2-69 active ................
- Page 20 ip address mode............2-72 ntp protocol ..............2-16 ip address..............2-51 ntp server failure trap..........2-18 ip address..............2-72 ntp server ..............2-17 ip address..............2-83 ntp server ..............2-18 ip default-gateway ............2-51 password ............... 2-87 ip filters................. 2-68 peer ip address .............
- Page 21 sflow sampling ............. 2-46 snmp-server trap new-association ......2-28 sflow ................2-45 snmp-server trap snmp-authentication ..... 2-23 show all config ............... 2-8 snmp-server trap syslog-matches regex....2-31 show arp ................. 2-5 snmp-server trap syslog-matches....... 2-31 show bridge forwarding..........2-6 snmp-server trap syslog-severity level ...... 2-31 show bridge ..............
- Page 22 vlan compatibility mode ..........2-50 vlan ................2-47 vlan-management filter ..........2-48 vlan-management filter ..........2-50 web access interface gre ..........2-15 web access interface vlan........... 2-15 web access local mesh..........2-15 web access port-1 ............2-14 web access port-2 ............2-14 web access wireless ............
- Page 23 About this guide ......................1-2 Products covered....................1-2 Important terms .....................1-2 Typographical conventions ..................1-3 New in this release .......................1-3 HP ProCurve Networking support ................1-3 Online documentation ....................1-4 CLI support in autonomous and controlled modes ..........1-4 Controlled mode ....................1-4 Autonomous mode ....................1-5 Configuring CLI support....................1-5 Entering strings ......................1-6...
-
Page 24: About This Guide
Introduction About this guide About this guide This guide explains how to work with the Command Line Interface (CLI) on HP ProCurve Networking MSM3xx and MSM4xx APs. Products covered This guide covers the following products: Part number Japan Model MSM310 Access Point... -
Page 25: Typographical Conventions
Chapter 2: CLI commands. HP ProCurve Networking support The Customer Support/Warranty booklet included with your product and the HP ProCurve Networking Web site, www.hp.com/go/procurve/support, provide information on the support services offer by HP ProCurve Networking. -
Page 26: Before Contacting Support
Introduction Online documentation Before contacting support To make the support process most efficient, before calling your networking dealer or HP Support, you first should collect the following information: Collect this information Where to find it Product identification. On the rear of the product. -
Page 27: Autonomous Mode
Introduction Configuring CLI support Autonomous mode When in autonomous mode, the AP operates as a stand-alone unit. Autonomous mode supports all CLI commands. You can also configure and manage the AP using the AP management tool, SNMP, CLI, or SOAP. Configuring CLI support CLI support is configured using the management tool on the AP. -
Page 28: Entering Strings
Introduction Entering strings Local manager account The login username and password are the same as those defined for the local manager account. If this account is disabled, the last known username and password for this account are used. Administrative user authentication settings The login username and password use the same settings (Local and/or RADIUS) as defined for the manager account under Administrative user authentication. -
Page 29: Context Hierarchy
Introduction Context hierarchy Context hierarchy CLI commands are grouped into functional contexts. The following table shows the context hierarchy and the command used to switch from the parent context. Context hierarchy Command to switch from parent context View context (This is the root context. No command is needed.) Enable context enable Config context... - Page 30 Introduction Sample CLI session...
- Page 31 Chapter 2: CLI commands CLI commands Contents View context .........................2-2 Enable context......................2-4 Config context ......................2-9 Port 2 port interface context ..................2-47 Port 1 port interface context ..................2-49 WAN IP interface context..................2-51 Wireless context ......................2-54 Virtual AP context ......................2-60 VLAN interface context .....................2-72 Local mesh context ....................2-73 RADIUS profiles context...................2-78 IP QOS context ......................2-81...
