Related Manuals for HP MSM3xx
Summary of Contents for HP MSM3xx
- Page 1 CLI Reference Guide for HP ProCurve MSM3xx / MSM4xx Access Points ProCurve 5400zl Switches ProCurve MSM3xx / MSM4xx Access Points Installation and Getting Started Guide CLI Reference Guide...
- Page 3 HP ProCurve MSM3xx / MSM4xx Access Points CLI Reference Guide...
- Page 4 Hewlett-Packard. connection with the furnishing, performance, or use of this material. Publication Number The only warranties for HP products and services are set forth 5992-5947 in the express warranty statements accompanying such May 2009 products and services.
-
Page 5: Table Of Contents
“*” and formatted in green like this: * new context * new command Introduction About this guide ......................1-2 Products covered....................1-2 HP ProCurve Product Naming ................1-2 Important terms .....................1-3 Typographical conventions ..................1-3 Command syntax ....................1-3 Management tool ....................1-4 HP ProCurve Networking support ................1-4 Before contacting support ................1-4... - Page 6 ping ..........................2-2 ps ..........................2-3 quit...........................2-3 show license ......................2-3 show logging filtered.....................2-3 top..........................2-3 traceroute .......................2-3 Enable context......................2-4 reboot device......................2-4 show certificate .....................2-4 show certificate binding ..................2-4 iperf .........................2-4 ping ..........................2-4 arping ........................2-5 arp..........................2-5 end ...........................2-5 quit...........................2-5 rcapture........................2-5 show arp .........................2-5 show bridge ......................2-5 show bridge forwarding..................2-6 show dns cache......................2-6 show interfaces......................2-6...
- Page 7 Config context ......................2-9 certificate........................2-9 certificate binding....................2-9 certificate revocation ....................2-9 end ...........................2-9 factory settings ......................2-9 interface ethernet ....................2-9 reboot device......................2-10 show certificate ....................2-10 show certificate binding ..................2-10 show config factory.....................2-10 username ......................2-10 interface ip......................2-10 interface wireless ....................2-10 local mesh profile ....................2-11 interface gre ......................2-11 virtual ap .......................2-11 * admin local authentication................2-11...
- Page 8 * clock use custom dst rules................2-15 ntp protocol......................2-16 ntp server......................2-16 * clock custom dst begins ..................2-16 * clock custom dst begins format ..............2-16 * clock custom dst ends ..................2-17 * clock custom dst ends format ................2-17 ntp server......................2-17 ntp server failure trap ..................2-17 config-update automatic ..................2-18 config-update operation..................2-18 config-update time....................2-18...
- Page 9 snmp-server access interface gre ..............2-23 snmp-server access wireless ................2-24 snmp-server access port-2 ..................2-24 * snmp-server user ....................2-24 * snmp-server notification receiver ..............2-24 soap-server ......................2-24 soap-server access interface vlan..............2-25 soap-server access port-1 ...................2-25 soap-server access port-2 ...................2-25 soap-server allow....................2-25 soap-server http authentication.................2-25 soap-server http authentication password ............2-26 soap-server http authentication username............2-26 soap-server port ....................2-26...
- Page 10 firmware-update automatic................2-30 firmware-update start ..................2-31 firmware-update time..................2-31 firmware-update uri ....................2-31 firmware-update weekday..................2-31 snmp-server trap firmware-update..............2-31 access-controller restrict location..............2-32 service-sensor ......................2-32 service-sensor ......................2-32 service-sensor poll....................2-32 service-sensor retry .....................2-33 service-sensor timeout..................2-33 ip name-server......................2-33 ip name-server cache ..................2-33 ip name-server dynamic..................2-34 ip name-server interception ................2-34 ip name-server switch-on-servfail ..............2-34 ip name-server switch-over ................2-34 snmp-server trap unauthorized-ap ..............2-34...
- Page 11 add wireless ip-qos profile..................2-39 delete wireless ip-qos profile all ................2-39 delete wireless ip-qos profile ................2-39 wireless link qos ....................2-39 sensor discovery mode ..................2-39 sensor network detector..................2-40 sensor server id....................2-40 sensor server name .....................2-40 config-version.......................2-40 Port-2 interface context.....................2-41 end .........................2-41 duplex ........................2-41 speed ........................2-41 vlan ........................2-41 vlan compatibility mode ..................2-42...
