HP MSR Series Command Reference Manual
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

HP MSR Router Series
Fundamentals
Command Reference(V7)
Part number: 5998-6354
Software version: CMW710-R0106
Document version: 6PW101-20140807

Advertisement

Table of Contents
loading

Summary of Contents for HP MSR Series

  • Page 1 HP MSR Router Series Fundamentals Command Reference(V7) Part number: 5998-6354 Software version: CMW710-R0106 Document version: 6PW101-20140807...
  • Page 2: Legal And Notice Information

    The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an...
  • Page 3: Table Of Contents

    Contents Legal and notice information ·········································································································································i   Basic CLI commands ···················································································································································· 1   command-alias enable ············································································································································· 1   command-alias mapping ········································································································································· 1   display | { begin | exclude | include } ················································································································· 2   display | by-linenum ················································································································································ 3  ...
  • Page 4 escape-key ······························································································································································ 52   flow-control ····························································································································································· 53   free line ··································································································································································· 54   free user-interface ·················································································································································· 56   history-command max-size ··································································································································· 58   idle-timeout ····························································································································································· 59   ip alias ···································································································································································· 60   line ·········································································································································································· 61   line class ································································································································································· 62  ...
  • Page 5 bye ·········································································································································································· 99   cd ············································································································································································ 99   cdup ······································································································································································ 100   close ······································································································································································ 101   debug ··································································································································································· 101   delete ···································································································································································· 102   dir ·········································································································································································· 103   disconnect ···························································································································································· 104   display ftp client source ······································································································································ 105   ftp ·········································································································································································· 105  ...
  • Page 6 md5sum ································································································································································ 146   mkdir ····································································································································································· 146   more ······································································································································································ 147   mount ···································································································································································· 148   move ····································································································································································· 149   pwd ······································································································································································· 149   rename ·································································································································································· 150   reset recycle-bin ··················································································································································· 150   rmdir ····································································································································································· 151   sha256sum ·························································································································································· 151  ...
  • Page 7 ipv6 address ························································································································································ 194   ipv6 gateway ······················································································································································· 195   mkdir ····································································································································································· 195   more ······································································································································································ 196   move ····································································································································································· 196   ping ······································································································································································· 197   ping ipv6 ······························································································································································ 198   pwd ······································································································································································· 199   quit ········································································································································································ 199   reboot ··································································································································································· 199  ...
  • Page 8 Tcl commands ·························································································································································· 268   tclsh ······································································································································································· 268   tclquit ···································································································································································· 268   Support and other resources ·································································································································· 270   Contacting HP ······························································································································································ 270   Subscription service ············································································································································ 270   Related information ······················································································································································ 270   Documents ···························································································································································· 270   Websites ······························································································································································· 270  ...
  • Page 9: Basic Cli Commands

    Basic CLI commands command-alias enable Use command-alias enable to enable the command keyword alias function. Use undo command-alias enable to disable the command keyword alias function. Syntax command-alias enable undo command-alias enable Default The command keyword alias function is disabled. Views System view Predefined user roles...
  • Page 10: Display | { Begin | Exclude | Include

    Views System view Predefined user roles network-admin Parameters cmdkey: Specifies the first keyword of a non-undo command or the second keyword of an undo command. You must enter the keyword in its complete form. alias: Specifies an alias for the keyword. It must be different from the first keyword of any non-undo command and the second keyword of any undo command.
  • Page 11: Display | By-Linenum

    include: Displays all lines matching the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Usage guidelines Use the | { begin | exclude | include } regular-expression option with a display command to filter the command output.
  • Page 12: Display

    Untagged ports: GigabitEthernet2/1/0 # Display the first line that begins with "user-group" in the running configuration and all of the following lines. <Sysname> display current-configuration | by-linenum begin user-group 114: user-group system 115- 116- return display > Use display > to save the output from a display command to a separate file. Syntax display command >...
  • Page 13: Display

    display >> Use display >> to append the output from a display command to the end of a file. Syntax display command >> filename Views Any view Predefined user roles network-admin network-operator Parameters command: Specifies the keywords and arguments of a display command. To display available keywords and arguments, enter display ?.
  • Page 14: Display Command-Alias

    GigabitEthernet2/1/1 display command-alias Use display command-alias to display the status of the command keyword alias function and the configured command keyword alias. Syntax display command-alias Views Any view Predefined user roles network-admin network-operator Examples # Display command keyword alias information. <Sysname>...
  • Page 15: Display History-Command All

    Examples # Display all commands saved in the command history buffer for the current CLI session. <Sysname> display history-command system-view vlan 2 quit Related commands history-command max-size display history-command all Use display history-command all to display all commands saved in the command history buffer for all CLI sessions.
  • Page 16 Views Any view Predefined user roles network-admin network-operator Examples # Display hotkey information. <Sysname> display hotkey ----------------- Hotkeys ----------------- -Defined command hotkeys- CTRL_G display current-configuration CTRL_L display ip routing-table CTRL_O undo debugging all -Undefined command hotkeys- CTRL_T NULL CTRL_U NULL -System-reserved hotkeys- CTRL_A Move the cursor to the beginning of the line.
  • Page 17: Hotkey

    hotkey Use hotkey to assign a command to a configurable hotkey. Use undo hotkey to restore the default. Syntax hotkey { CTRL_G | CTRL_L | CTRL_O | CTRL_T | CTRL_U } command undo hotkey { CTRL_G | CTRL_L | CTRL_O | CTRL_T | CTRL_U } Default Ctrl_G: display current-configuration (display the running configuration).
  • Page 18: Return

    Syntax quit Views Any view Predefined user roles network-admin network-operator Usage guidelines Executing this command in user view disconnects you from the device. Examples # Return from GigabitEthernet 2/1/0 interface view to system view and then to user view. [Sysname-GigabitEthernet2/1/0] quit [Sysname] quit <Sysname>...
  • Page 19: System-View

    Default The default varies by settings of the screen-length command in user line view. The following are default settings for the screen-length command: Pausing between screens of output. • Displaying up to 24 lines on a screen. • Views User view Predefined user roles network-admin Usage guidelines...
  • Page 20: Rbac Commands

    RBAC commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. description Use description to configure a description for a user role.
  • Page 21 Predefined user roles network-admin network-operator Parameters name role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. Usage guidelines If you do not specify a user role name, the command displays information about all user roles, including the predefined user roles.
  • Page 22 Role: network-operator Description: Predefined network operator role has access to all read commands on the device VLAN policy: permit (default) Interface policy: permit (default) VPN instance policy: permit (default) ------------------------------------------------------------------- Rule Perm Type Scope Entity ------------------------------------------------------------------- sys-1 permit command display * sys-2 permit command...
  • Page 23 Table 1 Command output Field Description User role name. Predefined user role names: Role • network-admin. • network-operator. • level-n (where n represents an integer in the range of 0 to 15). Description User role description you have configured for easy identification. VLAN policy of the user role: •...
  • Page 24: Display Role Feature

    Field Description Command string, feature name, feature group, or XML element specified in the user role rule: Entity • An en dash (–) represents any feature. • An asterisk (*) represents zero or more characters. Related commands role display role feature Use display role feature to display features available in the system.
  • Page 25 display environment * display fan * display power * display rps * display current-configuration * display saved-configuration * display startup display this * display version clock datetime * reboot * save * startup saved-configuration * system-view ; temperature-limit * system-view ; sysname * system-view ;...
  • Page 26: Display Role Feature-Group

    Field Description All the commands that start with domain in system view and all the system-view ; domain * commands in ISP domain view. system-view ; header * All the commands that start with header in system view. system-view ; aaa * All the commands that start with aaa in system view.
  • Page 27 Parameters name feature-group-name: Specifies a feature group. The feature-group-name argument represents the feature group name, a case-sensitive string of 1 to 31 characters. If you do not specify a feature group, the command displays information about all feature groups. verbose: Displays the commands of each feature in the specified feature group. If you do not specify a feature group, this keyword enables displaying the commands of each feature in every feature group.
  • Page 28 reset igmp-snooping * debugging igmp-snooping * display debugging igmp-snooping * system-view ; probe * ; debugging system internal igmp-snooping * Feature: mld-snooping (MLD-Snooping related commands) system-view ; mld-snooping system-view ; vlan * ; mld-snooping * system-view ; interface * ; mld-snooping * display mld-snooping * reset mld-snooping * debugging mld-snooping *...
  • Page 29: Feature

    feature Use feature to add a feature to a feature group. Use undo feature to remove a feature from a feature group. Syntax feature feature-name undo feature feature-name Default A user-defined feature group does not have any features. Views Feature group view Predefined user roles network-admin Parameters...
  • Page 30: Permit Interface

    Views User role view Predefined user roles network-admin Usage guidelines The interface policy deny command denies the access of a user role to any interface. To restrict the interface access of a user role to only a set of interfaces: Use interface policy deny to deny access to any interface.
  • Page 31 undo permit interface [ interface-list ] Default No permitted interfaces are configured in user role interface policy view. A user role cannot access any interface after you configure the interface policy deny command. Views User role interface policy view Predefined user roles network-admin Parameters interface interface-list: Specifies a space-separated list of up to 10 interface items.
  • Page 32: Permit Vlan

    # Verify that you can enter GigabitEthernet 2/1/0 interface view. <Sysname> system-view [Sysname] interface gigabitethernet 2/1/0 [Sysname-GigabitEthernet2/1/0] # Verify that you can assign GigabitEthernet 2/1/4 to VLAN 10. In this example, the user role can access any VLAN because the default VLAN policy of the user role is used. <Sysname>...
  • Page 33: Permit Vpn-Instance

    Specify the VLANs in feature commands. • You can repeat the permit vlan command to add permitted VLANs to a user role VLAN policy. The undo permit vlan command removes the entire list of permitted VLANs if you do not specify any VLANs.
  • Page 34 Default No permitted VPNs are configured in user role VPN instance policy. Views User role VPN instance policy view Predefined user roles network-admin Parameters vpn-instance-name&<1- 1 0>: Specifies a space-separated list of up to 10 MPLS L3VPN names. Each name is a case-sensitive string of 1 to 31 characters. Usage guidelines To permit a user role to access an MPLS L3VPN after you configure the vpn-instance policy deny command, you must add the VPN to the permitted VPN list of the policy.
  • Page 35: Role

    # Verify that you cannot create the VPN vpn2 or enter the VPN instance view. <Sysname> system-view [Sysname] ip vpn-instance vpn2 Permission denied. Related commands • display role role • • vpn-instance policy deny role Use role to create a user role and enter user role view. If the user role has been created, you directly enter the user role view.
  • Page 36: Role Default-Role Enable