-
Page 32: View Context
CLI commands View context View context Path: View This is the root of the command tree. arping Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 arping [ -AbDfhqUV] [ -c <count>] [ -w <deadline>] [ -s <source>] -I <interface> <destination> Pings a destination on a device interface using ARP packets. enable Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 enable... -
Page 33: Quit
CLI commands View context Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Displays all running processes. quit Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 quit Quits the CLI. show license Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 show license (eula | gpl | other) Displays license information. -
Page 34: Enable Context
CLI commands Enable context Enable context Path: View > Enable This context provides access to various utilities. reboot device Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 reboot device Restarts the system. show certificate Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 show certificate Displays current certificates. -
Page 35: Arping
CLI commands Enable context arping Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 arping [ -AbDfhqUV] [ -c <count>] [ -w <deadline>] [ -s <source>] -I <interface> <destination> Pings a destination on a device interface using ARP packets. Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 arp [-evn] [-H <type>] [-i if] ?- [<hostname>] arp [-v] [-i if] -d <hostname>... -
Page 36: Show Bridge
CLI commands Enable context show bridge Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 show bridge Shows bridge information. show bridge forwarding Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 show bridge forwarding Shows bridge forwarding information. show dns cache Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 show dns cache [<serial>] Shows DNS cache entries. -
Page 37: Factory Reset
CLI commands Enable context disassociate wireless client _ Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 disassociate wireless client [<client_macaddress>] Terminates the connection for the specified wireless client. factory reset Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 factory reset Resets the unit to factory default settings. switch operational mode Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 switch operational mode... -
Page 38: Show Client Log
CLI commands Enable context show client log Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 show client log [<macaddr>] Displays the client station log. Enter the MAC address to display more details for a specific client station. show discrete pin Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 show discrete pin Displays the state of the discrete pin. -
Page 39: Config Context
CLI commands Config context Config context Path: View > Enable > Config This is the root context for all configuration commands. certificate Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 certificate (authority | local) <uri> <certname> [<password>] Adds a new certificate to the store, using the specified friendly name. certificate binding Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 certificate binding (web-management | html-auth | soap | eap) <certname>... -
Page 40: Reboot Device
CLI commands Config context network-profile Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 network-profile <name> Add/Edits the specified network profile or create a new profile with the specified name. no network-profile <name> Deletes the network profile with the specified name. reboot device Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 reboot device Restarts the system. -
Page 41: Interface Wireless
CLI commands Config context interface wireless Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 interface wireless <interface number> Switches to the specified wireless interface context. local mesh profile Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 local mesh profile <name> Switches to the specified local mesh link context. Parameters Number of the local mesh profile to configure. -
Page 42: Admin Local Authentication
CLI commands Config context admin local authentication Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 admin local authentication Sets the authentication of manager logins to occur using the local account. no admin local authentication Disables administrator authentication via the local account. admin radius authentication Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 admin radius authentication... -
Page 43: Snmp-Server Trap Certificate-Expires-Soon
CLI commands Config context no snmp-server trap certificate-expired Do not send a trap when the SSL certificate has expired. snmp-server trap certificate-expires-soon Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server trap certificate-expires-soon Send a trap when the SSL certificate is about to expire. A trap is sent every 12 hours starting 15 days before the certificate expires. -
Page 44: Web Admin Kickout
CLI commands Config context New manager password. New password must be between 6 and 16 <password> printable characters in length and contain at least 4 different characters. Passwords are case sensitive. Space characters and double quotes cannot be used. Passwords must also conform to the Security policy that is in effect. -
Page 45: Web Access Wireless
CLI commands Config context no web access port-2 Blocks access to the management tool via Port 1. web access wireless Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 web access wireless Enables access to the management tool via the wireless port. no web access wireless Blocks access to the management tool via the wireless port. -
Page 46: Clock
CLI commands Config context The login username and password use the same settings (Local and/or <like-web> RADIUS) as defined for the manager account in the web interface. clock Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 clock <time> <date> Sets the system time and date. Parameters Time as hh:mm:ss. -
