HP ProCurve 7102dl Reference Manual
  1. Manuals
  2. Brands
  3. HP Manuals
  4. Network Router
  5. ProCurve Secure 7102dl
  6. Reference manual
HP ProCurve 7102dl Reference Manual

HP ProCurve 7102dl Reference Manual

Secure router sros command line interface
Hide thumbs Also See for ProCurve 7102dl:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
Table of Contents

Advertisement

Quick Links

Download this manual See also: Configuration Manual
SROS Command Line Interface Reference Guide
ProCurve Secure Router 7102dl
ProCurve Secure Router 7203dl

Advertisement

Table of Contents
loading

Related Manuals for HP ProCurve 7102dl

Summary of Contents for HP ProCurve 7102dl

  • Page 1 SROS Command Line Interface Reference Guide ProCurve Secure Router 7102dl ProCurve Secure Router 7203dl...
  • Page 3 SROS Command Line Interface Reference Guide Software Version J.08.03 September 2007 61195880L1-35H...
  • Page 4 The only warranties for HP products and services are set forth in the Publication Number express warranty statements accompanying such products and services.

  • Page 5: Table Of Contents

    SROS Command Line Interface Reference Guide Table of Contents Basic Mode Command Set ............12 Enable Mode Command Set .
  • Page 6 SROS Command Line Interface Reference Guide Network Monitor Track Configuration Command Set ....... 1347 Router (OSPF) Configuration Command Set .
  • Page 7 SROS Command Line Interface Reference Guide CLI Introduction REFERENCE GUIDE INTRODUCTION This manual provides information about the commands that are available with all of the ProCurve Secure routers. If you are new to the SROS Command Line Interface (CLI), take a few moments to review the information provided in the section which follows (CLI Introduction).
  • Page 8 SROS Command Line Interface Reference Guide Understanding Configuration Modes Level Access by... Prompt With this level you can... Enable • manage the startup and running entering enable while in the ProCurve# configurations Basic command security level as follows: • use the debug commands >enable •...
  • Page 9 SROS Command Line Interface Reference Guide Using CLI Shortcuts Mode Access by... Sample Prompt With this mode you can... Router • configure RIP or entering router rip router ProCurve(config-rip)# OSPF parameters router ospf while at the Global • suppress route Configuration mode prompt.
  • Page 10 SROS Command Line Interface Reference Guide Performing Common CLI Functions Shortcut Description <Ctrl> + A Jump to the beginning of the displayed command line. This shortcut is helpful when using the no form of commands (when available). For example, pressing <Ctrl + A> at the following prompt will place the cursor directly after the #: ProCurve(config-eth 0/1)#ip address 192.168.55.6 <Ctrl>...

  • Page 11: Understanding Cli Error Messages

    SROS Command Line Interface Reference Guide Understanding CLI Error Messages Command Description Displays the current configuration. show running config Use the command to troubleshoot problems you debug debug may be experiencing on your network. These commands provide additional information to help you better interpret possible problems.
  • Page 12 SROS Command Line Interface Reference Guide Command Descriptions COMMAND DESCRIPTIONS This portion of the guide provides a detailed listing of all available commands for the SROS CLI (organized by command set). Each command listing contains pertinent information including the default value, a description of all sub-command parameters, functional notes for using the command, and a brief technology review.
  • Page 13 SROS Command Line Interface Reference Guide Command Descriptions Community List Command Set on page 1327 Router (RIP) Configuration Command Set on page 1379 Router (OSPF) Configuration Command Set on page 1360 Router (PIM Sparse) Configuration Command Set on page 1375 Quality of Service (QoS) Map Commands on page 1391 DHCP Pool Command Set...

  • Page 14: Basic Mode Command Set

    SROS Command Line Interface Reference Guide Basic Mode Command Set ASIC OMMAND To activate the Basic mode, simply log in to the unit. After connecting the unit to a VT100 terminal (or terminal emulator) and activating a terminal session, the following prompt displays: ProCurve>...
  • Page 15 SROS Command Line Interface Reference Guide Basic Mode Command Set enable Use the enable command (at the Basic Command mode prompt) to enter the Enable Command mode. Use the disable command to exit the Enable Command mode. Syntax Description No subcommands. Default Values No default value necessary for this command.
  • Page 16 SROS Command Line Interface Reference Guide Basic Mode Command Set logout Use the logout command to terminate the current session and return to the login screen. Syntax Description No subcommands. Default Values No defaults necessary for this command. Usage Examples The following example shows the logout command being executed in the Basic mode: ProCurve>logout Session now available...

  • Page 17: Show Clock

    SROS Command Line Interface Reference Guide Basic Mode Command Set show clock Use the show clock command to display the system time and date entered using the clock set command. Refer to clock set <time> <day> <month> <year> on page 63 for more information. Syntax Description No subcommands.
  • Page 18 SROS Command Line Interface Reference Guide Basic Mode Command Set show snmp Use the show snmp command to display the system Simple Network Management Protocol (SNMP) parameters and current status of SNMP communications. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is an example output using the show snmp command for a system with SNMP disabled and the default chassis and contact parameters:...
  • Page 19 SROS Command Line Interface Reference Guide Basic Mode Command Set show version Use the show version command to display the current SROS version information. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is a sample show version output: ProCurve>show version ProCurve Secure Router 7203dl SROS Version: J03.01...
  • Page 20 SROS Command Line Interface Reference Guide Basic Mode Command Set telnet <address> Use the telnet command to open a Telnet session (through the SROS) to another system on the network. Syntax Description <address> Specifies the IP address of the remote system. Default Values No default value necessary for this command.
  • Page 21 SROS Command Line Interface Reference Guide Basic Mode Command Set traceroute <address> Use the traceroute command to display the IP routes a packet takes to reach the specified destination. Syntax Description <address> Specifies the IP address of the remote system to trace the routes to. Default Values No default value necessary for this command.

  • Page 22: Enable Mode Command Set

    SROS Command Line Interface Reference Guide Enable Mode Command Set NABLE OMMAND To activate the Enable mode, enter the enable command at the Basic mode prompt. (If an enable password has been configured, a password prompt will display.) For example: ProCurve>enable Password: XXXXXXX ProCurve#...
  • Page 23 SROS Command Line Interface Reference Guide Enable Mode Command Set traceroute <address> source <address> on page 295 undebug all on page 296 wall <message> on page 297 write [erase | memory | network | terminal] on page 298 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.
  • Page 24 SROS Command Line Interface Reference Guide Enable Mode Command Set autosynch Use the autosynch command to force a synchronization of the SROS.BIZ and startup-config files located in system flash and compact flash memory. Syntax Description No subcommands. Default Values No default value necessary for this command. Functional Notes The AutoSynch features configures the system to synchronize the startup-config and SROS.BIZ files...
  • Page 25 SROS Command Line Interface Reference Guide Enable Mode Command Set The show autosynch-status command displays the current AutoSynch configuration and the statistics for the SROS.BIZ and startup-config files (if AutoSynch is enabled). ProCurve>enable ProCurve#show autosynch-status AutoSynch: Mode - Enabled AutoSynch: SROS.BIZ synched AutoSynch: startup-config synched Usage Examples The following example forces a synchronization of startup-config and SROS.BIZ (located in system flash...
  • Page 26 SROS Command Line Interface Reference Guide Enable Mode Command Set clear access-list <listname> Use the clear access-list command to clear all counters associated with all access lists (or a specified access list). Syntax Description <listname> Optional. Specifies the name (label) of an access list Default Values No default value necessary for this command.
  • Page 27 SROS Command Line Interface Reference Guide Enable Mode Command Set clear arp-cache Use the clear arp-cache command to remove all dynamic entries from the Address Resolution Protocol (ARP) cache table. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example removes all dynamic entries from the ARP cache: ProCurve>enable...
  • Page 28 SROS Command Line Interface Reference Guide Enable Mode Command Set clear arp-entry <address> Use the clear arp-entry command to remove a single entry from the Address Resolution Protocol (ARP) cache. Syntax Description <address> Specifies the IP address of the entry to remove. Default Values No default value necessary for this command.
  • Page 29 SROS Command Line Interface Reference Guide Enable Mode Command Set clear bridge <group#> Use the clear bridge command to clear all counters associated with bridging (or for a specified bridge-group). Syntax Description <group#> Optional. Specifies a single bridge group (1-255). Default Values No default value necessary for this command.
  • Page 30 SROS Command Line Interface Reference Guide Enable Mode Command Set clear buffers max-used Use the clear buffers max-used command to clear the maximum-used statistics for buffers displayed in the show memory heap command. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example clears the maximum-used buffer statics: ProCurve>enable...
  • Page 31 SROS Command Line Interface Reference Guide Enable Mode Command Set clear counters [<interface> <interface id>] Use the clear counters command to clear all interface counters (or the counters for a specified interface). Syntax Description <interface> Optional. Specifies a single interface. Enter clear counters ? or show interface ? for a complete list of interfaces.
  • Page 32 SROS Command Line Interface Reference Guide Enable Mode Command Set clear counters probe Use the clear counters probe command to reset counters on all probe objects or on a specific probe. Variations of this command include: clear counters probe clear counters probe <name> Syntax Description <name>...
  • Page 33 SROS Command Line Interface Reference Guide Enable Mode Command Set clear counters track Use the clear counters track command to reset counters on all track objects or on a specifically named track. clear counters track clear counters track <name> Syntax Description <name>...
  • Page 34 SROS Command Line Interface Reference Guide Enable Mode Command Set clear crypto ike sa [policy <policy priority> | remote-id <remote-id>] Use the clear crypto ike sa command to clear existing IKE security associations (SAs), including active ones. Use the policy and remote-id options to remove specific SAs. Syntax Description policy <policy priority>...

  • Page 35: Clear Crypto Ipsec Sa

    SROS Command Line Interface Reference Guide Enable Mode Command Set clear crypto ipsec sa Use the clear crypto ipsec sa command to clear existing IPSec security associations (SAs), including active ones. Variations of this command include the following: clear crypto ipsec sa clear crypto ipsec sa entry <ip address>...
  • Page 36 SROS Command Line Interface Reference Guide Enable Mode Command Set clear dump-core The clear dump-core command clears diagnostic information appended to the output of the show version command. This information results from an unexpected unit reboot. Syntax Description No subcommands. Default Values No default value necessary for this command.
  • Page 37 SROS Command Line Interface Reference Guide Enable Mode Command Set clear event-history Use the clear event-history command to clear all messages logged to the local event-history. Warning Messages cleared from the local event-history (using the clear event-history command) are no longer accessible. Syntax Description No subcommands.
  • Page 38 SROS Command Line Interface Reference Guide Enable Mode Command Set clear host [ * | <hostname> ] Use the clear host command to clear a hostname (and associated address) from the DNS host-to-address table. Syntax Description Clears all hosts from the host table. <hostname>...
  • Page 39 SROS Command Line Interface Reference Guide Enable Mode Command Set clear ip bgp [* | <as-number> | <ip address>] [in | out | soft] Use the clear ip bgp command to clear BGP neighbors as specified. Syntax Description Clears all BGP neighbors. <as-number>...
  • Page 40 SROS Command Line Interface Reference Guide Enable Mode Command Set clear ip cache Use the clear ip cache command to delete cache table entries. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example removes all entries from the cache table: ProCurve>enable ProCurve#clear ip cache 5991-2114...
  • Page 41 SROS Command Line Interface Reference Guide Enable Mode Command Set clear ip dhcp-server binding [* | <ip address>] Use the clear ip dhcp-server binding command to clear Dynamic Host Configuration Protocol (DHCP) server binding entries from the database. Syntax Description Clears all automatic binding entries.
  • Page 42 SROS Command Line Interface Reference Guide Enable Mode Command Set clear ip igmp group [<group-address> | <interface>] Use the clear ip igmp group command to clear entries from the Internet Group Management Protocol (IGMP) tables. If no address or interface is specified, all non-static IGMP groups are cleared with this command.
  • Page 43 SROS Command Line Interface Reference Guide Enable Mode Command Set clear ip ospf [process | redistribution] Use the clear ip ospf command to reset open shortest path first (OSPF) information. Syntax Description process Restarts the OSPF process. redistribution Refreshes routes redistributed over OSPF. Default Values No default value necessary for this command.
  • Page 44 SROS Command Line Interface Reference Guide Enable Mode Command Set clear ip policy-sessions Use the clear ip policy-sessions command to clear policy class sessions. You may clear all the sessions or a specific session. Refer to the show ip policy-sessions for a current session listing. The following lists the complete syntax for the clear ip policy-sessions commands: clear ip policy-sessions clear ip policy-sessions <classname>...
  • Page 45 SROS Command Line Interface Reference Guide Enable Mode Command Set Usage Examples The following example clears the Telnet association (TCP port 23) for policy class pclass1 with source IP address 172.22.71.50 and destination 172.22.71.130: ProCurve>enable ProCurve#clear ip policy-sessions pclass1 tcp 172.22.71.50 23 172.22.71.130 23 5991-2114 ©...
  • Page 46 SROS Command Line Interface Reference Guide Enable Mode Command Set clear ip policy-stats <classname> entry <policy class #> Use the clear ip policy-stats command to clear statistical counters for policy classes. Syntax Description <classname> Optional. Specifies the policy class to clear. If no policy class is specified, statistics are cleared for all policies.
  • Page 47 SROS Command Line Interface Reference Guide Enable Mode Command Set clear ip prefix-list <listname> Use the clear ip prefix-list command to clear the IP prefix list hit count shown in the show ip prefix-list detail command output. See show ip prefix-list [detail | summary] <listname> on page 235. Syntax Description <listname>...
  • Page 48 SROS Command Line Interface Reference Guide Enable Mode Command Set clear ip route [** | <ip address> <subnet mask>] Use the clear ip route command to remove all learned routes from the IP route table. Static and connected routes are not cleared by this command. Syntax Description Deletes all destination routes.
  • Page 49 SROS Command Line Interface Reference Guide Enable Mode Command Set clear ip urlfilter statistics Use the clear ip urlfilter statistics command to clear all statistics counters for URL filter requests and responses. Syntax Description No subcommands. Default Values No default necessary for this command. Usage Examples The following example clears all counters for URL filter requests and responses: ProCurve>enable...
  • Page 50 SROS Command Line Interface Reference Guide Enable Mode Command Set clear lldp counters Use the clear lldp counters command to reset all LLDP packet counters to 0 on all interfaces. Syntax Description No subcommands. Default Values There are no default settings for this command. Usage Examples The following example resets all LLDP counters: ProCurve>enable...
  • Page 51 SROS Command Line Interface Reference Guide Enable Mode Command Set clear lldp counters interface <interface> Use the clear lldp counters interface command to reset all LLDP packet counters to 0 for a specified interface. Syntax Description <interface> Clears the information for the specified interface. Type clear lldp counters interface ? for a complete list of applicable interfaces.
  • Page 52 SROS Command Line Interface Reference Guide Enable Mode Command Set clear lldp neighbors Use the clear lldp neighbors command to remove all neighbors from this unit’s database. As new local loop demarcation point (LLDP) packets are received, the database will contain information about neighbors included in those frames.
  • Page 53 SROS Command Line Interface Reference Guide Enable Mode Command Set clear pppoe <ppp interface #> Use the clear pppoe command to terminate the current PPPoE client session and cause the SROS to attempt to re-establish the session. Syntax Description <ppp interface #> PPP interface number.
  • Page 54 SROS Command Line Interface Reference Guide Enable Mode Command Set clear processes cpu max Use the clear process cpu max command to clear the maximum CPU usage statistic which is displayed in the show process cpu command output. Syntax Description No subcommands.
  • Page 55 SROS Command Line Interface Reference Guide Enable Mode Command Set clear processes queue Use the clear processes queue command to clear the contents of the system processing queues. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example clears the contents of the system processing queues: ProCurve>enable...
  • Page 56 SROS Command Line Interface Reference Guide Enable Mode Command Set clear qos map Use the clear qos map command to clear the statistics for all defined QoS maps or for maps meeting user-configured specifications. Variations of this command include the following: clear qos map <map name>...
  • Page 57 SROS Command Line Interface Reference Guide Enable Mode Command Set clear route-map counters <map> Use the clear route-map counters command to reset route map hit counters. Syntax Description <map> Specifies specific route map to be cleared. Default Values No default value necessary for this command. Usage Examples The following example clears all route map counters: ProCurve>enable...
  • Page 58 SROS Command Line Interface Reference Guide Enable Mode Command Set clear sip location [** | <username>] Use the clear sip location command to clear session initiation protocol (SIP) location database statistics. Syntax Description Clears all dynamic location entries. <username> Specifies specific username to clear. Default Values No default value necessary for this command.
  • Page 59 SROS Command Line Interface Reference Guide Enable Mode Command Set clear sip user-registration Use the clear sip user-registration command to clear local session initiation protocol (SIP) server registration information. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example clears all SIP server registration information: ProCurve>enable...
  • Page 60 SROS Command Line Interface Reference Guide Enable Mode Command Set clear spanning-tree counters [interface <interface id>] The clear spanning-tree counters command clears the following counts: BPDU transmit, BPDU receive, and number of transitions to forwarding state. Syntax Description interface <interface id> Optional.
  • Page 61 SROS Command Line Interface Reference Guide Enable Mode Command Set clear spanning-tree detected-protocols [interface <interface id>] Use the clear spanning-tree detected-protocols command to restart the protocol migration process. Syntax Description interface Optional. Choose the Ethernet interface. <interface id> Optional. Enter a valid interface ID (e.g., 0/1 for Ethernet 0/1). Default Values No default value necessary for this command.
  • Page 62 SROS Command Line Interface Reference Guide Enable Mode Command Set clear tacacs+ statistics Use the clear tacacs+ statistics command to delete all terminal access controller access control system (TACACS+) protocol statistics. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example clears all TACACS+ protocol statistics: ProCurve>enable...
  • Page 63 SROS Command Line Interface Reference Guide Enable Mode Command Set clear user [console <user number> | ssh <user number> | telnet <user number>] Use the clear user command to detach a user from a given line. Syntax Description console <user number> Detaches a specific console user. Valid range is 0 to 1. ssh <user number>...
  • Page 64 SROS Command Line Interface Reference Guide Enable Mode Command Set clock [auto-correct-dst | no-auto-correct-dst] The clock auto-correct-dst command allows the unit to automatically correct for Daylight Saving Time (DST). Use the clock no-auto-correct-dst command to disable this feature. Syntax Description auto-correct-DST Configures the unit to automatically correct for DST.
  • Page 65 SROS Command Line Interface Reference Guide Enable Mode Command Set clock set <time> <day> <month> <year> Use the clock set command to configure the system software clock. For the command to be valid, all fields must be entered. See the Usage Example below for an example. Syntax Description <time>...
  • Page 66 SROS Command Line Interface Reference Guide Enable Mode Command Set clock timezone <text> The clock timezone command sets the unit’s internal clock to the timezone of your choice. This setting is based on the difference in time (in hours) between Greenwich Mean Time (GMT) or Central Standard Time (CST) and the timezone for which you are setting up the unit.
  • Page 67 SROS Command Line Interface Reference Guide Enable Mode Command Set Functional Notes (cont’d) clock timezone +2-Helsinki clock timezone -3-Greenland clock timezone +2-Jerusalem clock timezone -3:30 clock timezone +3-Baghdad clock timezone -4-Atlantic-Time clock timezone +3-Kuwait clock timezone -4-Caracus clock timezone +3-Moscow clock timezone -4-Santiago clock timezone +3-Nairobi clock timezone -5...
  • Page 68 SROS Command Line Interface Reference Guide Enable Mode Command Set configure Use the configure command to enter the Global Configuration mode or to configure the system from memory. See Global Configuration Mode Command Set on page 299 for more information. Syntax Description terminal Enters the Global Configuration mode.
  • Page 69 SROS Command Line Interface Reference Guide Enable Mode Command Set copy [cflash | flash] <filename> boot Use the copy boot commands to copy the specified file (located in flash memory or on the compact flash card) to the Boot ROM. Syntax Description cflash Specifies the memory location for the file to copy as compact flash memory.
  • Page 70 SROS Command Line Interface Reference Guide Enable Mode Command Set copy cflash Use the copy cflash command to copy file located on the compact flash card to a specified destination. Variations of this command include: copy cflash <filename> cflash <filename> copy cflash <filename>...
  • Page 71 SROS Command Line Interface Reference Guide Enable Mode Command Set The following example creates a copy of the file myfile.biz (located on the compact flash card), names the new file newfile.biz, and places the new file on the installed compact flash card: ProCurve>enable ProCurve#copy cflash myfile.biz cflash newfile.biz The following example replaces the startup configuration file with the file newconfig.txt.
  • Page 72 SROS Command Line Interface Reference Guide Enable Mode Command Set copy console flash <filename> Use the copy console command to copy the console’s input to a text file. To end copying to the text file, type <Ctrl+D>. The file will be saved in the SROS root directory. Syntax Description <filename>...
  • Page 73 SROS Command Line Interface Reference Guide Enable Mode Command Set copy flash Use the copy flash command to copy files located in flash memory to a specified destination. Variations of this command include: copy flash <filename> cflash <filename> copy flash <filename> flash <filename> copy flash <filename>...
  • Page 74 SROS Command Line Interface Reference Guide Enable Mode Command Set Usage Examples The following example creates a copy of the file myfile.biz (located in flash memory), names the new file newfile.biz, and places the new file in flash memory: ProCurve>enable ProCurve#copy flash myfile.biz flash newfile.biz The following example copies the file myfile.biz (located in flash memory) to compact flash memory (naming the new file newfile.biz):...
  • Page 75 SROS Command Line Interface Reference Guide Enable Mode Command Set The following example copies the software file J03_01.biz (located in flash memory) to the connected terminal using XMODEM protocol: ProCurve>enable ProCurve#copy flash xmodem Source filename J03_01.biz Begin the Xmodem transfer now... Press CTRL+X twice to cancel CCCCCC The SROS is now ready to transmit the file on the CONSOLE port (using the XMODEM protocol).
  • Page 76 SROS Command Line Interface Reference Guide Enable Mode Command Set copy running-config Use the copy running-config command to create a copy of the current running-configuration and replace the current startup-configuration or save it to a specified memory location (compact flash or system flash). Variations of this command include: copy running-config tftp copy running-config xmodem...
  • Page 77 SROS Command Line Interface Reference Guide Enable Mode Command Set The following example copies the current running-configuration file to compact flash memory and names the file config_01.txt: ProCurve>enable ProCurve#copy running-config cflash config_01.txt Percent Compete 100% ProCurve# The following example copies the current running-configuration file to a TFTP server and names the file config_01.txt: ProCurve>enable ProCurve#copy running-config tftp...
  • Page 78 SROS Command Line Interface Reference Guide Enable Mode Command Set copy startup-config Use the copy startup-config command to create a copy of the current startup-configuration and replace the current running-configuration or save it to a specified memory location (compact flash or system flash). Variations of this command include: copy startup-config tftp copy startup-config xmodem...
  • Page 79 SROS Command Line Interface Reference Guide Enable Mode Command Set The following example copies the primary startup-configuration file (located in flash memory) to compact flash and names the file config_01.txt: ProCurve>enable ProCurve#copy startup-config cflash config_01.txt Percent Complete 100% ProCurve# The following example copies the current startup-configuration file to a TFTP server and names the file startup_01.txt: ProCurve>enable ProCurve#copy startup-config tftp...
  • Page 80 SROS Command Line Interface Reference Guide Enable Mode Command Set copy tftp <destination> Use the copy tftp command to copy a file located on a network Trivial File Transfer Protocol (TFTP) server to a specified destination. Syntax Description <destination> Specifies the destination of the file copied from the TFTP server. Valid destinations include: cflash (installed compact flash card), flash (flash memory), startup-config (the primary configuration file), or running-config (the current running configuration file).
  • Page 81 SROS Command Line Interface Reference Guide Enable Mode Command Set copy xmodem <destination> Use the copy xmodem command to copy a file (using the XMODEM protocol) to a specified destination. XMODEM capability is provided in terminal emulation software such as HyperTerminal™. Syntax Description <destination>...
  • Page 82 SROS Command Line Interface Reference Guide Enable Mode Command Set debug aaa Use the debug aaa command to activate debug messages associated with authentication from the AAA subsystem. Debug messages are displayed (real-time) on the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 83 SROS Command Line Interface Reference Guide Enable Mode Command Set debug access-list <listname> Use the debug access-list command to activate debug messages (for a specified list) associated with access list operation. Debug messages are displayed (real-time) on the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.

  • Page 84: Debug Arp

    SROS Command Line Interface Reference Guide Enable Mode Command Set debug arp Use the debug arp command to activate debug messages associated with IP Address Resolution Protocol (ARP) transactions. Debug messages are displayed (real-time) on the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 85 SROS Command Line Interface Reference Guide Enable Mode Command Set debug atm events Use the debug atm events command to display events on all ATM ports and all virtual circuits. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable debug messages.
  • Page 86 SROS Command Line Interface Reference Guide Enable Mode Command Set debug atm oam Use the debug atm oam command to display Operation, Administration, and Maintenance (OAM) packets for an ATM virtual circuit descriptor (VCD). Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 87 SROS Command Line Interface Reference Guide Enable Mode Command Set debug atm packet Use the debug atm packet command to activate debug messages associated with packets on ATM ports and virtual circuits. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.

  • Page 88: Debug Backup

    SROS Command Line Interface Reference Guide Enable Mode Command Set debug backup Use the debug backup command to activate debug messages associated with backup operation. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 89 SROS Command Line Interface Reference Guide Enable Mode Command Set debug bridge Use the debug bridge command to display messages associated with bridge events. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable debug messages.
  • Page 90 SROS Command Line Interface Reference Guide Enable Mode Command Set debug chat-interfaces <chat interface> Use the debug chat-interfaces command to activate debug messages associated with chat AT command driven interfaces. Debug messages are displayed (real-time) on the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 91 SROS Command Line Interface Reference Guide Enable Mode Command Set debug crypto [ike | ike negotiation | ike client authentication | ike client configuration | ipsec | pki] Use the debug crypto command to activate debug messages associated with IKE and IPSec functions. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 92 SROS Command Line Interface Reference Guide Enable Mode Command Set debug data-call Use the debug data-call command to activate debug messages associated with data call errors and events. Debug messages are displayed (real-time) on the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 93 SROS Command Line Interface Reference Guide Enable Mode Command Set debug demand-routing Use the debug demand-routing command to activate debug messages associated with demand routing errors and events. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable debug messages.
  • Page 94 SROS Command Line Interface Reference Guide Enable Mode Command Set debug dialup-interfaces Use the debug dialup-interfaces command to generate debug messages used to aid in troubleshooting problems with all dialup interfaces such as the modem or the BRI cards. Use the no version of this command to disable it.
  • Page 95 SROS Command Line Interface Reference Guide Enable Mode Command Set debug dynamic-dns [verbose] Use the debug dynamic-dns command to display debug messages associated with dynamic DNS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 96 SROS Command Line Interface Reference Guide Enable Mode Command Set debug firewall Use the debug firewall command to activate debug messages associated with the SROS firewall operation. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 97 SROS Command Line Interface Reference Guide Enable Mode Command Set debug firewall alg sip [verbose] Use the debug firewall alg sip command to activate debug messages associated with Session Initiation Protocol (SIP) information with SROS firewall operation. Debug messages are displayed (real-time) on the terminal (or Telnet) screen.
  • Page 98 SROS Command Line Interface Reference Guide Enable Mode Command Set debug frame-relay [events | llc2 | lmi] Use the debug frame-relay command to activate debug messages associated with the Frame Relay operation. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 99 SROS Command Line Interface Reference Guide Enable Mode Command Set debug frame-relay multilink <interface> Use the debug frame-relay multilink command to activate debug messages associated with Frame Relay multilink operation. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 100 SROS Command Line Interface Reference Guide Enable Mode Command Set debug interface <interface> Use the debug interface command to activate debug messages associated with the specified interface. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 101 SROS Command Line Interface Reference Guide Enable Mode Command Set debug interface adsl events Use the debug interface adsl events command to activate debug messages associated with ADSL events. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 102 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip bgp [events | in | out | keepalives | updates | updates quiet] Use the debug ip bgp command to activate debug messages associated with IP BGP. Debug messages are displayed (real-time) on the terminal (or Telnet) screen.
  • Page 103 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip dhcp-client Use the debug ip dhcp-client command to activate debug messages associated with DHCP client operation in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 104 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip dhcp-server Use the debug ip dhcp-server command to activate debug messages associated with Dynamic Host Configuration Protocol (DHCP) server operation in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 105 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip dns-client Use the debug ip dns-client command to activate debug messages associated with DNS (domain naming system) client operation in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 106 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip dns-proxy Use the debug ip dns-proxy command to activate debug messages associated with DNS (domain naming system) proxy operation in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 107 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip dns-table Use the debug ip dns-table command to activate debug messages associated with domain naming system (DNS) table operation in SROS. Debug messages are displayed (real time) to the terminal (or Telnet) screen.
  • Page 108 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip ftp-server Use the debug ip ftp-server command to activate debug messages associated with File Transfer Protocol (FTP) server events in the SROS device. Debug messages are displayed (real time) to the terminal (or Telnet) screen.
  • Page 109 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip http server Use the debug ip http server command to activate debug messages associated with HyperText Transfer Protocol (HTTP) server operation in SROS. Debug messages are displayed (real time) to the terminal (or Telnet) screen.
  • Page 110 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip http [verbose] Use the debug ip http command to activate debug messages associated with HyperText Transfer Protocol (HTTP) operation in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 111 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip icmp [send | recv] Use the debug ip icmp command to show all ICMP messages as they come into the router or are originated by the router. If an optional keyword (send or recv) is not used, all results are displayed. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 112 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip igmp <group-address> Use the debug ip igmp command to enable debug messages for IGMP transactions (including helper activity). Debug messages are displayed (real-time) on the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 113 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip mrouting Use the debug ip mrouting command to activate debug messages associated with multicast table routing events. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.