    Related commands display role • interface policy deny • • rule vlan policy deny • vpn-instance policy deny • role default-role enable Use role default-role enable to enable the default user role feature for remote AAA users. Use undo role default-role enable to restore the default. Syntax role default-role enable undo role default-role enable...
  • Page 37: Rule

    undo role feature-group name feature-group-name Default Two user role feature groups, L2 and L3, are created. Views System view Predefined user roles network-admin Parameters name feature-group-name: Specifies a feature group name. The feature-group-name argument is a case-sensitive string of 1 to 31 characters. Usage guidelines The L2 feature group includes all Layer 2 feature commands, and the L3 feature group includes all Layer 3 feature commands.
  • Page 38 Predefined user roles network-admin Parameters number: Specifies a rule number in the range of 1 to 256. deny: Denies access to any specified commands or XML elements. permit: Permits access to any specified commands or XML elements. command command-string: Specifies a command string. The command-string argument is a case-sensitive string of 1 to 128 characters, including the following characters: The wildcard asterisk (*).
  • Page 39 Rule 1 that permits the ping command. Rule 2 that permits the tracert command. Rule 3 that denies the ping command. If a predefined user role rule and a user-defined user role rule conflict, the user-defined user role rule • takes effect.
  • Page 40 Rule Guidelines You can specify a keyword by entering the first few characters of the keyword. Any command that starts with this character string matches the rule. Keyword abbreviation is allowed. For example, "rule 1 deny command dis mpls lsp protocol static asbr" denies access to the commands display mpls lsp protocol static asbr and display mpls lsp protocol static-cr asbr.
  • Page 41: Super

    super Use super to obtain another user role without reconnecting to the device. Syntax super [ rolename ] Views User view Predefined user roles network-admin Parameters rolename: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system.
  • Page 42: Super Password

    undo super authentication-mode Default Local password authentication applies. Views System view Predefined user roles network-admin Parameters local: Enables local password authentication. scheme: Enables remote AAA authentication. Usage guidelines The authentication setting applies only to AUX, VTY, and TTY users. A console user can obtain the user role without authentication.
  • Page 43 Syntax In non-FIPS mode: super password [ role rolename ] [ { hash | simple } password ] undo super password [ role rolename ] In FIPS mode: super password [ role rolename ] undo super password [ role rolename ] Default No password is set for a user role.
  • Page 44: Vlan Policy Deny

    Updating user information. Please wait..Related commands super authentication-mode vlan policy deny Use vlan policy deny to enter the user role VLAN policy view. Use undo vlan policy deny to restore the default user role VLAN policy. Syntax vlan policy deny undo vlan policy deny Default A user role does not have access to any VLAN.
  • Page 45: Vpn-Instance Policy Deny

    Related commands display role • permit vlan • • role vpn-instance policy deny Use vpn-instance policy deny to enter user role VPN instance policy view. Use undo vpn-instance policy deny to restore the default user role VPN instance policy. Syntax vpn-instance policy deny undo vpn-instance policy deny Default...
  • Page 46 [Sysname-role-role1-vpnpolicy] permit vpn-instance vpn2 Related commands • display role permit vpn-instance • • role...
  • Page 47: Login Management Commands

    Login management commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. Some login management commands are available in both user line view and user line class view: A setting in user line view is applied only to the user line.
  • Page 48: Authentication-Mode

    If the setting in user line view is the default but the setting in user line class view is not, the setting • in user line class view takes effect. To display the shortcut key you have defined, use the display current-configuration | include activation-key command.
  • Page 49: Auto-Execute Command

    Predefined user roles network-admin Parameters none: Disables authentication. password: Performs local password authentication. scheme: Performs AAA authentication. For more information about AAA, see Security Configuration Guide. Usage guidelines When the authentication mode is none, any user can log in without authentication. To improve device security, use the password or scheme authentication mode.
  • Page 50 Use auto-execute command to specify a command that is automatically executed when a user logs in through the current user line. Use undo auto-execute command to remove the configuration. Syntax auto-execute command command undo auto-execute command Default Command auto-execution is disabled. Views User line view, user line class view Predefined user roles...
  • Page 51: Command Accounting

    * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ****************************************************************************** <Sysname> Trying 192.168.1.41 ... Press CTRL+K to abort Connected to 192.168.1.41 ... ****************************************************************************** * Copyright (c) 2004-2014 Hewlett-Packard Development Company, L.P. * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed.
  • Page 52: Command Authorization

    Examples # Enable command accounting for user line VTY 0. <Sysname> system-view [Sysname] line vty 0 [Sysname-line-vty0] command accounting Related commands command authorization • accounting command (Security Command Reference) • command authorization Use command authorization to enable command authorization. Use undo command authorization to restore the default. Syntax command authorization undo command authorization...
  • Page 53: Databits

    databits Use databits to specify the number of data bits for each character. Use undo databits to restore the default. Syntax databits { 5 | 6 | 7 | 8 } undo databits Default Eight data bits are used for each character. Views User line view Predefined user roles...
  • Page 54 Parameters number1: Specifies the absolute number of a user line. The following matrix shows the value ranges for the number1 argument: Hardware Value range MSR1000 0 to 144 • MSR2003: 0 to 144 MSR2000 • MSR2004-24/MSR2004-48: 0 to 240 MSR3000 0 to 240 MSR4000 0 to 501...
  • Page 55 Hardware Value range aux: 0 to 2 console: 0 to 2 MSR4000 tty: 1 to 432 vty: 0 to 63 summary: Displays summary information about user lines. If you do not specify this keyword, the detailed information is displayed. Examples # Display user line information.
  • Page 56: Display Telnet Client

    Table 5 Command output Fields Description The number indicates the absolute number of the first user line of the user line class, starting from 0. The status indicates whether the user lines of the user line class are being used (X for unused and U for used). number:status For example, if "2:UXXX X"...
  • Page 57 Parameters number1: Specifies the absolute number of a user line. The following matrix shows the value ranges for the number1 argument: Hardware Value range MSR1000 0 to 144 • MSR2003: 0 to 144 MSR2000 • MSR2004-24/MSR2004-48: 0 to 240 MSR3000 0 to 240 MSR4000 0 to 501...
  • Page 58 Usage guidelines This command is an older version reserved for backward compatibility purposes. It has the same functionality and output as the display line command. HP recommends that you use the display line command. Examples # Display user line information.
  • Page 59: Display Users

    Table 7 Command output Fields Description The number indicates the absolute number of the first user line of the user line class, starting from 0. The status indicates whether the user lines of the user line class are being used (X for unused and U for used). number:status For example, if "2:UXXX X"...
  • Page 60: Escape-Key

    For more information, see the description of the command. HP recommends that you use a key sequence as the shortcut key. If you define a single character as the shortcut key, pressing the key while a command is being executed stops the command. If no command is being executed, the result depends on the following situations: •...
  • Page 61: Flow-Control

    If you Telnet to another device and manage the remote device, pressing the key does not do • anything. You can execute this command multiple times, but only the most recent configuration takes effect. To view the current shortcut key definition, use the display current-configuration command. This command is available in both user line view and user line class view: If the setting in user line view is not the default, the setting in user line view takes effect.
  • Page 62: Free Line

    Predefined user roles network-admin Parameters hardware: Performs hardware flow control. none: Disables flow control. software: Performs software flow control. direction1, direction2: Specifies the flow control direction, in or out. If in is specified, the local device listens to flow control information from the remote device. If out is specified, the local device sends flow control information to the remote device.
  • Page 63 Predefined user roles network-admin Parameters number1: Specifies the absolute number of a user line. The following matrix shows the value ranges for the number1 argument: Hardware Value range MSR1000 0 to 144 • MSR2003: 0 to 144 MSR2000 • MSR2004-24/MSR2004-48: 0 to 240 MSR3000 0 to 240 MSR4000...
  • Page 64: Free User-Interface

    Hardware Value range aux: 0 MSR3000 tty: 1 to 176 vty: 0 to 63 aux: 0 to 2 console: 0 to 2 MSR4000 tty: 1 to 432 vty: 0 to 63 Usage guidelines This command does not release the line you are using. Examples # Release user line VTY 1: Display online users.
  • Page 65 The following matrix shows the value ranges for the number1 argument: Hardware Value range MSR1000 0 to 144 • MSR2003: 0 to 144 MSR2000 • MSR2004-24/MSR2004-48: 0 to 240 MSR3000 0 to 240 MSR4000 0 to 501 aux: Specifies the AUX line. console: Specifies the console line.
  • Page 66: History-Command Max-Size

    This command does not release the line you are using. This command is an older version reserved for backward compatibility purposes. It has the same functionality and output as the free line command. HP recommends you use the free line command. Examples # Release user line VTY 1: Display online users.
  • Page 67: Idle-Timeout

    Parameters size-value: Specifies the maximum number of history commands the buffer can store, in the range of 0 to 256. Usage guidelines Each user line uses a separate command history buffer to save commands successfully executed by its user. The size of the buffer determines how many history commands the buffer can store. To view stored history commands on your user line, press the up or down arrow key, or execute the display history-command command.
  • Page 68: Ip Alias

    Setting the idle timeout to 0 disables the idle timeout function. This command is available in both user line view and user line class view: If the setting in user line view is not the default, the setting in user line view takes effect. •...
  • Page 69: Line

    redirect listen-port • line Use line to enter one or multiple user line views. Syntax line { first-number1 [ last-number1 ] | { aux | console | tty | vty } first-number2 [ last-number2 ] } Views System view Predefined user roles network-admin Parameters first-number1: Specifies the absolute number of the first user line.
  • Page 70: Line Class

    Hardware Value range aux: 0 MSR1000 tty: 1 to 80 vty: 0 to 63 • MSR2003: aux: 0 tty: 1 to 80 vty: 0 to 63 MSR2000 • MSR2004-24/MSR2004-48: aux: 0 tty: 1 to 176 vty: 0 to 63 aux: 0 MSR3000 tty: 1 to 176 vty: 0 to 63...
  • Page 71 Views System view Predefined user roles network-admin Parameters aux: Specifies the AUX line class view. console: Specifies the console line class view. tty: Specifies the TTY line class view. vty: Specifies the VTY line class view. The following matrix shows the keyword and router compatibility: Keyword MSR1000 MSR2000...
  • Page 72: Lock

    user-role • Examples # Set the user connection timeout to 15 minutes in VTY line class view. <Sysname> system-view [Sysname] line class vty [Sysname-line-class-vty] idle-timeout 15 # In console line class view, configure character s as the shortcut key for starting a terminal session. <Sysname>...
  • Page 73: Parity

    Predefined user roles network-admin Usage guidelines This command is not supported in FIPS mode. After executing the lock command, enter the password for unlocking the user line and confirm the password by entering it again. To unlock the user line, press Enter and enter the correct password. Examples # Lock the current user line and then unlock it.
  • Page 74: Protocol Inbound

    none: Disables parity check. odd: Performs odd parity check. space: Performs space parity check. Usage guidelines This command is not supported in VTY line view. The configuration terminal and the device must be configured with the same parity check mode to communicate.
  • Page 75: Redirect Disconnect

    Usage guidelines This configuration is effective only for a user who logs in through the user line after the configuration is completed. Before configuring a user line to support SSH, set the authentication mode to scheme for the user line. For more information, see authentication-mode.
  • Page 76: Redirect Listen-Port

    redirect enable undo redirect enable Default Telnet redirect is disabled for a user line. Views AUX line view, TTY line view Predefined user roles network-admin Usage guidelines To allow users connected to the device (Device A) to Telnet to a second device (Device B) without knowing the IP address of Device B, do the following: Connect Device A to Device B through its AUX port, asynchronous ports, or serial ports operating in asynchronous mode.
  • Page 77: Redirect Passthrough