- Page 12 Wireless context ......................2-48 end .........................2-48 radio active ......................2-48 rts threshold ......................2-48 distance.........................2-48 dot11........................2-49 transmit power.....................2-49 antenna bidirectionnal ..................2-50 antenna gain ......................2-50 autochannel skip....................2-50 beacon interval ....................2-50 dot11 automatic frequency.................2-50 dot11 automatic frequency period ..............2-51 dot11 automatic frequency time ................2-51 dot11 automatic transmit-power ...............2-51 dot11 automatic transmit-power period ............2-51 multicast rate .......................2-51 station distance....................2-51...
- Page 13 authentication server radius ................2-56 dot1x authentication ...................2-56 wpa-psk.........................2-57 authentication server accounting radius stationid case.........2-57 authentication server accounting radius stationid delimiter ......2-57 wireless filters......................2-57 wireless filters mac .....................2-57 wireless filters rule input..................2-58 wireless filters rule output .................2-58 wireless filters type .....................2-58 mac-filters local ....................2-59 mac-filters......................2-60 mac-filters mode ....................2-60...
- Page 14 security .........................2-66 VLAN interface context .....................2-67 end .........................2-67 ip address......................2-67 ip address mode....................2-67 vlan name......................2-68 Local mesh context ....................2-69 end .........................2-69 active ........................2-69 interface ........................2-69 local mesh name ....................2-69 remote mac......................2-69 security .........................2-70 security mode.......................2-70 security psk ......................2-70 security wep ......................2-70 speed ........................2-70 interface vlan......................2-70 accept forced links ....................2-71...
- Page 15 radius-server message-authenticator ..............2-74 radius-server name ....................2-74 radius-server nasid ....................2-75 radius-server timeout ..................2-75 radius-server timeout ..................2-75 IP_QOS context ......................2-76 end .........................2-76 end-port.........................2-76 priority ........................2-76 profile name ......................2-76 protocol.........................2-76 start-port .......................2-76 GRE interface context ....................2-78 end force .......................2-78 gre name .......................2-78 ip address......................2-78 peer ip address.....................2-78 remote ip address ....................2-78 Syslog destination context ..................2-79...
- Page 16 * user name ......................2-82 * SNMP notification receiver context..............2-83 * community ......................2-83 * end........................2-83 * port ........................2-83 * receiver ......................2-83 * user........................2-83 * version .......................2-83...
- Page 17 Alphabetical list of commands In this alphabetical list, new to 5.3.x commands are preceded delete ip-qos profile 2-64 by an asterisk “*” and formatted in green like this: delete ip-qos profile all 2-64 delete wireless ip-qos profile 2-39 * command 2-xxx delete wireless ip-qos profile all 2-39 discovery protocol 2-36 discovery protocol device-id 2-36...
- Page 18 ip http port 2-12 quit 2-3 ip https port 2-12 quit 2-5 ip name-server 2-33 radio active 2-48 ip name-server cache 2-33 radius-server accounting port 2-73 ip name-server dynamic 2-34 radius-server alternate hosts 2-73 ip name-server interception 2-34 radius-server authentication method 2-73 ip name-server switch-on-servfail 2-34 radius-server authentication port 2-73 ip name-server switch-over 2-34...
- Page 19 snmp-server access port-2 2-24 soap-server ssl with client certificate 2-26 snmp-server access wireless 2-24 spectralink view 2-52 snmp-server allow 2-20 speed 2-41 snmp-server chassis-id 2-20 speed 2-43 snmp-server contact 2-20 speed 2-70 snmp-server heartbeat period 2-20 ssid name 2-55 snmp-server location 2-20 start-port 2-76 * snmp-server notification receiver 2-24 station distance 2-51...
- Page 20 xviii...