  • Page 114: Debug Ip Ospf

    SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip ospf Use the debug ip ospf command to activate debug messages associated with OSPF routing operations. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 115 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip packet [detail | dump | <accesslist>] Use the debug ip packet command to display debug messages associated with protocol-independent multicast (PIM) sparse assert transactions. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 116 SROS Command Line Interface Reference Guide Enable Mode Command Set Usage Examples The following is sample output for the debug ip packet command: ProCurve>enable ProCurve#debug ip packet IP: s= 192.168.8.101 (eth 0/1) d=192.168.7.2 (eth 0/2) g= 192.168.7.2, forward IP: s= 192.168.7.2 (eth 0/2) d=192.168.8.101 (eth 0/1) g= 192.168.8.101, forward IP: s= 192.168.8.101 (eth 0/1) d=192.168.7.2 (eth 0/2) g= 192.168.7.2, forward IP: s= 192.168.7.2 (eth 0/2) d=192.168.8.101 (eth 0/1) g= 192.168.8.101, forward Where:...
  • Page 117 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip pim-sparse Use the debug ip pim-sparse command to display all protocol-independent multicast (PIM) sparse mode information. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable debug messages.
  • Page 118 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip pim-sparse assert [event | state] <address> Use the debug ip pim-sparse assert command to display debug messages associated with protocol-independent multicast (PIM) sparse assert transactions. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 119 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip pim-sparse hello Use the debug ip pim-sparse hello command to display protocol-independent multicast (PIM) sparse mode hello transactions. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable debug messages.
  • Page 120 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip pim-sparse joinprune [event | state] <address> Use the debug ip pim-sparse joinprune command to display protocol-independent multicast (PIM) sparse mode join and prune transactions. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 121 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip pim-sparse packets [in | out] <interface> <interface id> Use the debug ip pim-sparse packets command to display protocol-independent multicast (PIM) sparse mode packet information. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable debug messages.
  • Page 122 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip pim-sparse register [event | state] <address> Use the debug ip pim-sparse register command to display protocol-independent multicast (PIM) sparse source registration messages. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable debug messages.

  • Page 123: Debug Ip Policy

    SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip policy Use the debug ip policy command to display policy-based routing events. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable debug messages. Note Turning on a large amount of debug information can adversely affect the performance of your unit.
  • Page 124 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip rip [events] Use the debug ip rip command to activate debug messages associated with Routing Information Protocol (RIP) operation in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 125 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip routing Use the debug ip routing command to activate debug messages associated with routing table events. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 126 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip tcp [events] Use the debug ip tcp events command to activate debug messages associated with significant TCP events such as state changes, retransmissions, session aborts, etc., in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 127 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip tcp md5 Use the debug ip tcp md5 command to activate debug messages that detail the results of each incoming TCP packet’s MD5 authentication with an internal route in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.

  • Page 128: Debug Ip Udp

    SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip udp Use the debug ip udp command to activate debug messages associated with UDP send and receive events in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 129 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ip urlfilter Use the debug ip urlfilter command to display a summary of debug information for all URL filters being used. Debug messages are displayed (real time) to the terminal (or Telnet) screen. The verbose option gives more detailed information.
  • Page 130 SROS Command Line Interface Reference Guide Enable Mode Command Set debug isdn [cc-ie | cc-messages | endpoint | interface | l2-formatted | l2-messages] bri <interface id> Use the debug isdn bri command to activate debug messages associated with integrated services digital network (ISDN) events in the SROS.
  • Page 131 SROS Command Line Interface Reference Guide Enable Mode Command Set debug isdn events Use the debug isdn events command to activate debug messages associated with ISDN events in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 132 SROS Command Line Interface Reference Guide Enable Mode Command Set debug isdn resource-manager Use the debug isdn resource-manager command to activate integrated services digital network (ISDN) resource manager errors and messages. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 133 SROS Command Line Interface Reference Guide Enable Mode Command Set debug isdn verbose Use the debug isdn verbose command to activate all debug messages associated with integrated services digital network (ISDN) events in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 134 SROS Command Line Interface Reference Guide Enable Mode Command Set debug lldp [rx | tx] verbose Use the debug lldp command to display debug output for all LLDP receive and transmit packets. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of the command to disable debug messages.
  • Page 135 SROS Command Line Interface Reference Guide Enable Mode Command Set debug port-auth Use the debug port-auth command to generate debug messages used to aid in troubleshooting problems during the port authentication process. Debug messages are displayed (real time) on the terminal (or Telnet) screen.
  • Page 136 SROS Command Line Interface Reference Guide Enable Mode Command Set debug ppp Use the debug ppp command to activate debug messages associated with point-to-point protocol (PPP) operation in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 137 SROS Command Line Interface Reference Guide Enable Mode Command Set debug pppoe client Use the debug pppoe client command to activate debug messages associated with point-to-point protocol over Ethernet (PPPoE) operation in the SROS. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 138 SROS Command Line Interface Reference Guide Enable Mode Command Set debug probe <name> Use the debug probe command to activate debug messages associated with activities performed by the named probe object. Debug messages are displayed (real time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.

  • Page 139: Debug Radius

    SROS Command Line Interface Reference Guide Enable Mode Command Set debug radius Use the debug radius command to enable debug messages from the RADIUS subsystem. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 140 SROS Command Line Interface Reference Guide Enable Mode Command Set debug sip [location | manager | name-service | proxy <subsource>] Use the debug sip command to activate debug messages associated with Session Initiation Protocol (SIP) events. Debug messages are displayed (real-time) on the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.Variations of this command include: debug sip location debug sip manager...
  • Page 141 SROS Command Line Interface Reference Guide Enable Mode Command Set debug sip stack Use the debug sip stack command to activate debug messages associated with Session Initiation Protocol (SIP) stack events. Debug messages are displayed (real-time) on the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.Variations of this command include: debug sip stack debug debug sip stack errors...

  • Page 142: Debug Sntp

    SROS Command Line Interface Reference Guide Enable Mode Command Set debug sntp Use the debug sntp command to enable debug messages associated with the Simple Network Time Protocol (SNTP). All SNTP Packet Exchanges and time decisions are displayed with these debugging events enabled.
  • Page 143 SROS Command Line Interface Reference Guide Enable Mode Command Set debug spanning-tree [config | events | general | topolgy] Use the debug spanning-tree command to enable the display of spanning-tree debug messages. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 144 SROS Command Line Interface Reference Guide Enable Mode Command Set debug spanning-tree bpdu [receive | transmit | all] Use the debug spanning-tree bpdu command to display BPDU (bridge protocol data unit) debug messages. When enabled, a debug message is displayed for each BPDU packet that is transmitted or received by the unit.
  • Page 145 SROS Command Line Interface Reference Guide Enable Mode Command Set debug system Use the debug system command to enable debug messages associated with system events (i.e., login, logouts, etc.). Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 146 SROS Command Line Interface Reference Guide Enable Mode Command Set debug tacacs+ packets Use the debug tacacs+ packets command to activate debug messages associated with terminal access controller access control system (TACACS+) protocol. Debug messages are displayed (real-time) to the terminal (or Telnet) screen.
  • Page 147 SROS Command Line Interface Reference Guide Enable Mode Command Set debug tftp [client packets | server events | server packets] Use the debug tftp packets command to activate debug messages associated with Trivial File Transfer Protocol (TFTP) packets. Debug messages are displayed (real-time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 148 SROS Command Line Interface Reference Guide Enable Mode Command Set debug track <name> Use the debug track command to activate debug messages associated with activities performed by the named track object. Debug messages are displayed (real time) to the terminal (or Telnet) screen. Use the no form of this command to disable the debug messages.
  • Page 149 SROS Command Line Interface Reference Guide Enable Mode Command Set dir [ * ] Use the dir command to display a directory list of all files on the system in flash memory or all files on the system in flash memory matching the specified pattern. Syntax Description Optional.
  • Page 150 The following is sample output from the dir command specifying a list of all .biz files found on the installed compact flash card: ProCurve>enable ProCurve#dir cflash *.biz 4206603 HP7203A-08-00-23b-HP1-E.biz 284007 HP7203B-boot-08-01-01-HP.biz 4234845 HP7203A-08-01-01-HP-E.biz 284238 HP7203B-boot-08-01-02-HPatp.biz 4038590 HP7203A-08-01-02-HPatp-E.biz 285416 J01_01_02-boot.biz 4039977 J01_01_02.biz 4043024 J01_01_03.biz...
  • Page 151 SROS Command Line Interface Reference Guide Enable Mode Command Set disable Use the disable command to exit the Enable Command mode and enter the Basic Command mode. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example exits the Enable Command mode and enters the Basic Command mode: ProCurve#disable...
  • Page 152 SROS Command Line Interface Reference Guide Enable Mode Command Set enable Use the enable command to enter a password for the Enable mode. Syntax Description No subcommands. Default Values No default value necessary for this command. Functional Notes The Enable Command mode provides access to operating and configuration parameters and should be password protected to prevent unauthorized use.
  • Page 153 SROS Command Line Interface Reference Guide Enable Mode Command Set erase Use the erase command to erase the specified file. Variations of this command include: erase SROS.biz erase startup-config erase cflash <filename> erase flash <filename> Syntax Description SROS.BIZ Erases the SROS.BIZ file stored in flash memory. The SROS.BIZ file is the current software.
  • Page 154 SROS Command Line Interface Reference Guide Enable Mode Command Set erase file-system cflash Use the erase file-system cflash command to erase all files on the installed compact flash card. Note Erasing the file system is equivalent to formatting the compact flash card. Syntax Description No subcommands.
  • Page 155 SROS Command Line Interface Reference Guide Enable Mode Command Set events Use the events command to enable event reporting to the current CLI session. Use the no form of this command to disable all event reporting to the current CLI session. Syntax Description No subcommands.
  • Page 156 SROS Command Line Interface Reference Guide Enable Mode Command Set exception report generate Use the exception report generate command to immediately generate an exception report that contains a snap shot of all current system processes. Syntax Description No subcommands. Default Values No default value necessary for this command.
  • Page 157 SROS Command Line Interface Reference Guide Enable Mode Command Set Configured system image path: Primary: "CFLASH:/SROS.BIZ" Backup: “NONVOL:/SROS.BIZ” Configured configuration-file path: Primary: "CFLASH:/startup-config" Backup: "NONVOL:/startup-config" ===================================================================== CORE DUMP ===================================================================== ===================================================================== BUFFER USERS ===================================================================== Number of users: 9 Rank User Count 1 fixedsize 2 0x00873a50 128 3 0x00162530...
  • Page 158 SROS Command Line Interface Reference Guide Enable Mode Command Set logout Use the logout command to terminate the current session and return to the login screen. Syntax Description No subcommands. Default Values No defaults necessary for this command. Usage Examples The following example shows the logout command being executed in Enable mode: ProCurve>enable ProCurve#logout...
  • Page 159 SROS Command Line Interface Reference Guide Enable Mode Command Set reload [cancel | in <delay>] Use the reload command to preform a manual reload of the SROS. Caution Performing a reload disrupts data traffic. Syntax Description cancel Optional. Use the cancel keyword to deactivate a pending reload command. Optional.
  • Page 160 SROS Command Line Interface Reference Guide Enable Mode Command Set show access-lists <listname> Use the show access-lists command to display all configured access lists in the system (or a specific list). Syntax Description <listname> Optional. Specify a particular access list to display. Default Values No default value necessary for this command.
  • Page 161 SROS Command Line Interface Reference Guide Enable Mode Command Set show arp [realtime] Use the show arp command to display the Address Resolution Protocol (ARP) table. Syntax Description realtime Displays full-screen output in real-time. See the Functional Notes below for more information.
  • Page 162 SROS Command Line Interface Reference Guide Enable Mode Command Set show atm [pvc | traffic] interface atm <interface> Use the show atm command to display information specific to the ATM interface. Variations of this command include the following: show atm pvc show atm [pvc | traffic] interfaces atm <interface>...
  • Page 163 SROS Command Line Interface Reference Guide Enable Mode Command Set show autosynch-status Use the show autosynch-status command to display the current autosynch configuration and the statistics for the SROS.BIZ and startup-config files (if autosynch is enabled). Syntax Description No subcommands. Default Value No default is necessary for this command.
  • Page 164 SROS Command Line Interface Reference Guide Enable Mode Command Set show backup interfaces Use the show backup interfaces command to display all configured backup interfaces and the associated parameters for each. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example enters the Enable command mode and uses the show command to display backup interface information:...
  • Page 165 SROS Command Line Interface Reference Guide Enable Mode Command Set show bridge <interface> <slot/port> <bridge group #> Use the show bridge command to display a list of all configured bridge groups (including individual members of each group). Enter an interface or a bridge number to display the corresponding list. Syntax Description <interface>...
  • Page 166 SROS Command Line Interface Reference Guide Enable Mode Command Set show buffers [realtime] Use the show buffers command to display the statistics for the buffer pools on the network server. Syntax Description realtime Displays full-screen output in real-time. See the Functional Notes below for more information.
  • Page 167 SROS Command Line Interface Reference Guide Enable Mode Command Set show buffers users [realtime] Use the show buffers users command to display a list of the top users of packet buffers. Typically, this command will only be used as a debug tool. Syntax Description realtime Displays full-screen output in real-time.
  • Page 168 SROS Command Line Interface Reference Guide Enable Mode Command Set show cflash <filename> Use the show cflash command to display a list of all files currently stored in compact flash memory or details about a specified file. Syntax Description <filename> Optional.
  • Page 169 SROS Command Line Interface Reference Guide Enable Mode Command Set show clock [detail] Use the show clock command to display the system time and date entered using the clock set command. See clock set <time> <day> <month> <year> on page 63 for more information. Syntax Description detail Optional.

  • Page 170: Show Configuration

    SROS Command Line Interface Reference Guide Enable Mode Command Set show configuration Use the show configuration command to display a text printout of the startup configuration file stored in flash memory. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is a sample output of the show configuration command: ProCurve>enable...
  • Page 171 SROS Command Line Interface Reference Guide Enable Mode Command Set ip access-list extended UnTrusted deny icmp 10.5.60.0 0.0.0.255 any source-quench deny tcp any any no ip snmp agent line con 0 no login line telnet 0 login line telnet 1 login line telnet 2 login...
  • Page 172 SROS Command Line Interface Reference Guide Enable Mode Command Set show connections Use the show connections command to display information (including TDM group assignments) for all active connections. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is sample output from the show connections command: ProCurve>enable...
  • Page 173 SROS Command Line Interface Reference Guide Enable Mode Command Set show crypto ca [certificates | crls | profiles] Use the show crypto ca command to display information regarding certificates and profiles. Syntax Description certificates Displays information on all certificates. crls Displays a summary of all certificate revocation lists (CRLs) for each CA.
  • Page 174 SROS Command Line Interface Reference Guide Enable Mode Command Set show crypto ike Use the show crypto ike command to display information regarding the IKE configuration. Variations of this command include the following: show crypto ike client configuration pool show crypto ike client configuration pool <poolname> show crypto ike policy show crypto ike policy <policy priority>...
  • Page 175 SROS Command Line Interface Reference Guide Enable Mode Command Set Usage Examples The following is a sample from the show crypto ike policy command: ProCurve>enable ProCurve#show crypto ike policy Crypto IKE Policy 100 Main mode Using System Local ID Address Peers: 63.105.15.129 initiate main...
  • Page 176 SROS Command Line Interface Reference Guide Enable Mode Command Set show crypto ipsec Use the show crypto ipsec command to display information regarding the IPSec configuration. Variations of this command include the following: show crypto ipsec sa show crypto ipsec sa address <ip address> show crypto ipsec sa brief show crypto ipsec sa map <mapname>...
  • Page 177 SROS Command Line Interface Reference Guide Enable Mode Command Set Crypto Map: VPN 10 Peer IP Address: 192.168.10.1 Direction: Outbound SPI: 0xDB86CD78 (3683044728) Encapsulation: ESP TX Bytes: 31934 Selectors: Src:172.16.16.0/255.255.255.0 Port:ANY Proto:ALL IP Dst:10.0.0.0/255.0.0.0 Port:ANY Proto:ALL IP Hard Lifetime: 26640 Soft Lifetime: 26580 Crypto Map: VPN 10 The following is a sample from the show crypto ipsec sa brief command:...
  • Page 178 SROS Command Line Interface Reference Guide Enable Mode Command Set show crypto map Use the show crypto map command to display information regarding crypto map settings. Variations of this command include the following: show crypto map show crypto map <interface> show crypto map <map name>...

  • Page 179: Show Debugging

    SROS Command Line Interface Reference Guide Enable Mode Command Set show debugging Use the show debugging command to display a list of all activated debug message categories. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is a sample output from the show debugging command: ProCurve>enable...
  • Page 180 SROS Command Line Interface Reference Guide Enable Mode Command Set show demand Use the show demand command to display information regarding demand routing parameters and statistics. Variations of this command include the following: show demand show demand interface show demand interface <interface> show demand resource pool show demand resource pool <resource pool name>...
  • Page 181 SROS Command Line Interface Reference Guide Enable Mode Command Set Current values: Local IP address 10.100.0.2, Peer IP address 10.100.0.1 Seconds until disconnect: 63 Queueing method: weighted fair Output queue: 0/1/428/64/0 (size/highest/max total/threshold/drops) Conversations 0/1/256 (active/max active/max total) Available Bandwidth 48 kilobits/sec Bandwidth=64 Kbps Link through bri 1/3, Uptime 0:01:10 IN: Octets 588, Frames 19, Errors 0...
  • Page 182 SROS Command Line Interface Reference Guide Enable Mode Command Set The following is example output from the show demand sessions command: ProCurve>enable ProCurve#show demand sessions Session 1 Interface demand 1 Local IP address = 10.100.0.2 Remote IP address = 10.100.0.1 Remote Username = Dial reason: ip (s=, d=) Link 1...
  • Page 183 SROS Command Line Interface Reference Guide Enable Mode Command Set show dialin interfaces Use the show dialin interfaces command to display information regarding remote console dialin. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is sample output from the show dialin interfaces command: ProCurve>enable ProCurve#show dialin interfaces...
  • Page 184 SROS Command Line Interface Reference Guide Enable Mode Command Set show dynamic-dns Use the show dynamic-dns command to show information related to the dynamic DNS configuration. Syntax Description No subcommands. Default Values No default is necessary for this command. Usage Examples The following is sample output from this command: ProCurve#show dynamic-dns eth 0/1:...
  • Page 185 SROS Command Line Interface Reference Guide Enable Mode Command Set show event-history Use the show event-history command to display all entries in the current local event-history log. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The event history provides useful information regarding the status of the system and individual port states.
  • Page 186 SROS Command Line Interface Reference Guide Enable Mode Command Set show file Use the show file command to display a specified file (located in either compact flash or flash memory) to the terminal screen. Variations of this command include: show file cflash <filename> show file cflash <filename>...
  • Page 187 SROS Command Line Interface Reference Guide Enable Mode Command Set show flash <filename> Use the show flash command to display a list of all files currently stored in flash memory or details about a specified file. Syntax Description <filename> Optional. Displays details for a specified file located in flash memory. Enter a wildcard (such as *.biz) to display the details for all files matching the entered pattern.
  • Page 188 SROS Command Line Interface Reference Guide Enable Mode Command Set show frame-relay Use the show frame-relay command to display configuration and status parameters for configured virtual Frame Relay interfaces. Variations of this command include the following: show frame-relay lmi show frame-relay pvc show frame-relay pvc interface frame-relay <interface>...
  • Page 189 SROS Command Line Interface Reference Guide Enable Mode Command Set Usage Examples The following are sample outputs from various show frame-relay commands: ProCurve>enable ProCurve#show frame-relay lmi LMI statistics for interface FR 1 LMI TYPE = ANSI Num Status Enq. Sent 79 Num Status Msgs Rcvd 71 Num Update Status Rcvd 12 Num Status Timeouts 5...
  • Page 190 SROS Command Line Interface Reference Guide Enable Mode Command Set show frame-relay fragment [interface frame-relay <port.sublink>] Use the show frame-relay fragment command to display FRF.12 statistics for Frame Relay sublinks enabling FRF.12 fragmentation. Syntax Description interface frame-relay <port.sublink> Optional. Displays detailed FRF.12 statistics for the specified Frame Relay sublink (if FRF.12 is enabled on that sublink).
  • Page 191 SROS Command Line Interface Reference Guide Enable Mode Command Set show frame-relay multilink <interface> detailed Use the show frame-relay multilink command to display information associated with the Frame Relay multilink interface. Syntax Description <interface> Optional. Specifies the display of information for a specific interface. Enter the show frame-relay multilink ? command for a complete list of interfaces.
  • Page 192 SROS Command Line Interface Reference Guide Enable Mode Command Set show hosts [verbose] Use the show hosts command to display information such as the domain name, name lookup service, a list of name server hosts, and the cached list of host names and addresses on the network to which you can connect.
  • Page 193 SROS Command Line Interface Reference Guide Enable Mode Command Set show interfaces <interface> Use the show interfaces command to display configuration parameters and current statistics for all interfaces (or a specified interface). Variations of this command include the following: show interfaces <interface> show interfaces <interface>...
  • Page 194 SROS Command Line Interface Reference Guide Enable Mode Command Set Default Values No default value necessary for this command. Functional Notes Use the realtime argument for this command to display full-screen output in real-time. Information is continuously updated on the console until you either freeze the data (by pressing the F key) or exit reatime mode (by pressing Ctrl-C).
  • Page 195 SROS Command Line Interface Reference Guide Enable Mode Command Set ProCurve#show interfaces modem 1/2 modem 1/2 is UP Line status: on-hook Caller ID will be used to route incoming calls 0 packets input 0 bytes 0 no buffer 0 runts 0 giants 0 throttles 0 input errors 0 CRC 0 frame 0 abort 0 ignored 0 overruns 0 packets output 0 bytes 0 underruns...
  • Page 196 SROS Command Line Interface Reference Guide Enable Mode Command Set ProCurve#show interfaces fr 1.100* fr 1.100 is Active Ip address is 63.97.45.57, mask is 255.255.255.248 Interface-dlci is 100 MTU is 1500 bytes, BW is 96000 Kbit (limited) Average utilization is 53% *Note: If the user has configured a Bc and Be value on the virtual circuit, the bandwidth (BW) displayed is the sum of those values (Bc + Be).
  • Page 197 SROS Command Line Interface Reference Guide Enable Mode Command Set show interfaces adsl <slot/port> Use the show interfaces adsl command to display information related to the ADSL port. Variations of this command include the following: show interfaces adsl <slot/port> show interfaces adsl <slot/port> information show interfaces adsl <slot/port>...
  • Page 198 SROS Command Line Interface Reference Guide Enable Mode Command Set Usage Examples The following example shows sample output for this command: ProCurve#show interfaces adsl 1/1 information adsl 1/1 line information adsl 1/1 Local Line Information Vendor Id: Serial Number: Firmware Version: ADSL Capabilities G.DMT, G.LITE, ADSL2, ADSL2+ adsl 1/1 Remote Line Information...
  • Page 199 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip access-lists <listname> Use the show ip access-lists command to display all configured IP access lists in the system. Syntax Description <listname> Optional. Specify a particular access list to display. Default Values No default value necessary for this command.
  • Page 200 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip arp [realtime] Use the show ip arp command to display the Address Resolution Protocol (ARP) table. Syntax Description realtime Displays full-screen output in real-time. See the Functional Notes below for more information.
  • Page 201 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip as-path-list [<listname>] Use the show ip as-path-list command to display any AS path lists that have been configured in the router, along with any permit and deny clauses in each list. Syntax Description <listname>...
  • Page 202 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip bgp community [<community number> . . . <community number> | internet | no-export | local-as | no-advertise] [exact] Use the show ip bgp community command to display only those routes learned via BGP that match the community numbers specified in the command.
  • Page 203 SROS Command Line Interface Reference Guide Enable Mode Command Set Usage Examples In the following example, all BGP routes are displayed whose community numbers match those listed in the show ip bgp community command. ProCurve>enable ProCurve#show ip bgp community local-as 10:405 BGP local router ID is 10.22.131.241, local AS is 302.
  • Page 204 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip bgp community-list <community-list-name> [exact] Use the show ip bgp community-list command to display BGP routes that are permitted by the specified community list. Syntax Description <community-list-name> Specifies the name of the community list whose routes you wish to see. exact Optional.

  • Page 205: Show Ip Bgp Neighbors

    SROS Command Line Interface Reference Guide Enable Mode Command Set show ip bgp neighbors Use the show ip bgp neighbors command to display information for the specified neighbor. Variations of this command include the following: show ip bgp neighbors show ip bgp neighbors <ip address> show ip bgp neighbors <ip address>...
  • Page 206 SROS Command Line Interface Reference Guide Enable Mode Command Set Usage Examples The following are output variations of the show ip bgp neighbors command: ProCurve>enable ProCurve#show ip bgp neighbors BGP neighbor is 10.15.43.17, remote AS 100, external link Configured hold time is 180, keepalive interval is 60 seconds Default minimum time between advertisement runs is 30 seconds Connections established 6;...
  • Page 207 SROS Command Line Interface Reference Guide Enable Mode Command Set ProCurve#show ip bgp neighbors 10.15.43.17 received-routes BGP local router ID is 10.0.0.1, local AS is 101. Status codes: * valid, > best, i - internal Origin codes: i - IGP, e - EGP, ? - incomplete Network NextHop Metric Path...
  • Page 208 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip bgp regexp <expression> Use the show ip bgp regexp command to display a summary of the BGP route table that includes routes who autonomous system (AS) path matches the specified expression. Syntax Description <expression>...
  • Page 209 SROS Command Line Interface Reference Guide Enable Mode Command Set * 10.22.132.8/29 10.22.132.9 303 i * i10.22.132.240/28 10.22.132.1 303 i *> 10.22.132.240/28 10.22.132.9 303 i 10.22.134.0/29 10.22.132.9 303 304 i 10.22.134.8/29 10.22.132.9 303 304 i 10.22.134.16/29 10.22.132.9 303 304 i 10.22.134.24/29 10.22.132.9 303 304 i...