    Predefined user roles network-admin Parameters port-number: Specifies the number of the Telnet redirect listening port, in the range of 2000 to 50000. Usage guidelines The device redirects only Telnet connection requests destined for the Telnet redirect listening port. Examples # Set the Telnet redirect listening port number to 3000. <Sysname>...
  • Page 78: Redirect Timeout

    Use redirect refuse-negotiation to disable Telnet option negotiation for Telnet redirect. Use undo redirect refuse-negotiation to enable Telnet option negotiation for Telnet redirect. Syntax redirect refuse-negotiation undo redirect refuse-negotiation Default Telnet option negotiation is enabled. Views AUX line view, TTY line view Predefined user roles network-admin Usage guidelines...
  • Page 79: Screen-Length

    Usage guidelines If no data is received from a Telnet client before the timer expires, the user line terminates the redirected connection. Examples # Set the idle timeout for the redirected Telnet connection to 200 seconds. <Sysname> system-view [Sysname] user-line tty 1 [Sysname-line-tty1] redirect timeout 200 Related commands redirect enable...
  • Page 80: Send

    Examples # Set the maximum number of lines to be displayed on a screen to 30 for user line Console 0. <Sysname> system-view [Sysname] line console 0 [Sysname-line-console0] screen-length 30 Related commands screen-length disable send Use send to send messages to user lines. Syntax send { all | number1 | { aux | console | tty | vty } number2 } Views...
  • Page 81 vty: Specifies the VTY line. number2: Specifies the relative number of a user line. The following matrix shows the value ranges for the number2 argument: Hardware Value range aux: 0 MSR1000 tty: 1 to 80 vty: 0 to 63 • MSR2003: aux: 0 tty: 1 to 80...
  • Page 82: Set Authentication Password

    set authentication password Use set authentication password to set a password for local password authentication. Use undo set authentication password to remove the password. Syntax set authentication password { hash | simple } password undo set authentication password Default No password is set for local password authentication. Views User line view, user line class view Predefined user roles...
  • Page 83: Shell

    shell Use shell to enable the terminal service for a user line. Use undo shell to disable the terminal service for a user line. Syntax shell undo shell Default The terminal service is enabled on all user lines. Views User line view, user line class view Predefined user roles network-admin Usage guidelines...
  • Page 84: Stopbit-Error Intolerance

    Views User line view Predefined user roles network-admin Parameters speed-value: Transmission rate in bps. Supported transmission rates vary by device model and configuration environment. The transmission rates for asynchronous serial interfaces might include: 300 bps. • 600 bps. • 1200 bps. •...
  • Page 85: Stopbits

    Predefined user roles network-admin Usage guidelines This command is not supported in VTY line view Examples # Enable stop bits detection for user line AUX 0. <Sysname> system-view [Sysname] line aux 0 [Sysname-line-aux0] stopbit-error intolerance stopbits Use stopbits to specify the number of stop bits for a character. Use undo stopbits to restore the default.
  • Page 86: Telnet

    telnet Use telnet to Telnet to a host in an IPv4 network. Syntax telnet remote-host [ service-port ] [ vpn-instance vpn-instance-name ] [ source { interface interface-type interface-number | ip ip-address } ] [ dscp dscp-value ] Views User view Predefined user roles network-admin Parameters...
  • Page 87: Telnet Ipv6

    Use undo telnet client source to remove the configuration. Syntax telnet client source { interface interface-type interface-number | ip ip-address } undo telnet client source Default No source IPv4 address or source interface is specified for outgoing Telnet packets. The source IPv4 address is the primary IPv4 address of the outbound interface.
  • Page 88: Telnet Server Acl

    Parameters remote-host: Specifies the IP address or host name of a remote host. A host name can be a case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits, hyphens (-), underscores (_), and dots (.). -i interface-type interface-number: Specifies the outbound interface for sending Telnet packets.
  • Page 89: Telnet Server Dscp

    Only one ACL can be used to filter Telnet logins, and only users permitted by the ACL can Telnet to the device. This command does not take effect on existing Telnet connections. You can specify an ACL that has not been created yet in this command. The command takes effect after the ACL is created.
  • Page 90: Telnet Server Enable

    telnet server enable Use telnet server enable to enable the Telnet server function. Use undo telnet server enable to disable the Telnet server function. Syntax telnet server enable undo telnet server enable Default The Telnet server function is disabled. Views System view Predefined user roles network-admin...
  • Page 91: Telnet Server Ipv6 Dscp

    Ethernet frame header ACL—4000 to 4999. Do not specify the ipv6 option. • Usage guidelines This command is not supported in FIPS mode. If the ACL does not exist or does not have a rule, all users are permitted to Telnet to the device. When the ACL exists and has rules, only users permitted by the ACL can Telnet to the device.
  • Page 92: Terminal Type

    Specifies the terminal display type VT100. Usage guidelines The device supports two terminal display types: ANSI and VT100. HP recommends that you set the display type to VT100 on both the device and the configuration terminal. If either side uses the ANSI type, a display problem such as cursor positioning error might occur when a command line has more than 80 characters.
  • Page 93 Parameters first-number1: Specifies the absolute number of the first user line. last-number1: Specifies the absolute number of the last user line. This number cannot be smaller than first-number1. The following matrix shows the value ranges for the first-number1 and last-number1 arguments: Hardware Value range MSR1000...
  • Page 94: User-Interface Class

    To configure the same settings for multiple user lines, use this command to enter multiple user line views. This command is an older version reserved for backward compatibility purposes. It has the same functionality and output as the line command. HP recommends you use the line command. Examples # Enter the view of user line Console 0.
  • Page 95 This command is an older version reserved for backward compatibility purposes. It has the same function and output as the line class command. HP recommends you use the line class command. The following commands are available in user line class view: •...
  • Page 96: User-Role

    shell • • terminal type user-role • Examples # Set the user connection timeout to 15 minutes in VTY line class view. <Sysname> system-view [Sysname] user-interface class vty [Sysname-line-class-vty] idle-timeout 15 # In console line class view, configure character s as the shortcut key for starting a terminal session. <Sysname>...
  • Page 97 Default A console line user is assigned the user role network-admin. Users of other user lines are assigned the user role network-operator. Views User line view, user line class view Predefined user roles network-admin Parameters role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role can be user-defined or predefined (network-admin, network-operator, or level-0 to level- 1 5).
  • Page 98: Ftp Commands

    FTP commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. FTP is not supported in FIPS mode. In this chapter, "MSR1000"...
  • Page 99: Display Ftp-User

    display ftp-user Use display ftp-user to display detailed information about logged-in FTP users. Syntax display ftp-user Views Any view Predefined user roles network-admin network-operator Examples # Display detailed information about logged-in FTP users. <Sysname> display ftp-user UserName HostIP Port HomeDir root 192.168.20.184 46539...
  • Page 100: Free Ftp User-Ip

    Syntax free ftp user username Views User view Predefined user roles network-admin Parameters username: Specifies a username. You can use the display ftp-user command to display FTP user information. Examples # Release the FTP connections established by using the user account ftpuser. <Sysname>...
  • Page 101: Ftp Server Acl

    Syntax free ftp user-ip ipv6 ipv6-address [ port port ] Views User view Predefined user roles network-admin Parameters ipv6-address: Specifies the source IPv6 address of an FTP connection. You can use the display ftp-user command to view the source IPv6 addresses of FTP connections. port port: Specifies the source port of an FTP connection.
  • Page 102: Ftp Server Dscp

    <Sysname> system-view [Sysname] acl number 2001 [Sysname-acl-basic-2001] rule 0 permit source 1.1.1.1 0 [Sysname-acl-basic-2001] rule 1 deny source any [Sysname-acl-basic-2001] quit [Sysname] ftp server acl 2001 ftp server dscp Use ftp server dscp to set the DSCP value for IPv4 to use for outgoing FTP packets on an FTP server. Use undo ftp server dscp to restore the default.
  • Page 103: Ftp Server Ipv6 Dscp

    Views System view Predefined user roles network-admin Examples # Enable the FTP server. <Sysname> system-view [Sysname] ftp server enable ftp server ipv6 dscp Use ftp server ipv6 dscp to set the DSCP value for IPv6 to use for outgoing FTP packets on an FTP server. Use undo ftp server ipv6 dscp to restore the default.
  • Page 104: Ftp Timeout

    Default No SSL server policy is associated with the FTP server. Views System view Predefined user roles network-admin Parameters policy-name: Specifies an SSL server policy by its name, a string of 1 to 31 characters. Usage guidelines After you associate an SSL server policy with the FTP server, a client that supports SFTP will establish a secure connection to the device to ensure data security.
  • Page 105: Ftp Client Commands

    Examples # Set the idle-timeout interval to 36 minutes. <Sysname> system-view [Sysname] ftp timeout 36 FTP client commands Before executing FTP client configuration commands, make sure you have configured authorization settings for users on the FTP server. Authorized operations include viewing the files in the working directory, reading/downloading/uploading/renaming/removing files, and creating directories.
  • Page 106: Binary

    You can perform this operation only after you log in to the FTP server. The carriage return characters vary by operating system. For example, HP and Windows use /r/n, and Linux uses /n. To transfer files between two systems that use different carriage return characters, select the FTP transfer mode according to the file type.
  • Page 107: Bye

    ASCII mode—Transfers text files. • Examples # Set the file transfer mode to binary. ftp> binary 200 TYPE is now 8-bit binary Related commands ascii Use bye to terminate the connection to the FTP server and return to user view. If no connection is established between the device and the remote FTP server, use this command to return to user view.
  • Page 108: Cdup

    does not change the current working directory. If no drive information is provided, the argument represents a folder or subfolder in the current directory. For more information about the drive and path arguments, see Fundamentals Configuration Guide. ..: Returns to the upper directory. Executing the cd .. command is the same as executing the cdup command.
  • Page 109: Close

    Examples # Change the working directory to the upper directory. ftp> pwd 257 "/ftp/subdir" is your current location ftp> cdup 250 OK. Current directory is /ftp ftp> pwd 257 "/ftp" is your current location Related commands • • close Use close to terminate the connection to the FTP server without exiting FTP client view. Syntax close Views...
  • Page 110: Delete

    Views FTP client view Predefined user roles network-admin Usage guidelines When FTP client debugging is enabled, executing this command disables FTP client debugging. When FTP client debugging is disabled, executing this command enables FTP client debugging. Examples # Enable and then disable FTP client debugging. ftp>...
  • Page 111: Dir

    Views FTP client view Predefined user roles network-admin Parameters remotefile: Specifies the name of a file on the FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server. To perform this operation, you must have delete permission on the FTP server. Examples # Delete file b.txt.
  • Page 112: Disconnect

    -rwxr-xr-x 0 Sep 27 2010 base.bin drwxr-xr-x 8192 Jul 2 14:33 diagfile drwxr-xr-x 8192 Jul 7 15:21 ftp -rwxr-xr-x 0 Sep 27 2010 kernel.bin drwxr-xr-x 8192 Jul 5 09:15 logfile drwxr-xr-x 8192 Jul 2 14:33 seclog -rwxr-xr-x 40808448 Jul 2 14:33 simware-cmw710-sys tem-a1801.bin -rwxr-xr-x 3050 Jul...
  • Page 113: Display Ftp Client Source