-
Page 21: Introduction
Chapter 1: Introduction Introduction Contents About this guide ......................1-2 Products covered....................1-2 HP ProCurve Product Naming ................1-2 Important terms .....................1-3 Typographical conventions ..................1-3 HP ProCurve Networking support ................1-4 Online documentation ....................1-5 CLI support in autonomous and controlled modes ..........1-5 Controlled mode ....................1-5 Autonomous mode ....................1-5... -
Page 22: About This Guide
Introduction About this guide About this guide This guide explains how to work with the Command Line Interface (CLI) on HP ProCurve Networking MSM3xx and MSM4xx APs. Products covered This guide covers the following products: Part number Worldwide version version... -
Page 23: Important Terms
Important terms The following terms are used in this guide. Term Description Refers to any HP ProCurve Networking MSM3xx or MSM4xx Access Point. service controller Refers to any HP ProCurve Networking MSM7xx Controller, including both Access Controller and Mobility Controller variants. -
Page 24: Management Tool
Network > Ports. HP ProCurve Networking support HP ProCurve Networking offers support 24 hours a day, seven days a week through a number of automated electronic services. See the Customer Support/Warranty booklet included with your product. -
Page 25: Online Documentation
Introduction Online documentation Online documentation For the latest documentation, visit the HP ProCurve Networking manuals Web page at: www.procurve.com/manuals. CLI support in autonomous and controlled modes An AP operates in either controlled mode or autonomous mode. Controlled mode Controlled mode is the factory default mode for all APs. -
Page 26: Configuring Cli Support
Introduction Configuring CLI support Configuring CLI support Using the AP management tool, open the page Management > CLI. Use this page to enable/ disable CLI support via an SSH or serial connection. A maximum of three concurrent CLI sessions are supported regardless of the connection type. The CLI supports SSH on the standard TCP port (22). -
Page 27: Ssh Client Support
Introduction Entering strings SSH client support The following SSH clients have been tested with the CLI. Others may work as well: „ OpenSSH Tectia „ „ SecureCRT „ Putty Entering strings When entering a value that contains spaces, you must enclose it in quotation marks. For example, if the command syntax is: ssid <name>... -
Page 28: Sample Cli Session
Introduction Sample CLI session Sample CLI session This sample CLI session shows you how to set the wireless port to support 802.11a on channel 60 with medium distance between access points. (The CLI prompt is shown in bold.) CLI> enable CLI# config CLI(config)# interface wireless CLI(config-if-wlan)# dot11 a 60... -
Page 29: Cli Commands
Chapter 2: CLI commands CLI commands... -
Page 30: View Context
CLI commands View context Path: View This is the root of the command tree. arping Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 arping [ -AbDfhqUV] [ -c <count>] [ -w <deadline>] [ -s <source>] -I <interface> <destination> Pings a destination on a device interface using ARP packets. enable Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 enable... -
Page 31: Quit
CLI commands Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 Displays all running processes. quit Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 quit Quits the CLI. show license Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show license (eula | gpl | other) Displays license information. -
Page 32: Enable Context
CLI commands Enable context Path: View > Enable This context provides access to various utilities. reboot device Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 reboot device Restarts the system. show certificate Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show certificate Display current certificates. -
Page 33: Arping
CLI commands arping Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 arping [ -AbDfhqUV] [ -c <count>] [ -w <deadline>] [ -s <source>] -I <interface> <destination> Pings a destination on a device interface using ARP packets. Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 arp [-evn] [-H <type>] [-i if] ?- [<hostname>] arp [-v] [-i if] -d <hostname>... -
Page 34: Show Bridge Forwarding
CLI commands show bridge forwarding Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show bridge forwarding Show bridge forwarding information. show dns cache Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show dns cache [<serial>] Show DNS cache entries. Specify a serial number to display detailed information. show interfaces Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show interfaces... -
Page 35: Show Dot11 Associations
CLI commands show dot11 associations Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show dot11 associations Show all current wireless associations. show dot11 statistics client-traffic Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show dot11 statistics client-traffic Show current client matrix statistics. show local mesh Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show local mesh... -
Page 36: Show All Config
CLI commands show all config Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show all config Print all configuration that applies to this device. -
Page 37: Config Context
CLI commands Config context Path: View > Enable > Config This is the root context for all configuration commands. certificate Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 certificate (authority | local) <uri> <certname> [<password>] Add a new certificate to the store, using the friendly name. certificate binding Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 certificate binding (web-management | html-auth | soap | eap) <certname>... -