Page 47: Ntp Server
CLI commands Config context ntp server Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 ntp server Enable this option to have the AP periodically contact a network time server to update its internal clock. no ntp server Disables the use of a network time server. clock custom dst begins Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 clock custom dst begins <day>... -
Page 48: Clock Custom Dst Ends Format
CLI commands Config context Month. Valid values are: "jan", "feb", "mar", "apr", "may", "jun", "jul", "aug", <month> "sep", "oct", "nov", "dec". Time as hh:mm[:ss]. For example: 15:44:00. <time> If a parameter does not apply to the configured DST rule format, simply set this parameter to any valid value. -
Page 49: Config-Update Operation
CLI commands Config context The AP can automatically download the configuration file from a local or remote URL (restore). It is also possible to upload the current configuration to a given URL (backup). Theses operations can be done at preset times. config-update operation Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 config-update operation (restore | backup) -
Page 50: Snmp-Server Trap Config-Update
CLI commands Config context snmp-server trap config-update Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server trap config-update Send a trap whenever the firmware is updated. no snmp-server trap config-update Do not send this trap. logging destination Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 logging destination <name>... -
Page 51: Snmp-Server Allow
CLI commands Config context snmp-server allow Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server allow <ip address>/<mask> Adds a host to the list of IP address from which access to the SNMP interface is permitted. no snmp-server allow <ip address>/<mask> Removes a host from the list of IP address from which access to the SNMP interface is permitted. -
Page 52: Snmp-Server Port
CLI commands Config context Parameters Location where the AP is installed. <name> snmp-server port Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server port <port number> Sets the port the AP will use to respond to SNMP requests. Parameters SNMP port number. Range 1 - 65535. <port number>... -
Page 53: Snmp-Server Trap Destination
CLI commands Config context snmp-server trap destination Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server trap destination <host> <[port number]> Add a new trap destination. no snmp-server trap destination <host> [<port>] Deletes the specified trap destination. Parameters Sets the IP address or domain name of the host that the AP will send traps <host>... -
Page 54: Snmp-Server Version 2C
CLI commands Config context snmp-server version 2c Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server version 2c Enable support for SNMP version 2c. no snmp-server version 2c Disable support for SNMP version 2c. snmp-server version 3 Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server version 3 Enable support for SNMP version 3. -
Page 55: Snmp-Server Access Wireless
CLI commands Config context snmp-server access wireless Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server access wireless Enables SNMP access on the wireless port. no snmp-server access wireless Blocks SNMP access on the wireless port. snmp-server access port-2 Supported on: MSM320 MSM310 snmp-server access port-2 Enables SNMP access on the upstream port. -
Page 56: Soap-Server Access Interface Vlan
CLI commands Config context soap-server access interface vlan Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 soap-server access interface vlan <name> Enables access to SOAP via this VLAN. no soap-server access interface vlan <name> Disables access to SOAP via this VLAN. soap-server access port-1 Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 soap-server access port-1... -
Page 57: Soap-Server Http Authentication Password
CLI commands Config context soap-server http authentication password Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 soap-server http authentication password Set the SOAP server HTTP authentication password. soap-server http authentication username Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 soap-server http authentication username Set the SOAP server HTTP authentication username. -
Page 58: Soap-Server Access Wireless
CLI commands Config context soap-server access wireless Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 soap-server access wireless Enables SOAP access on the wireless port. no soap-server access wireless Blocks SOAP access on the wireless port. soap-server access local mesh Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 soap-server access local mesh <profile>... -
Page 59: Snmp-Server Trap New-Association Interval
CLI commands Config context snmp-server trap new-association interval Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server trap new-association interval <number> Interval, in minutes, between notifications. snmp-server trap vpn-connection Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server trap vpn-connection Send a trap when a user establishes a VPN connection with the AP. no snmp-server trap vpn-connection Do not send this trap. -
Page 60: Snmp-Server Trap Wireless-Deauthentication-Fail
CLI commands Config context snmp-server trap wireless-deauthentication-fail Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server trap wireless-deauthentication-fail Send a trap when a wireless client station fails to deauthenticate from the AP. no snmp-server trap wireless-deauthentication-fail Do not send this trap. snmp-server trap wireless-deauthentication-success Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server trap wireless-deauthentication-success... -
Page 61: Snmp-Server Trap Syslog-Matches