    Related commands close display ftp client source Use display ftp client source to display the source address settings on the FTP client. Syntax display ftp client source Views Any view Predefined user roles network-admin network-operator Examples # Display the source address settings on the FTP client. <Sysname>...
  • Page 114: Ftp Client Source

    source { interface interface-type interface-number | ip source-ip-address }: Specifies the source address used to establish the FTP connection. interface interface-type interface-number: Specifies an interface by its type and number. The • primary IPv4 address of this interface will be used as the source address for outgoing FTP packets. If no primary IPv4 address is configured on the source interface, the connection cannot be established.
  • Page 115: Ftp Client Ipv6 Source

    Parameters interface interface-type interface-number: Specifies the source interface for establishing FTP connections. The primary IPv4 address of the source interface is used as the source IP address of packets sent to a FTP server. Make sure the interface is up and has the primary IPv4 address configured. Otherwise, the transmission fails.
  • Page 116: Ftp Ipv6

    Usages guidelines If you execute this command multiple times, the most recent configuration takes effect. The source address specified with the ftp ipv6 command takes precedence over the source address specified with the ftp client ipv6 source command. The source address specified with the ftp client ipv6 source command applies to all FTP connections. The source address specified with the ftp ipv6 command applies only to the current FTP connection.
  • Page 117: Get

    220 FTP service ready. User (2000::154): root 331 Password required for root. Password: 230 User logged in Remote system type is HP Use get to download a file from the FTP server and save the file. Syntax get remotefile [ localfile ] Views...
  • Page 118: Help

    To save the downloaded file to some other directory, the localfile argument must specify the target directory plus the file name such as flash:/subdirectory/a.cfg. Otherwise, the command fails to take effect. Examples # Download file a.txt and save it as b.txt in the working directory accessed by the ftp command. ftp>...
  • Page 119: Lcd

    ftp> help Commands may be abbreviated. Commands are: mkdir status account disconnect quit struct append form mode quote system ascii modtime recv sunique bell glob mput reget tenex binary hash newer rstatus trace help nmap rhelp type case idle nlist rename user image...
  • Page 120 Local directory now /flash: # Change the local working directory to flash:/logfile. ftp> lcd /flash:/logfile Local directory now /flash:/logfile Use ls to display detailed information about the files and subdirectories under the current directory on the FTP server. Use ls remotefile to display detailed information about a file or directory on the FTP server. Use ls remotefile localfile to save detailed information about a file or directory on the FTP server to a local file.
  • Page 121: Mkdir

    # Save detailed information about file a.txt to s.txt. ftp> ls a.txt s.txt output to local-file: a.txt ? [Y/N]y 150 Connecting to port 50203 226-Glob: a.txt # Display the content of file s.txt. ftp> bye 221-Goodbye. You uploaded 0 and downloaded 2 kbytes. 221 Logout.
  • Page 122: Open

    Predefined user roles network-admin Parameters remotefile: Specifies the name of the remote file on the FTP server. localfile: Specifies the name of the local file to be updated. Usage guidelines You can perform this operation only after you log in to the FTP server. If the local file does not exist, this command downloads the file from the FTP server and saves it locally.
  • Page 123: Passive

    Connected to 192.168.40.7 (192.168.40.7). 220 FTP service ready. User (192.168.40.7:(none)): root 331 Password required for root. Password: 230 User logged in. Remote system type is HP. ftp> passive Use passive to set the FTP operation mode to passive. Syntax passive Default The FTP operation mode is passive.
  • Page 124: Pwd

    Predefined user roles network-admin Parameters localfile: Specifies the name of the local file to be uploaded. remotefile: Specifies the file name for saving the uploaded file on the FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server. To upload a file in the working directory accessed by the ftp command, the localfile argument must specify a file name such as a.cfg.
  • Page 125: Quit

    Views FTP client view Predefined user roles network-admin Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Display the currently accessed directory on the remote FTP server. ftp> cd subdir 250 OK. Current directory is /subdir ftp>...
  • Page 126: Rename

    network-operator Parameters remotefile: Specifies the name of the file on the FTP server. localfile: Specifies the name of the local file. Usage guidelines You can perform this operation only after you log in to the FTP server. If a file download is not completed due to network or storage space problems, use this command to get the part that has not been downloaded yet.
  • Page 127: Reset

    Method 2: • ftp> rename a.txt (to-name) b.txt 350 RNFR accepted - file exists, ready for destination 250 File successfully renamed or moved Method 3: • ftp> rename a.txt b.txt 350 RNFR accepted - file exists, ready for destination 250 File successfully renamed or moved reset Use reset to clear the reply information received from the FTP server in the buffer.
  • Page 128: Rhelp

    restarting at 2. execute get, put or append to initiate transfer ftp> put h.c h.c local: h.c remote: h.c 350 Restart position accepted (2). 150 Ok to send data. 226 File receive OK. 80 bytes sent in 0.000445 seconds (175.6 kbyte/s) ftp>...
  • Page 129: Rmdir

    Field Description NOOP Null operation. SYST System parameters. TYPE Request type. Changes the current working directory. XCWD Extended command with the meaning of CWD. Prints the working directory. CDUP Changes the directory to the upper directory. XCUP Extended command with the meaning of CDUP. XPWD Extended command with the meaning of PWD.
  • Page 130: Rstatus

    Views FTP client view Predefined user roles network-admin Parameters directory: Specifies the name of a directory on the remote FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server. To perform this operation, you must have delete permission on the FTP server. Delete all files and subdirectories in a directory before you delete the directory.
  • Page 131 Connected to 192.168.20.177 Logged in as root TYPE: ASCII No session bandwidth limit Session timeout in seconds is 300 Control connection is plain text Data connections will be plain text At session startup, client count was 1 vsFTPd 2.0.6 - secure, fast, stable 211 End of status Table 13 Command output Filed...
  • Page 132: Status

    Field Description The first bit specifies the file type: • -—Common. • B—Block. • c—Character. • d—Directory. • l—Symbol connection file. • p—Pipe. -rw-r--r-- • s—socket. The second bit through the tenth bit are divided into three groups. Each group contains three characters, representing the access permission of the owner, group, and other users.
  • Page 133: System

    Store unique: off; Receive unique: off Case: off; CR stripping: on Ntrans: off Nmap: off Hash mark printing: off; Use of PORT cmds: on Table 15 Command output Field Description IP address of the FTP server that is connected to the FTP Connected to 192.168.1.56.
  • Page 134: Verbose

    Syntax user username [ password ] Views FTP client view Predefined user roles network-admin Parameters username: Specifies the username of the target user account. password: Specifies the password of the target user account. Usage guidelines You can perform this operation only after you log in to the FTP server. The username and password of the target user account must have already been configured.
  • Page 135 Examples # Disable the device from displaying detailed information about FTP operations. ftp> verbose Verbose mode off. # Execute the get command. ftp> get a.cfg 1.cfg # Enable the device to display detailed information about FTP operations. ftp> verbose Verbose mode on. # Execute the get command.
  • Page 136 help nmap rhelp type case idle nlist rename user image ntrans reset umask cdup open restart verbose chmod passive rmdir close macdef prompt runique mdelete proxy send delete mdir sendport site debug mget size # Display the help information for the dir command. ftp>...
  • Page 137: Tftp Commands

    TFTP commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. TFTP is not supported in FIPS mode. tftp Use tftp to download a file from a TFTP server or upload a file to a TFTP server in an IPv4 network.
  • Page 138: Tftp Client Source

    source { interface interface-type interface-number | ip source-ip-address }: Specifies the source address for outgoing TFTP packets. If this keyword is not specified, the device uses the primary IPv4 address of the route's output interface as the source address. • interface interface-type interface-number: Specifies an interface by its type and number.
  • Page 139: Tftp Ipv6

    Syntax tftp client source { interface interface-type interface-number | ip source-ip-address } undo tftp client source Default No source IPv4 address is configured for outgoing TFTP packets. The device uses the primary IPv4 address of the output interface for the route to the server as the source IP address. Views System view Predefined user roles...
  • Page 140 Predefined user roles network-admin Parameters tftp-server: Specifies the IPv6 address or host name of a TFTP server. The host name can be a case-insensitive string of 1 to 253 characters and can contain only letters, digits, hyphens (-), underscores (_), and dots (.). -i interface-type interface-number: Specifies an output interface by its type and number.
  • Page 141: Tftp Client Ipv6 Source

    Usages guidelines The source address specified with the tftp ipv6 command takes precedence over the source address specified with the tftp client ipv6 source command. The source address specified with the tftp client ipv6 source command applies to all TFTP connections. The source address specified with the tftp ipv6 command applies only to the current TFTP connection.
  • Page 142: Tftp-Server Acl

    Examples # Specify source IPv6 address 2000::1 for outgoing TFTP packets. <Sysname> system–view [Sysname] tftp client ipv6 source ipv6 2000::1 Related commands tftp ipv6 tftp-server acl Use tftp-server acl to use an ACL to control the device's access to TFTP servers in an IPv4 network. Use undo tftp-server acl to restore the default.
  • Page 143 Default No ACL is used to control the device's access to TFTP servers. Views System view Predefined user roles network-admin Parameters acl-number: Specifies the number of a basic ACL, in the range of 2000 to 2999. Usages guidelines You can use an ACL to deny or permit the device's access to specific TFTP servers. Examples # Allow the device to access only the TFTP server at 2001::1.
  • Page 144: File System Management Commands

    File system management commands IMPORTANT: Before managing storage media, files, and directories, make sure you know the possible impacts. • A file or directory whose name starts with a period (.) is considered a hidden file or directory. Do not •...
  • Page 145: Copy

    # On an MSR4000, change to the test folder in the root directory of the active MPU: Display the number of the slot where the standby MPU resides. <Sysname> display device Device Name: HP MSR4060 Slot No. Board Type Status...
  • Page 146 specify a URL. If you specify a directory, the device copies the specified file to the directory and saves it with its original file name. Whether a URL is case sensitive depends on the server. vpn-instance vpn-instance-name: Specifies the VPN instance to which the destination FTP or TFTP server belongs.
  • Page 147 Copy flash:/test/1.cfg to cfa0:/testbackup/1backup.cfg?[Y/N]:y Copying file flash:/test/1.cfg to cfa0:/testbackup/1backup.cfg...Done. # Copy test.cfg from the working directory on FTP server 1.1.1.1. Save the copy to the local current folder as testbackup.cfg. In this example, the FTP username and password are user and private. <Sysname>...
  • Page 148: Delete

    Copy cfa0:/test.cfg to slot1#cfa0:/test.cfg?[Y/N]:y Copying file cfa0:/test.cfg to slot1#cfa0:/test.cfg...Done. delete Use delete to delete a file. Syntax delete [ /unreserved ] file-url Views User view Predefined user roles network-admin Parameters /unreserved: Permanently deletes the specified file. If you do not specify this keyword, the command moves the file to the recycle bin.
  • Page 149: Dir

    Deleting file flash:/1.cfg...Done. # On an MSR4000, permanently delete file 2.cfg from the root directory of the active MPU's storage medium. <Sysname> delete /unreserved 2.cfg The file cannot be restored. Delete flash:/2.cfg?[Y/N]:y Deleting the file permanently will take a long time. Please wait... Deleting file flash:/2.cfg...Done.
  • Page 150 Execute the cd .trash command and then the dir command. • Examples # On an MSR1000/MSR2000/MSR3000, display information about all files and folders in the current directory. <Sysname> dir /all Directory of flash:/ # On an MSR1000/MSR2000/MSR3000, display files and folders in the root directory of all storage media on the device.
  • Page 151: File Prompt

    file prompt Use file prompt to set the operation mode for files and folders. Syntax file prompt { alert | quiet } undo file prompt Default The operation mode is alert. The system prompts for confirmation when you perform a destructive file or folder operation.
  • Page 152: Format