Page 38: Reboot Device
CLI commands reboot device Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 reboot device Restarts the system. show certificate Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show certificate Display current certificates. show certificate binding Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 show certificate binding Display how the certificates are used. -
Page 39: Local Mesh Profile
CLI commands local mesh profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 local mesh link <name> Switches to the specified local mesh link context. Parameters Number of the local mesh link to configure. <name> interface gre Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 interface gre <name>... -
Page 40: Admin Radius Authentication Server
CLI commands admin radius authentication server Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 admin radius authentication server <name> Sets the authentication of administrator logins to occur using RADIUS. ip http port Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ip http port <number> Sets the port number to use for HTTP access to the AP. -
Page 41: Snmp-Server Trap Web-Fail
CLI commands snmp-server trap web-fail Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap web-fail Send a trap each time an administrator login is refused. no snmp-server trap web-fail Do not send a trap each time an administrator login is refused. snmp-server trap web-login Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap web-login... -
Page 42: World-Mode Dot11 Country Code
CLI commands world-mode dot11 country code Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 world-mode dot11 country code <code> Specifies the country the AP is operating in. Parameters An ISO3166 three-letter country code. <code> web access port-1 Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 web access port-1 Enables access to the management tool via Port-2. -
Page 43: Web Access Local Mesh
CLI commands no web access interface gre <name> Disables access to the management tool via the specified GRE tunnel. web access local mesh Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 web access local mesh <name> Enables access to the management tool via the specified local mesh. no web access local mesh <name>... -
Page 44: Ntp Protocol
CLI commands ntp protocol Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ntp protocol (ntp | sntp) Sets the network time protocol to use. ntp server Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ntp server Enable this option to have the AP periodically contact a network time server to update its internal clock. -
Page 45: Clock Custom Dst Ends
CLI commands clock custom dst ends Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 clock custom dst end <day> <weekday> <month> <time> Set parameters of the rule defining the end of daylight savings time. Parameters Day of the month. Range 1 - 31. <day>... -
Page 46: Config-Update Automatic
CLI commands config-update automatic Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 config-update automatic Enables scheduled configuration restore or backup. no config-update automatic Disables scheduled configuration restore or backup. The AP can automatically download the configuration file from a local or remote URL (restore). It is also possible to upload the current configuration to a given URL (backup). -
Page 47: Snmp-Server Trap Config-Update
CLI commands no snmp-server trap config-change Do not send this trap. snmp-server trap config-update Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap config-update Send a trap whenever the firmware is updated. no snmp-server trap config-update Do not send this trap. logging destination Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 logging destination <name>... -
Page 48: Snmp-Server Allow
CLI commands snmp-server allow Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server allow <ip address>/<mask> Adds a host to the list of IP address from which access to the SNMP interface is permitted. no snmp-server allow <ip address>/<mask> Removes a host from the list of IP address from which access to the SNMP interface is permitted. Parameters IP address. -
Page 49: Snmp-Server Port
CLI commands Parameters Location where the AP is installed. <name> snmp-server port Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server port <port number> Sets the port the AP will use to respond to SNMP requests. Parameters SNMP port number. Range 1 - 65535. <port number>... -
Page 50: Snmp-Server Trap Destination
CLI commands snmp-server trap destination Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap destination <host> <[port number]> Add a new trap destination. no snmp-server trap destination <host> [<port>] Deletes the specified trap destination. Parameters Sets the IP address or domain name of the host that the AP will send traps <host>... -
Page 51: Snmp-Server Version 2C
CLI commands snmp-server version 2c Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server version 2c Enable version 2c no snmp-server version 2c Disable version 2c snmp-server version 3 Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server version 3 Enable version 3 no snmp-server version 3 Disable version 3 snmp-server access interface vlan... -
Page 52: Snmp-Server Access Wireless