  • Page 210: Show Ip Bgp Summary

    SROS Command Line Interface Reference Guide Enable Mode Command Set show ip bgp summary Use the show ip bgp summary command to display a summary of the BGP route table. Syntax Description summary Displays a summary of the status for all BGP. Default Values No default value necessary for this command.
  • Page 211 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip cache Use the show ip cache command to display the fast cache table. Syntax Description No subcommands. Default Values No default necessary for this command. Usage Examples The following example shows sample output from the show ip cache command: ProCurve>enable ProCurve#show ip cache DESTINATION INTERFACE...
  • Page 212 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip community-list [<community-list-name>] Use the show ip community-list command to display any or all defined community lists in the router configuration. Syntax Description <community-list-name> Optional. Specifies the name of the community list you wish to display. If this parameter is omitted, all defined community lists will be displayed.
  • Page 213 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip dhcp-client lease <interface> Use the show ip dhcp-client lease command to display all Dynamic Host Client Protocol (DHCP) lease information for interfaces that have dynamically assigned IP addresses. Syntax Description <interface>...
  • Page 214 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip dhcp-server binding <client ip address> Use the show ip dhcp-server binding command to display the Dynamic Host Client Protocol (DHCP) server client table with associated information. Syntax Description <client ip address>...
  • Page 215 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip igmp groups <group-address> Use the show ip igmp groups command to display the multicast groups that have been registered by directly connected receivers using IGMP. If no group address is specified, all groups are shown with this command.
  • Page 216 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip igmp interface <interface> Use the show ip igmp interface command to display multicast-related information per-interface. If no interface is specified, this command shows information for all interfaces. Syntax Description <interface>...
  • Page 217 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip interfaces [<interface> | brief] Use the show ip interfaces command to display the status information for all IP interfaces (or a specific interface). Note To view secondary IP addresses, use the show running-config command. Syntax Description <interface>...
  • Page 218 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip local policy Use the show ip local policy command to display information about the route-map used for local policy-based routing. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is sample output from this command: ProCurve>enable...
  • Page 219 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip mroute [<group-address> | <interface>] [summary | all] Use the show ip mroute command to display IP multicasting routing table information. Syntax Description <group-address> Optional. Displays IP address of a multicast group. <interface>...
  • Page 220 SROS Command Line Interface Reference Guide Enable Mode Command Set The following is sample output from the show ip mroute all command: ProCurve>enable ProCurve#show ip mroute all IP Multicast Routing Table Flags: S - Sparse, C - Connected, P - Pruned, J - Join SPT, T - SPT-bit Set, F - Register, R - RP-bit Set Timers: Uptime/Expires (*, 10.1.0.1), 01:17:34/00:03:25, RP 192.168.0.254, Flags: SC...

  • Page 221: Show Ip Ospf

    SROS Command Line Interface Reference Guide Enable Mode Command Set show ip ospf Use the show ip ospf command to display general information regarding OSPF processes. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is a sample output from the show ip ospf command: ProCurve>enable ProCurve#show ip ospf...

  • Page 222: Show Ip Ospf Database

    SROS Command Line Interface Reference Guide Enable Mode Command Set show ip ospf database Use the show ip ospf database command to display information from the OSPF database regarding a specific router. There are several variations of this command which you can use to obtain information about different OSPF link state advertisements.
  • Page 223 SROS Command Line Interface Reference Guide Enable Mode Command Set Functional Notes The link state ID differs depending on whether the link state advertisement in question describes a network or a router. If describing a network, this ID is one of the following: •...
  • Page 224 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip ospf interface <interface> Use the show ip ospf interface command to display OSPF information for a specific interface. Syntax Description <interface> Optional. Specifies an interface in the format <interface type [slot/port | slot/port.sub-interface id | interface id | interface id.sub-interface id | ap | ap/radio | ap/radio.vap]>.
  • Page 225 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip ospf neighbor <interface type> <interface number> <neighbor id> [detail] Use the show ip ospf neighbor command to display OSPF neighbor information for a specific interface. Syntax Description <interface type> Optional.
  • Page 226 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip ospf summary-address Use the show ip ospf summary-address command to display a list of all summary address redistribution information for the system. Syntax Description No subcommands. Default Values No default value necessary for this command.
  • Page 227 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip pim-sparse [interfaces <interface> | neighbor | rp-map | rp-set | state | traffic] Use the show ip pim-sparse command to display Protocol Independent Multicast (PIM) configuration information. Sparse mode or PIM-SM is a routing protocol used to establish and maintain the multicast distribution tree.
  • Page 228 SROS Command Line Interface Reference Guide Enable Mode Command Set The following example shows sample output from the show ip pim-sparse interfaces command: ProCurve>enable ProCurve#show ip pim-sparse interface eth 0/1 is UP PIM Sparse DR: itself Local Address: 192.168.1.254 Hello interval (sec): 30, Neighbor timeout (sec): 105 Propagation delay (ms): 500, Override interval (ms): 2500 tunnel 1 is UP PIM Sparse...
  • Page 229 SROS Command Line Interface Reference Guide Enable Mode Command Set The following example shows sample output from the show ip pim-sparse rp-map command: ProCurve>enable ProCurve#show ip pim-sparse rp-map Number of group-to-RP mappings: 5 Group address RP address --------------------------------------------------------- 225.1.0.1 192.168.0.254 225.1.0.2 192.168.0.254 225.1.0.3...
  • Page 230 SROS Command Line Interface Reference Guide Enable Mode Command Set eth 0/1, Forward, 02:42:03/00:03:03 Downstream Join/Prune State: Join Assert Winner State: No Info Assert Timer (sec): stopped Assert Winner: 0.0.0.0 Assert Winner Metric: infinity Local Membership: Yes Forwarding State: Forwarding Inherited output list: eth 0/1 The following example shows sample output from the show ip pim-sparse traffic command:...
  • Page 231 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip policy Use the show ip policy command to display which route-map is associated with which interface for policy-based routing. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is sample output from this command: ProCurve>enable...
  • Page 232 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip policy-class <policyname> Use the show ip policy-class command to display the configured session limit and specific host IP addresses of all current sessions. See ip policy-class <policyname> on page 426 for information on configuring access policies.
  • Page 233 SROS Command Line Interface Reference Guide Enable Mode Command Set The following is a sample output from the show ip policy-class host-sessions command: ProCurve>enable ProCurve#show ip policy-class host-sessions Policy-class "Private": 100 policy-sessions allowed per source address. Src IP Address Sessions --------------- -------- 192.168.1.100 192.168.1.101...
  • Page 234 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip policy-sessions <policyname> [all] Use the show ip policy-sessions command to display a list of current policy class associations. See ip policy-class <policyname> on page 426 for information on configuring access policies. Syntax Description <policyname>...
  • Page 235 SROS Command Line Interface Reference Guide Enable Mode Command Set The following is sample output from the show ip policy-sessions all command: ProCurve>enable ProCurve#show ip policy-sessions all Protocol (TTL) [in crypto map] -> [out crypto map] Destination policy-class Src IP Address Src Port Dest IP Address Dst Port...
  • Page 236 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip policy-stats <policyname> Use the show ip policy-stats command to display a list of current policy class statistics. See ip policy-class <policyname> on page 426 for information on configuring access policies. Syntax Description <policyname>...
  • Page 237 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip prefix-list [detail | summary] <listname> Use the show ip prefix-list command to display BGP prefix list information. Syntax Description detail Shows a listing of the prefix list rules and their hit counts. summary Shows information about the entire prefix list.
  • Page 238 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip processes stack Use the show ip processes stack command to display usage information for currently running system tasks. This command should be used when troubleshooting with ProCurve support. Syntax Description No subcommands.

  • Page 239: Show Ip Protocols

    SROS Command Line Interface Reference Guide Enable Mode Command Set show ip protocols Use the show ip protocols command to display IP routing protocol parameters and statistics. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is a sample output from the show ip protocols command: ProCurve>enable...
  • Page 240 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip route [connected | ospf | rip | static | table | bgp | summary | summary realtime | <ip address> <subnet>] Use the show ip route command to display the contents of the IP route table. Syntax Description connected Optional.
  • Page 241 SROS Command Line Interface Reference Guide Enable Mode Command Set Usage Examples The following is a sample output from the show ip route command: ProCurve>enable ProCurve#show ip route rip Codes: C - connected S - static R - RIP O - OSPF IA - OSPF inter area N1 - OSPF NSSA external type 1 N2 - OSPF NSSA external type 2 E1 - OSPF external type 1 E2 - OSPF external type 2 Gateway of last resort is 10.15.227.29 to network 0.0.0.0...
  • Page 242 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip traffic [realtime] Use the show ip traffic command to display all IP traffic statistics. Variations of this command include: show ip traffic show ip traffic netstat show ip traffic realtime Syntax Description netstat Optional.
  • Page 243 SROS Command Line Interface Reference Guide Enable Mode Command Set Sent: 3822 total TCP statistics: Retrans Timeout Algorithm: 0 Min retrans timeout (ms): 0 Max retrans timeout (ms): 0 Max TCP Connections: 0 0 active opens, 64 passive opens, 0 failed attempts 5 establish resets, 1 establish current 3795 segments received, 4459 segments sent, 26 segments retransmitted The following is a sample output from the show ip traffic netstat command:...
  • Page 244 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip urlfilter Use the show ip urlfilter command to display configured URL filter and server information. Syntax Description No subcommands. Default Values No default necessary for this command. Usage Examples The following example shows sample output from the show ip urlfilter command: ProCurve>enable ProCurve#show ip urlfilter...
  • Page 245 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip urlfilter exclusive-domain Use the show ip urlfilter exclusive-domain to display all configured domains excluded (either always allowed or always blocked) from URL filtering. Syntax Description No subcommands. Default Values No default necessary for this command.
  • Page 246 SROS Command Line Interface Reference Guide Enable Mode Command Set show ip urlfilter statistics Use the show ip urlfilter statistics command to display statistics for URL filter requests and responses. Syntax Description No subcommands. Default Values No default necessary for this command. Usage Examples The following example shows sample output from the show ip urlfilter statistics command: ProCurve>enable...
  • Page 247 SROS Command Line Interface Reference Guide Enable Mode Command Set show isdn-group <group id> Use the show isdn group command to display integrated services digital network (ISDN) group information. Syntax Description <group id> Displays information for a specific ISDN group. Valid range: 1 to 255. Default Values No default value necessary for this command.

  • Page 248: Show Lldp

    SROS Command Line Interface Reference Guide Enable Mode Command Set show lldp Use the show lldp command to display LLDP timer configuration. Syntax Description No subcommands. Default Values No default values are necessary for this command. Usage Examples The following example shows a sample LLDP timer configuration: ProCurve>enable ProCurve#show lldp Global LLDP information:...
  • Page 249 SROS Command Line Interface Reference Guide Enable Mode Command Set show lldp device <system name> Use the show lldp device command to display specific neighbor information about a given neighbor. Syntax Description <system name> Specifies the system name of the neighbor to display. Default Values No default values are necessary for this command.
  • Page 250 SROS Command Line Interface Reference Guide Enable Mode Command Set show lldp interface <interface> Use the show lldp interface command to display LLDP configuration and statistics for interfaces on this device. Syntax Description <interface> Displays the information for the specified interface. Type show lldp interface ? for a complete list of applicable interfaces.
  • Page 251 SROS Command Line Interface Reference Guide Enable Mode Command Set show lldp neighbors [interface <interface type> <interface>] [detail | realtime] Use the show lldp neighbors interface command to display information about neighbors of this device learned about via LLDP. Syntax Description interface <interface type>...
  • Page 252 SROS Command Line Interface Reference Guide Enable Mode Command Set show lldp neighbors statistics Use the show lldp neighbors statistics command to display statistics about LLDP neighbor table actions. Syntax Description No subcommands. Default Values There are no default values necessary for this command. Functional Notes This command shows information about the changes in this device’s neighbor table.
  • Page 253 SROS Command Line Interface Reference Guide Enable Mode Command Set show memory [heap | realtime] Use the show memory command to display statistics regarding memory including memory allocation and buffer use statistics. Shows how memory is in use (broken down by memory size) and how much memory is free.
  • Page 254 SROS Command Line Interface Reference Guide Enable Mode Command Set show modules Use the show modules command to display a list of the modules currently installed in the system. Syntax Description No subcommands. Default Value No default value necessary for this command. Usage Examples The following is a sample output from the show modules command: ProCurve>enable...
  • Page 255 SROS Command Line Interface Reference Guide Enable Mode Command Set show output-startup Use the show output-startup command to display startup configuration output line-by-line. This output can be copied into a text file and then used as a configuration editing tool. Syntax Description No subcommands.
  • Page 256 SROS Command Line Interface Reference Guide Enable Mode Command Set show port-auth supplicant [interface ethernet <slot/port> | summary] Use the show port-auth command to display supplicant information pertaining to port authentication. The supplicant is the port that will receive services from the port authenticator. Syntax Description interface ethernet <slot/port>...

  • Page 257: Show Pppoe

    SROS Command Line Interface Reference Guide Enable Mode Command Set show pppoe Use the show pppoe command to display all point-to-point over Ethernet (PPPoE) settings and associated parameters. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example enters the Enable Command mode and uses the show command to display pppoe information:...
  • Page 258 SROS Command Line Interface Reference Guide Enable Mode Command Set show probe Use the show probe command to display probe configuration and statistics. Refer to Network Monitor Probe Command Set on page 1330 for information on configuring probe objects. Variations of this command include the following: show probe show probe <name>...

  • Page 259: Show Processes

    SROS Command Line Interface Reference Guide Enable Mode Command Set show processes Use the show processes command to display process statistic information. Variations of this command include: show processes cpu show processes cpu realtime show processes history show processes queue Syntax Description Displays informations about processes that are currently active.

  • Page 260: Show Qos Map

    SROS Command Line Interface Reference Guide Enable Mode Command Set show qos map The show qos map command outputs information about the QoS map. This information differs based on how a particular map entry is defined. Variations of this command include the following: show qos map show qos map <map name>...
  • Page 261 SROS Command Line Interface Reference Guide Enable Mode Command Set match NetBEUI frames being bridged by the router priority bandwidth: 150 (kilobits/sec) burst: default packets matched by map: 0 qos map tcp_map map entry 10 match ACL tcp priority bandwidth: 10 (kilobits/sec) burst: default set precedence value to 5 packets matched by map: 0 map entry 20...
  • Page 262 SROS Command Line Interface Reference Guide Enable Mode Command Set The following example shows a particular QoS map entry (in this case map entry 10): ProCurve#show qos map priority 10 qos map priority map entry 10 match IP packets with a precedence value of 6 priority bandwidth: 400 (kilobits/sec) burst: default packets matched by map: 125520 The following examples show QoS map interface stats associated with the map defined for an interface:...
  • Page 263 SROS Command Line Interface Reference Guide Enable Mode Command Set show queue <interface> Use the show queue command to display conversation information associated with an interface queue. This command shows summary and per-conversation information. Syntax Description <interface> Displays the queueing information for the specified interface. Type the show queue ? command to display a list of valid interface types.
  • Page 264 SROS Command Line Interface Reference Guide Enable Mode Command Set show queuing [fair] Use the show queuing command to display information associated with configured queuing methods. Syntax Description fair Optional keyword used to display only information on the weighted fair queuing configuration.

  • Page 265: Show Radius Statistics

    SROS Command Line Interface Reference Guide Enable Mode Command Set show radius statistics Use the show radius statistics command to display various statistics from the RADIUS subsystem. These statistics include number of packets sent, number of invalid responses, number of timeouts, average packet delay, and maximum packet delay.
  • Page 266 SROS Command Line Interface Reference Guide Enable Mode Command Set show route-map [<name>] Use the show route-map command to display any route maps that have been configured in the router. It displays any match and set clauses associated with the route map, as well as the number of incoming routes that have matched each route map.
  • Page 267 SROS Command Line Interface Reference Guide Enable Mode Command Set BGP Filtering matches: 12 routes In the example below, only the route map with the name "RouteMap2" is displayed. ProCurve>enable ProCurve#show route-map RouteMap2 route-map RouteMap2, permit, sequence 10 Match clauses: ip address (access-lists): 192.168.1.1 Set clauses: metric 100...
  • Page 268 SROS Command Line Interface Reference Guide Enable Mode Command Set show running-config Use the show running-config command to display a text print of all the non-default parameters contained in the current running configuration file. Specific portions of the running-config may be displayed, based on the command entered.
  • Page 269 SROS Command Line Interface Reference Guide Enable Mode Command Set interface <interface type> Displays the current running configuration for a particular interface. Specifies an interface in the format <interface type [slot/port | slot/port.sub-interface id | interface id | interface id.sub-interface id]>. For example, for a T1 interface use t1 0/1;...
  • Page 270 SROS Command Line Interface Reference Guide Enable Mode Command Set logging forwarding priority-level info no logging email ip policy-timeout tcp all-ports 600 ip policy-timeout udp all-ports 60 ip policy-timeout icmp 60 interface eth 0/1..5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.
  • Page 271 SROS Command Line Interface Reference Guide Enable Mode Command Set show schedule Use the show schedule command to display information regarding the schedule configuration. Syntax Descriptions There are no subcommands for this command. Default Values No default value is necessary for this command. Usage Examples The following is a sample from the show schedule command: ProCurve>enable...
  • Page 272 SROS Command Line Interface Reference Guide Enable Mode Command Set show sip [name-service name-table | resources | statistics | user-registration] Use the show sip command to display Session Initiation Protocol (SIP) statistical and registration information. Syntax Description name-service name-table Displays SIP name service information in the name table. resources Displays SIP server resource information.
  • Page 273 SROS Command Line Interface Reference Guide Enable Mode Command Set The following example shows sample output from the show sip user-registration command: ProCurve>enable ProCurve#show sip user-registration EXT. TYPE IP ADDRESS PORT ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ 1022 SIP - Generic 172.22.9.41 6378 2445 1430 SIP - Generic 10.17.10.12 8412...
  • Page 274 SROS Command Line Interface Reference Guide Enable Mode Command Set show sip location [dynamic | static] Use the show sip location command to display Session Initiation Protocol (SIP) statistical and registration information. Syntax Description dynamic Displays SIP location database dynamic entries. static Displays SIP location database static entries.
  • Page 275 SROS Command Line Interface Reference Guide Enable Mode Command Set show snmp Use the show snmp command to display the system Simple Network Management Protocol (SNMP) parameters and current status of SNMP communications. Variations of this command include the following: show snmp engineID show snmp group show snmp user...
  • Page 276 SROS Command Line Interface Reference Guide Enable Mode Command Set The following is sample output of the show snmp group command for a situation in which a group called securityV3auth was defined (via the snmp-server group command) using version 3 and authentication, and no access control list: ProCurve>enable ProCurve#show snmp group...

  • Page 277: Show Sntp

    SROS Command Line Interface Reference Guide Enable Mode Command Set show sntp Use the show sntp command to display the system Simple Network Time Protocol (SNTP) parameters and current status of SNTP communications. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example displays SNTP parameters and current status: ProCurve>...
  • Page 278 SROS Command Line Interface Reference Guide Enable Mode Command Set show spanning-tree <bridgegroup#> [realtime] Use the show spanning-tree command to display the status of the spanning-tree protocol. Syntax Description <bridgegroup#> Optional. Display spanning-tree for a specific bridge group. realtime Shows full screen spanning-tree protocol status in real-time. Default Values No default value necessary for this command.
  • Page 279 SROS Command Line Interface Reference Guide Enable Mode Command Set show startup-config Use the show startup-config command to display a text printout of the startup configuration file stored in flash memory. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is a sample output of the show startup-config command: ProCurve>enable...
  • Page 280 SROS Command Line Interface Reference Guide Enable Mode Command Set ip access-list standard MatchAll permit host 10.3.50.6 permit 10.200.5.0 0.0.0.255 ip access-list extended UnTrusted deny icmp 10.5.60.0 0.0.0.255 any source-quench deny tcp any any no ip snmp agent 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.
  • Page 281 SROS Command Line Interface Reference Guide Enable Mode Command Set show startup-config checksum Use the show startup-config checksum command to display the MD5 checksum of the unit’s startup configuration. Syntax Description No subcommands. Default Values No default value necessary for this command. Functional Notes This command is used in conjunction with the show running-config checksum command to determine whether the configuration has changed since the last time it was saved.

  • Page 282: Show System

    SROS Command Line Interface Reference Guide Enable Mode Command Set show system The show system command shows the system version, timing source, power source, and alarm relay status. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is sample output for the show system command: ProCurve>enable...
  • Page 283 SROS Command Line Interface Reference Guide Enable Mode Command Set show tacacs+ statistics Use the show tacacs+ statistics command to display terminal access controller access control system (TACACS+) client statistics. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is sample output for the show tacacs+ statistics command: ProCurve>enable...
  • Page 284 SROS Command Line Interface Reference Guide Enable Mode Command Set show tcp info [realtime] <control block> Use the show tcp info command to display TCP control block information in the SROS. This information is for troubleshooting and debug purposes only. For more detailed information, you can optionally specify a particular TCP control block.
  • Page 285 SROS Command Line Interface Reference Guide Enable Mode Command Set show tech [terminal] Use the show tech command to create a file showtech.txt located in flash memory that contains pertinent system information collected from various show commands. Instead of writing to a file, display the created file on the terminal screen using the terminal option.
  • Page 286 SROS Command Line Interface Reference Guide Enable Mode Command Set show processes cpu show buffers show buffers users show memory heap show debugging Usage Examples The following creates a showtech.txt file and displays it to the terminal screen: ProCurve>enable ProCurve#show tech Opening and applying file..
  • Page 287 SROS Command Line Interface Reference Guide Enable Mode Command Set ProCurve# show modules Slot Port Type Part Number Software Version 1–2 E1/E1 WAN J8456A 1–2 E1/E1 WAN J8456A 1–8 Octal E1 J8463A Empty – – ProCurve#! ProCurve#! ProCurve# show flash 287413 J01_02B-boot.biz 3775 startup-config 5166 startup-config.bak...
  • Page 288 SROS Command Line Interface Reference Guide Enable Mode Command Set show thresholds Use the show thresholds command to display thresholds currently crossed for all DS1 interfaces. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is sample output of the show thresholds command.

  • Page 289: Show Track

    SROS Command Line Interface Reference Guide Enable Mode Command Set show track Use the show track command to display track object configuration and statistics. Refer to Network Monitor Track Configuration Command Set on page 1347 for information on configuring track objects. Variations of this command include the following: show track show track <name>...
  • Page 290 SROS Command Line Interface Reference Guide Enable Mode Command Set show udp info [realtime] <session id> Use the show udp info command to display User Datagram Protocol (UDP) session information. Syntax Description realtime Displays full-screen output in real-time. See the Functional Notes below for more information.
  • Page 291 SROS Command Line Interface Reference Guide Enable Mode Command Set show users [realtime] Use the show users command to display the name (if any) and state of users authenticated by the system. Displayed information includes: • Connection location (for remote connections this includes TCP information) •...
  • Page 292 SROS Command Line Interface Reference Guide Enable Mode Command Set show version Use the show version command to display the current SROS version information. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following is a sample show version output: ProCurve>enable ProCurve#show version ProCurve Secure Router 7203dl...
  • Page 293 SROS Command Line Interface Reference Guide Enable Mode Command Set show version [cflash | flash] <filename> Use the show version cflash and show version flash commands to display the current SROS version information for a specified .biz file. When this command is entered, the system opens the .biz file specified and returns the current SROS version information.
  • Page 294 SROS Command Line Interface Reference Guide Enable Mode Command Set sip check-sync Use the sip check-sync command to send a check-sync notification to all IP phones registered to the unit. When an IP phone receives this check-sync notification, the phone will check for possible configuration changes stored on the server.
  • Page 295 SROS Command Line Interface Reference Guide Enable Mode Command Set telnet <address> Use the telnet command to open a Telnet session (through the SROS) to another system on the network. Syntax Description <address> Specifies the IP address of the remote system. Default Values No default value necessary for this command.
  • Page 296 SROS Command Line Interface Reference Guide Enable Mode Command Set terminal length <lines> The terminal length command sets the number of rows (lines) for a terminal session. This command is only valid for the current terminal session and returns to the default value (24 rows) when the session closes.
  • Page 297 SROS Command Line Interface Reference Guide Enable Mode Command Set traceroute <address> source <address> Use the traceroute command to display the IP routes a packet takes to reach the specified destination. Syntax Description <address> Optional. Specifies the IP address of the remote system to trace the routes to. source <address>...

  • Page 298: Undebug All

    SROS Command Line Interface Reference Guide Enable Mode Command Set undebug all Use the undebug all command to disable all activated debug messages. Syntax Description No subcommands. Default Values No default value necessary for this command. Usage Examples The following example disabled all activated debug messages: ProCurve>enable ProCurve#undebug all 5991-2114...
  • Page 299 SROS Command Line Interface Reference Guide Enable Mode Command Set wall <message> Use the wall command to send messages to all users currently logged in to the SROS unit. Syntax Description No subcommands. Default Values No defaults necessary for this command. Usage Examples The following example sends the message “Reboot in 5 minutes if no objections”...
  • Page 300 SROS Command Line Interface Reference Guide Enable Mode Command Set write [erase | memory | network | terminal] Use the write command to save the running configuration to the unit’s flash memory or a Trivial File Transfer Protocol (TFTP) server. Also use the write command to clear flash memory or to display the running configuration on the terminal screen.

  • Page 301: Global Configuration Mode Command Set

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set LOBAL ONFIGURATION OMMAND To activate the Global Configuration mode, enter the configuration command at the Enable security mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)# The following commands are common to multiple command sets and are covered in a centralized section of this guide.
  • Page 302 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set exception report [file-name <filename>] on page 360 ftp authentication <listname> on page 361 hostname <name> on page 362 interface commands begin on page 363 ip access-list commands begin on page 375 ip as-path-list <listname>...
  • Page 303 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip tacacs source-interface <interface> on page 452 ip tftp server on page 453 ip tftp source-interface <interface> on page 454 ip urlfilter commands begin on page 455 isdn-group on page 461 isdn-number-template on page 462 line [console | telnet | ssh] <line-number>...

  • Page 304: Begin

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa accounting commands <level> Use aaa accounting commands to set parameters for authentication, authorization, and accounting (AAA) accounting. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.
  • Page 305 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Examples The following example creates a list called myList and sets accounting for Level 1 commands at stop-only activities: ProCurve(config)#aaa accounting commands 1 myList stop-only group tacacs+ Note To complete this command, Telnet must be applied to the lines.
  • Page 306 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa accounting connection Use the aaa accounting connection command to send accounting records for outbound Telnet connections.For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.
  • Page 307 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Examples The following example creates a list called myList and sends the Telnet connection information to the TACACS+ server when the connection terminates: ProCurve(config)#aaa accounting connection myList stop-only group tacacs+ The following example creates a list called myList and sends the Telnet connection information to the TACACS+ server when the connection is made and when the connection terminates: ProCurve(config)#aaa accounting connection myList start-stop group tacacs+...

  • Page 308: Aaa Accounting Exec

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa accounting exec Use the aaa accounting exec command to send accounting records of all new connections/logins. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.
  • Page 309 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Examples The following example creates a list called myList and sends the connection/login records to the TACACS+ server when the connection/login is terminated: ProCurve(config)#aaa accounting exec myList stop-only group tacacs+ Note To complete this command, Telnet must be applied to the lines.
  • Page 310 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa accounting suppress null-username Use the aaa accounting suppress null-username command to stop sending accounting records for usernames set to null. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.

  • Page 311: Aaa Accounting Update

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa accounting update Use the aaa accounting update command to specify when accounting records are sent to the server. For more detailed information on authentication, authorization, and accounting (AAA) functionality, refer to the Technology Review section of the command aaa on on page 321.Variations of this command include: aaa accounting update newinfo aaa accounting update periodic <value>...

  • Page 312: Begin

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa authentication Use the aaa authentication command to control various features of the AAA subsystem authentication process. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.Variations of this command include: aaa authentication banner <banner>...
  • Page 313 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Examples The following example defines a banner of “Welcome to the ProCurve Secure Router”: ProCurve(config)#aaa authentication banner : Enter TEXT message. End with the character ‘:’. Welcome to the ProCurve Secure Router.: The following example defines an authentication failed message of “Authentication Failed.
  • Page 314 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa authentication enable default Use the aaa authentication enable default command to create (or change) the list of fallback methods used for privileged mode access authentication. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.
  • Page 315 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Use the radius-server command to specify RADIUS servers before adding them to a group. Likewise, use the tacacs-server command to specify TACACS+ servers before adding them to a group. These Radius Group commands enter a mode for adding individual servers to the named group.

  • Page 316: Aaa Authentication Login

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa authentication login Use the aaa authentication login command to create (or change) a named list with the ability to have a chain of fallback authentication methods for user authentication. Available methods for the fallback authentication methods are: no authentication (which grants login access without authentication), line password, enable password, local database, and defined group of servers.
  • Page 317 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Syntax Description <listname> Specifies a named login list. default Specifies the default list used to authenticate users when no other list is assigned. none Access automatically granted. line Uses line password (Telnet 0-4 or console 0-1) for authentication. enable Uses enable password for authentication.

  • Page 318: Begin

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa authorization Use the aaa authorization to enable or disable authorization for configuration mode commands and for console mode. For more detailed information on authentication, authorization, and accounting (AAA) functionality, refer to the Technology Review section of the command aaa on on page 321.
  • Page 319 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa authorization commands <level> Use aaa authorization commands to create (or change) a list of methods for user authorization. For more detailed information on authentication, authorization, and accounting (AAA) functionality, refer to the Technology Review section of the command.