CLI commands Config context no snmp-server trap wireless-reassociation-success Do not send this trap. snmp-server trap syslog-matches Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server trap syslog-matches Send a trap when syslog messages matches a specified regular expression. no snmp-server trap syslog-matches Do not send this trap. -
Page 62: Firmware-Update Start
CLI commands Config context (Different means older or newer. This enables you to return to a previous firmware version if required). Configuration settings are preserved during the update unless stated otherwise in the release notes for the firmware. However, all active connections will be terminated. Customers will have to log in again after the AP restarts firmware-update start Supported on: MSM422 MSM320 MSM410 MSM310 MSM335... -
Page 63: Access-Controller Restrict Location
CLI commands Config context access-controller restrict location Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 access-controller restrict location (gateway | mac <mac address>) Identifies the access controller the AP will communicate with. Parameters Use the default gateway as the access controller. gateway Use the specified MAC address as the gateway. -
Page 64: Service-Sensor Retry
CLI commands Config context service-sensor retry Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 service-sensor retry <retries> Specify how many retries the service sensor will attempt when polling the target device. When the retry limit is reached, the radio on the AP is turned off. Parameters Number of retries. -
Page 65: Ip Name-Server Dynamic
CLI commands Config context ip name-server dynamic Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 ip name-server dynamic Enables dynamic assignment of DNS servers. no ip name-server dynamic Disables dynamic DNS assignment. ip name-server interception Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 ip name-server interception Intercept all DNS requests from users and relay them to configured servers. -
Page 66: Snmp-Server Trap Unauthorized-Ap Interval
CLI commands Config context snmp-server trap unauthorized-ap interval Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 snmp-server trap unauthorized-ap interval <number> If set to 0, then traps are only sent when a rogue access point is detected. If set to >0, the entire list of rogue access points is sent each time the interval expires. -
Page 67: Radius-Server Profile
CLI commands Config context The controller will only accept authentication/location-aware information from HP APs that have a matching shared secret to its own. radius-server profile Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 radius-server profile <name> Creates a new RADIUS profile or switches to the RADIUS context with the specified profile name. - Page 68 CLI commands Config context lldp dynamic-name refresh-time Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 lldp dynamic-name refresh-time <time> Sets the interval at which dynamic names for controlled APs are updated. lldp dynamic-name user-string Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 lldp dynamic-name user-string <name>...
- Page 69 CLI commands Config context lldp med-location elin-addr Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 lldp med-location elin-addr <elin> Sets the Emergency Call Services ELIN as described, for example, by NENA TID 07-501. lldp refresh-interval Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 lldp refresh-interval <time>...
-
Page 70: Discovery Protocol
Disable LLDP support on local mesh links. discovery protocol Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 discovery protocol Enables broadcast of HP device information for interoperability with CDP-enabled networking hardware. no discovery protocol Disable broadcast of HP device information. discovery protocol device-id Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 discovery protocol device-id <name>... -
Page 71: Bridge Priority
CLI commands Config context bridge priority Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 bridge priority <number> Sets the bridge priority for the spanning tree. The spanning tree uses the bridge ID to elect the root bridge and the designated bridges. The bridge ID is built with the MAC address of the bridge and the bridge priority. -
Page 72: Dot1X Reauth
CLI commands Config context dot1x reauth Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 dot1x reauth Enable this option to force 802.1X client stations to reauthenticate. no dot1x reauth Disables 802.1X reauthentication. dot1x reauth period Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 dot1x reauth period (15m | 30m | 1h | 2h | 4h | 8h | 12h) Sets the 802.1X reauthentication interval. -
Page 73: Dynamic Key Interval
CLI commands Config context dynamic key interval Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 dynamic key interval (5m | 10m | 15m | 30m | 1h | 2h | 4h | 8h | 12h) Specifies how often (in minutes or hours) that the group (broadcast) key is changed for 802.1X and WPA. -
Page 74: Sensor Network Detector
Specify the Server ID of the RF Manager Server to connect to. Set the Server ID to 0 to have the AP send a discovery request to all active HP RF Manager Servers. The AP will connect to the first server that responds to the discovery request. - Page 75 CLI commands Config context sflow Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 sflow Enables sFlow. no sflow Disables sFlow. show sflow agent Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 show sflow agent Displays read-only sFlow agent information. show sflow controller stats Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 show sflow controller stats Displays read-only sFlow controller statistics.
- Page 76 CLI commands Config context sflow sampling Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 sflow <receiver> sampling <interface> <rate> Specifies the number of packets between samples. For example, if set to 5, approximately every fifth packet will be sampled (There is some jitter introduced purposefully into the sample collection).