    Before you repair a storage medium, make sure no other users are accessing the medium. Otherwise, the repair operation fails. Examples # Restore the space of the flash memory. <Sysname> fixdisk flash: Restoring flash: may take some time... Restoring flash:...Done. format Use format to format a storage medium.
  • Page 153: Gzip

    Parameters filename: Specifies the name of the file to be decompressed. This argument must have .gz as the extension. Usage guidelines This command deletes the specified file after decompressing it. Examples # Decompress the file system.bin.gz. Before decompressing the file, you can display files whose names start with the system. string. <Sysname>...
  • Page 154: Md5Sum

    Compress the file system.bin. <Sysname> gzip system.bin Verify the compress operation. <Sysname> dir system.* Directory of flash: 1 -rw- 20 Jun 14 2012 10:18:53 system.bin.gz 472972 KB total (472840 KB free) md5sum Use md5sum to use the MD5 algorithm to calculate the digest of a file. Syntax md5sum file-url Views...
  • Page 155: More

    Usage guidelines The name of the folder to be created must be unique in the specified directory. To use this command to create a folder, the specified directory must already exist. For example, to create the flash:/test/mytest folder, the test folder must already exist. Otherwise, the mytest folder is not created.
  • Page 156: Mount

    <Sysname> # On an MSR4000, display the contents of the testcfg.cfg file on the standby MPU (in slot 1). <Sysname> more slot1#cfa0:/testcfg.cfg version 7.1.042, Release 000706 sysname Test ---- More ---- mount Use mount to mount a hot swappable storage medium. Syntax mount medium-name Default...
  • Page 157: Move

    move Use move to move a file. Syntax move fileurl-source fileurl-dest Views User view Predefined user roles network-admin Parameters fileurl-source: Specifies the name of the source file. fileurl-dest: Specifies the name of the destination file or folder. Usage guidelines If you specify a destination folder, the system moves the source file to the specified folder without changing the file name.
  • Page 158: Rename

    rename Use rename to rename a file or folder. Syntax rename fileurl-source fileurl-dest Views User view Predefined user roles network-admin Parameters fileurl-source: Specifies the name of the source file or folder. fileurl-dest: Specifies the name of the destination file or folder. Usage guidelines This command is not executed if the destination file or folder name is already used by an existing file or folder in the current working directory.
  • Page 159: Rmdir

    Clearing file flash:/a.cfg... Done. Clear flash:/b.cfg?[Y/N]:y Clearing file flash:/b.cfg... Done. # Delete the b.cfg file from the recycle bin. (In this example there are two files in the recycle bin.) <Sysname> reset recycle-bin Clear flash:/a.cfg?[Y/N]:n Clear flash:/b.cfg?[Y/N]:y Clearing file flash:/b.cfg... Done. Related commands delete rmdir...
  • Page 160: Umount

    Predefined user roles network-admin Parameters file-url: Specifies the name of a file. Usage guidelines You can use file digests to verify file integrity. Examples # Use the SHA-256 algorithm to calculate the digest of file system.bin. <Sysname> sha256sum system.bin SHA256 digest: 0851e0139f2770e87d01ee8c2995ca9e59a8f5f4062e99af14b141b1a36ca152 umount Use umount to unmount a hot swappable storage medium.
  • Page 161: Undelete

    <Sysname> umount cfa0: # On an MSR4000, unmount a CF card from the active MPU. <Sysname> umount cfa0: Related commands mount undelete Use undelete to restore a file from the recycle bin. Syntax undelete file-url Views User view Predefined user roles network-admin Parameters file-url: Specifies the name of the file to be restored.
  • Page 162: Configuration File Management Commands

    Configuration file management commands In this chapter, "MSR1000" refers to MSR1002-4. "MSR2000" refers to MSR2003, MSR2004-24, MSR2004-48. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode.
  • Page 163: Archive Configuration Interval

    Related commands archive configuration interval • archive configuration location • • archive configuration max display archive configuration • archive configuration interval Use archive configuration interval to enable automatic running-configuration archiving and set the archiving interval. Use undo archive configuration interval to restore the default. Syntax archive configuration interval minutes undo archive configuration interval...
  • Page 164: Archive Configuration Location

    Change the archiving interval depending on the available storage space. The shorter the interval, • the more free storage space is required. Examples # Configure the system to archive the running configuration every 60 minutes. <Sysname> system-view [Sysname] archive configuration interval 60 Archive files will be saved every 60 minutes.
  • Page 165: Archive Configuration Max

    On the MSR4000 router, the configuration archive function saves the running configuration only on the active MPU. To make sure the system can archive the running configuration after an active/standby switchover, create the configuration archive directory on both active and standby MPUs. Configuration archives take the file name format prefix_serial number.cfg, for example, 20080620archive_1.cfg and 20080620archive_2.cfg.
  • Page 166: Backup Startup-Configuration

    Predefined user roles network-admin Parameters file-number: Sets the maximum number of configuration archives that can be saved. The value range is 1 to 10. Adjust the setting depending on the amount of storage space available. Usage guidelines Before you can set a limit on configuration archives, use the archive configuration location command to specify a configuration archive directory and archive file name prefix.
  • Page 167: Configuration Encrypt

    Predefined user roles network-admin Parameters private-key: Encrypts configuration with a private key. All HP devices running Comware V7 software use the same private key. public-key: Encrypts configuration with a public key. All HP devices running Comware V7 software use the same public key.
  • Page 168: Configuration Replace File

    configuration replace file Use configuration replace file to perform configuration rollback. Syntax configuration replace file filename Views System view Predefined user roles network-admin Parameters filename: Specifies the name of the replacement configuration file for configuration rollback. Usage guidelines To replace the running configuration with the configuration in a configuration file without rebooting the device, use the configuration rollback function.
  • Page 169: Display Current-Configuration

    Examples # Display configuration archive information. <Sysname> display archive configuration Location: flash:/archive Filename prefix: my_archive Archive interval in minutes: 120 Maximum number of archive files: 10 Saved archive files: No. TimeStamp FileName Wed Jan 15 14:20:18 2012 my_archive_1.cfg Wed Jan 15 14:33:10 2012 my_archive_2.cfg Wed Jan 15 14:49:37 2012 my_archive_3.cfg...
  • Page 170: Display Default-Configuration

    Predefined user roles network-admin network-operator Parameters configuration [ module-name ]: Displays feature configuration. The module-name argument specifies a feature module. If no feature module is specified, this command displays all feature settings you have made. Available feature modules depend on your configuration. interface [ interface-type [ interface-number ] ]: Displays interface configuration, where the interface-type argument represents the interface type and the interface-number argument represents the interface number.
  • Page 171: Display Saved-Configuration

    Views Any view Predefined user roles network-admin network-operator Usage guidelines The device is shipped with some basic settings called "factory defaults." These default settings make sure the device can start up and run correctly when it has no configuration file or the configuration file is corrupt.
  • Page 172: Display Startup

    ftp server enable telnet server enable domain default enable system vlan 1 domain system ---- More ---- Related commands reset saved-configuration • save • display startup Use display startup to display the names of the current startup configuration file and the next-startup configuration files.
  • Page 173: Display This

    Table 19 Command output Field Description Current startup saved-configuration file Configuration file that the device has started up with. Next main startup saved-configuration file Primary configuration file to be used at the next startup. Next backup startup saved-configuration file Backup configuration file to be used at the next startup. # Display names of the startup configuration files on the MSR4000 router.
  • Page 174: Reset Saved-Configuration

    This command does not display parameters that are using the default settings. For some parameters that can be successfully configured even if their dependent features are not enabled, this command displays their settings after the dependent features are enabled. This command can be executed in any user interface view to display the running configuration of all user view interfaces.
  • Page 175: Restore Startup-Configuration

    main: Deletes the main next-startup configuration file. Usage guidelines CAUTION: On the MSR1000/MSR2000/MSR3000 router, this command deletes a next-startup configuration file permanently. On the MSR4000 router, this command permanently deletes the next-startup configuration files from both MPUs. Delete a next-startup configuration file if it does not match the software version or is corrupted. You can delete the main, the backup, or both.
  • Page 176: Save

    Syntax restore startup-configuration from tftp-server src-filename Views User view Predefined user roles network-admin Parameters tftp-server: Specifies a TFTP server's IPv4 address or host name. The host name is a case-insensitive string of 1 to 253 characters. Valid characters include letters, digits, hyphens (-), underscores (_), and dots (.). src-filename: Specifies the file name of the configuration file to be downloaded.
  • Page 177 Saves the configuration file in safe mode. If this keyword is not specified, the device saves the configuration file in fast mode. Safe mode is slower than fast mode, but more secure. HP recommends that you specify the safely keyword for the command.
  • Page 178 Usage guidelines If the file specified for the command does not exist, the system creates the file before saving the configuration. If the file already exists, the system prompts you to confirm whether to overwrite the file. If you choose to not overwrite the file, the system cancels the save operation. If you do not specify the file-url option for the command, the command saves the running configuration to an .mdb binary file as well as a .cfg text file.
  • Page 179: Startup Saved-Configuration

    Related commands display current-configuration • display saved-configuration • startup saved-configuration MSR1000/MSR2000/MSR3000: Use startup saved-configuration to specify a file as a next-startup configuration file. Use undo startup saved-configuration to configure the system to start up with factory defaults at the next startup.
  • Page 180 The undo startup saved-configuration command changes the file attribute of the main and backup next-startup configuration files to NULL, but it does not delete the two configuration files. You can also specify a configuration file as a next startup file when you use the save command to save the running configuration to it.
  • Page 181: Software Upgrade Commands

    Software upgrade commands In this chapter, "MSR1000" refers to MSR1002-4. "MSR2000" refers to MSR2003, MSR2004-24, MSR2004-48. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. boot-loader file Use boot-loader file to specify startup software image files. Syntax MSR1000/MSR2000/MSR3000: boot-loader file boot boot-package system system-package [ feature feature-package&<1-30>...
  • Page 182 ipe-filename: Specifies the file path of an .ipe image package file, a case-insensitive string. The file must be stored in the root directory of a storage medium in the system. The maximum length is 1 to 63 characters for the storage-medium base-filename.ipe segments of the file path.
  • Page 183: Boot-Loader Update

    The images that have passed all examinations will be used as the main startup software images at the next reboot on the device.. # Specify cfa0:/all.ipe as the main startup image file for the MPU in slot 0 on an MSR4000 router. <Sysname>...
  • Page 184: Bootrom Update

    Usage guidelines You can use this command to synchronize startup images after adding an additional MPU. If any startup software images require a license, register and activate a license for the images on the new MPU before executing this command. To verify the licensing state of software images, use the display license feature command .
  • Page 185: Display Boot-Loader