  • Page 320: Aaa Authorization Exec

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa authorization exec Use the aaa authorization exec command to set authorization lists for exec shell. This allows a user to enter directly into Enable mode for new CLI sessions when authorized. For more detailed information on authentication, authorization, and accounting (AAA) functionality, refer to the Technology Review section of the command aaa on on page 321.
  • Page 321 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Examples The following command creates a list called myList to authorize exec shell (which succeeds only if the user has been authenticated successfully): ProCurve(config)#aaa authorization exec myList if-authenticated The following command specifies to use the default list to authorize an exec shell with the TACACS+ server: ProCurve(config)#aaa authorization exec default group tacacs+...

  • Page 322: Aaa Group Server

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa group server Use the aaa group server command to group pre-defined RADIUS and TACACS+ servers into named lists. For more detailed information on authentication, authorization, and accounting (AAA) functionality, refer to the Technology Review section of the command aaa on on page 321.

  • Page 323: Aaa On

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa on Use the aaa on command to activate the AAA subsystem. Use the no form of this command to deactivate AAA. Syntax Description No subcommands. Default Values By default, AAA is not activated. Functional Notes By default, the AAA subsystem is turned off and authentication follows the line technique (local, line, etc.).
  • Page 324 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Methods fail (and therefore cause the system to proceed to the next configured method) under circumstances such as the following: • LINE and ENABLE passwords fall through if there is no LINE or ENABLE password configured. •...

  • Page 325: Aaa Processes

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set aaa processes <threads> Use the aaa processes command to set the number of threads available to the AAA subsystem. Use the no form of this command to return to the default setting. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.

  • Page 326: Arp Arpa

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set arp <ip address> <mac address> arpa Use this command to enter static entries into the address resolution protocol (ARP) table. Syntax Description arpa Sets the standard address resolution protocol for this interface. <ip address>...

  • Page 327: Autosynch-Mode

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set autosynch-mode Use the autosynch command to configure the SROS to synchronize the startup-config and SROS.BIZ files located in the system flash memory and the compact flash card. Use the no form of this command to disable this feature.
  • Page 328 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Functional Notes Status commands associated with the AutoSynch feature include show version flash SROS.BIZ and show autosynch-status. The show version flash SROS.BIZ command opens the specified .biz file and returns the current SROS version information.

  • Page 329: Banner [Exec | Login | Motd]

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set banner [exec | login | motd] <character> <message> <character> Use the banner command to specify messages to be displayed in certain situations. Use the no form of this command to delete a previously configured banner. Syntax Description exec Creates a message to be displayed when any exec-level process takes place.

  • Page 330: Boot Config [Cflash | Flash] [Cflash | Flash]

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set boot config [cflash | flash] <filename> [cflash | flash] <backup filename> Use the boot config command to modify system boot parameters. Syntax Description cflash Specifies primary/backup configuration file located in compact flash memory. flash Specifies primary/backup configuration file located in flash memory.
  • Page 331 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set boot system [cflash | flash] <filename> [no-backup | [cflash | flash] <backup filename>] [verify] Use the boot config command to specify the system software loaded at startup. Syntax Description cflash Specifies primary/backup file located in compact flash memory.

  • Page 332: Bridge Protocol Ieee

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set bridge <group#> protocol ieee The bridge protocol ieee command configures a bridge group for the IEEE Spanning Tree Protocol. Use the no form of this command (with the appropriate arguments) to delete this setting. Syntax Description <group#>...
  • Page 333 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set bridge irb Use the bridge irb command to enable integrated routing and bridging (IRB) and also allow the creation of bridged virtual interfaces (BVIs). Use the no form of this command to disable the IRB. Syntax Descriptions There are no subcommands for this command.
  • Page 334 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Examples The following example enables IRB: ProCurve(config)#bridge irb 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.

  • Page 335: Clock [Auto-Correct-Dst | No-Auto-Correct-Dst]

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set clock [auto-correct-dst | no-auto-correct-dst] The clock auto-correct-dst command allows the unit to automatically correct for Daylight Saving Time (DST). Use the clock no-auto-correct-dst command to disable this feature. Syntax Description auto-correct-DST Configures the unit to automatically correct for DST.

  • Page 336: Clock Set

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set clock set <time> <day> <month> <year> Use the clock set command to configure the system software clock. For the command to be valid, all fields must be entered. Refer to the Usage Example below for an example. Syntax Description <time>...
  • Page 337 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set clock timezone <text> The clock timezone command sets the unit’s internal clock to the timezone of your choice. This setting is based on the difference in time (in hours) between Greenwich Mean Time (GMT) or Central Standard Time (CST) and the timezone for which you are setting up the unit.
  • Page 338 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Functional Notes (cont’d) clock timezone +2-Helsinki clock timezone -3-Greenland clock timezone +2-Jerusalem clock timezone -3:30 clock timezone +3-Baghdad clock timezone -4-Atlantic-Time clock timezone +3-Kuwait clock timezone -4-Caracus clock timezone +3-Moscow clock timezone -4-Santiago clock timezone +3-Nairobi clock timezone -5...

  • Page 339: Begin

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set crypto ca authenticate <name> Use the crypto ca authenticate command to initiate CA authentication procedures. Syntax Description <name> Specifies CA profile by alphanumeric string of up to 32 characters. Default Values No defaults necessary for this command.
  • Page 340 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set -----END X509 CERTIFICATE----- quit Hash: 4e904504dc4e5b95e08129430e2a0b97ceef0ad1394f905b42df2dfb8f751be0244a711bb0 6eddaa2f07dd640c187f14c16fa0bed28e038b28b6741a880539d6ed06a68b7e324bfdde6f3d0b17 83d94e58fd4943f5988a7a0f27f6b6b932dc0410378247160752853858dbe7a1951245cfb14b109e ffc430e177623720de56f4 * Do you accept this certificate? [y]y 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.
  • Page 341 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set crypto ca certificate chain <name> Use the crypto ca certificate chain command to enter the Certificate Configuration for the specified CA. See Certificate Configuration Command Set on page 1223 for more information. Syntax Description <name>...
  • Page 342 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set crypto ca enroll <name> Use the crypto ca enroll command to begin CA enrollment procedures. Syntax Description <name> Specifies CA profile by alphanumeric string of up to 32 characters. Default Values No defaults necessary for this command.
  • Page 343 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set crypto ca import <name> certificate Use the crypto ca import certificate command to import a certificate manually via the console terminal Syntax Description <name> Specifies CA profile by alphanumeric string of up to 32 characters. Default Values No defaults necessary for this command.
  • Page 344 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set crypto ca import <name> crl Use the crypto ca import crl command to import a CRL manually via the console terminal. Syntax Description <name> Specifies CA profile by alphanumeric string of up to 32 characters. Default Values No defaults necessary for this command.
  • Page 345 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set crypto ca profile <name> Use the crypto ca profile command to define a CA and to enter the CA Profile Configuration. See CA Profile Configuration Command Set on page 1212 for more information. Syntax Description <name>...
  • Page 346 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set crypto ike Use the crypto ike command to define the system-level local ID for IKE negotiations and to enter the IKE Client or IKE Policy command sets. Variations of this command include the following: crypto ike client configuration pool <poolname>...
  • Page 347 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set provided with your unit. Step 1: Enter the Global configuration mode (i.e., config terminal mode). ProCurve>enable ProCurve#configure terminal Step 2: Enable VPN support using the ip crypto command. This command allows crypto maps to be applied to interfaces, and enables the IKE server to listen for IKE negotiation sessions on UDP port 500.
  • Page 348 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ProCurve(config-ike)#attribute 10 ProCurve(config-ike-attribute)#encryption 3des ProCurve(config-ike-attribute)#hash sha ProCurve(config-ike-attribute)#authentication pre-share ProCurve(config-ike-attribute)#group 1 ProCurve(config-ike-attribute)#lifetime 86400 Step 5: Define the remote-id settings. The crypto ike remote-id command is used to define the remote-id for a peer connecting to the system, specify the preshared-key associated with the specific remote-id, and (optionally) determine that the peer matching this remote-id should not use mode config (by using the no-mode-config keyword).
  • Page 349 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ProCurve(config-crypto-map)#set peer 172.16.15.129 ProCurve(config-crypto-map)#set transform-set highly_secure ProCurve(config-crypto-map)#set security-association lifetime kilobytes 8000 ProCurve(config-crypto-map)#set security-association lifetime seconds 28800 ProCurve(config-crypto-map)#no set pfs Step 9: Configure public interface. This process includes configuring the IP address for the interface and applying the appropriate crypto map to the interface.
  • Page 350 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set crypto ike remote-id Use the crypto ike remote-id command to specify the remote ID and to associate a pre-shared key with the remote ID. Note For VPN configuration example scripts, refer to the technical support note VPN Configuration Guide located on the ProCurve SROS Documentation CD provided with your unit.
  • Page 351 CLI, but it can be transferred to the unit via the startup-config. Example for typical asn1-dn format with no wildcards: crypto ike remote-id asn1-dn "CN=MyRouter, C=US, S=CA, L=Roseville, O-HP, OU=TechSupport" (matches only remote ID strings with all fields exactly the same) Example for typical asn1-dn format with wildcards used to match a string within a field: crypto ike remote-id asn1-dn "CN=*, C=*, S=*, L=*, O=*, OU=*"...
  • Page 352 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set crypto ipsec transform-set <setname> <parameters> Use the crypto ipsec transform-set command to define the transform configuration for securing data (e.g., esp-3des, esp-sha-hmac, etc.). The transform-set is then assigned to a crypto map using the map’s set transform-set command.

  • Page 353: Crypto Map

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set crypto map Use the crypto map command to define crypto map names and numbers and to enter the associated (either Crypto Map IKE or Crypto Map Manual). Variations of this command include the following: crypto map <mapname>...
  • Page 354 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Examples The following example creates a new IPSec IKE crypto map called testMap with a map index of 10: ProCurve(config)#crypto map testMap 10 ipsec-ike ProCurve(config-crypto-map)# Technology Review A crypto map entry is a single policy that describes how certain traffic is to be secured. There are two types of crypto map entries: ipsec-manual and ipsec-ike.

  • Page 355: Data-Call [Authentication Protocol | Sent Authentication Protocol] [Chap | Pap]

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set data-call [authentication protocol | sent authentication protocol] [chap | pap] Use the data-call authentication protocol and data-call sent authentication protocol commands to set the pre-authentication defaults for inbound demand routing calls. Use the no form of these commands to return to the default settings.

  • Page 356: Data-Call [Mtu | Multilink]

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set data-call [mtu <number> | multilink] Use the data-call commands to set the pre-authentication defaults for maximum transmit unit (MTU) size or to enable multilink for inbound demand routing calls. Use the no form of each command to return to the factory default settings.

  • Page 357: Enable Password [Md5]

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set enable password [md5] <password> Use the enable password command to define a password (with optional encryption) for accessing the Enable mode. Use the no enable password command to remove a configured password. Note To prevent unauthorized users from accessing the configuration functions of your device, immediately install an Enable-level password.

  • Page 358: Event-History On

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set event-history on Use the event-history on command to enable event logging for the SROS system. Event log messages will not be recorded unless this command has been issued (regardless of the event-history priority configured).

  • Page 359: Event-History Priority [Error | Fatal | Info | Notice | Warning]

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set event-history priority [error | fatal | info | notice | warning] Use the event-history priority command to set the threshold for events stored in the event history. All events with the specified priority or higher will be kept for viewing in the local event log. The event log may be displayed using the show event-history command.
  • Page 360 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Examples The following example logs all events to the event history: ProCurve>enable ProCurve#config terminal ProCurve(config)#event-history priority info 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.

  • Page 361: Exception Memory Minimum

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set exception memory minimum <memory> Use the exception memory minimum command to initiate a reboot when the specified minimum amount of memory is no longer available. This ensures that adequate memory is available to store an exception report.
  • Page 362 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set exception report [file-name <filename>] Use the exception report command to change the default output filename for generated exception reports. An exception report contains a snap shot of current system processes to use when troubleshooting. Syntax Description file-name <filename>...
  • Page 363 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ftp authentication <listname> Use the ftp authentication command to attach AAA login authentication lists to the FTP server (see aaa authentication login on page 314 for more information). This list is only used if the AAA subsystem has been activated with the aaa on command.
  • Page 364 ProCurve Secure Router 7203dl is ProCurveSR7203dl. Usage Examples The following example creates a hostname for the SROS device of HP_RTR to identify the system as the HP router: ProCurve(config)#hostname HP_RTR 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.
  • Page 365 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set interface <port-type> <slot/port> Activates the Interface Configuration mode for the listed physical interface. Syntax Description <port-type> Identifies the physical port type of the installed Interface Module, Backup Module or Ethernet port. Type interface ? for a complete list of valid interfaces. <slot/port>...
  • Page 366 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set interface atm <label> point-to-point Use the interface frame-relay command to create a virtual Asynchronous Transfer Mode (ATM) interface (or sublink, if specified) that is identified using the entered number label. In addition, entering this command activates the ATM interface command set.
  • Page 367 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Step 3: Make the association between the layer 2 endpoint and the physical interface using the bind command. For example, the following creates a bind (labeled 5) to make an association between the ATM virtual interface (atm 7) and the adsl 1/1 interface.
  • Page 368 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set interface frame-relay <label> point-to-point Use the interface frame-relay command to create a virtual Frame Relay interface (or sublink, if specified) that is identified using the entered number label. In addition, entering this command activates the Frame Relay interface command set.
  • Page 369 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ProCurve(config-fr 7.22)#frame-relay interface-dlci 30 ProCurve(config-fr 7.22)#ip address 10.44.69.1 255.255.255.252 ProCurve(config-fr 7.22)#no shutdown Step 3: (VALID ONLY FOR T1 INTERFACES) Specify the group of DS0s used for signaling on the T1 interface by creating a tdm-group. Group any number of aggregate DS0s together to create a data pipe for layer 2 signaling.
  • Page 370 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set interface hdlc <label> Use the interface hdlc command to create a virtual high level data link control interface that is identified using the entered number label. In addition, entering this command activates the HDLC interface command set.
  • Page 371 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Step 4: Make the association between the layer 2 endpoint and the physical interface using the bind command. For example, the following creates a bind (labeled 5) to make an association between the HDLC virtual interface (hdlc 7) and the tdm-group configured on interface t1 1/1 (tdm-group 9).
  • Page 372 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set interface loopback <label> Use the interface loopback command to create a virtual interface that can be assigned layer 3 and higher properties and is always up unless the router is shut down. Use the no form of this command to delete a configured loopback interface.
  • Page 373 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set interface ppp <label> Use the interface ppp command to create a virtual point-to-point protocol (PPP) interface that is identified using the entered number label. In addition, entering this command activates the PPP interface command set.
  • Page 374 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Step 4: Make the association between the layer 2 endpoint and the physical interface using the bind command. For example, the following creates a bind (labeled 5) to make an association between the PPP virtual interface (ppp 7) and the tdm-group configured on interface t1 1/1 (tdm-group 9).
  • Page 375 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set interface range [e1 | t1] <slot/port> - <slot/port> Use the interface range command to enter configuration mode for a range of interfaces. Syntax Description Specifies the interface type as E1. Specifies the interface type as T1.
  • Page 376 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set interface tunnel <id> Use the interface tunnel command to create a virtual tunnel interface and enters the Tunnel Configuration command set. See Tunnel Configuration Command Set on page 1144 for details. Use the no form of this command to delete a configured virtual tunnel interface.
  • Page 377 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip access-list extended <listname> Use the ip access-list extended command to create an empty access list and enter the extended access-list command set. Use the no form of this command to delete an access list and all the entries contained in it.
  • Page 378 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set specified range. <port number> Specifies the port number used by TCP or UDP to pass information to upper layers using the following syntax: <0-65535>. All ports below 1024 are considered well-known ports and are controlled by the Internet Assigned Numbers Authority (IANA).
  • Page 379 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set <destination> Specifies the destination used for packet matching. Destinations can be expressed in one of four ways: 1. Using the keyword any to match any IP address. 2. Using host <A.B.C.D> to specify a single host address. 3.
  • Page 380 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set the top and the more general at the bottom. The following commands are contained in the access-list extended: remark Use the remark command to associate a descriptive tag (up to 80 alphanumeric characters encased in quotation marks) to the access-list.
  • Page 381 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip access-list standard <listname> Use the ip access-list standard command to create an empty access list and enter the standard access-list command set. Use the no form of this command to delete an access list and all the entries contained in it. For more information on using access lists with the SROS firewall, refer to ip policy-class <policyname>...
  • Page 382 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set The following commands are contained in the access-list standard: remark Use the remark command to associate a descriptive tag (up to 80 alphanumeric characters encased in quotation marks) to the access-list. Enter a functional description for the list such as “This list blocks all outbound web traffic”.
  • Page 383 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip as-path-list <listname> Use the ip as-path-list command to create IP autonomous system (AS) path lists for route-map use. Use the no form of this command to delete the AS path list. Syntax Description AS Path List Command Set <listname>...
  • Page 384 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip classless Use the ip classless command to forward classless packets to the best supernet route available. A classless packet is a packet addressed for delivery to a subnet of a network with no default network route. Syntax Description No subcommands.
  • Page 385 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip community-list <listname> Use the ip community-list command to create a community list for BGP route map use. Use the no form of this command to delete a community list. Syntax Description <listname>...
  • Page 386 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip crypto Use the ip crypto command to enable SROS VPN functionality and allow crypto maps to be added to interfaces. Use the no form of this command to disable the VPN functionality. Note Disabling the SROS security features (using the no ip crypto command) does not affect VPN configuration settings (with the exception of the removal of all crypto maps from the...
  • Page 387 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip default-gateway <ip address> Use the ip default-gateway command to specify a default gateway if (and only if) IP routing is NOT enabled on the unit. Use the ip route command to add a default route to the route table when using IP routing functionality.
  • Page 388 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip dhcp-server database local Use the ip dhcp-server database local command to configure a DHCP database agent with local bindings. Use the no form of this command to disable this option. Syntax Description No subcommands.
  • Page 389 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip dhcp-server excluded-address <start ip> <end ip> Use the ip dhcp-server excluded-address command to specify IP addresses that cannot be assigned to DHCP clients. Use the no form of this command to remove a configured IP address restriction. Syntax Description <start ip>...
  • Page 390 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip dhcp-server ping packets <#packets> Use the ip dhcp-server ping packets command to specify the number of ping packets the DHCP server will transmit before assigning an IP address to a requesting DHCP client. Transmitting ping packets verifies that no other hosts on the network are currently configured with the specified IP address.
  • Page 391 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip dhcp-server ping timeout <milliseconds> Use the ip dhcp-server ping timeout command to specify the interval (in milliseconds) the DHCP server will wait for a response to a transmitted DHCP ping packet. The DHCP server transmits ping packets before assigning an IP address to a requesting DHCP client.
  • Page 392 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip dhcp-server pool <name> Use the ip dhcp-server pool command to create a DHCP address pool and enter the DHCP pool. Use the no form of this command to remove a configured DHCP address pool. See the section DHCP Pool Command Set on page 1406 for more information.
  • Page 393 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip domain-lookup Use the ip domain-lookup command to enable the IP DNS (domain naming system), allowing DNS-based host translation (name-to-address). Use the no form of this command to disable DNS. Syntax Description No subcommands.
  • Page 394 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip domain-name <name> Use the ip domain-name command to define a default IP domain name to be used by the SROS to resolve host names. Use the no form of this command to disable this function. Syntax Description <name>...
  • Page 395 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip domain-proxy Use the ip domain-proxy command to enable DNS proxy for the router. This enables the router to act as a proxy for other units on the network. Syntax Description No subcommands.
  • Page 396 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall Use the ip firewall command to enable SROS security features including access control policies and lists, Network Address Translation (NAT), and the stateful inspection firewall. Use the no form of this command to disable the security functionality.
  • Page 397 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set 2. Access Policies (ACPs) SROS access control policies are used to allow, discard, or manipulate (using NAT) data for each physical interface. Each ACP consists of a selector (access list) and an action (allow, discard, NAT). When packets are received on an interface, the configured ACPs are applied to determine whether the data will be processed or discarded.
  • Page 398 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Case 1: Packets from interfaces with a configured policy class to any other interface ACPs are applied when packets are received on an interface. If an interface has not been assigned a policy class, by default it will allow all received traffic to pass through.
  • Page 399 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Invalid Traffic Pattern Manually OS Firewall Response Common Enabled? Attacks Smurf Attack The firewall will drop any ping responses that Smurf Attack are not part of an active session. IP Spoofing The firewall will drop any packets with a IP Spoofing...
  • Page 400 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Application Specific Processing: The following applications and protocols require special processing to operate concurrently with NAT/firewall functionality. The SROS firewall includes ALGs for handling these applications and protocols: ® AOL Instant Messenger (AIM VPN ALGS: ESP and IKE H.323: H.245 Q.931 ASN1 PER decoding and Encoding...
  • Page 401 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall alg [ftp | h323 | h323 timeout | pptp | sip] Use the ip firewall alg command to enable the application level gateway (ALG) for a particular application.
  • Page 402 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Examples The following example disables ALG for FTP: ProCurve(config)#no ip firewall alg ftp Technology Review SIP is one protocol in a suite of protocols that was designed to replace H.323 for IP telephony. SIP operates in Layer 7 of the OSI model (Application layer) to create, modify, and terminate sessions between nodes.
  • Page 403 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall alg sip udp <port#> Use the ip firewall alg sip udp command to configure the user datagram protocol (UDP) port(s) for Session Initiation Protocol (SIP) application-level gateways (ALG). For more details on SIP functionality in the SROS, refer to the Functional Notes and Technology Review sections of the command ip firewall alg [ftp | h323 | h323 timeout | pptp | sip] on page 399.
  • Page 404 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall attack-log threshold <value> Use the ip firewall attack-log threshold command to specify the number of attack mounting attempts the SROS will identify before generating a log message. Use the no form of this command to return to the default threshold.
  • Page 405 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall check reflexive-traffic Use the ip firewall check reflexive-traffic command to enable the SROS stateful inspection firewall to process traffic from a primary subnet to a secondary subnet on the same interface through the firewall. Use the no form of this command to disable this feature.
  • Page 406 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall check rst-seq Use the ip firewall check rst-seq command to enable TCP reset sequence number checking. Use the no form of this command to disable this feature. Note The SROS security features must be enabled (using the ip firewall command) for the stateful inspection firewall to be activated.
  • Page 407 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall check syn-flood Use the ip firewall check syn-flood command to enable the SROS stateful inspection firewall to filter out phony TCP service requests and allow only legitimate requests to pass through. Use the no form of this command to disable this feature.
  • Page 408 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall check winnuke Use the ip firewall check winnuke command to enable the SROS stateful inspection firewall to discard all Out of Band (OOB) data (to protect against WinNuke attacks). Use the no form of this command to disable this feature.
  • Page 409 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall fast-nat-fallover Use the ip firewall fast-nat-fallover command to delete associations on default route policy-class changes. Note The SROS security features must be enabled (using the ip firewall command) for the stateful inspection firewall to be activated.
  • Page 410 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall fin-timeout <seconds> Use the ip firewall fin-timeout command to specify the time period allowed for Transport Control Protocol (TCP) FIN. Use the no form of this command to return to the default setting. Note The SROS security features must be enabled (using the ip firewall command) for the stateful inspection firewall to be activated.
  • Page 411 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall policy-log threshold <value> Use the ip firewall policy-log threshold command to specify the number of connections required by an access control policy before the SROS will generate a log message. Use the no form of this command to return to the default threshold.
  • Page 412 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall rst-timeout <seconds> Use the ip firewall rst-timeout command to specify the time period allowed for Transport Control Protocol (TCP) reset. Use the no form of this command to return to the default setting. Note The SROS security features must be enabled (using the ip firewall command) for the stateful inspection firewall to be activated.
  • Page 413 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip firewall stealth Use the ip firewall stealth command to disable TCP reset for denied firewall associations. The stealth setting allows the route to be invisible as a route hop to associated devices. Note The SROS security features must be enabled (using the ip firewall command) for the stateful inspection firewall to be activated.
  • Page 414 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip forward-protocol udp <port number> Use the ip forward-protocol udp command to specify the protocols and ports the SROS allows when forwarding broadcast packets. Use the no form of this command to disable a specified protocol or port from being forwarded.
  • Page 415 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Examples The following example forwards all Domain Name Server broadcast traffic to the DNS server with IP address 192.33.5.99: ProCurve(config)#ip forward-protocol udp domain ProCurve(config)#interface eth 0/1 ProCurve(config-eth 0/1)#ip helper-address 192.33.5.99 5991-2114 ©...
  • Page 416 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip ftp access-class <policyname> in Use the ip ftp access-class in command to assign an access policy to all self-bound File Transfer Protocol (FTP) sessions. Syntax Description <policyname> Specifies the configured access policy (ACP) to apply to inbound FTP traffic Default Values By default, all ftp access is allowed.
  • Page 417 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip ftp agent Use the ip ftp agent command to enable the file transfer protocol (FTP) agent. Syntax Description No subcommands. Default Values By default, the FTP agent is enabled. Usage Examples The following example enables the IP FTP agent: ProCurve(config)#ip ftp agent...
  • Page 418 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip ftp server Use the ip ftp server command to enable the File Transfer Protocol (FTP) server. The default-filesystem keyword specifies the default location for the FTP server to retrieve and store files. Use the no form of this command to disable the FTP server.Variations of this command include: ip ftp server ip ftp server default-filesystem cflash...
  • Page 419 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip ftp source-interface <interface> Use the ip ftp source-interface command to use the specified interface’s IP address as the source IP address for FTP traffic transmitted by the unit. Use the no form of this command if you do not wish to override the normal source IP address.
  • Page 420 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip host <name> <address> Use the ip host command to define an IP host name. This allows you to statically map host names and addresses in the host cache. Use the no form of this command to remove defined maps. Syntax Description <name>...
  • Page 421 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip http Use the ip http command to enable Web access to the unit. Use the no form of these commands to disable these features. Variations of this command include: ip http access-class <name>...
  • Page 422 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip igmp join <group-address> Use the ip igmp join command to instruct the router stack to join a specific group. The stack may join multiple groups. Syntax Description <group-address> IP address of a multicast group.
  • Page 423 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip load-sharing [per-destination | per-packet] Use the ip load-sharing command to configure whether parallel routes in the route table are used to load-share forwarded packets. If this command is disabled, the route table uses a single "best" route for a given subnet.
  • Page 424 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip local policy route-map <map-name> Use this command to specify a route-map for local policy routing on the device. This setting is applied to the local network interface. Use the no form of this command to return to the default route-map. Syntax Description <map-name>...
  • Page 425 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip mcast-stub helper-address <ip address> Use the ip mcast-stub helper-address command to specify an IP address toward which IGMP host reports and leave messages are forwarded. This command is used in IP multicast stub applications in conjunction with the ip mcast-stub downstream and ip mcast-stub upstream commands.
  • Page 426 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip multicast-routing Use the ip multicast routing command to enable the multicast router process. The command does not affect other multicast-related configuration. Use the no form of this command to disable. Disabling this command prevents multicast forwarding but does not remove other multicast commands and processes.
  • Page 427 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip name-server <server-address1-6> Use the ip name-server command to designate one or more name servers to use for name-to-address resolution. Use the no form of this command to remove any addresses previously specified. Syntax Description <server-address1-6>...
  • Page 428 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip policy-class <policyname> Use the ip policy-class command to create an access control policy and enter the access control policy command set. Use the no form of this command to delete an access policy and all the entries contained in it.Variations of this command include: ip policy-class <policyname>...
  • Page 429 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set allow list (continued) self When the self keyword is applied, packets permitted by the ACL destined for any local interface on the unit will be allowed. These packets are terminated by the unit and are not routed or forwarded to other destinations.
  • Page 430 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set nat source list policy class entry or implicitly discarded if no further policy class entries exist. (continued) Possible nat source list actions performed by the access policy are as follows: nat source list <access control list name>...
  • Page 431 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Default Values By default, all SROS security features are disabled and there are no configured access lists. Functional Notes SROS access control policies are used to allow, discard, or manipulate (using NAT) data for each physical interface.
  • Page 432 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Step 2: Create an access control list to permit or deny specified traffic. Standard ACLs match based on the source of the packet. Extended ACLs match based on the source and destination of the packet. Sources can be expressed in one of four ways: 1.
  • Page 433 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip policy-class [<policyname>] [max-sessions <number> | max-host-sessions <number>] Use the ip policy-class max-sessions and ip policy-class max-host-sessions commands to create or alter settings for an access control policy. For more details on IP policy class functionality in the SROS, refer to ip policy-class <policyname>...
  • Page 434 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip policy-class <policyname> rpf-check Use the ip policy-class rpf-check command to verify that traffic has entered on the appropriate interface using a route lookup. Reverse Path Forwarding (RPF) is essentially a spoofing check. For more details on IP policy class functionality in SROS, refer to ip policy-class <policyname>...
  • Page 435 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip policy-timeout <protocol> <range> <port> <seconds> Use multiple ip policy-timeout commands to customize timeout intervals for protocols (TCP UDP ICMP) or specific services (by listing the particular port number). Use the no form of this command to return to the default timeout values.
  • Page 436 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Syntax Description (Continued) finger (Port 79) tacacs (Port 49) ftp (Port 21) talk (Port 517) <port> *Optional ftp-data (Port 20) telnet (Port 23) gopher (Port 70) time (Port 37) hostname (Port 101) uucp (Port 540) ident (Port 113)
  • Page 437 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip prefix-list <listname> description <“text”> Use the ip prefix-list description command to create and name prefix lists. Syntax Description <listname> Specifies a particular prefix list. description <text> Assigns text (set apart by quotation marks) used as a description for the prefix list. Maximum length is 80 characters.
  • Page 438 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip prefix-list <listname> seq <sequence#> [permit | deny] <network/len> [le <le-value> | ge <ge-value>] Use the ip prefix-list seq command to specify a prefix to be matched or a range of mask lengths. Syntax Description <listname>...
  • Page 439 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip radius source-interface <interface> Use the ip radius source-interface command to specify the NAS (network-attached storage) IP address attribute passed with the RADIUS authentication request packet. Syntax Description <interface> Specifies the source interface (in the format type slot/port).