-
Page 77: Port 2 Port Interface Context
CLI commands Port 2 port interface context Port 2 port interface context Path: View > Enable > Config > Port 2 port interface Use this context to configure the Port 2 port. Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Switches to parent context. duplex Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 duplex (auto | half | full) -
Page 78: Vlan Compatibility Mode
CLI commands Port 2 port interface context vlan compatibility mode Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 vlan compatibility mode When this option is enabled, the AP sends all management traffic AND all untagged traffic on both the default VLAN and untagged. no vlan compatibility mode Disables VLAN and untagged compatibility mode. -
Page 79: Port 1 Port Interface Context
CLI commands Port 1 port interface context Port 1 port interface context Path: View > Enable > Config > Port 1 port interface Use this context to configure the Port 1 port. Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Switches to parent context. duplex Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 duplex (auto | half | full) -
Page 80: Vlan Compatibility Mode
CLI commands Port 1 port interface context vlan compatibility mode Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 vlan compatibility mode When this option is enabled, the AP sends all management traffic AND all untagged traffic on both the default VLAN and untagged. no vlan compatibility mode Disable VLAN and untagged compatibility mode. -
Page 81: Wan Ip Interface Context
CLI commands WAN IP interface context WAN IP interface context Path: View > Enable > Config > WAN IP interface Use this context to configure various IP-networking related settings on the Internet port. pppoe client user Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 pppoe client user <username>... -
Page 82: Ip Address Dhcp Client-Id
CLI commands WAN IP interface context no ip default-gateway Deletes the default gateway IP address. Parameters IP address. <address> ip address dhcp client-id Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 ip address dhcp client-id <id> Specifies an ID to identify the AP to a DHCP server. This parameter is not required by all ISPs. no ip address dhcp client-id Deletes the specified DHCP client id. -
Page 83: Pppoe Unnumbered
CLI commands WAN IP interface context Parameters Maximum size (in bytes) of a PPPoE packet when transmitting. Range: 500 <bytes> - 1500 bytes. pppoe unnumbered Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 pppoe unnumbered Enable unnumbered mode. no pppoe unnumbered Disable unnumbered mode. -
Page 84: Wireless Context
CLI commands Wireless context Wireless context Path: View > Enable > Config > Wireless Use this context to configure wireless settings. Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Switches to parent context. radio active Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 radio active Enables the radio. -
Page 85: Dot11
CLI commands Wireless context Use this parameter to adjust the receiver sensitivity of the AP. This parameter should only be changed if: you have more than one wireless access point installed in your location you are experiencing throughput problems In all other cases, use the default setting of Large. -
Page 86: Antenna Bidirectionnal
CLI commands Wireless context antenna bidirectionnal Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 antenna bidirectionnal (diversity | main | auxiliary) Sets the antenna to transmit and receive on. Select diversity to transmit and receive on both antennas. Parameters In this mode both antennas are used to transmit and receive. The AP diversity supports both transmit and receive diversity. -
Page 87: Dot11 Automatic Frequency Period
CLI commands Wireless context dot11 automatic frequency period Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 dot11 automatic frequency period (disabled | 1h | 2h | 4h | 8h | 12h | 24h) Specify how often the frequency setting is re-evaluated when automatic frequency selection is enabled. -
Page 88: Station Distance
CLI commands Wireless context station distance Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 station distance (0km | 5km | 10km | 15km | 20km | 25km | 30km | 35km) Fine tunes internal timeout settings to account for the distance that wireless links span. For normal operation, the AP is optimized for links of less than 1 km. -
Page 89: Dot11N Mimo
CLI commands Wireless context dot11n mimo Supported on: MSM422 MSM410 dot11n mimo (3x3 | 2x2 | 2x3) Sets the MIMO mode for 802.11n. dot11n multicast rate Supported on: MSM422 MSM410 dot11n multicast rate <rate> Sets the multicast rate for use with 802.11n networks. bandwidth Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 bandwidth... -
Page 90: Virtual Ap Context
Path: View > Enable > Config > Virtual AP Use this context to configure VSC profiles (formerly called VAPs). By default, one VSC profile exists with the name "HP". This is the default profile and cannot be deleted. virtual ap name Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 virtual ap name <name>... -
Page 91: Vlan
CLI commands Virtual AP context vlan Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 vlan <id> Assigns a VLAN ID to this VAP (VSC). no vlan Deletes the VLAN ID for this VAP (VSC). Parameters VLAN ID. Range: 1 - 4094. <id>... -
Page 92: Authentication Server Access Controller