CLI commands snmp-server access wireless Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server access wireless Enables SNMP access on the wireless port. no snmp-server access wireless Blocks SNMP access on the wireless port. snmp-server access port-2 Supported on: MSM310 MSM320 snmp-server access port-2 Enables SNMP access on the upstream port. -
Page 53: Soap-Server Access Interface Vlan
CLI commands soap-server access interface vlan Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server access interface vlan <name> Enables access to SOAP via this VLAN. no soap-server access interface vlan <name> Disables access to SOAP via this VLAN. soap-server access port-1 Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server access port-1 Enables SOAP access on the downstream port. -
Page 54: Soap-Server Http Authentication Password
CLI commands soap-server http authentication password Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server http authentication password Set the SOAP server HTTP authentication password. soap-server http authentication username Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server http authentication username Set the SOAP server HTTP authentication username. soap-server port Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server port <port number>... -
Page 55: Soap-Server Access Wireless
CLI commands soap-server access wireless Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server access wireless Enables SOAP access on the wireless port. no soap-server access wireless Blocks SOAP access on the wireless port. soap-server access local mesh Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 soap-server access local mesh <profile>... -
Page 56: Snmp-Server Trap New-Association Interval
CLI commands snmp-server trap new-association interval Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap new-association interval <number> Interval, in minutes, between notifications. snmp-server trap vpn-connection Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap vpn-connection Send a trap when a user establishes a VPN connection with the AP. no snmp-server trap vpn-connection Do not send this trap. -
Page 57: Snmp-Server Trap Wireless-Deauthentication-Fail
CLI commands snmp-server trap wireless-deauthentication-fail Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap wireless-deauthentication-fail Send a trap when a wireless client station fails to deauthenticate from the AP. no snmp-server trap wireless-deauthentication-fail Do not send this trap. snmp-server trap wireless-deauthentication-success Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap wireless-deauthentication-success Send a trap when a wireless client station deauthenticates from the AP. -
Page 58: Snmp-Server Trap Syslog-Matches
CLI commands no snmp-server trap wireless-reassociation-success Do not send this trap. snmp-server trap syslog-matches Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap syslog-matches Send a trap when syslog messages matches a specified regular expression. no snmp-server trap syslog-matches Do not send this trap. snmp-server trap syslog-matches regex Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap syslog-matches regex <regex>... -
Page 59: Firmware-Update Start
CLI commands (Different means older or newer. This enables you to return to a previous firmware version if required). Configuration settings are preserved during the update unless stated otherwise in the release notes for the firmware. However, all active connections will be terminated. Users will have to log in again after the AP restarts firmware-update start Supported on: MSM310 MSM320 MSM335 MSM410 MSM422... -
Page 60: Access-Controller Restrict Location
CLI commands access-controller restrict location Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 access-controller restrict location (gateway | mac <mac address>) Identifies the access controller the AP will communicate with. Parameters Use the default gateway as the service controller. gateway Use the specified MAC address as the gateway. MAC address. -
Page 61: Service-Sensor Retry
CLI commands service-sensor retry Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 service-sensor retry <retries> Specify how many retries the service sensor will attempt when polling the target device. When the retry limit is reached, the radio on the AP is turned off. Parameters Number of retries. -
Page 62: Ip Name-Server Dynamic
CLI commands ip name-server dynamic Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ip name-server dynamic Enables dynamic assignment of DNS servers. no ip name-server dynamic Disables dynamic DNS assignment. ip name-server interception Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ip name-server interception Intercepts all DNS requests from users and relays them to configured servers. -
Page 63: Snmp-Server Trap Unauthorized-Ap Interval
CLI commands snmp-server trap unauthorized-ap interval Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap unauthorized-ap interval <number> If set to 0, then traps are only sent when a rogue access point is detected. If set to 0, the entire list of rogue access points is sent each time the interval expires. -
Page 64: Radius-Server Profile
CLI commands The service controller will only accept authentication/location-aware information from satellites that have a matching shared secret to its own. radius-server profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radius-server profile <name> Creates a new RADIUS profile or switches to the RADIUS context with the specified profile name. no radius-server profile <name>... -
Page 65: Bridge Priority