    Predefined user roles network-admin Parameters file file-url: Specifies the file that contains the Boot ROM image in the flash memory or CF card. The file-url argument represents the file name, a string of 1 to 63 characters. slot slot-number-list: Specifies a space-separated list of up to seven slot number items. Each item specifies a card by its slot number or a range of cards in the form of start-slot-number to end-slot-number.
  • Page 186 Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies the slot number of an MPU. If you do not specify an MPU, this command displays the software images on each MPU. Examples # Display the current software images and startup software images on an MSR1000, MSR2000 or MSR3000 router.
  • Page 187: Version Auto-Update Enable

    cfa0:/msr56-cmw710-system-e010203.bin cfa0:/msr56-cmw710-security-e010203.bin cfa0:/msr56-cmw710-voice-e010203.bin cfa0:/msr56-cmw710-data-e010203.bin Software images on slot 1: Current software images: cfa0:/msr56-cmw710-boot-e010203.bin cfa0:/msr56-cmw710-system-e010203.bin cfa0:/msr56-cmw710-security-e010203.bin cfa0:/msr56-cmw710-voice-e010203.bin cfa0:/msr56-cmw710-data-e010203.bin Main startup software images: cfa0:/msr56-cmw710-boot-e010203.bin cfa0:/msr56-cmw710-system-e010203.bin cfa0:/msr56-cmw710-security-e010203.bin cfa0:/msr56-cmw710-voice-e010203.bin cfa0:/msr56-cmw710-data-e010203.bin Backup startup software images: cfa0:/msr56-cmw710-boot-e010203.bin cfa0:/msr56-cmw710-system-e010203.bin cfa0:/msr56-cmw710-security-e010203.bin cfa0:/msr56-cmw710-voice-e010203.bin cfa0:/msr56-cmw710-data-e010203.bin Table 21 Command output Field Description This field displays the Comware images on an MSR1000, Software images on the device...
  • Page 188: Version Check Ignore

    The following matrix shows the support of MSR routers for the command: Hardware Command compatibility MSR1000 MSR2000 MSR3000 MSR4000 Default If software inconsistency is detected at startup, the standby MPU loads the current software images of the active MPU. Views System view Predefined user roles network-admin...
  • Page 189 MPU can start up with a different software version than the active MPU. Even though you can use this command for software upgrade, HP recommends the ISSU method. The startup software version check function might fail to work if the software versions of the MPUs are incompatible.
  • Page 190: Emergency Shell Commands

    Emergency shell commands In this chapter, "MSR1000" refers to MSR1002-4. "MSR2000" refers to MSR2003, MSR2004-24, MSR2004-48. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. Unless otherwise stated, a file name or path argument in this document is case insensitive and must indicate the storage medium.
  • Page 191: Delete

    delete Use delete to permanently delete a file. Syntax delete file-url Views User view Parameters file-url: Specifies the name of the file to be deleted. Examples # Delete the tt.cfg file from the current directory. <boot> delete flash:/tt.cfg Delete flash:/tt.cfg? [Y/N]:y Deleting the file permanently will take a long time.
  • Page 192 Examples # Display information about all files and directories in the system. <boot> dir /all Directory of flash: drw- Jan 01 2012 00:06:09 drw- Sep 15 2012 04:03:14 drw- Jan 01 2012 00:04:07 test drw- Aug 26 2012 02:48:00 license drw- Nov 05 2012 06:45:07 logfile...
  • Page 193: Display Copyright

    61440 KB total (11108 KB free) Table 22 Command output Field Description Directory of Current directory. Information about a file or directory: • 7—Index number, automatically assigned by the system. • -rw-—Attributes of the file or directory. The first character is the directory indicator (d for directory and - for file).
  • Page 194: Display Interface M-Eth0

    Examples # Display information about the system.bin software package. <boot> display install package flash:/system.bin flash:/system.bin [Package] Vendor: HP Product: xxxx Service name: system Platform version: 7.1.049P01 Product version: ESS 010203 Supported board: mpu [Component] Component: Comware system Description: system package...
  • Page 195 Line protocol current state: UP The Maximum Transmit Unit is 1500 Inet4 Address is 192.168.20.189/24 Inet6 Address is 1:1::1:1/64 Scope:Global Inet6 Address is FE80::202:3FF:FE04:506/10 Scope:Link IP Packet Frame Type:PKTFMT_ETHNT_2, Hardware Address: c4ca-d94c-e201 IPV6 Packet Frame Type:PKTFMT_ETHNT_2, Hardware Address: c4ca-d94c-e201 Input: 8983 packets, 0 errors, 0 dropped, 0 overruns, 2 frame Output: 431 packets, 0 errors, 0 dropped, 0 overruns, 0 carrier, 0 collisions, 1000 txqueuelen...
  • Page 196: Display Ip Routing-Table

    Field Description Statistics for sent packets: • Total number. • Number of erroneous packets. Output: 431 packets, 0 errors, 0 dropped, 0 • Number of dropped packets. overruns, 0 carrier, 0 collisions, 1000 • Number of packets encountering queue overflow errors. txqueuelen •...
  • Page 197: Display Ipv6 Routing-Table

    Field Description Number of times the route has been referenced by other route entries. Number of times the route has been matched. Iface Outbound interface. display ipv6 routing-table Use display ipv6 routing-table to display IPv6 routing information. Syntax display ipv6 routing-table Views Any view Examples...
  • Page 198: Display Version

    Field Description Number of times the route has been matched. Outbound interface. If it is a loopback interface, the value of Iface this field is lo. display version Use display version to display the version information of the boot image. Syntax display version Views...
  • Page 199: Ftp

    <boot> format flash: All data on flash: will be lost, continue?[Y/N]:y Formatting flash:… Done. Use ftp to access a remote FTP server. Syntax ftp { server-ipv4-address | ipv6 server-ipv6-address } user username password password { get remote-file local-file | put local-file remote-file } Views User view Parameters...
  • Page 200: Interface M-Eth0

    system-package: Specifies the name of the system image, a case-insensitive string of 1 to 63 characters. This file must be saved in the root directory of the current MPU's storage medium, with the extension .bin. The file name must indicate the storage medium and cannot contain slot information, for example, cfa0:/startup-system.bin.
  • Page 201: Ip Address

    Examples # Enter management Ethernet port view. <boot> system-view [boot] interface m-eth0 [boot-m-eth0] Related commands quit ip address Use ip address to assign an IPv4 address to the management Ethernet port. Use undo ip address to restore the default. Syntax ip address ip-address { mask-length | mask } undo ip address Default...
  • Page 202: Ipv6 Address

    Syntax ip gateway ip-address undo ip gateway Default The management Ethernet port has no IPv4 gateway configured. Views Management Ethernet port view Parameters ip-address: Specifies an IPv4 gateway address in dotted decimal notation. Usage guidelines When the device needs to communicate with a device on a remote IPv4 network, you must specify an IPv4 gateway for the management Ethernet port.
  • Page 203: Ipv6 Gateway

    When the management Ethernet port is manually shut down, assigning it an IPv6 address or removing its IPv6 address activates it at the same time. Examples # Assign IPv6 address 2001::1/64 to the management Ethernet port. <boot> system-view [boot] interface m-eth0 [boot-m-eth0] ipv6 address 2001::1 64 ipv6 gateway Use ipv6 gateway to specify an IPv6 gateway for the management Ethernet port.
  • Page 204: More

    Parameters directory: Specifies a directory name. Usage guidelines The path must already exist. For example, to create the flash:/test/mytest directory, the directory test must already exist on the flash memory. The name for the new directory must be unique in the upper-level directory. Examples # Create a directory named test in the current directory.
  • Page 205: Ping

    fileurl-dest: Specifies the name of the destination file or directory, a case-insensitive string of 1 to 63 characters. Usage guidelines If you specify a non-existent destination file name, the command moves the source file to the destination directory and renames it. If you specify an existing destination file name, the system prompts whether or not to overwrite the existing file.
  • Page 206: Ping Ipv6

    5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 0.717/1.101/2.243 ms Table 27 Command output Field description PING 1.2.1.1 (1.2.1.1) Checking the connectivity to the device at 1.2.1.1. 56 data bytes Number of data bytes in each ICMP echo request. Received an ICMP reply from the device at 1.2.1.1.
  • Page 207: Pwd

    ping ipv6 2001::2 PING 2001::2 (2001::2): 56 data bytes 56 bytes from 2001::2: seq=0 ttl=64 time=5.420 ms 56 bytes from 2001::2: seq=1 ttl=64 time=1.140 ms 56 bytes from 2001::2: seq=2 ttl=64 time=2.027 ms 56 bytes from 2001::2: seq=3 ttl=64 time=0.887 ms 56 bytes from 2001::2: seq=4 ttl=64 time=0.791 ms --- 2001::2 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss...
  • Page 208: Reset Ssh Public-Key

    Syntax reboot Views User view Examples # On an MSR1000, MSR2000 or MSR3000, reboot the device. <boot> reboot # On an MSR4000, reboot the current MPU. <boot> reboot reset ssh public-key Use reset ssh public-key to delete all server public keys saved on the device. Syntax reset ssh public-key Views...
  • Page 209: Rmdir

    Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '192.168.1.59' (RSA) to the list of known hosts. client001@192.168.1.59's password: ****************************************************************************** * Copyright (c) 2010-2014 Hewlett-Packard Development Company, L.P. * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ****************************************************************************** <Sysname>...
  • Page 210: Ssh2

    Default The management Ethernet port is up. Views Management Ethernet port view Usage guidelines When the management Ethernet port is not operating correctly, you can shut it down and then bring it Examples # Shut down the management Ethernet port. <boot>...
  • Page 211: System-View

    <Sysname> # Use SSH to connect to SSH server 192.168.1.59 for the second time. <boot> ssh2 192.168.1.59 login as:client001 client001@192.168.1.59's password: ****************************************************************************** * Copyright (c) 2010-2014 Hewlett-Packard Development Company, L.P. * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ****************************************************************************** <Sysname>...
  • Page 212: Tftp

    Usage guidelines If the Telnet server does not respond, you can press Ctrl+K to abort the login attempt and try again later. Examples # Telnet to Telnet server 192.168.100.1. <boot> telnet 192.168.100.1 tftp Use tftp to log in to a TFTP server. Syntax tftp server-ipv4-address { get remote-file local-file | put local-file remote-file } tftp ipv6 server-ipv6-address { get remote-file local-file | put local-file remote-file }...
  • Page 213: Automatic Configuration Commands

    Automatic configuration commands autodeploy udisk enable Use autodeploy udisk enable to enable USB-based automatic configuration. Use undo autodeploy udisk enable to disable USB-based automatic configuration. Syntax autodeploy udisk enable undo autodeploy udisk enable Default USB-based automatic configuration is enabled. Views System view Predefined user roles network-admin...
  • Page 214: Device Management Commands

    Device management commands In this chapter, "MSR1000" refers to MSR1002-4. "MSR2000" refers to MSR2003, MSR2004-24, MSR2004-48. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. card-mode Use card-mode to set the operating mode of an interface card. Syntax MSR1000/MSR2000/MSR3000: card-mode slot slot-number mode-name...
  • Page 215: Clock Datetime

    pos: Specifies the POS mode. If you specify this keyword, all interfaces on the interface card • operate as POS interfaces. For more information, see Interface Configuration Guide. e-cpos: Specifies the E-CPOS mode. If you specify this keyword, all interfaces on the interface card •...
  • Page 216: Clock Protocol