CLI commands Virtual AP context authentication server access controller Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 authentication server access controller Use the access controller to authenticate 802.1X or WPA logins. authentication server accounting Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 authentication server accounting Enables RADIUS accounting for this VSC (VAP). -
Page 93: Authentication Server Accounting Radius Stationid Case
(http://www.tcpdump.org/tcpdump_man.html) with the addition of a few HP-specific placeholders. These placeholders can be used to refer to specific MAC addresses and are expanded by the AP when the filter is activated. Once expanded, the filter must respect the pcap syntax. -
Page 94: Wireless Filters Rule Output
(http://www.tcpdump.org/tcpdump_man.html) with the addition of a few HP-specific placeholders. These placeholders can be used to refer to specific MAC addresses and are expanded by the AP when the filter is activated. Once expanded, the filter must respect the pcap syntax. -
Page 95: Mac-Filters Local
All other traffic is blocked. This includes NetBIOS traffic regardless of its source/destination address. TTPS traffic not addressed to the AP (or upstream device) is also blocked, which means wireless client stations cannot access the management tool on other HP products. Default filters for outgoing wireless traffic Applies to traffic sent from the AP to wireless client stations. -
Page 96: Mac-Filters Mode
CLI commands Virtual AP context Description This feature enables you to control access to the AP based on the MAC address of client stations. You can either block access or allow access, depending on your requirements. When both this option and the MAC-based authentication options are enabled, the following applies: if a user’s MAC address does not appear in the MAC filtering list, then MAC-based authentication takes place for that user. -
Page 97: Mac Authentication Radius Stationid Delimiter
CLI commands Virtual AP context mac authentication radius stationid delimiter Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 mac authentication radius stationid delimiter (null | colon | dash | dot | space | comma | under) Specifies the one-character delimiter that will be used to format both the calling station ID and the called station ID attributes in RADIUS packets. -
Page 98: Ip Filters
CLI commands Virtual AP context ip filters Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 ip filters Activates the IP filter which enables you to block wireless-to-wired LAN traffic on this profile based on its destination address. no ip filters Disables the IP filter for this profile. active Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 active... -
Page 99: Add Ip-Qos Profile
CLI commands Virtual AP context add ip-qos profile Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 add ip-qos profile <name> Adds the specified profile to the list of IP QoS profiles in effect for this VSC (VAP). Name of an existing IP QoS profile. <profile-name>... -
Page 100: Upstream Diffserv Tagging
CLI commands Virtual AP context Traffic from 802.1p client stations is classified based on the VLAN priority 802.1p field present within the VLAN header. When this mechanism is selected, the AP will advertise WME capabilities, enabling WME clients to associate and take advantage of them. -
Page 101: Security
CLI commands Virtual AP context Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Switches to parent context. security Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 security (none | wep | 802.1X [wep] | wpa (psk | radius) [ v1 | v2 ] ) Sets the current wireless security policy. -
Page 102: Vlan Interface Context
CLI commands VLAN interface context VLAN interface context Path: View > Enable > Config > Port 2 port interface > VLAN interface View > Enable > Config > Port 1 port interface > VLAN interface View > Enable > Config > Local mesh > VLAN interface Use this context to configure VLANs. -
Page 103: Local Mesh Context
CLI commands Local mesh context Local mesh context Path: View > Enable > Config > Local mesh Use this context to configure local mesh links. Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Switches to parent context. active Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 active Activates the local mesh profile. -
Page 104: Security
CLI commands Local mesh context security Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 security Enables wireless security. no security Disables wireless security. security mode Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 security mode (wep | tkip | ccmp) Set the security mode. security psk Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 security psk <secret>... -
Page 105: Accept Forced Links
CLI commands Local mesh context accept forced links Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 accept forced links (Alternate Master, Slave only) When enabled, the node will accept any connection forced from a master and it will change its mesh ID in order to use the master mesh ID. no accept forced links Ignore forced links. -
Page 106: Minimum Snr
CLI commands Local mesh context The goal of this setting is to delay discovery until all the nodes in the surrounding area have had time to startup, making the identification of the best master more accurate. If this period is too short, a slave may connect to the first master it finds, not necessarily the best. -
Page 107: Promiscuous Mode Startup Delay
CLI commands Local mesh context After loading new firmware or a new configuration file, the node waits 30 seconds before restarting if a downstream link was established with another node in promiscuous mode. This provides downstream nodes with additional time during which to download new firmware and configuration files, thus improving the total convergence time of the entire network. -