  • Page 440: Administrative Distance

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip route <ip address> <subnet mask> [<interface or ip address> | null 0] <administrative distance> Use the ip route command to add a static route to the route table. Use the no form of this command to remove a configured static route.
  • Page 441 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set tag <number> Optional. Specifies a number to use as a tag for this route. Route tags are used to label and filter routes when dynamically redistributing routes into a routing protocol (such as RIP/OSPF/BGP).
  • Page 442 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip routing Use the ip routing command to enable the SROS IP routing functionality. Use the no form of this command to disable IP routing. Syntax Description No subcommands. Default Values By default, IP routing is enabled.
  • Page 443 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip rtp firewall-traversal [policy-timeout <seconds>] Use the ip rtp firewall-traversal command to enable dynamic firewall traversal capability for RTP-based traffic, allowing deep packet inspection of SDP packets to occur so RTP will correctly traverse NAT in the firewall.
  • Page 444 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip scp server Use the ip scp server command to enable the secure copy server functionality within the SROS. Enabling the secure copy server allows the SROS to support the transfer of files using a secure connection. A secure connection helps provide protection against outside forces gaining access to configuration files.
  • Page 445 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip sip Use the ip sip command to enable the SROS SIP stack. When the SIP stack is enabled, memory is allocated for SIP functionality. For more details on SIP operation, refer to the Technology Review section of the command ip firewall alg [ftp | h323 | h323 timeout | pptp | sip] on page 399.
  • Page 446 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip sip [database local | location] <username> <ip address> <port> [tcp | udp] <number> Use the ip sip database local command to store the location database of SIP User Agents (UAs) across a power loss.
  • Page 447 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip sip proxy Use the ip sip proxy command to enable the SROS SIP proxy server functionality for SIP packets to or from User Agents (UAs) in the location database. The SIP proxy server is used to accept SIP packets on a network, read the packet, route the packet, and maintain a database of information pertaining to SIP UAs located on the network.
  • Page 448 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip sip registrar [authenticate | default-expires | max-expires | min-expires | realm] <timevalue> Use the ip sip registrar command to enable and configure the SIP registrar server used for registering User Agents (UAs) into the location database.
  • Page 449 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip snmp agent Use the ip snmp agent command to enable the Simple Network Management Protocol (SNMP) agent. Syntax Description No subcommands. Default Values By default, the SNMP agent is disabled. Functional Notes Allows a MIB browser to access standard MIBs within the product.
  • Page 450 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip sntp server Use the ip sntp server command to enable the simple network time protocol (SNTP) server. This allows the unit to accept SNTP requests. Use the no form of this command to disable the server. Syntax Description No subcommands.
  • Page 451 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip sntp source-interface <interface> The ip sntp source-interface command to use the specified interface’s IP address as the source IP address for SNTP traffic transmitted by the unit. Use the no form of this command if you do not wish to override the normal source IP address.
  • Page 452 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip [ssh-server <port> | telnet-server <port>] Use the this command to specify alternate transmission control protocol (TCP) ports for secure shell (SSH) and Telnet servers. Use the no form of this command to return to default settings. Syntax Description ssh server <port>...
  • Page 453 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip subnet-zero The ip subnet-zero command is the default operation and cannot be disabled. This command signifies the router’s ability to route to subnet-zero subnets. Syntax Description No subcommands. Default Values By default, this command is enabled.
  • Page 454 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip tacacs source-interface <interface> Use the ip tacacs source-interface command to specify a source IP address for TACACS+ traffic originated by the unit. Use the no form of this command to disable this feature. Syntax Description <interface>...
  • Page 455 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip tftp server Use the ip tftp server to enable the Trivial File Transfer Protocol (TFTP) server. Use the no form of this command to disable the TFTP server. Variations of this command include: ip tftp server ip tftp server access-class <name>...
  • Page 456 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip tftp source-interface <interface> Use the ip tftp source-interface command to use the specified interface’s IP address as the source IP address for TFTP traffic transmitted by the unit. Use the no form of this command if you do not wish to override the normal source IP address.
  • Page 457 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip urlfilter <name> http Use the ip urlfilter http command to create a URL filter for Hypertext Transfer Protocol (HTTP) (TCP port 80) traffic. Use the no form of this command to delete the specified HTTP URL filter. Note The URL filtering software runs on a server independent of the SROS product.
  • Page 458 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip urlfilter allowmode Use the ip urlfilter allowmode command to allow all URL requests in cases when all URL filter servers are down. Use the no form of this command to block all URL requests when all URL filter servers are down.
  • Page 459 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip urlfilter exclusive-domain Use the ip urlfilter exclusive-domain command to instruct SROS to always allow or always block a domain without first having to verify with the URL filter server. Use the no form of this command to remove an exclusive domain.
  • Page 460 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip urlfilter max-request <value> Use the ip urlfilter max-request command to set the maximum number of outstanding URL lookup requests that can be sent to a URL filter server without a response. Use the no form of this command to set the value back to its default.
  • Page 461 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip urlfilter max-response <value> Use the ip urlfilter max-response command to set the maximum number of responses allowed to buffer before receiving an allow or block status from the URL filter server. Use the no form of this command to set the value back to its default.
  • Page 462 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set ip urlfilter server <ip address> Use the ip urlfilter server command to identify a URL filter server by IP address and port number. Use the no form of this command to remove the server from use. Variations of this command include: ip urlfilter server <ip address>...
  • Page 463 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set isdn-group Use the isdn-group command to enter the ISDN Group Configuration mode command set. Refer to the section ISDN Group Config Command Set on page 1204 for more information on the commands available for each group.
  • Page 464 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set isdn-number-template Use the isdn-number-template command to create an entry in the ISDN number type template that is used when encoding the Called Party and Calling Party information elements for inbound and outbound ISDN calls.
  • Page 465 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set prefix 916 stripped and 555-1212 in the Number Digits field. For areas with mandatory ten-digit dialing, a blank prefix should be entered to ensure that all ten digits are passed to the Number Digits field. unknown Specifies to use Unknown (bits 000) in the Type of Number octet.
  • Page 466 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set line [console | telnet | ssh] <line-number> <ending number> Use the line command to enter the line configuration for the specified console or telnet session. See the sections Line (Console) Interface Config Command Set on page 534, Line (Telnet) Interface Config Command Set on page 550, and Line (SSH) Interface Config Command Set on page 561 for information on the subcommands.
  • Page 467 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set The following example begins the configuration for all available Telnet sessions: ProCurve(config)#line telnet 0 4 ProCurve(config-telnet0-4)# The following example begins the configuration for all available SSH sessions: ProCurve(config)#line ssh 0 4 ProCurve(config-ssh0-4)# 5991-2114 ©...
  • Page 468 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set lldp [minimum-transmit-interval l reinitialization-delay l transmit-interval l ttl-multiplier] <numeric value> Use the lldp command to configure global settings that control the way LLDP functions. Syntax Description minimum-transmit-interval Defines the minimum amount of time between transmission of LLDP frames (in seconds).

  • Page 469: Logging Console

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging console Use the logging console command to enable the SROS to log events to all consoles. Use the no form of this command to disable console logging. Syntax Description No subcommands.
  • Page 470 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging email address-list <email address> ; <email address> Use the logging email command to specify one or more email addresses that will receive notification when an event matching the criteria configured using the logging email priority-level command is logged by the SROS.
  • Page 471 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging email exception-report address-list <email address>; <email address> Use the logging email exception-report address-list command to specify one or more email addresses to receive an exception report for use in troubleshooting. Use the no form of this command to remove a listed address.
  • Page 472 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging email on Use the logging email on command to enable the SROS email event notification feature. Use the logging email address-list command to specify email address(es) that will receive notification when an event matching the criteria configured using the logging email priority-level command is logged by the SROS.
  • Page 473 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging email priority-level [error | fatal | info | notice | warning] Use the logging email priority-level command to set the threshold for events sent to the addresses specified using the logging email address-list command. All events with the specified priority or higher will be sent to all addresses in the list.
  • Page 474 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging email receiver-ip <ip address> [auth-username <username> | auth-password <password>] Use the logging email receiver-ip command to specify the IP address of the email server to use when sending notification that an event matched the criteria configured using the logging email priority-level command.
  • Page 475 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging email sender Use the logging email sender command to specify the sender in an outgoing email message. This name will appear in the From field of the receiver’s inbox. Use the no form of this command to disable this feature.
  • Page 476 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging email source-interface <interface> Use the logging email source-interface command to use the specified interface’s IP address as the source IP address for email messages transmitted by the unit. Use the no form of this command if you do not wish to override the normal source IP address.
  • Page 477 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging facility <facility type> Use the logging facility command to specify a syslog facility type for the syslog server. Error messages meeting specified criteria are sent to the syslog server. For this service to be active, you must enable log forwarding.
  • Page 478 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging forwarding on Use the logging forwarding on command to enable the SROS syslog event feature. Use the logging forwarding priority-level command to specify the event matching the criteria used by the SROS to determine whether a message should be forwarded to the syslog server.
  • Page 479 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging forwarding priority-level [error | fatal | info | notice | warning] Use the logging forwarding priority-level command to set the threshold for events sent to the configured syslog server specified using the logging forwarding receiver-ip command. All events with the specified priority or higher will be sent to all configured syslog servers.
  • Page 480 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging forwarding receiver-ip <ip address> Use this logging forwarding receiver-ip command to specify the IP address of the syslog server to use when logging events that match the criteria configured using the logging forwarding priority-level command.
  • Page 481 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set logging forwarding source-interface Use the logging forwarding source-interface command to configure the specified interface’s IP address as the source IP address for the syslog server to use when logging events. Use the no form of this command if you do not wish to override the normal source IP address.
  • Page 482 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set mac address-table aging-time <aging time> Use the mac address-table aging-time command to set the length of time dynamic MAC addresses remain in the switch or bridge forwarding table. Use the no form of this command to reset this length to its default.
  • Page 483 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set mac address-table static <mac address> bridge <bridge id> interface <interface> Use the mac address-table static command to insert a static MAC address entry into the MAC address table. Use the no form of this command to remove an entry from the table. Syntax Description <mac address>...
  • Page 484 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set modem countrycode [<countrycode>] Use the modem countrycode command to specify the modem configuration for the applicable country. Syntax Description <countrycode> Specifies the modem configuration for the applicable country. Default Values By default, modem countrycode is set to USA/Canada.
  • Page 485 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Japan - Japan Modem configuration Jordan - Jordan Modem configuration Korea - Korea Modem configuration Kuwait - Kuwait Modem configuration Lebanon - Lebanon Modem configuration Malaysia - Malaysia Modem configuration Mexico - Mexico Modem configuration Morocco...
  • Page 486 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Usage Example The following example specifies to use the USA/Canada modem configuration. ProCurve(config)#modem countrycode USA/Canada 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.
  • Page 487 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set probe Use the probe command to create a probe as part of network monitoring. This command is also used to enter into the Network Monitoring Probe command set once a probe is created. A probe can be one of three types: http-request, icmp-echo, or tcp-connect.
  • Page 488 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set qos map <mapname><sequence number> Use the qos map command to activate the QoS Map Command Set (which allows you to create and/or edit a QoS map). For details on specific commands, refer to the section Quality of Service (QoS) Map Commands on page 1391.
  • Page 489 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set radius-server Use the radius-server command to configure several global RADIUS parameters. Most of these global defaults can be overridden on a per-server basis. Variations of this command include the following: radius-server challenge-noecho radius-server deadtime <minutes>...
  • Page 490 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Functional Notes RADIUS servers (as defined with the radius-server command) may have many optional parameters. However, they are uniquely identified by their addresses and ports. Port values default to 1812 and 1813 for authorization and accounting, respectively.
  • Page 491 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set radius-server host Use the radius-server host to specify the parameters for a remote RADIUS server. At a minimum, the address (IP or DNS name) of the server must be given. The other parameters are also allowed and (if not specified) will take default values or fall back on the global RADIUS server’s default settings.
  • Page 492 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set route-map <map-name> [ permit | deny ] <sequence number> Use the route-map command to create a route map and enter the Route Map Configuration command set. A route map is a type of filter that matches various attributes and then performs actions on the way the route is redistributed.
  • Page 493 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set router bgp <AS number> Use the router bgp command to enter the BGP Configuration mode. Refer to the sections BGP Configuration Command Set on page 1300 and BGP Neighbor Configuration Command Set on page 1313 for more information.

  • Page 494: Router Ospf

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set router ospf Use the router ospf command to activate OSPF in the router and to enter the OSPF Configuration mode. See the section Router (OSPF) Configuration Command Set on page 1360 for more information. Use the no form of this command to disable OSPF routing.
  • Page 495 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set router pim-sparse Use the router pim-sparse command to globally enable protocol-independent multicast (PIM) on the unit and to enter the PIM Sparse Configuration mode. Refer to the section Router (PIM Sparse) Configuration Command Set on page 1375 for more information on the subcommands for PIM Sparse Configuration mode.

  • Page 496: Router Rip

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set router rip Use the router rip command to enter the RIP Configuration mode. See the section Router (RIP) Configuration Command Set on page 1379 for more information. Syntax Description No subcommands.
  • Page 497 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set If an attached interface goes down, the associated route is immediately (within the same random five-second interval) triggered. The next regular update excludes the failed interface. This is the so-called first hand knowledge rule.
  • Page 498 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set safe-mode <reload timer> <threshold time> Use the safe-mode command to enable SafeMode operation. SafeMode operation allows the user to perform configuration changes without the possibility of being disconnected during a Telnet or SSH session.
  • Page 499 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set service password-encryption Use the service password-encryption command to turn on global password protection. Use the no form of this command to return to default settings. Caution If you need to go back to a previous revision of the code (e.g., SROS J.03.01), this command must be disabled first.
  • Page 500 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set schedule <name> Use the schedule command to create a general purpose schedule. Use the no form of this command to delete a schedule. Variations of this command include: schedule <name> Additional subcommands are available once you have entered the Schedule Configuration mode: absolute start <schedule>...
  • Page 501 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set Functional Notes Periodic schedules can be expressed in the format <day> <time> to <day> <time> (for example, periodic monday 08:15 to wednesday 17:15), or up to 7 days can be entered (for example, periodic tuesday wednesday thursday 08:15 to 17:15).
  • Page 502 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server chassis-id <id string> Use the snmp-server chassis-id command to specify an identifier for the Simple Network Management Protocol (SNMP) server. Use the no form of this command to return to the default value. Syntax Description <id string>...
  • Page 503 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server community Use the snmp-server community command to specify a community string to control access to the Simple Network Management Protocol (SNMP) information. Use the no form of this command to remove a specified community.
  • Page 504 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server contact Use the snmp-server contact command to specify SNMP server contact information. Use the no form of this command to remove a configured contact. Variations of this command include: snmp-server contact email <address>...
  • Page 505 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server enable traps Use the snmp-server enable traps command to enable all Simple Network Management Protocol (SNMP) traps available on your system. Use the no form of this command to disable SNMP traps. Variations of this command include: snmp-server enable traps snmp-server enable traps snmp...
  • Page 506 The following example changes the default engine ID for the local system to 80 00 00 0b 00 00 00 00 00 00 01 (where 80 00 00 0b represents the IANA ID for HP and 00 00 00 00 00 00 01 arbitrarily represents...
  • Page 507 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set address for the eth 0/1 interface (for example, 00127905257c). The snmp-server engineID local command overrides the default engine ID and replaces it with the first 22 characters of the user-entered string. Because the string is in hexadecimal notation, only numbers 0 through 9 and characters a through f are valid.
  • Page 508 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server group Use the snmp-server group command to specify a new Simple Network Management Protocol (SNMP) group to control access to SNMP information. Use the no form of this command to remove a specified group.
  • Page 509 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server host Use the snmp-server host command to configure the host to receive Simple Network Management Protocol (SNMP) notifications. Use the no form of this command to remove a specified host. Variations of this command include the following: snmp-server host <ip address>...
  • Page 510 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set version 1 Uses SNMP version 1 security model. version 2c Uses SNMP version 2c security model. version 3 Uses SNMP version 3 user-based security model (USM) snmp Optional. Enables a subset of traps specified in RFC1157. Default Values By default, there are no hosts or traps enabled.
  • Page 511 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server inform Use the snmp-server inform retries command to set the number of retry attempts for a response and set the amount of time to wait for a response before allowing a new request. Use the no form of this command to return to the default setting.
  • Page 512 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server location <“string”> Use the snmp-server location command to specify the Simple Network Management Protocol (SNMP) system location string. Use the no form of this command to return to the default value. Syntax Description “<string>”...
  • Page 513 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server management-url <URL> Use the snmp-server management-url command to specify the URL for the device’s management software. Use the no form of this command to remove the management URL. Syntax Description <URL>...
  • Page 514 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server management-url-label <label> Use the snmp-server management-url-label command to specify a label for the URL of the device’s management software. Use the no form of this command to remove the label. Syntax Description <label>...
  • Page 515 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server source-interface <interface> Use the snmp-server source-interface command to tell the SROS where to expect Simple Network Management Protocol (SNMP) traps to originate from (interface type). All SNMP originated packets (including traps and get/set requests) will use the designated interface’s IP address.
  • Page 516 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server user Use the snmp-server user command to configure Simple Network Management Protocol (SNMP) users to control access to SNMP information. Use the no form of this command to remove a specified host. Variations of this command include: snmp-server user <username>...
  • Page 517 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set priv-password A password string used for data encryption between the host and agent. <password> Indicates a password entry. Default Values No default is necessary with this command. Usage Examples The following example enters a new user named BobbyW and assigns the user to a group called securityV3auth using version 3 security model with authentication method md5 with a password of passWORD6243 and no access control list to verify:...
  • Page 518 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set snmp-server view <name> <value> Use the snmp-server view command to create or modify a Simple Network Management Protocol (SNMP) view entry. Use the no form of this command to remove an entry. Variations of this command include: snmp-server view <name>...
  • Page 519 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set sntp retry-timeout <time> Use the sntp retry-timeout command to set the amount of time to wait for a response before allowing a new request. Syntax Description <time> Specifies time (in seconds) to wait for a response before retrying. The range is from 3 to 4,294,967,294.

  • Page 520: Sntp Server

    SROS Command Line Interface Reference Guide Global Configuration Mode Command Set sntp server Use the sntp server command to set the host name of the SNTP server as well as the version of SNTP to use. The Simple Network Time Protocol (SNTP) is an abbreviated version of the Network Time Protocol (NTP).
  • Page 521 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set sntp wait-time <time> Use the sntp wait-time command to set the time between updates from the time server. Syntax Description <time> Specifies time (in seconds) between updates. The range is from 10 to 4,294,967,294.
  • Page 522 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set spanning-tree edgeport bpdufilter default Use the spanning-tree edgeport bpdufilter default command to enable the BPDU filter on all ports by default. Use the no form of this command to disable the setting. Syntax Description No subcommands.
  • Page 523 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set spanning-tree edgeport bpduguard default Use the spanning-tree edgeport bpduguard default command to enable the BPDU guard on all ports by default. Use the no form of this command to disable the setting. Syntax Description No subcommands.
  • Page 524 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set spanning-tree edgeport default Use the spanning-tree edgeport default command to configure all ports to be edgeports by default. Use the no form of this command to disable the setting. Syntax Description No subcommands.
  • Page 525 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set spanning-tree forward-time <seconds> Use the spanning-tree forward-time command to specify the delay interval (in seconds) when forwarding spanning-tree packets. Use the no form of this command to return to the default interval. Syntax Description <seconds>...
  • Page 526 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set spanning-tree hello-time <seconds> Use the spanning-tree hello-time command to specify the delay interval (in seconds) between hello bridge protocol data units (BPDUs). To return to the default interval, use the no form of this command. Syntax Description <seconds>...
  • Page 527 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set spanning-tree max-age <seconds> Use the spanning-tree max-age command to specify the interval (in seconds) the spanning-tree will wait to receive Bridge Protocol Data Units (BPDUs) from the root bridge before assuming the network has changed (thus re-evaluating the spanning-tree topology).
  • Page 528 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set spanning-tree mode [rstp | stp] Use the spanning-tree mode command to choose a spanning-tree mode of operation. Syntax Description rstp Enables rapid spanning-tree protocol. Enables spanning-tree protocol. Default Values By default, this is set to rstp.
  • Page 529 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set spanning-tree pathcost method [short | long] Use the spanning-tree pathcost command to select a short or long pathcost method used by the spanning-tree protocol. Syntax Description short Selects a short pathcost method. long Selects a long pathcost method.
  • Page 530 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set spanning-tree priority <value> Use the spanning-tree priority command to set the priority for spanning-tree interfaces. The lower the priority value, the higher the likelihood the configured spanning-tree interface will be the root for the bridge group.
  • Page 531 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set tacacs-server Use the tacacs-server command to customize setting for communication with TACACS servers. Use the no form of this command to return to default settings. Variations of this command include the following: tacacs-server host <hostname or IP address>...
  • Page 532 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set thresholds [BES | CSS | DM | ES | LCV | LES | PCV | SEFS | SES | UAS] [15Min | 24Hr] <threshold count> Use the thresholds command to specify DS1 performance counter thresholds. Use the no form of this command to return to default settings.
  • Page 533 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set thresholds SES 24Hr 100 thresholds SEFS 15Min 2 thresholds SEFS 24Hr 17 thresholds UAS 15Min 10 thresholds UAS 24Hr 10 Usage Examples The following example sets the threshold for the 15 minute and 24 hour bursty errored seconds counter to 25 and 200, respectively: ProCurve(config)#thresholds BES 15Min 25 ProCurve(config)#thresholds BES 24Hr 200...
  • Page 534 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set track <name> Use the track commands to create a track as part of network monitoring. This command is also used to enter into the Network Monitoring Track command set once a track is created. These additional commands are covered in Network Monitor Track Configuration Command Set on page 1347.
  • Page 535 SROS Command Line Interface Reference Guide Global Configuration Mode Command Set username <username> password <password> Use this command to configure the username and password to use for all protocols requiring a username-based authentication system including FTP server authentication, line (login local-user list), and HTTP access.

  • Page 536: Line (Console) Interface Config Command Set

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set ONSOLE NTERFACE ONFIG OMMAND To activate the Line (Console) Interface Configuration mode, enter the line console 0 command at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#line console 0 ProCurve(config-con 0)# The following commands are common to multiple command sets and are covered in a centralized section...

  • Page 537: Procurve(Config)#Line Console 0

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set accounting commands [<level> l <name> l default] Use the accounting commands command to assign AAA accounting methods to lines. You must first turn AAA on for this command to become available. Use the no form of this command to disable this feature. Variations of this command include: accounting commands <level>...
  • Page 538 SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set accounting connection Use the accounting commands command to assign AAA accounting methods to lines. You must first turn AAA on for this command to become available. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.
  • Page 539 SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set accounting exec Use the accounting commands command to assign AAA accounting methods to lines. You must first turn AAA on for this command to become available. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.

  • Page 540: Authorization Commands

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set authorization commands Use the authorization commands command to assign AAA authorization methods to lines. You must first turn AAA on for this command to become available. Use the no form of this command to disable this feature.

  • Page 541: Authorization Exec

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set authorization exec Use the authorization exec command to assign AAA authorization methods to lines. You must first turn AAA on for this command to become available. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.

  • Page 542: Databits [7 | 8]

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set databits [7 | 8] he databits command to set the number of databits per character for a terminal session. This value must match the configuration of your VT100 terminal or terminal emulator software. The default is 8 databits per character.

  • Page 543: Flowcontrol [None | Software In]

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set flowcontrol [none | software in] Use the flowcontrol command to set flow control for the line console. Use the no form of this command to return to the default setting. Syntax Description none Specifies no flow control.

  • Page 544: Line-Timeout

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set line-timeout <minutes> Use the line-timeout command to specify the number of minutes a line session may remain inactive before the SROS terminates the session. Use the no form of this command to return to the default value. Syntax Description <minutes>...

  • Page 545: Login

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set login Use the login command to enable security login on the line session requiring the password configured using the password command. Use the no form of this command to disable the login feature. Syntax Description No subcommands.

  • Page 546: Login Authentication

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set login authentication <aaa login list> Use the login authentication command to specify the named AAA login list to use for authenticating users connecting on this line. Use the no form of this command to return to the default setting. Syntax Description <aaa login list>...

  • Page 547: Login Local-Userlist

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set login local-userlist Use the login local-userlist command to enable security login for the terminal session requiring the usernames and passwords configured using the username/password Global Configuration command. Use the no form of this command to disable the login local-userlist feature.

  • Page 548: Parity [Even | Mark | None | Odd | Space]

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set parity [even | mark | none | odd | space] Use the parity command to specify the type of parity used as error correction. This value must match the configuration of your VT100 terminal or terminal emulator software.

  • Page 549: Password [Md5]

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set password [md5] <password> Use the password command to configure the password (with optional encryption) required on the line session when security login is enabled (using the login command). Use the no form of this command to remove a configured password.

  • Page 550: Speed

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set speed <rate> Use the speed command to specify the data rate for the port. This setting must match your VT100 Console terminal emulator or emulator software. Use the no form of this command to restore the default value. Syntax Description <rate>...

  • Page 551: Stopbits [1 | 2]

    SROS Command Line Interface Reference Guide Line (Console) Interface Config Command Set stopbits [1 | 2] Use the stopbits command to set the number of stopbits per character for a terminal session. This value must match the configuration of your VT100 terminal or terminal emulator software. The default is 1 stopbit per character.

  • Page 552: Line (Telnet) Interface Config Command Set

    SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set ELNET NTERFACE ONFIG OMMAND To activate the Line (Telnet) Interface Configuration mode, enter the line telnet command specifying a Telnet session(s) at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#line telnet 0 4...

  • Page 553: Procurve(Config)#Line Telnet 0 4

    SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set access-class <listname> in Use the access-class in command to restrict Telnet access using a configured access list. Received packets passed by the access list will be allowed. Use the access list configuration to deny hosts or entire networks or to permit specified IP addresses.

  • Page 554: Accounting Commands

    SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set accounting commands Use the accounting commands command to assign AAA accounting methods to lines. You must first turn AAA on for this command to become available. Use the no form of this command to disable this feature. Variations of this command include: accounting commands <level>...
  • Page 555 SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set accounting connection Use the accounting commands command to assign AAA accounting methods to lines. You must first turn AAA on for this command to become available. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.
  • Page 556 SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set accounting exec Use the accounting commands command to assign AAA accounting methods to lines. You must first turn AAA on for this command to become available. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.

  • Page 557: Authorization Commands

    SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set authorization commands Use the authorization commands command to assign AAA authorization methods to lines. You must first turn AAA on for this command to become available. Use the no form of this command to disable this feature.

  • Page 558: Line-Timeout

    SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set line-timeout <minutes> Use the line-timeout command to specify the number of minutes a line session may remain inactive before the SROS terminates the session. Use the no form of this command to return to the default value. Syntax Description <minutes>...

  • Page 559: Login

    SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set login Use the login command to enable security login on the line session requiring the password configured using the password command. Use the no form of this command to disable the login feature. Syntax Description No subcommands.