    Views User view Predefined user roles network-admin Parameters time: Specifies a time in the format hh:mm:ss. The hh value is in the range of 0 to 23. The mm value is in the range of 0 to 59. The ss value is in the range of 0 to 59. The leading zero in a segment can be omitted.
  • Page 217: Clock Summer-Time

    Parameters none: Uses the local system time that is configured by using the clock datetime, clock timezone, and clock summer-time commands. ntp: Uses the NTP time source. When the device uses the NTP time source, you cannot change the system time manually.
  • Page 218: Clock Timezone

    day—Takes Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, or Saturday. end-time: Specifies the end time in the format hh:mm:ss. The hh value is in the range of 0 to 23. The mm value is in the range of 0 to 59. The ss value is in the range of 0 to 59. The leading zero in a segment can be omitted.
  • Page 219: Command

    Default The local time zone is the UTC time zone. Views System view Predefined user roles network-admin Parameters zone-name: Specifies a time zone by its name, a case-sensitive string of 1 to 32 characters. add: Adds an offset to the UTC time. minus: Decreases the UTC time by an offset.
  • Page 220: Copyright-Info Enable

    Views Job view Predefined user roles network-admin Parameters id: Specifies a command ID in the range of 0 to 4294967295. command: Specifies the command to be assigned to the job. Usage guidelines A job can have multiple commands. Commands in a job are uniquely identified by their IDs. A command with a smaller ID is executed earlier.
  • Page 221: Display Alarm

    Examples # Enable displaying the copyright statement. <Sysname> system-view [Sysname] copyright-info enable When a Telnet user logs in, the following statement appears: • ****************************************************************************** * Copyright (c) 2010-2014 Hewlett-Packard Development Company, L.P. * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ****************************************************************************** <Sysname>...
  • Page 222: Display Clock

    Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies the entire device. The value is always 0. (On an MSR1000, MSR2000 or MSR3000.) slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays the alarm information for all cards.
  • Page 223: Display Copyright

    Syntax display clock Views Any view Predefined user roles network-admin network-operator Examples # Display the system time and date when the local time zone is not specified. <Sysname> display clock 10:09:00 UTC Fri 03/16/2013 # Display the system time and date when the local time zone Z5 is specified. <Sysname>...
  • Page 224: Display Cpu-Usage

    display cpu-usage Use display cpu-usage to display the current CPU usage statistics. Syntax MSR1000/MSR2000/MSR3000: display cpu-usage MSR4000: display cpu-usage [ slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays the CPU usage statistics for all cards.
  • Page 225: Display Cpu-Usage Configuration

    Table 30 Command output Field Description Unit CPU usage CPU usage statistics. (On an MSR1000, MSR2000 or MSR3000.) 1% in last 5 seconds Average CPU usage during the last 5 seconds. 1% in last 1 minute Average CPU usage during the last minute. 1% in last 5 minutes Average CPU usage during the last 5 minutes.
  • Page 226 display cpu-usage history [ job job-id ] MSR4000: display cpu-usage history [ job job-id ] [ slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles network-admin network-operator Parameters job job-id: Specifies a process by its ID. If you do not specify this option, the command displays the historical CPU usage statistics for the entire system, which is the sum of the historical CPU usage statistics for all processes in the system.
  • Page 227 45%| 40%| 35%| 30%| 25%| 20%| 15%| 10%| ######## ------------------------------------------------------------ (minutes) cpu-usage (CPU 0) last 60 minutes (SYSTEM) The output shows the historical CPU usage statistics for the entire system (with the name SYSTEM) in the last 60 minutes: • 5%: 12 minutes ago 10%: 13 minutes ago •...
  • Page 228: Display Device

    cpu-usage (CPU 0) last 60 minutes (scmd) The output shows the historical CPU usage statistics of process 1 (with the process name scmd) in the last 60 minutes. A process name with square brackets ([ ]) means that the process is a kernel process. 5%: 20 minutes ago •...
  • Page 229 If the cf-card and usb keywords are not provided, this command displays information about all cards on the device. Examples # On an MSR1000, MSR2000 or MSR3000, display device information. <Sysname> display device Device Name: HP Slot No. Board Type Status Max Ports...
  • Page 230: Display Device Manuinfo

    Field Description Card status: • Absent—The slot is not installed with a card. Status • Fault—The card is faulty and cannot start up. • Normal—The card is operating correctly. MPU status: • Primary Standby—The card is the standby MPU. • Master—The card is the active MPU.
  • Page 231 VENDOR_NAME : HP slot 4 DEVICE_NAME : RT-DSIC-9FSW-POE-H3 DEVICE_SERIAL_NUMBER : 210231A7702222222222 MAC_ADDRESS : NONE MANUFACTURING_DATE : 2013-05-31 VENDOR_NAME : HP slot 6 DEVICE_NAME : RT-HMIM-4GEE DEVICE_SERIAL_NUMBER : 210235A2760122356080 MAC_ADDRESS : 000FE0000080 MANUFACTURING_DATE : 2013-03-22 VENDOR_NAME : HP slot 7 DEVICE_NAME...
  • Page 232: Display Device Manuinfo Fan

    Specifies a fan by its ID. It is always 1. Examples # Display the electronic label information of fan 1. <Sysname> display device manuinfo fan 1 Fan 1: DEVICE_NAME : fan DEVICE_SERIAL_NUMBER : 210235A36L1234567890 MAC_ADDRESS : NONE MANUFACTURING_DATE : 2013-01-20 VENDOR_NAME : HP...
  • Page 233: Display Device Manuinfo Power

    1 to 2 MSR4000 1 to 4 Examples # Display the electronic label information of power supply 2. <Sysname> display device manuinfo power 2 Power 2: DEVICE_NAME : power DEVICE_SERIAL_NUMBER : 210235A36L1234567890 MAC_ADDRESS : NONE MANUFACTURING_DATE : 2013-01-20 VENDOR_NAME : HP...
  • Page 234: Display Diagnostic-Information

    display diagnostic-information Use display diagnostic-information to display the operating statistics for multiple feature modules in the system. Syntax display diagnostic-information [ hardware | infrastructure | l2 | l3 | service ] Views Any view Predefined user roles network-admin network-operator Parameters hardware: Displays hardware-related operating statistics.
  • Page 235 Syntax MSR1000/MSR2000/MSR3000: display environment MSR4000: display environment [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies a card by its slot number. (On an MSR4000.) Usage guidelines If no card is specified and the vent keyword is not specified, this command displays the temperature statistics for all temperature sensors on the device.
  • Page 236: Display Fabric Utilization

    Field Description On an MSR1000, MSR2000 or MSR3000, the value of this field can be one of the following: • 0 (zero)—Specifies the device. • Non-zero number—Specifies a card. Subslot On an MSR4000, the value of this field can be one of the following: •...
  • Page 237: Display Fan

    Examples # Display the switching fabric channel utilization on the interface card in slot 5. <System> display fabric utilization slot 5 Input Output Chs Slot Chan Speed Uitl Peak Uitl Peak 0% 08:13:14 2013/10/30 0% 08:13:14 2013/10/30 0% 08:13:14 2013/10/30 0% 08:13:14 2013/10/30 0% 08:13:14 2013/10/30 0% 08:13:14 2013/10/30...
  • Page 238: Display Memory

    display memory Use display memory to display memory usage. Syntax MSR1000/MSR2000/MSR3000: display memory MSR4000: display memory [ slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays memory usage for all cards.
  • Page 239: Display Memory-Threshold

    Field Description Shared Physical memory shared by processes. Buffers Physical memory used for buffers. Cached Physical memory used for caches. FreeRatio Free memory ratio. -/+ buffers/cache:used = Mem:Used – Mem:Buffers – Mem:Cached, which indicates the physical memory used by applications. -/+ buffers/cache -/+ buffers/cache:free = Mem:Free + Mem:Buffers + Mem:Cached, which indicates the physical memory available for applications.
  • Page 240: Display Power-Supply

    Normal: 96M Current memory state: Normal Event statistics: [Back to normal state] First notification: 2013-5-15 09:21:35.546 Latest notification: 2013-5-15 09:21:35.546 Total number of notifications sent: 1 [Enter minor low-memory state] First notification at: 2013-5-15 09:07:05.941 Latest notification at: 2013-5-15 09:07:05.941 Total number of notifications sent: 1 [Back to minor low-memory state] First notification at: 0.0...
  • Page 241: Display Scheduler Job

    Status of the installed power supplies. • • Power supply status of the interface cards. Examples # Display detailed power supply information. <Sysname> display power-supply verbose display scheduler job Use display scheduler job to display job configuration information. Syntax display scheduler job [ job-name ] Views Any view Predefined user roles...
  • Page 242: Display Scheduler Reboot

    Predefined user roles network-admin network-operator Examples # Display job execution log information. <Sysname> display scheduler logfile Logfile Size: 1902 Bytes. Job name : shutdown Schedule name : shutdown Execution time : Tue Dec 27 10:44:42 2013 Completion time : Tue Dec 27 10:44:47 2013 --------------------------------- Job output ----------------------------------- <Sysname>system-view System View: return to User View with Ctrl+Z.
  • Page 243: Display Scheduler Schedule

    <Sysname> display scheduler reboot System will reboot at 16:32:00 05/23/2013 (in 1 hours and 39 minutes). Related commands scheduler reboot at • scheduler reboot delay • display scheduler schedule Use display scheduler schedule to display schedule information. Syntax display scheduler schedule [ schedule-name ] Views Any view Predefined user roles...
  • Page 244: Display Transceiver Alarm

    Field Description Number of times the schedule has been executed. If the schedule has never been Execution counts executed, this field is not displayed. Job name Name of a job under the schedule. Result of the most recent execution: • Successful.
  • Page 245 Field Description TX power low The transmitted optical power is low. Temp high The temperature is high. Temp low The temperature is low. Voltage high The voltage is high. Voltage low The voltage is low. Transceiver info I/O error Transceiver information read/write error. Transceiver info checksum error Transceiver information checksum error.
  • Page 246 Field Description XENPAK: WIS local fault WAN interface sublayer local error. Receive optical power fault Received optical power error. Physical medium attachment/physical medium dependent PMA/PMD receiver local fault local error. PCS receive local fault Physical coding sublayer local error. PHY XS receive local fault PHY extended sublayer local error.
  • Page 247: Display Transceiver Diagnosis

    Field Description RX loss of signal Received signals are lost. RX power low Received power is low. display transceiver diagnosis Use display transceiver diagnosis to display the current values of the digital diagnosis parameters on transceiver modules. Syntax display transceiver diagnosis interface [ interface-type interface-number ] Views Any view Predefined user roles...
  • Page 248: Display Transceiver Interface

    : 1000_BASE_SX_SFP Connector Type : LC Wavelength(nm) : 850 Transfer Distance(m) : 550(50um),270(62.5um) Digital Diagnostic Monitoring : YES Vendor Name : HP Ordering Name : SFP-GE-SX-MM850 Table 42 Command output Field Description transceiver information Transceiver information. Transceiver Type Transceiver type.
  • Page 249: Display Transceiver Manuinfo