CLI commands bridge priority Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 bridge priority <number> Sets the bridge priority for the spanning tree. The spanning tree uses the bridge ID to elect the root bridge and the designated bridges. The bridge ID is built with the MAC address of the bridge and the bridge priority. The first 2 most significant bytes are the bridge priority and the next 6 bytes are the MAC address. -
Page 66: Dot1X Reauth
CLI commands dot1x reauth Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 dot1x reauth Enable this option to force 802.1X client stations to reauthenticate. no dot1x reauth Disables 802.1X reauthentication. dot1x reauth period Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 dot1x reauth period (15m | 30m | 1h | 2h | 4h | 8h | 12h) Sets the 802.1X reauthentication interval. -
Page 67: Dynamic Key Interval
CLI commands dynamic key interval Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 dynamic key interval (5m | 10m | 15m | 30m | 1h | 2h | 4h | 8h | 12h) Specifies how often (in minutes or hours) that the group (broadcast) key is changed for 802.1X and WPA. -
Page 68: Sensor Network Detector
CLI commands „ The AP must be able to reach the RF Manager Server via a network connected to port 1 or port 2. For example, you should be able to ping the RF Manager Server IP address from the „... -
Page 69: Port-2 Interface Context
CLI commands Port-2 interface context Path: View > Enable > Config > Port-2 interface This context provides commands for configuring Port-2. Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. duplex Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 duplex (auto | half | full) Sets the duplex mode on Port-2. -
Page 70: Vlan Compatibility Mode
CLI commands vlan compatibility mode Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 vlan compatibility mode When this option is enabled, the AP sends all management traffic AND all untagged traffic on both the default VLAN and untagged. no vlan compatibility mode Disable VLAN and untagged compatibility mode. -
Page 71: Port-1 Interface Context
CLI commands Port-1 interface context Path: View > Enable > Config > Port-1 interface This context provides commands for configuring Port-1. Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. duplex Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 duplex (auto | half | full) Sets the duplex mode on Port-1. -
Page 72: Vlan-Management Filter
CLI commands vlan compatibility mode Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 vlan compatibility mode When this option is enabled, the AP sends all management traffic AND all untagged traffic on both the default VLAN and untagged. no vlan compatibility mode Disable VLAN and untagged compatibility mode. -
Page 73: Wan Ip Interface Context
CLI commands WAN IP interface context Path: View > Enable > Config > WAN IP interface This context provides commands for configuring various IP-networking related settings. pppoe client user Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 pppoe client user <username> <password> Sets the PPPoE username and password. -
Page 74: Ip Address Dhcp Client-Id
CLI commands no ip default-gateway Deletes the default gateway IP address. Parameters IP address. <address> ip address dhcp client-id Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ip address dhcp client-id <id> Specifies an ID to identify the AP to a DHCP server. This parameter is not required by all ISPs. no ip address dhcp client-id Deletes the specified DHCP client id. -
Page 75: Pppoe Unnumbered
CLI commands Parameters Maximum size (in bytes) of a PPPoE packet when transmitting. Range: 500 <bytes> - 1500 bytes. pppoe unnumbered Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 pppoe unnumbered Enable unnumbered mode. no pppoe unnumbered Disable unnumbered mode. This feature is useful when the AP is connected to the Internet and NAT is not being used. Instead of assigning two IP addresses to the AP, one to the Internet port and one to the LAN port, both ports can share a single IP address. -
Page 76: Wireless Context
CLI commands Wireless context Path: View > Enable > Config > Wireless This context provides commands for configuring the wireless network. Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. radio active Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radio active Enables the radio. -
Page 77: Dot11
CLI commands Use this parameter to adjust the receiver sensitivity of the AP. This parameter should only be changed if: „ you have more than one wireless access point installed in your location „ you are experiencing throughput problems In all other cases, use the default setting of Large. If you have installed multiple APs, reducing the receiver sensitivity of the AP from its maximum will help to reduce the amount of crosstalk between the wireless stations to better support roaming clients. -
Page 78: Antenna Bidirectionnal
CLI commands Note: The actual transmit power used may less than the value specified. The AP determines the power to used based on the settings you made for regulatory domain, wireless mode, and operating frequency. antenna bidirectionnal Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 antenna bidirectionnal (diversity | main | auxiliary) Sets the antenna to transmit and receive on. -
Page 79: Dot11 Automatic Frequency Period
CLI commands no dot11 automatic frequency Disable automatic frequency selection. dot11 automatic frequency period Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 dot11 automatic frequency period (disabled | 1h | 2h | 4h | 8h | 12h | 24h) Specify how often the frequency setting is re-evaluated when automatic frequency selection is enabled. -
Page 80: Dot11 Mode