Page 108: Radius Profiles Context
CLI commands RADIUS profiles context RADIUS profiles context Path: View > Enable > Config > RADIUS profiles Use this context to define RADIUS profiles. These profiles are used to establish a connection with RADIUS servers. Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Switches to parent context. -
Page 109: Radius-Server Deadtime
CLI commands RADIUS profiles context radius-server deadtime Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 radius-server deadtime <seconds> Sets the retry interval for access and accounting requests that time-out. If no reply is received within this interval, the AP switches between the primary and secondary RADIUS servers (if defined). -
Page 110: Radius-Server Nasid
CLI commands RADIUS profiles context radius-server nasid Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 radius-server nasid <id> Sets the network access server ID you want to use for the AP. By default, the serial number of the AP is used. The AP includes the NAS-ID attribute in all packets that it sends to the RADIUS server. -
Page 111: Ip Qos Context
CLI commands IP QOS context IP QOS context Path: View > Enable > Config > IP QOS Use this context to configure IP QoS profiles. Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Returns to a previous context. end-port Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 end-port <number>... - Page 112 CLI commands IP QOS context Parameters Start port number. Range: 0 - 65535 <number> 2-82...
-
Page 113: Gre Interface Context
CLI commands GRE interface context GRE interface context Path: View > Enable > Config > GRE interface Use this context to configure GRE tunnels. end force Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 end [force] Quits the GRE context. gre name Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 gre name <name>... -
Page 114: Syslog Context
CLI commands Syslog context Syslog context Path: View > Enable > Config > Syslog Use this context to define syslog settings. active Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 active Enables logging to the current destination. no active Disables logging to the current destination. logging facility Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 logging facility (local0 | local1 | local2 | local3 | local4 | local5 | local6 |... -
Page 115: Level
CLI commands Syslog context Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Switches to parent context. level Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 level Enables filtering of the log file by severity level. no level Disables filtering of the log file by severity level. level Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 level (lower | higher) (debug | info | notice | warning | error | critical |... -
Page 116: Message
CLI commands Syslog context no message Disables filtering of the log file message field. message Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 message (matches | notmatches) <regex> Use this filter to include log messages. Use a regular expression to define the match criteria for the log file message field. -
Page 117: Snmp User Context
CLI commands SNMP user context SNMP user context Path: View > Enable > Config > SNMP user Use this context to define settings for SNMP users. access level Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 access level (read-only | read-write) Specifies the access level use for this SNMP user. -
Page 118: Snmp Notification Receiver Context
CLI commands SNMP notification receiver context SNMP notification receiver context Path: View > Enable > Config > SNMP notification receiver Use this context to configure SNMP notification receivers. community Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 community <community> Specifies the community for this SNMP notification receiver. Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Returns to a previous context. -
Page 119: Network Profile Context
CLI commands Network profile context Network profile context Path: View > Enable > Config > Network profile Use this context to configure network profiles. Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 Go to previous context. name Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 name <string>... -
Page 120: Lldp Agent Context
CLI commands LLDP agent context LLDP agent context Path: View > Enable > Config > LLDP agent Use this context to configure LLDP settings for controllers and APs. admin-status Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 admin-status (tx_rx | txonly | rxonly | disable) Enables LLDP agent functionality on this port. - Page 121 CLI commands LLDP agent context basic-tlv-enable system_name Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 basic-tlv-enable system_name Enables the system name TLV. no basic-tlv-enable system_name Disables the system name TLV. dot3-tlv-enable Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 dot3-tlv-enable Enables the 803dot3 MAC/PHY TLV. no dot3-tlv-enable Disables the 803.3 MAC/PHY TLV.
- Page 122 CLI commands LLDP agent context medtlv-enable location-id Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 medtlv-enable location-id Enables the MED Location TLV. no medtlv-enable location-id Disables the MED Location TLV. medtlv-enable network-policy Supported on: MSM422 MSM320 MSM410 MSM310 MSM335 medtlv-enable network-policy Enables the MED Network Policy TLV.
- Page 124 To learn more, visit www.hp.com/go/procurve/ © Copyright 2010 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services.