    Field Description • Fiber transceiver: Central wavelength (in nm) of the transmit laser. If the transceiver supports multiple wavelengths, every two wavelength values are Wavelength(nm) separated by a comma. • Copper cable: Displayed as N/A. Transmission distance, where "xx" indicates the distance unit: •...
  • Page 250: Display Version

    Manu. Serial Number : 213410A0000054000251 Manufacturing Date : 2013-09-01 Vendor Name : HP Table 43 Command output Field Description Manu. Serial Number Serial number generated during production of the transceiver module. Manufacturing Date Date when the electronic label information was written to the transceiver module.
  • Page 251: Header

    Examples # Display the startup software image upgrade history records. <Sysname> display version-update-record Name Version Compile time Record 1 (updated on Jul 27 2013 at 09:47:58): * boot-e2205.bin 7.1.035 ESS 2205 Jul 26 2013 10:55:58 system-e2205.bin 7.1.035 ESS 2205 Jul 26 2013 10:56:14 Record 2 (updated on Jul 25 2013 at 14:26:11): * boot-e2205.bin...
  • Page 252 motd: Configures the greeting banner to be displayed before the legal banner appears. shell: Configures the banner to be displayed before a non-modem dial-in user accesses user view. text: Specifies the banner message, which can be entered in two formats. For more information, see Fundamentals Configuration Guide.
  • Page 253: Job

    Welcome to shell(header shell) Use job to assign a job to a schedule. Use undo job to revoke a job. Syntax job job-name undo job job-name Default No job is assigned to a schedule. Views Schedule view Predefined user roles network-admin Parameters job-name: Specifies the job name, a case-sensitive string of 1 to 47 characters.
  • Page 254 memory-threshold [ slot slot-number [ cpu cpu-number ] ] minor minor-value severe severe-value critical critical-value normal normal-value undo memory-threshold [ slot slot-number [ cpu cpu-number ] ] Default Minor alarm threshold: 96 MB. • Severe alarm threshold: 64 MB. • Critical alarm threshold: 48 MB.
  • Page 255: Monitor Cpu-Usage Enable

    Examples # Set the minor alarm, severe alarm, critical alarm, and normal state thresholds to 64 MB, 48 MB, 32 MB, and 96 MB, respectively. <Sysname> system-view [Sysname] memory-threshold minor 64 severe 48 critical 32 normal 96 monitor cpu-usage enable Use monitor cpu-usage enable to enable CPU usage monitoring.
  • Page 256: Monitor Cpu-Usage Interval

    monitor cpu-usage interval Use monitor cpu-usage interval to set the CPU usage sampling interval. Syntax MSR1000/MSR2000/MSR3000: monitor cpu-usage interval interval-value MSR4000: monitor cpu-usage interval interval-value [ slot slot-number [ cpu cpu-number ] ] Default The system samples CPU usage every 1 minute. Views System view Predefined user roles...
  • Page 257: Power-Supply Off

    Default Password recovery capability is enabled. Views System view Predefined user roles network-admin Usage guidelines Password recovery capability controls console user access to the device configuration and SDRAM from Boot ROM menus. If password recovery capability is enabled, a console user can access the device configuration without authentication to configure new passwords.
  • Page 258: Power-Supply On

    subslot subslot-number: Specifies a subcard by its subslot number. If you do not specify this option, the command stops supplying power to all subcards on the card. Usage guidelines When power is insufficient, you can power off interface cards that are idle or connected to unimportant network nodes to ensure power supply to critical interface cards.
  • Page 259: Power-Supply Policy Redundant

    The following matrix shows the support of MSR routers for the command: Hardware Command compatibility MSR1000 MSR2000 MSR3000 MSR4000 Default Power supply management is disabled. Views System view Predefined user roles network-admin Examples # Enable power supply management. <Sysname> system-view [Sysname] power-supply policy enable power-supply policy redundant Use power-supply policy redundant to specify the number of redundant power supplies.
  • Page 260: Reboot

    Parameters module-count: Specifies the number of redundant power supplies. To view the value range, use the online help for this command at the CLI. The upper limit of the value range is the maximum number of redundant power supplies supported by the system. Depending on the number of the inserted interface cards and power consumption, the actual number of redundant power supplies that you can configure is smaller than or equal to the maximum number of redundant power supplies supported by the system.
  • Page 261: Running Configuration

    Usage guidelines CAUTION: A device reboot might interrupt network services. • If the main startup software images are corrupted or missing, you must re-specify a set of main startup • software images before using the reboot command to reboot the device. Otherwise, the device cannot start up.
  • Page 262: Remove

    <Sysname> reboot slot 2 Start to check configuration with next startup configuration file, please wait..DONE! This command will reboot the specified slot, Continue? [Y/N]:y Now rebooting, please wait... # On an MSR4000, reboot the interface card in slot 2 by force. <Sysname>...
  • Page 263: Reset Scheduler Logfile

    reset scheduler logfile Use reset scheduler logfile to clear job execution log information. Syntax reset scheduler logfile Views User view Predefined user roles network-admin Examples # Clear job execution log information. <Sysname> reset scheduler logfile Related commands display scheduler logfile reset version-update-record Use reset version-update-record to clear the startup software image upgrade history records.
  • Page 264: Scheduler Job

    Views User view Predefined user roles network-admin Usage guidelines CAUTION: This command is disruptive. Use this command only when you cannot troubleshoot the device by using other methods, or you want to use the device in a different scenario. This command does the following: Deletes all configuration files (.cfg files) in the root directories of the storage media.
  • Page 265: Scheduler Logfile Size

    Predefined user roles network-admin Parameters job-name: Specifies the job name, a case-sensitive string of 1 to 47 characters. Usage guidelines A job can be referenced by multiple schedules. In job view, you can assign commands to the job. Examples # Create a job named backupconfig and enter job view. <Sysname>...
  • Page 266: Scheduler Reboot At

    scheduler reboot at Use scheduler reboot at to specify the reboot date and time. Use undo scheduler reboot to remove the reboot schedule configuration. Syntax scheduler reboot at time [ date ] undo scheduler reboot Default No reboot date or time is specified. Views User view Predefined user roles...
  • Page 267: Scheduler Reboot Delay

    scheduler reboot delay Use scheduler reboot delay to specify the reboot delay time. Use undo scheduler reboot to remove the reboot schedule configuration. Syntax scheduler reboot delay time undo scheduler reboot Default No reboot delay time is specified. Views User view Predefined user roles network-admin Parameters...
  • Page 268: Shutdown-Interval

    Views System view Predefined user roles network-admin Parameters schedule-name: Specifies the schedule name, a case-sensitive string of 1 to 47 characters. Usage guidelines You can configure a schedule to have the device automatically run a command or a set of commands without administrative interference.
  • Page 269: Sysname

    Use sysname to set the device name. Use undo sysname to restore the default. Syntax sysname sysname undo sysname Default The device name is HP. Views System view Predefined user roles network-admin Parameters sysname: Specifies a name for the device, a string of 1 to 64 characters.
  • Page 270: Time At

    [R2000] time at Use time at to specify an execution date and time for a one-time schedule. Use undo time to remove the execution time configuration for a schedule. Syntax time at time date undo time Default No execution time or date is specified for a schedule. Views Schedule view Predefined user roles...
  • Page 271 undo time Default No execution time or day is specified for a schedule. Views Schedule view Predefined user roles network-admin Parameters at time: Specifies the execution time in the format hh:mm. The value hh value is in the range of 0 to 23. The mm value is in the range of 0 to 59.
  • Page 272: Time Repeating

    [Sysname] scheduler schedule saveconfig [Sysname-schedule-saveconfig] time once delay 10 Related commands scheduler schedule time repeating Use time repeating to specify an execution time table for a periodic schedule. Use undo time to remove the execution time configuration for a schedule. Syntax time repeating [ at time [ date ] ] interval interval-time time repeating at time [ month-date [ month-day | last ] | week-day week-day&<1-7>...
  • Page 273: Transceiver Phony-Alarm-Disable

    The time at command, the time once command, and the time repeating command overwrite one another, whichever is configured most recently takes effect. Examples # Configure the device to execute schedule saveconfig once a hour from 8:00 a.m. on. <Sysname> system-view [Sysname] scheduler schedule saveconfig [Sysname-schedule-saveconfig] time repeating at 8:00 interval 60 # Configure the device to execute schedule saveconfig at 12:00 p.m.
  • Page 274: Usb Disable

    Usage guidelines If you install a transceiver module that has no vendor name or has a vendor name other than HP, the system repeatedly outputs traps and logs to notify you to replace the module. To continue to use a transceiver module that is manufactured or customized by HP but has no vendor information, you can disable alarm traps so the system stops outputting alarm traps.
  • Page 275 Use undo user-role to remove user roles from a schedule. Syntax user-role role-name undo user-role role-name Default A schedule has the user roles of the schedule creator. Views Schedule view Predefined user roles network-admin Parameters role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role can be user-defined or predefined.
  • Page 276: Tcl Commands

    Tcl commands tclsh Use tclsh to enter Tcl configuration view from user view. Syntax tclsh Views User view Predefined user roles network-admin Usage guidelines In Tcl configuration view, you can execute the following commands: All Tcl 8.5 commands. • • Comware commands.
  • Page 277 Examples # Return from Tcl configuration view to user view. <Sysname-tcl> tclquit <Sysname> Related commands tclsh...
  • Page 278: Support And Other Resources

    Related information Documents To find related documents, browse to the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals For related documentation, navigate to the Networking section, and select a networking category. •...
  • Page 279: Conventions

    Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which { x | y | ...
  • Page 280 Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
  • Page 281: Index

    Index A B C D E F G H I J L M N O P Q R S T U V W copyright-info enable,212 activation-key,39 append,97 databits,45 archive configuration,154 debug,101 archive configuration interval,155 delete,183 archive configuration location,156 delete,102 archive configuration max,157 delete,140 ascii,97...
  • Page 282 display ftp-user,91 free ftp user-ip ipv6,92 display history-command,6 free line,54 display history-command all,7 free user-interface,56 display hotkey,7 ftp,105 display install package,185 ftp,191 display interface m-eth0,186 ftp client ipv6 source,107 display ip routing-table,188 ftp client source,106 display ipv6 routing-table,189 ipv6,108 display line,45 ftp server acl,93...
  • Page 283 md5sum,146 redirect enable,67 memory-threshold,245 redirect listen-port,68 mkdir,195 redirect passthrough,69 mkdir,1 13 redirect refuse-negotiation,69 mkdir,146 redirect timeout,70 monitor cpu-usage enable,247 reget,1 17 monitor cpu-usage interval,248 remove,254 more,196 rename,150 more,147 rename,1 18 mount,148 reset,1 19 move,149 reset recycle-bin,150 move,196 reset saved-configuration,166 reset scheduler logfile,255 reset ssh public-key,200...
  • Page 284 ssh2,202 tftp client ipv6 source,133 startup saved-configuration,171 tftp client source,130 status,124 tftp ipv6,131 stopbit-error intolerance,76 tftp-server acl,134 stopbits,77 tftp-server ipv6 acl,134 Subscription service,270 time at,262 super,33 time once,262 super authentication-mode,33 time repeating,264 super password,34 transceiver phony-alarm-disable,265 sysname,261 system,125 umount,152 system-view,203 undelete,153 system-view,1 1 disable,266...

Table of Contents