  • Page 560: Login Authentication

    SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set login authentication <aaa login list> Use the login authentication command to specify the named AAA login list to use for authenticating users connecting on this line. Syntax Description <aaa login list>...

  • Page 561: Login Local-Userlist

    SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set login local-userlist Use the login local-userlist command to enable security login for the terminal session requiring the usernames and passwords configured using the username/password Global Configuration command. Use the no form of this command to disable the login local-userlist feature.

  • Page 562: Password [Md5]

    SROS Command Line Interface Reference Guide Line (Telnet) Interface Config Command Set password [md5] <password> Use the password command to configure the password (with optional encryption) required on the line session when security login is enabled (using the login command). Use the no form of this command to remove a configured password.

  • Page 563: Line (Ssh) Interface Config Command Set

    SROS Command Line Interface Reference Guide Line (SSH) Interface Config Command Set (SSH) I NTERFACE ONFIG OMMAND To activate the Line Secure Shell (SSH) Interface Configuration mode, enter the line ssh command specifying a SSH session(s) at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#line ssh 0 4...

  • Page 564: Procurve(Config)#Line Ssh 0 4

    SROS Command Line Interface Reference Guide Line (SSH) Interface Config Command Set access-class <listname> in Use the access-class in command to restrict Secure Shell (SSH) access using a configured access list. Received packets passed by the access list will be allowed. Use the access list configuration to deny hosts or entire networks or to permit specified IP addresses.

  • Page 565: Accounting Commands

    SROS Command Line Interface Reference Guide Line (SSH) Interface Config Command Set accounting commands Use the accounting commands command to assign AAA accounting methods to lines. You must first turn AAA on for this command to become available. Use the no form of this command to disable this feature. Variations of this command include: accounting commands <level>...
  • Page 566 SROS Command Line Interface Reference Guide Line (SSH) Interface Config Command Set accounting connection Use the accounting commands command to assign AAA accounting methods to lines. You must first turn AAA on for this command to become available. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.
  • Page 567 SROS Command Line Interface Reference Guide Line (SSH) Interface Config Command Set accounting exec Use the accounting commands command to assign AAA accounting methods to lines. You must first turn AAA on for this command to become available. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 321.

  • Page 568: Authorization Commands

    SROS Command Line Interface Reference Guide Line (SSH) Interface Config Command Set authorization commands Use the authorization commands command to assign AAA authorization methods to lines. You must first turn AAA on for this command to become available. Use the no form of this command to disable this feature.

  • Page 569: Line-Timeout

    SROS Command Line Interface Reference Guide Line (SSH) Interface Config Command Set line-timeout <minutes> Use the line-timeout command to specify the number of minutes a line session may remain inactive before the SROS terminates the session. Use the no form of this command to return to the default value. Syntax Description <minutes>...

  • Page 570: Login Authentication

    SROS Command Line Interface Reference Guide Line (SSH) Interface Config Command Set login authentication <aaa login list> Use the login authentication command to assign the named AAA login list to use for authenticating users connecting on this line. Use the no form of the command to remove the AAA authentication list. Syntax Description <aaa login list>...

  • Page 571: Login Local-Userlist

    SROS Command Line Interface Reference Guide Line (SSH) Interface Config Command Set login local-userlist Use the login local-userlist command to check the local list of usernames and passwords configured using the username/password Global Configuration command (see username <username> password <password> on page 533). Use the no form of this command to disable the login local-userlist feature. Note All user properties assigned using the username/password command are valid when using the login local-userlist command.

  • Page 572: Adsl Interface Config Command Set

    SROS Command Line Interface Reference Guide ADSL Interface Config Command Set ADSL I NTERFACE ONFIG OMMAND To activate the ADSL Interface Configuration mode, enter the interface adsl command at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface adsl 1/1 ProCurve(config-adsl 1/1)# The following commands are common to multiple command sets and are covered in a centralized section of this guide.
  • Page 573 SROS Command Line Interface Reference Guide ADSL Interface Config Command Set retrain Use the retrain command to force the modem to retrain. Syntax Description No subcommands. Default Values No default is necessary for this command. Usage Examples The following example forces a modem retrain: ProCurve(config)#interface adsl1/1 ProCurve(config-adsl 1/1)#retrain 5991-2114...
  • Page 574 SROS Command Line Interface Reference Guide ADSL Interface Config Command Set snr-margin <margin> Use the snr-margin command to set the minimum Signal to Noise Ratio margin (in dB). Syntax Description <margin> Sets the minimum SNR margin in dB. The range is from 1 to 15. Default Values By default, SNR margin is 0 dB.
  • Page 575 SROS Command Line Interface Reference Guide ADSL Interface Config Command Set snr-margin [showtime-monitor | training-monitor] Use the snr-margin monitor command to enable monitoring during training and showtime. Use the no form of this command to disable monitoring. Syntax Description showtime-monitor Enables margin monitoring to retrain the ADSL interface if the specified minimum margin is violated during showtime.
  • Page 576 SROS Command Line Interface Reference Guide ADSL Interface Config Command Set training-mode Use the training-mode command to configure the ADSL training mode. Use the no form of these commands to disable a specific training mode. Variations of this command include: training-mode ADSL2 training-mode ADSL2+ training-mode ADSL2+ANNEX-M...

  • Page 577: Bri Interface Configuration Command Set

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set BRI I NTERFACE ONFIGURATION OMMAND SET To activate the BRI Interface Configuration mode, enter the interface bri command at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface bri 1/2 ProCurve(config-bri 1/2)# Note...

  • Page 578: Procurve(Config)#Interface Bri 1/2

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set bonding txadd-timer <seconds> Use the bonding txadd-timer command to specify the value (in seconds) for the aggregate call connect timeout. Use the no form of this command to return to the default value. Syntax Description <seconds>...
  • Page 579 SROS Command Line Interface Reference Guide BRI Interface Configuration Command set bonding txcid-timer <seconds> Use the bonding txcid-timer command to specify the value (in seconds) for the bearer channel (B-channel) negotiation timeout. Use the no form of this command to return to the default value. Syntax Description <seconds>...
  • Page 580 SROS Command Line Interface Reference Guide BRI Interface Configuration Command set bonding txdeq-timer <seconds> Use the bonding txdeq-timer command to specify the value (in seconds) for the network delay equalization timeout. Use the no form of this command to return to the default value. Syntax Description <seconds>...
  • Page 581 SROS Command Line Interface Reference Guide BRI Interface Configuration Command set bonding txfa-timer <seconds> Use the bonding txfa-timer command to specify the value (in seconds) for the frame pattern detection timeout. Use the no form of this command to return to the default value. Syntax Description <seconds>...
  • Page 582 SROS Command Line Interface Reference Guide BRI Interface Configuration Command set bonding txinit-timer <seconds> Use the bonding txinit-timer command to specify the value (in seconds) for the originating endpoint negotiation timeout. Use the no form of this command to return to the default value. Syntax Description <seconds>...
  • Page 583 SROS Command Line Interface Reference Guide BRI Interface Configuration Command set bonding txnull-timer <seconds> Use the bonding txnull-timer command to specify the value (in seconds) for the answering endpoint negotiation timeout. Use the no form of this command to return to the default value. Syntax Description <seconds>...

  • Page 584: Caller-Id Override [Always | If-No-Cid ]

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set caller-id override [always <number> | if-no-cid <number>] Use the caller-id override command to configure the unit to replace caller ID information with a user-specified number. Use the no form of this command to disable any caller ID overrides. Syntax Description always <number>...

  • Page 585: Isdn [Ldn 1 | Ldn 2]

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set isdn [ldn 1 | ldn 2] <ldn> Use the isdn ldn command to specify the Local Directory Numbers (LDNs) for the Basic Rate ISDN (BRI) interface. This information should be supplied by your service provider. Use the no form of this command to remove a configured LDN.

  • Page 586: Isdn [Spid 1 | Spid 2]

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set isdn [spid 1 | spid 2] <spid string> <LDN> Use the isdn spid command to specify the Service Profile Identifiers (SPIDs) and the Local Directory Numbers (LDNs) for the Basic Rate ISDN (BRI) interface. This information should be supplied by your service provider.

  • Page 587: Isdn Switch-Type [Basic-5Ess | Basic-Dms | Basic-Net3 | Basic-Ni]

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set isdn switch-type [basic-5ess | basic-dms | basic-net3 | basic-ni] Use the isdn switch-type command to specify the ISDN signaling type configured on the Basic Rate ISDN (BRI) interface. The type of ISDN signaling implemented on the BRI interface does not always match the manufacturer of the Central Office switch.

  • Page 588: Loopback Local [All | B1 | B2 | Both]

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set loopback local [all | b1 | b2 | both] Use the loopback local command to enable a local loopback of the interface (towards the router). Use the no form of this command to disable the loopback. Syntax Description Loops the entire interface back towards the router (including the D channel).

  • Page 589: Loopback Network [B1 | B2 | Both]

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set loopback network [b1 | b2 | both] Use the loopback network command to enable a loopback of the interface (towards the network). Use the no form of this command to disable the loopback. Syntax Description Loops the data on B1 back towards the network.

  • Page 590: Maintenance [Reset | Restart-D]

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set maintenance [reset | restart-d] Use the maintenance command to force a reset of the interface (initiating the SABME/UA process) or to reset the D channel (by sending a RESTART message). Caution The maintenance command disrupts data flow on the ISDN interface.

  • Page 591: Resource Pool-Member []

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set resource pool-member <pool-name> [<priority>] Use the resource pool-member command to assign the interface to a resource pool, making it a demand routing resource. Use the no form of this command to return to the default value. Syntax Description <pool-name>...

  • Page 592: Test-Call [Dial | Speed <56 | 64> | Answer | Hangup | Hangup Channels <1 | 2>]

    SROS Command Line Interface Reference Guide BRI Interface Configuration Command set test-call [dial <number> | speed <56 | 64> | answer | hangup | hangup channels <1 | 2>] Use the test-call command to dial, answer, or disconnect a test call used for verifying the BRI interface connection.

  • Page 593: Dsx-1 Interface Configuration Command Set

    SROS Command Line Interface Reference Guide DSX-1 Interface Configuration Command Set DSX-1 I NTERFACE ONFIGURATION OMMAND To activate the DSX-1 Interface Configuration mode, enter the interface t1 command (and specify the DSX-1 port) at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface t1 1/2...
  • Page 594 SROS Command Line Interface Reference Guide DSX-1 Interface Configuration Command Set coding [ami | b8zs] Use the coding command to configure the line coding for a DSX-1 physical interface. This setting must match the line coding supplied on the circuit by the external device. Syntax Description Configures the line coding for alternate mark inversion (AMI).
  • Page 595 SROS Command Line Interface Reference Guide DSX-1 Interface Configuration Command Set framing [d4 | esf] Use the framing command to configure the framing format for the DSX-1 interface. This parameter should match the framing format set on the external device. Use the no form of this command to return to the default value.
  • Page 596 SROS Command Line Interface Reference Guide DSX-1 Interface Configuration Command Set line-length <value> Use the line-length command to set the line build out (in feet or dB) for the DSX-1 interface. Use the no form of this command to return to the default value. Syntax Description <value>...
  • Page 597 SROS Command Line Interface Reference Guide DSX-1 Interface Configuration Command Set loopback network [line | payload] Use the loopback network command to initiate a loopback on the interface toward the network. Use the no form of this command to deactivate the loopback. Syntax Description line Initiates a metallic loopback of the physical DSX-1 network interface.
  • Page 598 SROS Command Line Interface Reference Guide DSX-1 Interface Configuration Command Set loopback remote line inband Use the loopback remote line inband command to send a loopback code to the remote unit to initiate a line loopback. Use the no form of this command to send a loopdown code to the remote unit to deactivate the loopback.
  • Page 599 SROS Command Line Interface Reference Guide DSX-1 Interface Configuration Command Set remote-loopback Use the remote-loopback command to configure the interface to respond to loopbacks initiated by a remote unit (or the service provider). Use the no form of this command to disable this feature. Syntax Description No subcommands.
  • Page 600 SROS Command Line Interface Reference Guide DSX-1 Interface Configuration Command Set signaling-mode [message-oriented | none | robbed-bit] Use the signaling-mode command to configure the signaling type (robbed bit for voice or clear channel for data) for the DS0s mapped to the DSX-1 port. Syntax Description message-oriented Specifies clear channel signaling on Channel 24 only.
  • Page 601 SROS Command Line Interface Reference Guide DSX-1 Interface Configuration Command Set snmp trap link-status Use the snmp trap link-status to control the Simple Network Management Protocol (SNMP) variable ifLinkUpDownTrapEnable (RFC2863) to enable (or disable) the interface to send SNMP traps when there is an interface status change.
  • Page 602 SROS Command Line Interface Reference Guide DSX-1 Interface Configuration Command Set test-pattern [ones | zeros] Use the test-pattern command to activate the built-in pattern generator and begin sending the specified test pattern. This pattern generation can be used to verify a data path when used in conjunction with an active loopback.

  • Page 603: E1 Interface Configuration Command Set

    SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set E1 I NTERFACE ONFIGURATION OMMAND To activate the E1 Interface Configuration mode, enter the interface e1 command (and specify the E1 port) at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface e1 1/1...
  • Page 604 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set clock source [internal | line | through] Use the clock source command to configure the source timing used for the interface. Use the no form of this command to return to the default value. Syntax Description internal Configures the unit to provide clocking using the internal oscillator.
  • Page 605 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set coding [ami | hdb3] Use the coding command to configure the line coding for the E1 physical interface. This setting must match the line coding supplied on the circuit by the service provider. Syntax Description Configures the line coding for alternate mark inversion (AMI).
  • Page 606 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set framing [crc4] Use the framing command to configure the framing format for the E1 interface. This parameter should match the framing format set on the external device. Use the no form of this command to return to the default value.
  • Page 607 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set loop-alarm-detect The loop-alarm-detect command enables detection of a loop alarm on the E1 interface. Use the no form of this command to disable this feature. Syntax Description No subcommands. Default Values By default, this command is enabled.
  • Page 608 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set loopback network [line | payload] Use the loopback network command to initiate a loopback on the interface toward the network. Use the no form of this command to deactivate the loopback. Syntax Description line Initiates a metallic loopback of the physical E1 network interface.
  • Page 609 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set loopback remote v54 The loopback remove v54 command initiates an E1 remote loopback test (with a V.54 loopback pattern). Use the no form of this command to deactivate the loopback. Syntax Description No subcommands.
  • Page 610 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set remote-alarm [rai | ais] The remote-alarm command selects the alarm signaling type to be sent when a loss of frame is detected on the E1 receive signal. Use the no form of this command to disable all transmitted alarms. Syntax Description Specifies sending a remote alarm indication (RAI) in response to a loss of frame.
  • Page 611 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set remote-loopback Use the remote-loopback command to configure the interface to accept loopback requests initiated by a remote unit (or the service provider). Use the no form of this command to disable this feature. Syntax Description No subcommands.
  • Page 612 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set sa4tx-bit [0 | 1] The sa4tx-bit command selects the Tx value of Sa4 in this E1 interface. Use the no form of this command to return to the default value of 1. Syntax Description No subcommands.
  • Page 613 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set snmp trap line-status Use the snmp trap line-status command to control the Simple Network Management Protocol (SNMP) variable dsx1LineStatusChangeTrapEnable (RFC2495) to enable (or disable) the interface to send SNMP traps when there is an interface status change.
  • Page 614 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set snmp trap link-status Use the snmp trap link-status to control the Simple Network Management Protocol (SNMP) variable ifLinkUpDownTrapEnable (RFC2863) to enable (or disable) the interface to send SNMP traps when there is an interface status change.
  • Page 615 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set tdm-group <group number> timeslots <1-31> speed [56 | 64] Use the tdm-group command to create a group of contiguous channels on this interface to be used during the bind process. See bind <#> <from interface> <slot/port> <tdm-group#> <to interface> <slot/port> on page 1431 for related information.
  • Page 616 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set test-pattern [clear | errors | insert | ones | p215 | p220 | p511 | qrss | zeros] Use the test-pattern command to activate the built-in pattern generator and begin sending the specified test pattern.
  • Page 617 SROS Command Line Interface Reference Guide E1 Interface Configuration Command Set ts16 Use the ts16 command to enable timeslot 16 multiframe to be checked on the receive signal. Use the no form of this command to disable timeslot 16. Syntax Description No subcommands.

  • Page 618: Ethernet Interface Configuration Command Set

    SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set THERNET NTERFACE ONFIGURATION OMMAND There are several types of Ethernet interfaces associated with the SROS: • Basic Ethernet interfaces (e.g., eth 0/1) • Ethernet sub-interfaces associated with a VLAN (e.g., eth 0/1.1) •...
  • Page 619 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set Note Not all Ethernet commands apply to all Ethernet types. Use the ? command to display a list of valid commands. For example: ProCurve>enable Password: xxxxx ProCurve#config term ProCurve(config)#int eth 0/1 ProCurve(config-eth 0/1)#? access-policy - Assign access control policy for this interface...
  • Page 620 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set half-duplex on page 630 ip commands begin on page 631 lldp receive on page 660 lldp send [management-address | port-description | system-capabilities | system-description | system-name] on page 661 lldp send-and-receive on page 662 mac-address <address>...
  • Page 621 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set access-policy <policyname> Use the access-policy command to assign a specified access policy for the inbound traffic to an interface. Use the no form of this command to remove an access policy association. Note Configured access policies will only be active if the ip firewall command has been entered at the Global Configuration Mode prompt to enable the SROS security features.
  • Page 622 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set arp arpa Use the arp arpa command to enable address resolution protocol (ARP) on the Ethernet interface. Syntax Description arpa Sets standard address resolution protocol for this interface. Default Values The default for this command is arpa.
  • Page 623 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set bandwidth <value> Use the bandwidth command to provide the bandwidth value of an interface to the higher-level protocols. This value is used in cost calculations. Use the no form of this command to restore the default value. Syntax Description <value>...
  • Page 624 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set bridge-group <group#> Use the bridge-group command to assign an interface to the specified bridge group. Use the no form of this command to remove the interface from the bridge group. Syntax Description <group#>...
  • Page 625 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set bridge-group <group#> vlan-transparent Use the bridge-group vlan-transparent command to prevent an interface from removing the VLAN tag. Use the no form of this command to allow the interface to remove the VLAN tag from the packet. Note The bridge-group vlan-transparent command is not a global command.
  • Page 626 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set crypto map <mapname> Use the crypto map command to associate crypto maps with the interface. Note When you apply a map to an interface, you are applying all crypto maps with the given map name.
  • Page 627 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set Interfaces (Ethernet, Frame Relay, PPP, local) Static Filter Static Filter (in) (out) IPSec IPSec Decrypt/Discard Encrypt NAT/ACP/ Firewall Router As shown in the diagram above, data coming into the product is first processed by the static filter associated with the interface on which the data is received.
  • Page 628 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set dynamic-dns Use the dynamic-dns command to configure Dynamic DNS service provided by Dynamic Network Services, Inc. (www.dyndns.org). Use the no versions of these commands to disable these features. Variations of this command include: dynamic-dns custom <hostname>...
  • Page 629 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set dyndns-static - The Static DNS service is similar to Dynamic DNS service, in that it allows a hostname such as yourname.dyndns.org to point to your IP address. Unlike a Dynamic DNS host, a Static DNS host does not expire after 35 days without updates, but updates take longer to propagate though the DNS system.
  • Page 630 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set encapsulation 802.1q Use the encapsulation 802.1q command to put the interface into 802.1q (VLAN) mode. Syntax Description No subcommands. Default Values No default value is necessary for this command. Usage Examples The following example puts interface eth 0/1 in 802.1q mode and configures a sub-interface for vlan usage:...
  • Page 631 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set full-duplex Use the full-duplex command to configure the Ethernet interface for full-duplex operation. This allows the interface to send and receive simultaneously. Use the no form of this command to return to the default half-duplex operation.
  • Page 632 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set half-duplex Use the half-duplex command to configure the Ethernet interface for half-duplex operation. This setting allows the Ethernet interface to either send or receive at any given moment, but not simultaneously. Use the no form of this command to disable half-duplex operation.
  • Page 633 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip access-group <listname> [in | out] Use the ip access-group command to create an access list to be used for packets transmitted on or received from the specified interface. Use the no form of this command to disable this type of control. Syntax Description <listname>...
  • Page 634 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip address dhcp Use the ip address dhcp command to use Dynamic Host Configuration Protocol (DHCP) to obtain an address on the interface. Use the no form of this command to remove a configured IP address (using DHCP) and disable DHCP operation on the interface.
  • Page 635 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set Default Values <administrative distance> By default, the administrative distance value is 1. client-id Optional. By default, the client identifier is populated using the following formula: TYPE: INTERFACE SPECIFIC INFO : MAC ADDRESS Where TYPE specifies the media type in the form of one hexadecimal byte (refer to hardware-address <hardware-address>...
  • Page 636 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip address <address> <mask> [secondary] Use the ip address command to define an IP address on the specified interface (only one primary address is allowed). Use the optional secondary keyword to define a secondary IP address. Use the no form of this command to remove a configured IP address.
  • Page 637 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip dhcp release Use the ip dhcp release command to transmit a message to the DHCP server requesting termination of the IP address lease on that interface. Caution If you are currently connected to the unit using a Telnet session through the Ethernet interface, using the ip dhcp release command will terminate your Telnet session and render your Telnet capability inoperable until a new IP address is assigned by the DHCP server.
  • Page 638 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip dhcp renew Use the ip dhcp renew command to transmit a message to the DHCP server requesting renewal of the IP address lease on that interface. Default Values No defaults necessary for this command.
  • Page 639 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip helper-address <address> Use the ip helper-address command to configure the SROS to forward User Datagram Protocol (UDP) broadcast packets received on the interface. Use the no form of this command to disable forwarding packets.
  • Page 640 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip igmp Use the ip igmp command to configure multicasting-related functions for the interface. Syntax Description immediate-leave Specifies that if only one host (or IGMP snooping switch) is connected to the interface, when a leave is received, multicast of that group is immediately terminated as opposed to sending a group query and timing out the group if no device responds.
  • Page 641 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip mcast-stub downstream Use the ip mcast-stub downstream command to enable multicast forwarding and IGMP (router mode) on an interface, and to place it in multicast stub downstream mode. Use the no form of this command to disable.
  • Page 642 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip mcast-stub fixed Use the ip mcast-stub fixed command to allow forwarding of multicast traffic on a selected interface after enabling multicast routing. Use the no form of this command to disable this mode. Syntax Description No subcommands.
  • Page 643 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip mcast-stub helper-address <ip address> Use the ip mcast-stub helper-address command to specify an IP address toward which IGMP host reports and leave messages are forwarded. This command is used in IP multicast stub applications in conjunction with the ip mcast-stub downstream and ip mcast-stub upstream commands.
  • Page 644 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip mcast-stub upstream Use the ip mcast-stub upstream command to enable multicast forwarding on an interface and place it in multicast stub upstream mode. Use the no form of this command to disable. Syntax Description No subcommands.
  • Page 645 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip ospf Use the ip ospf command to customize OSPF settings (if needed). Syntax Description authentication-key Specifies a simple-text authentication password to be used by other routers using <password> the OSPF simple password authentication.
  • Page 646 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip ospf authentication [message-digest | null] Use the ip ospf authentication command to authenticate an interface that is performing OSPF authentication. Syntax Description message-digest Optional. Selects message-digest authentication type. null Optional.
  • Page 647 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip ospf network [broadcast | point-to-point] Use the ip ospf network command to specify the type of network on this interface. Syntax Description broadcast Sets the network type for broadcast. point-to-point Sets the network type for point-to-point.
  • Page 648 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip pim sparse-mode Use the ip pim sparse-mode command to enable PIM Sparse Mode on the interface. Use the no form of this command to disable PIM Sparse Mode. Syntax Description No subcommands.
  • Page 649 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip pim-sparse dr-priority <value> Use the ip pim-sparse dr-priority command to specify the priority of this PIM interface for use when selecting the designated router (DR). Use the no form of this command to return to the default value. Syntax Description <value>...
  • Page 650 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip pim-sparse hello-timer <time> Use the ip pim-sparse hello-timer command to set the time interval at which periodic hello messages are transmitted out the interface. Each PIM interface has an independent hello-timer. Use the no form of this command to return to the default value.
  • Page 651 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip pim-sparse nbr-timeout <time> Use the ip pim-sparse nbr-timeout command to specify the interval the PIM interface waits before declaring that the neighbor is not present. Use the no form of this command to return to the default value. Syntax Description <time>...
  • Page 652 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip pim-sparse override-interval <time> Use the ip pim-sparse override-interval command to specify the delay interval after a join/prune in which another router on the LAN may override the join/prune. Use the no form of this command to return to the default value.
  • Page 653 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip pim-sparse propagation-delay <time> Use the ip pim-sparse propagation-delay command to specify the expected propagation delay for join/prune messages. Set the propagation delay (in milliseconds) to estimate the amount of delay found in the local link.
  • Page 654 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip policy route-map <mapname> Use the ip policy route-map command to assign a policy route map to this interface. Use the no form of this command to remove the assignment. Removing a route map from the interface does not remove the route map configuration parameters from the system.
  • Page 655 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip proxy-arp <ip address> <subnet mask> Use the ip proxy-arp command to enable proxy Address Resolution Protocol (ARP) on the interface. Use the no form of this command to disable this feature. Syntax Description <ip address>...
  • Page 656 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip rip receive version [1 | 2] Use the ip rip receive version command to configure the RIP version the unit accepts in all RIP packets received on the interface. Syntax Description Accepts RIP version 1 packets received on the interface.
  • Page 657 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip rip send version [1 | 2] Use the ip rip send version command to configure the RIP version the unit sends in all RIP packets transmitted on the interface. Syntax Description Transmits RIP version 1 packets received on the interface.
  • Page 658 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip rip summary-address <network address> <network mask> Use the ip rip summary-address command to manually summarize the routes Routing Information Protocol (RIP) will advertise and send out a specified interface. Use the no form of this command to disable this mode.
  • Page 659 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip route-cache Use the ip route-cache command to enable route caching on the interface. Use the no form of this command to disable route caching and return to process switching mode. Note Using Network Address Translation (NAT) or the SROS firewall capabilities on an interface requires process switching mode (using the no ip route-cache command).
  • Page 660 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip unnumbered <interface> Use the ip unnumbered command to use the IP address assigned to the specified interface for all IP processing on the active interface. Use the no form of this command to remove the unnumbered configuration.
  • Page 661 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set ip urlfilter <name> Use the ip urlfilter command to apply a URL filter to the interface for all inbound or outbound traffic. Use the no form of this command to remove the URL filter from an interface. Variations of this command include: ip urlfilter <name>...
  • Page 662 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set lldp receive Use the lldp receive command to allow LLDP packets to be received on this interface. Syntax Description No subcommands. Default Values By default, all interfaces are configured to send and receive LLDP packets. Usage Examples The following example configures Ethernet interface 0/1 to receive LLDP packets: ProCurve(config-eth 0/1)#lldp receive...
  • Page 663 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set lldp send [management-address | port-description | system-capabilities | system-description | system-name] Use the lldp send command to configure this interface to transmit LLDP packets or to control the types of information contained in the LLDP packets transmitted by this interface.
  • Page 664 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set lldp send-and-receive Use the lldp send-and-receive command to configure this interface to transmit and receive LLDP packets. Syntax Description No subcommands. Default Values Be default, all interfaces are configured to transmit and receive LLDP packets of all types. Functional Notes Individual LLDP information can be enabled or disabled using the various forms of the lldp send command.
  • Page 665 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set mac-address <address> Use the mac-address command to specify the Media Access Control (MAC) address of the unit. The first three values contain the reserved Vendor ID (00:12:79) by default. Use the no form of this command to return to the default MAC address.
  • Page 666 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set max-reserved-bandwidth <percent> Use the max-reserved-bandwidth command to specify the percentage of interface bandwidth reserved for use in user-defined (priority or class-based) queues. The remainder of the interface bandwidth is reserved for system critical traffic and is not available to user-defined queues.
  • Page 667 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set mtu <size> Use the mtu command to configure the maximum transmit unit (MTU) size for the active interface. Use the no form of this command to return to the default value. Syntax Description <size>...
  • Page 668 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set port-auth supplicant [username <username> | password <password>] Use the port-auth supplicant command to enable supplicant functionality and to specify the username and password used for IEEE 802.1x port authentication. The supplicant is the port that will receive services from the port authenticator.
  • Page 669 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set qos-policy [in |out] <mapname> Use the qos-policy out command to apply a previously-configured QoS map to an interface. Use the no form of this command to remove the map from the interface. Syntax Description qos map <mapname>...
  • Page 670 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set snmp trap Use the snmp trap command to enable all supported Simple Network Management Protocol (SNMP) traps on the interface. Syntax Description No subcommands. Default Values By default, all interfaces (except virtual Frame Relay interfaces and sub-interfaces) have SNMP traps enabled.
  • Page 671 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set snmp trap link-status Use the snmp trap link-status command to control the Simple Network Management Protocol (SNMP) variable ifLinkUpDownTrapEnable (RFC2863) to enable (or disable) the interface to send SNMP traps when there is an interface status change.
  • Page 672 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set spanning-tree bpdufilter [enable | disable] Use the spanning-tree bpdufilter command to enable or disable the bpdufilter on a specific interface. This setting overrides the related global setting. Use the no version of the command to return to the default setting.
  • Page 673 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set spanning-tree bpduguard [enable | disable] Use the spanning-tree bpduguard command to enable or disable the bpduguard on a specific interface. This setting overrides the related global setting (see spanning-tree forward-time <seconds> on page 523). Use the no version of the command to return to the default setting.
  • Page 674 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set spanning-tree edgeport Use the spanning-tree edgeport command to configure the interface to be an edgeport. This command overrides the related Global setting. Use the no version of the command to return to the default setting. Syntax Description No subcommands.
  • Page 675 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set spanning-tree link-type [auto | point-to-point | shared] Use the spanning-tree link-type command to configure the spanning tree protocol link type for each interface. Use the no version of the command to return to the default setting. Syntax Description auto Link type is determined by the port’s duplex settings.
  • Page 676 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set spanning-tree port-priority <priority level> Use the spanning-tree port-priority command to select the priority level of this interface. To return to the default setting, use the no version of this command. Syntax Description <priority level>...
  • Page 677 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set speed [10 | 100 | auto] Use the speed command to configure the speed of an Ethernet interface. Use the no form of this command to return to the default value. Syntax Description 10 Mb Ethernet 100 Mb Ethernet...
  • Page 678 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set traffic-shape rate <rate> <burstrate> Use the traffic-shape rate command to specify and enforce an output bandwidth for Ethernet and VLAN interfaces. Syntax Description <rate> Specifies the rate (in bits per second) at which the interface should be shaped. <burstrate>...
  • Page 679 SROS Command Line Interface Reference Guide Ethernet Interface Configuration Command Set vlan-id <vlan id> [native] Use the vlan-id command to set a VLAN ID for the Ethernet interface. Use the no form of this command to remove an entry. Syntax Description <vlan id >...