CLI commands This is a global setting that is useful when creating wireless links to remote sites. However, it also applies to all wireless connection made with the radio, not just for wireless links. Therefore, if you are also using the radio to serve local wireless client stations, adjusting this setting may lower the performance for clients with marginal signal strength or when interference is present. -
Page 81: Bandwidth
CLI commands bandwidth Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 bandwidth Enables bandwidth control. no bandwidth Disables bandwidth control. bandwidth max Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 bandwidth max <rate> Set the maximum data rate on the wireless port in kbps. Parameters Maximum data rate. -
Page 82: Virtual Ap Context
CLI commands Virtual AP context Path: View > Enable > Config > Virtual AP This context provides commands for configuring Virtual AP profiles (VAP (VSC)s). By default one profile exists with the name "". This is the default profile and cannot be deleted. The following example shows how to add a new VAP (VSC) with egress mapped to an existing VLAN named "hongkong": CLI(config)# virtual ap newap... -
Page 83: Ssid Name
CLI commands ssid name Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ssid name <name> Specifies the WLAN name (SSID) for the profile. vlan Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 vlan <id> Assigns a VLAN ID to this VAP (VSC). no vlan Deletes the VLAN ID for this VAP (VSC). -
Page 84: Transmit Key
CLI commands transmit key Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 transmit key <key number> Sets the key the AP will use to encrypt transmitted data. All four keys are used to decrypt received data. Parameters Transmit key number. Range: 1 -4. <key number>... -
Page 85: Wpa-Psk
CLI commands wpa-psk Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 wpa-psk <key> Sets the WPA preshared key. no wpa-psk Deletes the WPA preshared key. Parameters Specify a key that is between 8 and 63 alphanumeric characters in length. It <key> is recommended that the preshared key be at least 20 characters long, and be a mix of letters and numbers. -
Page 86: Wireless Filters Rule Input
CLI commands no wireless filters mac <mac> Deletes the MAC address of the upstream device to send traffic to. wireless filters rule input Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 wireless filters rule input <rule> Adds a custom filter definition for incoming wireless traffic. Use this command to define custom security filters for incoming wireless traffic. -
Page 87: Mac-Filters Local
CLI commands Lets you define custom security filters and address for the upstream custom device. Description The AP features an intelligent bridge which can apply security filters to safeguard the flow of wireless traffic. The filters limit both incoming and outgoing traffic as defined below, and force the AP to exchange traffic with a specific upstream device. -
Page 88: Mac-Filters
CLI commands mac-filters Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 mac-filters <address> Adds an address to the MAC filter list. no mac-filters <address> Remove the specified address from the MAC filter list. Parameters MAC address. Specify 6 pairs of hexadecimal numbers separated by <address>... -
Page 89: Mac Authentication Radius Profile
CLI commands no mandatory authentication MAC-based authentication is not mandatory. mac authentication radius profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 mac authentication radius profile <radiusname> Specifies the name of the RADIUS profile to use for MAC-based authentication. no mac authentication radius profile Do not use a RADIUS profile. -
Page 90: Delete Ip Filter
CLI commands delete ip filter Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 delete ip filter <ip address>/<mask> Deletes the specified address from the IP filter list. If the list is empty, then all wireless-to-wired LAN traffic is permitted. Where: IP address. <address>... -
Page 91: Beacon Transmit Power
CLI commands beacon transmit power Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 beacon transmit power Advertise the current transmit power setting in the beacon. no beacon transmit power Do not advertise the current transmit power setting in the beacon. data rate Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 data rate (a | b | g | bg | n) <rate>... -
Page 92: Delete Ip-Qos Profile All
CLI commands delete ip-qos profile all Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 delete ip-qos profile all Clears the list of IP QoS profiles currently in effect for this VAP (VSC). delete ip-qos profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 delete ip-qos profile <name>... -
Page 93: Upstream Diffserv Tagging
CLI commands Allows a specific priority level to be specified for all traffic on a VAP (VSC) vap0 to vap3 profile. This enables client stations without a QoS mechanism to set traffic priority by connecting to the appropriate SSID. If you enable this priority mechanism, it takes precedence regardless of the priority mechanism supported by associated client stations. -
Page 94: Security
CLI commands security Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 security (none | wep | 802.1x [wep | static-wep] | wpa (psk | radius) [ v1 | v2 ] ) Sets the current wireless security policy. Parameters No wireless security. none This option enables support for wireless users with WEP client software. -
Page 95: Vlan Interface Context
CLI commands VLAN interface context Path: View > Enable > Config > Port-2 interface > VLAN interface View > Enable > Config > Port-1 interface > VLAN interface View > Enable > Config > Local mesh > VLAN interface This context provides commands for configuring Virtual LANs (VLANs). In this context, VLANs can be added or edited. -