  • Page 680: Interface Configuration Command Set

    SROS Command Line Interface Reference Guide G.703 Interface Configuration Command set G.703 I NTERFACE ONFIGURATION OMMAND SET To activate the G.703 Interface Configuration mode, enter the interface e1 command (and specify the G.703 port) at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface e1 1/2...
  • Page 681 SROS Command Line Interface Reference Guide G.703 Interface Configuration Command set coding [ami | hdb3] Use the coding command to configure the line coding for the G.703 physical interface. This setting must match the line coding supplied on the circuit by the PBX. Syntax Description Configures the line coding for alternate mark inversion (AMI).
  • Page 682 SROS Command Line Interface Reference Guide G.703 Interface Configuration Command set framing [crc4] Use the framing command to configure the framing format for the G.703 interface. This parameter should match the framing format set on the external device. Use the no form of this command to return to the default value.
  • Page 683 SROS Command Line Interface Reference Guide G.703 Interface Configuration Command set loopback network [line | payload] Use the loopback network command to initiate a loopback on the interface toward the network. Use the no form of this command to deactivate the loopback. Syntax Description line Initiates a metallic loopback of the physical E1 network interface.
  • Page 684 SROS Command Line Interface Reference Guide G.703 Interface Configuration Command set snmp trap link-status Use the snmp trap link-status to control the Simple Network Management Protocol (SNMP) variable ifLinkUpDownTrapEnable (RFC2863) to enable (or disable) the interface to send SNMP traps when there is an interface status change.
  • Page 685 SROS Command Line Interface Reference Guide G.703 Interface Configuration Command set test-pattern [ones | zeros] Use the test-pattern command to activate the built-in pattern generator and begin sending the specified test pattern. This pattern generation can be used to verify a data path when used in conjunction with an active loopback.
  • Page 686 SROS Command Line Interface Reference Guide G.703 Interface Configuration Command set ts16 Use the ts16 command to enable timeslot 16 multiframe to be checked on the receive signal. Use the no form of this command to disable timeslot 16. Syntax Description No subcommands.

  • Page 687: Serial Interface Configuration Command Set

    SROS Command Line Interface Reference Guide Serial Interface Configuration Command Set ERIAL NTERFACE ONFIGURATION OMMAND To activate the Serial Interface Configuration mode, enter the interface serial command at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface serial 1/1 ProCurve(config-ser 1/1)# The following commands are common to multiple command sets and are covered in a centralized section of this guide.
  • Page 688 SROS Command Line Interface Reference Guide Serial Interface Configuration Command Set et-clock-source [rxclock | txclock] Use the et-clock-source command to configure the clock source used when creating the external transmit reference clock (et-clock). Use the no form of this command to return to the default value. Syntax Description rxclock Specifies using the clock recovered from the receive signal to generate et-clock.
  • Page 689 SROS Command Line Interface Reference Guide Serial Interface Configuration Command Set ignore dcd Use the ignore dcd command to specify the behavior of the serial interface when the Data Carrier Detect (DCD) signal is lost. Use the no form of this command to return to the default value. Syntax Description No subcommands.
  • Page 690 SROS Command Line Interface Reference Guide Serial Interface Configuration Command Set invert etclock Use the invert etclock command to configure the serial interface to invert the external transmit reference clock (et-clock) in the data stream before transmitting. Use the no form of this command to return to the default value.
  • Page 691 SROS Command Line Interface Reference Guide Serial Interface Configuration Command Set invert rxclock Use the invert rxclock command to configure the serial interface to expect an inverted receive clock (found in the received data stream). Use the no form of this command to return to the default value. Syntax Description No subcommands.

  • Page 692: Invert Txclock

    SROS Command Line Interface Reference Guide Serial Interface Configuration Command Set invert txclock Use the invert txclock command to configure the serial interface to invert the transmit clock (found in the transmitted data stream) before sending the signal. Use the no form of this command to return to the default value.
  • Page 693 SROS Command Line Interface Reference Guide Serial Interface Configuration Command Set serial-mode [v35 | x21] Use the serial-mode command to specify the electrical mode for the interface. Use the no form of this command to return to the default value. Syntax Description Configures the interface for use with the V.35 adapter cable (J8757A).
  • Page 694 SROS Command Line Interface Reference Guide Serial Interface Configuration Command Set snmp trap Use the snmp trap command to enable all supported Simple Network Management Protocol (SNMP) traps on the interface. Use the no form of this command to disable SNMP on the interface. Syntax Description No subcommands.
  • Page 695 SROS Command Line Interface Reference Guide Serial Interface Configuration Command Set snmp trap link-status Use the snmp trap link-status command to control the Simple Network Management Protocol (SNMP) variable ifLinkUpDownTrapEnable per RFC2863 to enable (or disable) the interface to send SNMP traps when there is an interface status change.

  • Page 696: Modem Interface Configuration Command Set

    SROS Command Line Interface Reference Guide Modem Interface Configuration Command Set ODEM NTERFACE ONFIGURATION OMMAND To activate the Modem Interface Configuration mode, enter the interface modem command at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface modem 1/2 ProCurve(config-modem 1/2)# Note The modem interface number in the example above is shown as modem 1/2.
  • Page 697 SROS Command Line Interface Reference Guide Modem Interface Configuration Command Set caller-id override [always <number> | if-no-cid <number>] Use the caller-id override command to configure the unit to replace caller ID information with a user-specified number. Use the no form of this command to disable any caller ID overrides. Syntax Description always <number>...
  • Page 698 SROS Command Line Interface Reference Guide Modem Interface Configuration Command Set dialin Use the dialin command to enable the modem for remote console dial-in, disabling the use of the modem for backup. Use the no form of this command to disable this feature. Syntax Description No subcommands.
  • Page 699 SROS Command Line Interface Reference Guide Modem Interface Configuration Command Set init-string <string> Use the init-string command to specify an initialization string for the modem using standard AT commands. Use the no form of this command to return to the default initialization string. Syntax Description <string>...
  • Page 700 SROS Command Line Interface Reference Guide Modem Interface Configuration Command Set resource pool-member <pool-name> [<cost>] Use the resource pool-member command to assign the interface to a resource pool, making it a demand routing resource. Use the no form of this command to return to the default value. Syntax Description <pool-name>...

  • Page 701: T1 Interface Configuration Command Set

    SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set T1 I NTERFACE ONFIGURATION OMMAND To activate the T1 Interface Configuration mode, enter the interface t1 command at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface t1 1/1 ProCurve(config-t1 1/1)# The following commands are common to multiple command sets and are covered in a centralized section of this guide.
  • Page 702 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set clock source [internal | line | through] Use the clock source command to configure the source timing used for the interface. Use the no form of this command to return to the default value. Syntax Description internal Configures the unit to provide clocking using the internal oscillator.
  • Page 703 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set coding [ami | b8zs] Use the coding command to configure the line coding for a T1 physical interface. This setting must match the line coding supplied on the circuit by the service provider. Syntax Description Configures the line coding for alternate mark inversion (AMI).
  • Page 704 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set fdl [ansi | att | none] Use the fdl command to configure the format for the facility data link (FDL) channel on the T1 circuit. FDL channels are only available on point-to-point circuits. Use the no form of this command to return to the default value.
  • Page 705 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set framing [d4 | esf] Use the framing command to configure the framing format for the T1 interface. This parameter should match the framing format supplied by your network provider. Use the no form of this command to return to the default value.
  • Page 706 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set lbo [long <-22.5, -15, -7.5, 0> | short <0-655>] Use the lbo command to configure the line build out (LBO) for the T1 interface. Use the no form of this command to return to the default value.
  • Page 707 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set loopback network [line | payload] Use the loopback network command to initiate a loopback on the interface toward the network. Use the no form of this command to deactivate the loopback. Syntax Description line Initiates a metallic loopback of the physical T1 network interface.
  • Page 708 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set loopback remote line [fdl | inband] Use the loopback remote line command to send a loopback code to the remote unit to initiate a line loopback. Use the no form of this command to send a loopdown code to the remote unit to deactivate the loopback.
  • Page 709 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set loopback remote payload Use the loopback remote payload command to send a loopback code to the remote unit to initiate a payload loopback. A payload loopback is a 1.536 Mbps loopback of the payload data received from the network maintaining bit-sequence integrity for the information bits by synchronizing (regenerating) the timing.
  • Page 710 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set remote-alarm [rai] The remote-alarm command selects the alarm signaling type to be sent when a loss of frame is detected on the T1 receive signal. Use the no form of this command to disable all transmitted alarms. Syntax Description Specifies sending a remote alarm indication (RAI) in response to a loss of frame.
  • Page 711 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set remote-loopback Use the remote-loopback command to configure the interface to respond to loopbacks initiated by a remote unit (or the service provider). Use the no form of this command to disable this feature. Syntax Description No subcommands.
  • Page 712 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set snmp trap line-status Use the snmp trap line-status command to control the Simple Network Management Protocol (SNMP) variable dsx1LineStatusChangeTrapEnable (RFC2495) to enable (or disable) the interface to send SNMP traps when there is an interface status change.
  • Page 713 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set snmp trap link-status Use the snmp trap link-status to control the Simple Network Management Protocol (SNMP) variable ifLinkUpDownTrapEnable (RFC2863) to enable (or disable) the interface to send SNMP traps when there is an interface status change.
  • Page 714 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set tdm-group <group number> timeslots <1-24> speed [56 | 64] Use the tdm-group command to create a group of contiguous DS0s on this interface to be used during the bind process. See bind <#> <from interface> <slot/port> <tdm-group#> <to interface> <slot/port> on page 1431 for related information.
  • Page 715 SROS Command Line Interface Reference Guide T1 Interface Configuration Command Set test-pattern [clear | errors | insert | ones | p215 | p220 | p511 | qrss | zeros] Use the test-pattern command to activate the built-in pattern generator and begin sending the specified test pattern.

  • Page 716: Atm Interface Config Command Set

    SROS Command Line Interface Reference Guide ATM Interface Config Command Set ATM I NTERFACE ONFIG OMMAND To activate the ATM Interface Configuration mode, enter the interface atm command at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface atm 1 ProCurve(config-atm 1)# The following commands are common to multiple command sets and are covered in a centralized section of this guide.
  • Page 717 SROS Command Line Interface Reference Guide ATM Interface Config Command Set snmp trap Use the snmp trap command to enable all supported Simple Network Management Protocol (SNMP) traps on the interface. Syntax Description No subcommands. Default Values By default, all interfaces (except virtual Frame Relay interfaces and sub-interfaces) have SNMP traps enabled.
  • Page 718 SROS Command Line Interface Reference Guide ATM Interface Config Command Set snmp trap link-status Use the snmp trap link-status command to control the Simple Network Management Protocol (SNMP) variable ifLinkUpDownTrapEnable (RFC2863) to enable (or disable) the interface to send SNMP traps when there is an interface status change.

  • Page 719: Atm Sub-Interface Config Command Set

    SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ATM S NTERFACE ONFIG OMMAND To activate the ATM Interface Configuration mode, enter the interface atm command (and specify a sub-interface) at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface atm 1.1...
  • Page 720 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set access-policy <policyname> Use the access-policy command to assign a specified access policy for the inbound traffic on an interface. Use the no form of this command to remove an access policy association. Note Configured access policies will only be active if the ip firewall command has been entered at the Global Configuration mode prompt to enable the SROS security features.
  • Page 721 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set atm routed-bridged ip Use the atm routed-bridged ip command to enable routed IP bridge encapsulation (RBE) on an interface. Use the no form of this command to disable RBE operation. Syntax Description >...
  • Page 722 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup auto-backup Use the backup auto-backup command to configure the sub-interface to automatically attempt a backup upon failure. Use the no form of this command to disable automatic backup on an interface. Syntax Description No subcommands.
  • Page 723 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup auto-restore Use the backup auto-restore command to configure the sub-interface to automatically discontinue backup when all network conditions are operational. Use the no form of this command to disable the auto-restore feature.
  • Page 724 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup backup-delay <seconds> Use the backup backup-delay command to configure the amount of time the router will wait after the failure condition is recognized before attempting to backup the link. Use the no form of this command to return to the default value.
  • Page 725 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup call-mode <role> Use the backup call-mode command to specify whether the configured backup interface answers or originates (or a combination of both) backup calls. Use the no form of this command to return to the default value.
  • Page 726 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set interface fr 1 point-to-point frame-relay lmi-type ansi no shutdown bind 1 t1 1/1 1 fr 1 interface fr 1.16 point-to-point frame-relay interface-dlci 16 ip address 10.1.1.2 255.255.255.252 backup call-mode originate backup number 5551111 analog ppp 1 backup number 5552222 analog ppp 1 no shutdown...
  • Page 727 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set tdm-group 1 timeslots 1-24 no shutdown interface fr 1 point-to-point frame-relay lmi-type ansi no shutdown bind 1 t1 1/1 1 fr 1 interface fr 1.100 point-to-point frame-relay interface-dlci 100 ip address 10.1.1.1 255.255.255.252 backup call-mode answer backup number 555-8888 analog ppp 1...
  • Page 728 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set Dialing Out 1. The SROS determines to place an outbound call when either Layer 1 or Layer 2 has a failure. 2. When placing outbound calls, the SROS matches the number dialed to a PPP interface. 3.
  • Page 729 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup connect-timeout <seconds> Use the backup connect-timeout command to specify the number of seconds to wait for a connection after a call is attempted before trying to call again or dialing a different number. It is recommended this number be greater than 60.
  • Page 730 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup force [backup | primary] Use the backup force command to manually override the automatic backup feature. This can be used to force a link into backup to allow maintenance to be performed on the primary link without disrupting data. Use the no form of this command to return to the normal backup operation state.
  • Page 731 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup maximum-retry <attempts> Use the backup maximum-retry command to select the number of calls the router will make when attempting to backup a link. Use the no form of this command to return to the default state. For more detailed information on backup functionality, refer to the Functional Notes section of the command backup call-mode <role>...
  • Page 732 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup number <digits> [analog | digital-56k | digital 64k] <isdn min chan> <isdn max chan> ppp <interface> Use the backup number command to configure the phone number and the call type the router will dial upon network failure.
  • Page 733 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup priority <value> Use the backup priority command to select the backup priority for this interface. This allows the user to establish the highest priority backup link and ensure that link will override backups attempted by lower priority links.
  • Page 734 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup randomize-timers Use the backup randomize-timers command to randomize the call timers to minimize potential contention for resources. Use the no form of this command to return to the default value. For more detailed information on backup functionality, refer to the Functional Notes section of the command backup call-mode <role>...
  • Page 735 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup redial-delay <seconds> Use the backup redial-delay command to configure the delay after an unsuccessful call until the call will be re-tried. For more detailed information on backup functionality, refer to the Functional Notes section of the command backup call-mode <role>...
  • Page 736 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup restore-delay <seconds> Use the backup restore-delay command to configure the amount of time the router will wait after the network is restored before disconnecting the backup link and reverting to the primary. This setting is used to prevent disconnecting the backup link if the primary link is “bouncing”...
  • Page 737 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup schedule [day | enable-time | disable-time] Use the backup schedule command to set the time of day that backup will be enabled. Use this command if backup is desired only during normal business hours and on specific days of the week. Use the no form of this command to disable backup (as specified).
  • Page 738 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set backup shutdown Use the backup shutdown command to deactivate all backup functionality in the unit. Backup configuration parameters are kept intact, but the unit will not initiate (or respond) to backup sequences in the event of a network outage.
  • Page 739 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set bandwidth <value> Use the bandwidth command to provide the bandwidth value of an interface to the higher-level protocols. This value is used in cost calculations. Use the no form of this command to restore the default values. Syntax Description <value>...
  • Page 740 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set bridge-group <group#> Use the bridge-group command to assign an interface to the specified bridge group. Use the no form of this command to remove the interface from the bridge group. Syntax Description <group#>...
  • Page 741 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set crypto map <mapname> Use the crypto map command to associate crypto maps with the interface. Note When you apply a map to an interface, you are applying all crypto maps with the given map name.
  • Page 742 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set Interfaces (Ethernet, Frame Relay, PPP, local) Static Filter Static Filter (in) (out) IPSec IPSec Decrypt/Discard Encrypt NAT/ACP/ Firewall Router As shown in the previous diagram, data coming into the product is first processed by the static filter associated with the interface on which the data is received.
  • Page 743 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set dynamic-dns Use the dynamic-dns command to configure Dynamic DNS service provided by Dynamic Network Services, Inc. (www.dyndns.org). Use the no versions of these commands to disable these features. Variations of this command include: dynamic-dns custom <hostname>...
  • Page 744 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set dyndns-static - The Static DNS service is similar to Dynamic DNS service in that it allows a hostname such as yourname.dyndns.org to point to your IP address. Unlike a Dynamic DNS host, a Static DNS host does not expire after 35 days without updates, but updates take longer to propagate though the DNS system.
  • Page 745 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set encapsulation [aal5mux ip | aal5mux ppp | aal5snap] Use the encapsulation command to configure the encapsulation type for the ATM Adaptation Layer (AAL) of the ATM Protocol Reference model. Use the no form of this command to return to the default setting.
  • Page 746 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set fair-queue <threshold> Use the fair-queue command to enable weighted fair queuing (WFQ) on an interface. Use the no form of this command to disable WFQ and enable first-in-first-out (FIFO) queueing for an interface. WFQ is enabled by default for WAN interfaces.
  • Page 747 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set hold-queue <queue size> out Use the hold-queue out command to change the overall size of an interface's WAN output queue. Use the no form of this command to return to the default setting. Syntax Description <queue size>...
  • Page 748 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip access-group <listname> [in | out] Use the ip access-group command to create an access list to be used for packets transmitted on or received from the specified interface. Use the no form of this command to disable this type of control. Syntax Description listname Specifies the assigned IP access list name.
  • Page 749 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip address dhcp Use the ip address dhcp command to use Dynamic Host Configuration Protocol (DHCP) to obtain an address on the interface. Use the no form of this command to remove a configured IP address (using DHCP) and disable DHCP operation on the interface.
  • Page 750 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set Default Values <administrative distance> By default, the administrative distance value is 1. client-id Optional. By default, the client identifier is populated using the following formula: TYPE: INTERFACE SPECIFIC INFO : MAC ADDRESS Where TYPE specifies the media type in the form of one hexadecimal byte (refer to hardware-address <hardware-address>...
  • Page 751 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip address <address> <mask> [secondary] Use the ip address command to define an IP address on the specified interface. Use the optional secondary keyword to define a secondary IP address. Use the no form of this command to remove a configured IP address.
  • Page 752 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip dhcp [release | renew] Use the ip dhcp command to release or renew the DHCP IP address. This command is only applicable when using DHCP for IP address assignment. Syntax Description release Releases DHCP IP address.
  • Page 753 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip helper-address <address> Use the ip helper-address command to configure the SROS to forward User Datagram Protocol (UDP) broadcast packets received on the interface. Use the no form of this command to disable forwarding packets.
  • Page 754 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip igmp Use the ip igmp command to configure multicasting-related functions for the interface. Syntax Description immediate-leave Specifies that when only one host (or IGMP snooping switch) is connected to the interface a leave is received, multicast of that group is immediately terminated instead of sending a group query when a leave is received and timing out the group if no device responds.
  • Page 755 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip mcast-stub downstream Use the ip mcast-stub downstream command to enable multicast forwarding and IGMP (router mode) on an interface and place it in multicast stub downstream mode. Use the no form of this command to disable. Syntax Description No subcommands.
  • Page 756 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip mcast-stub fixed Use the ip mcast-stub fixed command to allow forwarding of multicast traffic on a selected interface after enabling multicast routing. Use the no form of this command to disable this mode. Syntax Description No subcommands.
  • Page 757 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip mcast-stub helper-enable Use the ip mcast-stub helper-enable command to assign the ip mcast-stub helper-address as the IGMP proxy. Use the no form of this command to disable. Syntax Description No subcommands.
  • Page 758 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip mcast-stub upstream Use the ip mcast-stub upstream command to enable multicast forwarding on an interface and place it in multicast stub upstream mode. Use the no form of this command to disable. Syntax Description No subcommands.
  • Page 759 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip ospf Use the ip ospf command to customize OSPF settings (if needed). Syntax Description authentication-key Specifies a simple-text authentication password to be used by other routers using <password> the OSPF simple password authentication.
  • Page 760 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip ospf authentication [message-digest | null] Use the ip ospf authentication command to authenticate an interface that is performing OSPF authentication. Syntax Description message-digest Specifies message-digest authentication type. null Specifies that no authentication be used.
  • Page 761 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip ospf network [broadcast | point-to-point] Use the ip ospf network command to specify the type of network on this interface. Syntax Description broadcast Sets the network type for broadcast. point-to-point Sets the network type for point-to-point.
  • Page 762 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip pim sparse-mode Use the ip pim sparse-mode command to enable PIM Sparse Mode on the interface. Use the no form of this command to disable PIM Sparse Mode. Syntax Description No subcommands.
  • Page 763 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip pim-sparse dr-priority <value> Use the ip pim-sparse dr-priority command to specify the priority of this PIM interface for use when selecting the designated router (DR). Use the no form of this command to return to the default value. Syntax Description <value>...
  • Page 764 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip pim-sparse hello-timer <time> Use the ip pim-sparse hello-timer command to set the time interval at which periodic hello messages are transmitted out the interface. Each PIM interface has an independent hello-timer. Use the no form of this command to return to the default value.
  • Page 765 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip pim-sparse nbr-timeout <time> Use the ip pim-sparse nbr-timeout command to specify the interval the PIM interface waits before declaring that the neighbor is not present. Use the no form of this command to return to the default value. Syntax Description <time>...
  • Page 766 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip pim-sparse override-interval <time> Use the ip pim-sparse override-interval command to specify the delay interval after a join/prune in which another router on the LAN may override the join/prune. Use the no form of this command to return to the default value.
  • Page 767 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip pim-sparse propagation-delay <time> Use the ip pim-sparse propagation-delay command to specify the expected propagation delay for join/prune messages. Set the propagation delay (in milliseconds) to estimate the amount of delay found in the local link.
  • Page 768 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip policy route-map <mapname> Use the ip policy route-map command to assign a policy route map to this interface. Use the no form of this command to remove the assignment. Removing a route map from the interface does not remove the route map configuration parameters from the system.
  • Page 769 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip proxy-arp <address> <subnet mask> Use the ip proxy-arp to enable proxy Address Resolution Protocol (ARP) on the interface. Use the no form of this command to disable this feature. Syntax Description <address>...
  • Page 770 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip rip receive version [1 | 2] Use the ip rip receive version command to configure the RIP version the unit accepts in all RIP packets received on the interface. Use the no form of this command to restore the default value. Syntax Description Accepts only RIP version 1 packets received on the interface.
  • Page 771 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip rip send version [1 | 2] Use the ip rip send version command to configure the RIP version the unit sends in all RIP packets transmitted on the interface. Use the no form of this command to restore the default value. Syntax Description Transmits only RIP version 1 packets on the interface Transmits only RIP version 2 packets on the interface...
  • Page 772 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip rip summary-address <network address> <network mask> Use the ip rip summary-address command to manually summarize the routes Routing Information Protocol (RIP) will advertise and send out a specified interface. Use the no form of this command to disable this mode.
  • Page 773 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip route-cache Use the ip route-cache command to enable route caching on the interface. Use the no form of this command to disable route caching and return to process switching mode. Note Using Network Address Translation (NAT) or the SROS firewall capabilities on an interface requires process switching mode (using the no ip route-cache command).
  • Page 774 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip unnumbered <interface> Use the ip unnumbered command to use the IP address assigned to the specified interface for all IP processing on the active interface. Use the no form of this command to remove the unnumbered configuration.
  • Page 775 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set ip urlfilter <name> Use the ip urlfilter command to apply a URL filter to the interface for all inbound or outbound traffic. Use the no form of this command to remove the URL filter from an interface. Variations of this command include: ip urlfilter <name>...
  • Page 776 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set max-reserved-bandwidth <percent> Use the max-reserved-bandwidth command to specify the percentage of interface bandwidth reserved for use in user-defined (priority or class-based) queues. The remainder of the interface bandwidth is reserved for system critical traffic and is not available to user-defined queues.
  • Page 777 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set mtu <size> Use the mtu command to configure the maximum transmit unit (MTU) size for the active interface. Use the no form of this command to return to the default value. Syntax Description <size>...
  • Page 778 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set oam-pvc managed <frequency> Use the oam-pvc managed command to enable end-to-end F5 Operation, Administration, and Maintenance (OAM) loopback cell generation and OAM management for an ATM interface. Use the no form of this command to disable generation of OAM loopback cells.
  • Page 779 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set oam retry <up-count> <down-count> <retry-frequency> configure parameters related to Operation, Administration, and Use the oam retry command to Maintenance (OAM) management for an ATM interface. Use the no form of this command to disable OAM management parameters.
  • Page 780 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set pvc <VPI/VCI> select the ATM virtual link for this sub-interface. Use the no form of this Use the pvc command to command to remove the link. Syntax Description > <VPI/VCI>...
  • Page 781 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set qos-policy out <mapname> Use the qos-policy out command to apply a previously-configured QoS map to an interface. Use the no form of this command to remove the map from the interface. The keyword out specifies that this policy will be applied to outgoing packets.
  • Page 782 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set spanning-tree bpdufilter [enable | disable] Use the spanning-tree bpdufilter command to block BPDUs from being transmitted and received on this interface. To return to the default value, use the no form of this command. Syntax Description enable Enables the BPDU filter.
  • Page 783 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set spanning-tree bpduguard [enable | disable] Use the spanning-tree bpduguard command to block BPDUs from being received on this interface. To return to the default value, use the no form of this command. Syntax Description enable Enables the BPDU block.
  • Page 784 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set spanning-tree edgeport Use the spanning-tree edgeport command to set this interface to be an edgeport. This command overrides the Global setting. Use the no form of this command to return the interface to normal operation (non-edgeport).
  • Page 785 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set spanning-tree link-type [auto | point-to-point | shared] Use the spanning-tree link-type command to configure the spanning-tree protocol link type for an interface. To return to the default value, use the no form of this command. Syntax Description auto Determines link type by the port’s duplex settings.
  • Page 786 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set spanning-tree path-cost <value> Use the spanning-tree path-cost command to assign a cost to a bridge group that is used when computing the spanning-tree root path. To return to the default path-cost value, use the no form of this command. Syntax Description <value>...
  • Page 787 SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set spanning-tree port-priority <value> Use the spanning-tree port-priority command to select the priority level of a port associated with a bridge. To return to the default bridge-group priority value, use the no version of this command. Syntax Description <value>...