Page 96: Vlan Name
CLI commands vlan name Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 vlan name <name> Change the name of this VLAN interface. 2-68... -
Page 97: Local Mesh Context
CLI commands Local mesh context Path: View > Enable > Config > Local mesh This context provides commands for configuring local meshes. Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. active Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 active Activates the local mesh. -
Page 98: Security Mode
CLI commands security Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 security Enables wireless security. no security Disables wireless security. security mode Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 security mode (wep | tkip | ccmp) Set the security mode. security psk Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 security psk <secret>... -
Page 99: Accept Forced Links
CLI commands accept forced links Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 accept forced links May accept master orders for selection. no accept forced links ignore master orders for selection. allowed downtime Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 allowed downtime <number> Set the allowed downtime for a connection (or a link) to a peer. -
Page 100: Preserve Master Link
CLI commands preserve master link Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 preserve master link Preserve master link across reboots. no preserve master link Do not preserve master link across reboots. promiscuous mode Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 promiscuous mode Slave: Accept any group. -
Page 101: Radius Context
CLI commands RADIUS context Path: View > Enable > Config > RADIUS This context provides commands for configuring RADIUS profiles. Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. radius-server accounting port Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radius-server accounting port <number>... -
Page 102: Radius-Server Deadtime
CLI commands radius-server deadtime Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radius-server deadtime <seconds> Sets the retry interval for access and accounting requests that time-out. If no reply is received within this interval, the AP switches between the primary and secondary RADIUS servers (if defined). -
Page 103: Radius-Server Nasid
CLI commands radius-server nasid Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 radius-server nasid <id> Sets the network access server ID you want to use for the AP. By default, the serial number of the AP is used. The AP includes the NAS-ID attribute in all packets that it sends to the RADIUS server. -
Page 104: Ip_Qos Context
CLI commands IP_QOS context Path: View > Enable > Config > IP_QOS This context provides commands for configuring IP QoS profiles. Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Returns to a previous context. end-port Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end-port <number>... - Page 105 CLI commands Parameters Start port number. Range: 0 - 65535 <number> 2-77...
-
Page 106: Gre Interface Context
CLI commands GRE interface context Path: View > Enable > Config > GRE interface Details of the GRE interface. end force Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end [force] Quits the GRE context. gre name Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 gre name <name>... -
Page 107: Syslog Destination Context
CLI commands Syslog destination context Path: View > Enable > Config > Syslog destination This context provides commands for configuring Syslog destinations. active Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 active Enables logging to the current destination. no active Disables logging to the current destination. logging facility Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 logging facility (local0 | local1 | local2 | local3 | local4 | local5 | local6 |... -
Page 108: Level
CLI commands Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. level Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 level Enables filtering of the log file by severity level. no level Disables filtering of the log file by severity level. level Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 level (lower | higher) (debug | info | notice | warning | error | critical |... -
Page 109: Message
CLI commands no message Disables filtering of the log file message field. message Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 message (matches | notmatches) <regex> Use this filter to include log messages. Use a regular expression to define the match criteria for the log file message field. -
Page 110: Snmp User Context
CLI commands SNMP user context Path: View > Enable > Config > SNMP user This context provides commands for configuring SNMP user. access level Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 access level (read-only | read-write) Specifies the access level for this SNMP user. Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Returns to a previous context. -
Page 111: Snmp Notification Receiver Context
CLI commands SNMP notification receiver context Path: View > Enable > Config > SNMP notification receiver This context provides commands for configuring SNMP notification receiver. community Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 community <community> Specifies the community for this SNMP notification receiver. Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Returns to a previous context. - Page 112 CLI commands 2-84...
- Page 114 To learn more, visit www.hp.com/go/procurve/ © Copyright 2009 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services.