  • Page 788: Bvi Interface Config Command Set

    SROS Command Line Interface Reference Guide BVI Interface Config Command Set BVI I NTERFACE ONFIG OMMAND To activate the Bridged Virtual Interface (BVI) Configuration mode, first enable integrated routing and bridging via the bridge irb command (refer to bridge irb on page 331) at the Global Configuration mode prompt.
  • Page 789 SROS Command Line Interface Reference Guide BVI Interface Config Command Set traffic-shape rate <value> <burst> on page 816 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.
  • Page 790 SROS Command Line Interface Reference Guide BVI Interface Config Command Set access-policy <name> Use the access-policy command to assign a specified access policy for the inbound traffic on an interface. Use the no form of this command to remove an access policy association. Note Configured access policies will only be active if the ip firewall command has been entered at the Global Configuration mode prompt to enable the SROS security features.
  • Page 791 SROS Command Line Interface Reference Guide BVI Interface Config Command Set bandwidth <value> Use the bandwidth command to provide the bandwidth value of an interface to the higher-level protocols. This value is used in cost calculations. Use the no form of this command to restore the default values. Syntax Description <value>...
  • Page 792 SROS Command Line Interface Reference Guide BVI Interface Config Command Set crypto map <mapname> Use the crypto map command to associate crypto maps with the interface. Note When you apply a map to an interface, you are applying all crypto maps with the given map name.
  • Page 793 SROS Command Line Interface Reference Guide BVI Interface Config Command Set Interfaces (Ethernet, Frame Relay, PPP, local) Static Filter Static Filter (in) (out) IPSec IPSec Decrypt/Discard Encrypt NAT/ACP/ Firewall Router As shown in the previous diagram, data coming into the product is first processed by the static filter associated with the interface on which the data is received.
  • Page 794 SROS Command Line Interface Reference Guide BVI Interface Config Command Set dynamic-dns Use the dynamic-dns command to configure Dynamic DNS service provided by Dynamic Network Services, Inc. (www.dyndns.org). Use the no versions of these commands to disable these features. Variations of this command include: dynamic-dns custom <hostname>...
  • Page 795 SROS Command Line Interface Reference Guide BVI Interface Config Command Set dyndns-static - The Static DNS service is similar to DynDNS.org’s Dynamic DNS service in that it allows a host name such as yourname.dyndns.org to point to your IP address. Unlike a Dynamic DNS host, a Static DNS host does not expire after 35 days without updates, but updates take longer to propagate though the DNS system.
  • Page 796 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip access-group <listname> [in | out] Use the ip access-group command to create an access list to be used for packets transmitted on or received from the specified interface. Use the no form of this command to disable this type of control. Syntax Description <listname>...
  • Page 797 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip address dhcp Use the ip address dhcp command to use Dynamic Host Configuration Protocol (DHCP) to obtain an address on the interface. Use the no form of this command to remove a configured IP address (using DHCP) and disable DHCP operation on the interface.
  • Page 798 SROS Command Line Interface Reference Guide BVI Interface Config Command Set client-id Optional. By default, the client identifier is populated using the following formula: TYPE: INTERFACE SPECIFIC INFO : MAC ADDRESS Where TYPE specifies the media type in the form of one hexadecimal byte (refer hardware-address <hardware-address>...
  • Page 799 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip address <address> <mask> [secondary] Use the ip address command to define an IP address on the specified interface. Use the optional secondary keyword to define a secondary IP address. Use the no form of this command to remove a configured IP address.
  • Page 800 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip directed-broadcast <name> Use the ip directed broadcast command to allow reception/forwarding of directed broadcasts. Use the no form of this command to disable this command. Syntax Description <name> Specifies IP access control list name.
  • Page 801 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip helper-address <address> Use the ip helper-address command to configure SROS to forward User Datagram Protocol (UDP) broadcast packets received on the interface. Use the no form of this command to disable forwarding packets.
  • Page 802 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip ospf Use the ip ospf command to customize OSPF settings (if needed). Use the no form of these commands to return to the default settings. Variations of this command include: ip ospf authentication-key <password>...
  • Page 803 SROS Command Line Interface Reference Guide BVI Interface Config Command Set Usage Examples The following example sets the maximum number of seconds allowed between hello packets to 25,000: ProCurve(config)#interface bvi 1 ProCurve(config-bvi 1)#ip ospf dead-interval 25000 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.
  • Page 804 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip ospf authentication [message-digest | null] Use the ip ospf authentication command to authenticate an interface that is performing OSPF authentication. Syntax Description message-digest Specifies message-digest authentication type. null Specifies that no authentication be used.
  • Page 805 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip ospf network [broadcast | point-to-point] Use the ip ospf network command to specify the type of network on this interface. Syntax Description broadcast Sets the network type for broadcast. point-to-point Sets the network type for point-to-point.
  • Page 806 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip policy route-map <mapname> Use the ip policy route-map command to assign a policy route map to this interface. Use the no form of this command to remove the assignment. Removing a route map from the interface does not remove the route map configuration parameters from the system.
  • Page 807 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip proxy-arp <address> <subnet mask> Use the ip proxy-arp to enable proxy Address Resolution Protocol (ARP) on the interface. Use the no form of this command to disable this feature. Syntax Description <address>...
  • Page 808 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip rip receive version [1 | 2] Use the ip rip receive version command to configure the RIP version the unit accepts in all RIP packets received on the interface. Use the no form of this command to restore the default value. Syntax Description Accepts only RIP version 1 packets received on the interface.
  • Page 809 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip rip send version [1 | 2] Use the ip rip send version command to configure the RIP version the unit sends in all RIP packets transmitted on the interface. Use the no form of this command to restore the default value. Syntax Description Transmits only RIP version 1 packets on the interface Transmits only RIP version 2 packets on the interface...
  • Page 810 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip rip summary-address <network address> <network mask> Use the ip rip summary-address command to manually summarize the routes Routing Information Protocol (RIP) will advertise and send out a specified interface. Use the no form of this command to disable this mode.
  • Page 811 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip route-cache Use the ip route-cache command to enable route caching on the interface. Use the no form of this command to disable route caching and return to process switching mode. Note Using Network Address Translation (NAT) or the SROS firewall capabilities on an interface requires process switching mode (using the no ip route-cache command).
  • Page 812 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip unnumbered <interface> Use the ip unnumbered command to use the IP address assigned to the specified interface for all IP processing on the active interface. Use the no form of this command to remove the unnumbered configuration.
  • Page 813 SROS Command Line Interface Reference Guide BVI Interface Config Command Set ip urlfilter <name> [in | out] Use the ip urlfilter command to apply a URL filter to the interface for all inbound or outbound traffic. Use the no form of this command to remove the URL filter from an interface. Syntax Description <name>...
  • Page 814 SROS Command Line Interface Reference Guide BVI Interface Config Command Set mac-address <mac address> Use the mac-address command to specify the Media Access Control (MAC) address of the VLAN interface. Only the last three values of the MAC address can be modified. Use the no form of this command to return to the default MAC address programmed by ProCurve.
  • Page 815 SROS Command Line Interface Reference Guide BVI Interface Config Command Set max-reserved-bandwidth <percent> Use the max-reserved-bandwidth command to specify the percentage of interface bandwidth reserved for use in user-defined (priority or class-based) queues. The remainder of the interface bandwidth is reserved for system critical traffic and is not available to user-defined queues.
  • Page 816 SROS Command Line Interface Reference Guide BVI Interface Config Command Set mtu <size> Use the mtu command to configure the maximum transmit unit (MTU) size for the active interface. Use the no form of this command to return to the default value. Syntax Description <size>...
  • Page 817 SROS Command Line Interface Reference Guide BVI Interface Config Command Set qos-policy out <name> Use the qos-policy out command to apply a previously-configured QoS map to outgoing packets on an interface. Use the no form of this command to remove the map from the interface. Syntax Description qos map <name>...
  • Page 818 SROS Command Line Interface Reference Guide BVI Interface Config Command Set traffic-shape rate <value> <burst> Use the traffic-shape rate command to specify and enforce an output bandwidth for the BVI interface. Use the no form of this command to disable this feature. Syntax Description <value>...

  • Page 819: Demand Interface Configuration Command Set

    SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set EMAND NTERFACE ONFIGURATION OMMAND To activate the Demand Interface Configuration mode, enter the interface demand command at the Global Configuration mode prompt. For example: ProCurve#configure terminal ProCurve(config)#interface demand 1 ProCurve(config-demand 1)# The following commands are common to multiple command sets and are covered in a centralized section of this guide.
  • Page 820 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set fast-idle <seconds> on page 834 hold-queue <queue size> out on page 835 idle-timeout <seconds> on page 836 ip commands begin on page 837 keepalive <seconds> on page 857 lldp receive on page 858 lldp send [management-address l port-description l system-capabilities l system-description l system-name]...
  • Page 821 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set access-policy <policyname> Use the access-policy command to assign a specified access policy for the inbound traffic to an interface. Use the no form of this command to remove an access policy association. Note Configured access policies will only be active if the ip firewall command has been entered at the Global Configuration mode prompt to enable the SROS security features.
  • Page 822 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set bandwidth <value> Use the bandwidth command to provide the bandwidth value of an interface to the higher-level protocols. This value is used in cost calculations. Use the no form of this command to restore the default values. Syntax Description <value>...
  • Page 823 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set called-number <DNIS number> Use the called-number command to link calls to specific interfaces based on their dialed number identification service (DNIS) numbers. Multiple called numbers may be specified for an interface. Use the no form of this command to remove a configured called number.
  • Page 824 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set caller-number <CLID number> Use the caller-number command to link calls to specific interfaces based on its caller ID (CLID) number. Multiple caller ID numbers may be specified, allowing the interface to accept calls from different remote resources.
  • Page 825 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set connect-mode [answer | originate | either] Use the connect-mode command to configure the interface to only answer calls, only originate calls, or to both answer and originate calls. Use the no form of this command to restore the default values. Syntax Description answer Specifies the interface may be used to answer calls but not originate calls.
  • Page 826 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set connect-order [last-successful | round-robin | sequential] Use the connect-order command to specify the starting point in the connection sequence for each sequence activation. The connection sequence is a circular list. Use the no form of this command to restore the default values.
  • Page 827 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set connect-sequence Use the connect-sequence command to provide instructions to the interface on how to use the resource pool and telephone numbers to connect to demand destinations. Use the no form of this command to restore the default values.Variations of this command include the following: connect-sequence <sequence number>...
  • Page 828 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set connect-sequence attempts <value> Use the connect-sequence attempts command to limit the number of times the connect sequence will cycle when its entries are unable to establish a connection. When the maximum number of attempts is exhausted, the interface will go into recovery mode.
  • Page 829 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set connect-sequence interface-recovery [retry-interval <seconds> | max-retries <value>] Use the connect-sequence interface-recovery command to allow the interface to go down in the event that the connect-sequence attempts value is exhausted. Refer to connect-sequence attempts <value> on page 826 for more information.
  • Page 830 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set crypto map <mapname> Use the crypto map command to associate crypto maps with the interface. Note When you apply a map to an interface, you are applying all crypto maps with the given map name.
  • Page 831 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set Interfaces (Ethernet, Frame Relay, PPP, local) Static Filter Static Filter (in) (out) IPSec IPSec Decrypt/Discard Encrypt NAT/ACP/ Firewall Router As shown in the diagram above, data coming into the product is first processed by the static filter associated with the interface on which the data is received.
  • Page 832 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set demand-hold-queue <packets> timeout <seconds> Use the demand-hold-queue timeout command to set the number and length of time interesting packets will be held while a connection is being made. Use the no form of this command to restore the default values.
  • Page 833 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set dynamic-dns Use the dynamic-dns command to configure Dynamic DNS service provided by Dynamic Network Services, Inc. (www.dyndns.org). Use the no versions of these commands to disable these features. Variations of this command include: dynamic-dns custom <hostname>...
  • Page 834 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set dyndns-static - The Static DNS service is similar to Dynamic DNS service, in that it allows a hostname such as yourname.dyndns.org to point to your IP address. Unlike a Dynamic DNS host, a Static DNS host does not expire after 35 days without updates, but updates take longer to propagate though the DNS system.
  • Page 835 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set fair-queue <threshold> Use the fair-queue command to enable weighted fair queuing (WFQ) on an interface. Use the no form of this command to disable WFQ and enable FIFO queueing for an interface. WFQ is enabled by default for WAN interfaces.
  • Page 836 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set fast-idle <seconds> Use the fast-idle command to set the amount of time the demand interface connection will remain active in the absence of interesting traffic when there is contention for the demand resources being used by this interface.
  • Page 837 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set hold-queue <queue size> out Use the hold-queue out command to change the overall size of an interface's WAN output queue. Syntax Description <queue size> Specifies the total number of packets the output queue can contain before packets are dropped.
  • Page 838 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set idle-timeout <seconds> Use the idle-timeout command to set the amount of time the interface link/bundle will remain up in the absence of interesting traffic. Interesting traffic and direction logic are set using the match-interesting commands.
  • Page 839 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip access-group <listname> [in | out] Use the ip access-group command to create an access list to be used for packets transmitted on or received from the specified interface. Use the no form of this command to disable this type of control. Syntax Description <listname>...
  • Page 840 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip address negotiated [no-default] Use the ip address negotiated command to allow the interface to negotiate (i.e., be assigned) an IP address from the far end PPP connection. Use the no form of this command to disable the negotiation for an IP address Syntax Description no-default...
  • Page 841 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip address <address> <mask> secondary Use the ip address command to define an IP address on the specified interface. Use the optional keyword secondary to define a secondary IP address. Use the no form of this command to remove a configured IP address.
  • Page 842 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip helper-address <address> Use the ip helper-address command to configure the SROS to forward User Datagram Protocol (UDP) broadcast packets received on the interface. Use the no form of this command to disable forwarding packets.
  • Page 843 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip igmp Use the ip igmp command to configure multicasting-related functions for the interface. Syntax Description immediate-leave Specifies that if only one host (or IGMP snooping switch) is connected to the interface, when a leave is received, multicast of that group is immediately terminated as opposed to sending a group query and timing out the group if no device responds.
  • Page 844 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip mcast-stub downstream Use the ip mcast-stub downstream command to enable multicast forwarding and IGMP (router mode) on an interface and place it in multicast stub downstream mode. Use the no form of this command to disable. Syntax Description No subcommands.
  • Page 845 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip mcast-stub fixed Use the ip mcast-stub fixed command to allow forwarding of multicast traffic on a selected interface after enabling multicast routing. Use the no form of this command to disable this mode. Syntax Description No subcommands.
  • Page 846 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip mcast-stub helper-enable Use the ip mcast-stub helper-enable command to assign the ip mcast-stub helper-address as the IGMP proxy. Use the no form of this command to disable. Syntax Description No subcommands.
  • Page 847 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip mcast-stub upstream Use the ip mcast-stub upstream command to enable multicast forwarding on an interface and place it in multicast stub upstream mode. Use the no form of this command to disable. Syntax Description No subcommands.
  • Page 848 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip ospf Use the ip ospf command to customize OSPF settings (if needed). Syntax Description authentication-key Specifies a simple-text authentication password to be used by other routers using <password> the OSPF simple password authentication.
  • Page 849 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip ospf authentication [message-digest | null] Use the ip ospf authentication command to authenticate an interface that is performing OSPF authentication. Syntax Description message-digest Optional. Selects message-digest authentication type. null Optional.
  • Page 850 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip ospf network [broadcast | point-to-point] Use the ip ospf network command to specify the type of network on this interface. Syntax Description broadcast Sets the network type for broadcast. point-to-point Sets the network type for point-to-point.
  • Page 851 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip policy route-map <mapname> Use the ip policy route-map command to assign a policy route map to this interface. Use the no form of this command to remove the assignment. Removing a route map from the interface does not remove the route map configuration parameters from the system.
  • Page 852 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip proxy-arp <address> <subnet mask> Use the ip proxy-arp to enable proxy Address Resolution Protocol (ARP) on the interface. Use the no form of this command to disable this feature. Syntax Description <address>...
  • Page 853 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip rip receive version [1 | 2] Use the ip rip receive version command to configure the RIP version the unit accepts in all RIP packets received on the interface. Use the no form of this command to restore the default value. Syntax Description Accepts only received RIP version 1 packets on the interface.
  • Page 854 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip rip send version [1 | 2] Use the ip rip send version command to configure the RIP version the unit sends in all RIP packets transmitted on the interface. Use the no form of this command to restore the default value. Syntax Description Transmits only RIP version 1 packets on the interface.
  • Page 855 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip rip summary-address <network address> <network mask> Use the ip rip summary-address command to manually summarize the routes Routing Information Protocol (RIP) will advertise and send out a specified interface. Use the no form of this command to disable this mode.
  • Page 856 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip route-cache Use the ip route-cache command to enable fast-cache switching on the interface. Use the no form of this command to disable fast-cache switching and return to process switching mode. Note Using Network Address Translation (NAT) or the SROS firewall capabilities on an interface requires process switching mode (using the no ip route-cache command).
  • Page 857 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip unnumbered <interface> Use the ip unnumbered command to use the IP address assigned to the specified interface for all IP processing on the active interface. Use the no form of this command to remove the unnumbered configuration.
  • Page 858 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ip urlfilter <name> Use the ip urlfilter command to apply a URL filter to the interface for all inbound or outbound traffic. Use the no form of this command to remove the URL filter from an interface. Variations of this command include: ip urlfilter <name>...
  • Page 859 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set keepalive <seconds> Use the keepalive command to enable the transmission of keepalive packets on the interface and specify the time interval in seconds between transmitted packets. Use the no form of this command to return to the default setting.
  • Page 860 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set lldp receive Use the lldp receive command to allow LLDP packets to be received on this interface. Syntax Description No subcommands. Default Values By default, all interfaces are configured to send and receive LLDP packets. Usage Examples The following example configures the demand interface to receive LLDP packets: ProCurve(config)#interface demand 1...
  • Page 861 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set lldp send [management-address l port-description l system-capabilities l system-description l system-name] Use the lldp send command to configure this interface to transmit LLDP packets or to control the types of information contained in the LLDP packets transmitted by this interface.
  • Page 862 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set lldp send-and-receive Use the lldp send-and-receive command to configure this interface to transmit and receive LLDP packets. Syntax Description No subcommands. Default Values Be default, all interfaces are configured to transmit and receive LLDP packets of all types. Functional Notes Individual LLDP information can be enabled or disabled using the various forms of the lldp send command.
  • Page 863 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set match-interesting [list <acl name> | reverse list <acl name>] [in | out] Use the match-interesting command to allow an access list (ACL) to specify which traffic attempting to cross this interface will be considered interesting. Use the no form of this command to restore the default values.
  • Page 864 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set max-reserved-bandwidth <percent> Use the max-reserved-bandwidth command to specify the percentage of interface bandwidth reserved for use in user-defined (priority or class-based) queues. The remainder of the interface bandwidth is reserved for system critical traffic and is not available to user-defined queues.
  • Page 865 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set mtu <size> Use the mtu command to configure the maximum transmit unit (MTU) size for the active interface. Use the no form of this command to return to the default value. Syntax Description <size>...
  • Page 866 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set peer default ip address <address> Use the peer default ip address command to specify the default IP address of the remote end of this interface. Syntax Description <address> Specifies the default IP address for the remote end (A.B.C.D). Default Values By default, there is no assigned peer default IP address.
  • Page 867 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ppp authentication [chap | pap] Use the ppp authentication command to specify the authentication protocol on the PPP virtual interface that the peer should use to authenticate itself. Syntax Description chap Configures CHAP authentication on the interface.
  • Page 868 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set On the peer (hostname Peer): Peer(config-demand 1)#ppp pap sent-username farend password same The first line of the configuration sets the authentication mode as PAP. This means the peer is required to authenticate itself to the local router via PAP.
  • Page 869 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set Several example scenarios are given below for clarity. Configuring CHAP Example 1: Only the local router requires the peer to authenticate itself. On the local router (hostname Local): Local(config-demand 1)#ppp authentication chap Local(config-demand 1)#username Peer password same On the peer (hostname Peer): Peer(config-demand 1)#username Local password same...
  • Page 870 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set Configuring CHAP Example 4: Using the ppp chap password command as an alternate solution. On the local router (hostname Local): Local(config-demand 1)#ppp authentication chap Local(config-demand 1)#username Peer password different On the peer (hostname Peer): Peer(config-demand 1)#username Local password same Peer(config-demand 1)#ppp chap password different...
  • Page 871 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ppp chap hostname <hostname> Use the ppp chap hostname command to configure an alternate hostname for CHAP PPP authentication. Use the no form of this command to remove a configured hostname. For more information on PAP and CHAP functionality, refer to the Technology Review section for the command ppp authentication [chap | pap] on page 865.
  • Page 872 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ppp chap password <password> Use the ppp chap password command to configure an alternate password when the peer requires CHAP PPP authentication. Use the no form of this command to remove a configured password. For more information on PAP and CHAP functionality, refer to the Technology Review section for the command ppp authentication [chap | pap] on page 865.
  • Page 873 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ppp multilink [fragmentation | interleave] Use the ppp multilink command to enable multilink PPP (MPPP) operation on an existing PPP interface. Use the no form of this command to disable. Syntax Description fragmentation Enables multilink fragmentation operation.
  • Page 874 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set ppp pap sent-username <username> password <password> Use the ppp pap sent-username/password command to configure a username and password when the peer requires PAP PPP authentication. Use the no form of this command to remove a configured password. For more information on PAP and CHAP functionality, refer to the Technology Review section for the command ppp authentication [chap | pap] on page 865.
  • Page 875 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set qos-policy [in | out] <mapname> Use the qos-policy out command to apply a previously-configured QoS map to an interface. Use the no form of this command to remove the map from the interface. Syntax Description qos map <mapname>...
  • Page 876 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set resource pool <pool name> Use the resource pool command to associate a resource pool with the demand interface. No more than one resource pool may be associated with an interface. Refer to resource pool-member <pool-name> [<cost>] on page 1211 for more information.
  • Page 877 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set snmp trap link-status Use the snmp trap link-status command to control the Simple Network Management Protocol (SNMP) variable ifLinkUpDownTrapEnable (RFC2863) to enable (or disable) the interface to send SNMP traps when there is an interface status change.
  • Page 878 SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set username <username> password <password> Configures the username and password of the peer to use for demand authentication. Syntax Description <username> Specifies a username by alphanumerical string up to 30 characters in length (the username is case-sensitive).

  • Page 879: Frame Relay Interface Config Command Set

    SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set RAME ELAY NTERFACE ONFIG OMMAND To activate the Frame Relay Interface Configuration mode, enter the interface frame-relay command at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface frame-relay 1 ProCurve(config-fr 1)# The following commands are common to multiple command sets and are covered in a centralized section...
  • Page 880 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set bandwidth <value> Use the bandwidth command to provide the bandwidth value of an interface to the higher-level protocols. This value is used in cost calculations. Use the no form of this command to restore the default values. Syntax Description <value>...
  • Page 881 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set encapsulation frame-relay ietf Use the encapsulation frame-relay ietf command to configure the encapsulation on a virtual Frame Relay interface as IETF (RFC 1490). Currently, this is the only encapsulation setting. Settings for this option must match the far-end router’s settings in order for the Frame Relay interface to become active.
  • Page 882 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set fair-queue <threshold> Use the fair-queue command to enable weighted fair queuing (WFQ) on an interface. Use the no form of this command to disable WFQ and enable FIFO (first-in-first-out) queueing for an interface. WFQ is enabled by default for WAN interfaces.
  • Page 883 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay intf-type [dce | dte | nni] Use the frame-relay intf-type command to define the Frame Relay signaling role needed for the endpoint. Use the no form of this command to return to the default value. Syntax Description Specifies DCE or network signaling role.
  • Page 884 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay lmi-n391dce <polls> Use the frame-relay lmi-n391dce command to set the N391 full status polling counter for the DCE endpoint. Typical applications should leave the default value for this timer. Use the no form of this command to return to the default value.
  • Page 885 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay lmi-n391dte <polls> Use the frame-relay lmi-n391dte command to set the n391 full status polling counter for the DTE endpoint. Typical applications should leave the default value for this timer. Use the no form of this command to return to the default value.
  • Page 886 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay lmi-n392dce <threshold> Use the frame-relay lmi-n392dce command to set the N392 error threshold for the DCE endpoint. Typical applications should leave the default value for this setting. Use the no form of this command to return to the default value.
  • Page 887 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay lmi-n392dte <threshold> Use the frame-relay lmi-n392dte command to set the N392 error threshold for the DTE endpoint. Typical applications should leave the default value for this setting. Use the no form of this command to return to the default value.
  • Page 888 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay lmi-n393dce <counter> Use the frame-relay lmi-n393dce to set the N393 LMI monitored event counter for the DCE endpoint. Typical applications should leave the default value for this counter. Use the no form of this command to return to the default value.
  • Page 889 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay lmi-n393dte <counter> Use the frame-relay lmi-n393dte command to set the N393 LMI monitored event counter for the DTE endpoint. Typical applications should leave the default value for this counter. Use the no form of this command to return to the default value.
  • Page 890 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay lmi-t391dte <seconds> Use the frame-relay lmi-t391dte command to set the T391 signal polling timer for the DTE endpoint. Typical applications should leave the default value for this timer. Use the no form of this command to return to the default value.
  • Page 891 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay lmi-t392dce <seconds> Use the frame-relay lmi-t392dce command to set the T392 polling verification timer for the DCE endpoint. Typical applications should leave the default value for this timer. Use the no form of this command to return to the default value.
  • Page 892 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay lmi-type [ansi | auto | cisco | none | q933a] Use the frame-relay lmi-type command to define the Frame Relay signaling (LMI) type. Use the no form of the command to return to the default value.
  • Page 893 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set frame-relay multilink [ack <seconds> | bandwidth-class <class> <threshold> | bid <string> | hello <seconds> | retry <number>] Use the frame-relay multilink command to enable the Frame Relay multilink interface. When the no form of this command is issued, all configuration options associated with this command and binds made to this interface are removed.
  • Page 894 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set Usage Examples The following example enables the Frame Relay multilink interface and sets the time between hello messages to 45 seconds: ProCurve(config)#interface frame-relay 1 ProCurve(config-fr 1)#frame-relay multilink hello 45 The following example specifies Class B operation: ProCurve(config)#interface frame-relay 1 ProCurve(config-fr 1)#frame-relay multilink bandwidth-class b...
  • Page 895 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set hold-queue <queue size> out Use the hold-queue out command to change the overall size of an interface's WAN output queue. Use the no form of this command to return to the default settings. Syntax Description <queue size>...
  • Page 896 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set max-reserved-bandwidth <percent> Use the max-reserved-bandwidth command to specify the percentage of interface bandwidth reserved for use in user-defined (priority or class-based) queues. The remainder of the interface bandwidth is reserved for system critical traffic and is not available to user-defined queues.
  • Page 897 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set qos-policy out <mapname> Use the qos-policy out command to apply a previously-configured QoS map to an interface. Use the no form of this command to remove the map from the interface. The out keyword specifies that this policy will be applied to outgoing packets.
  • Page 898 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set snmp trap Use the snmp trap command to enable all supported Simple Network Management Protocol (SNMP) traps on the interface. Use the no form of this command to disable SNMP traps. Syntax Description No subcommands.
  • Page 899 SROS Command Line Interface Reference Guide Frame Relay Interface Config Command Set snmp trap link-status Use the snmp trap link-status command to control the Simple Network Management Protocol (SNMP) variable ifLinkUpDownTrapEnable (RFC2863) to enable (or disable) the interface to send SNMP traps when there is an interface status change.

  • Page 900: Frame Relay Sub-Interface Config Command Set

    SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set RAME ELAY NTERFACE ONFIG OMMAND To activate the Frame Relay Interface Configuration mode, enter the interface frame-relay command (and specify a sub-interface) at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface frame-relay 1.16...
  • Page 901 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set mtu <size> on page 960 spanning-tree commands begin on page 963 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.
  • Page 902 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set access-policy <policyname> Use the access-policy command to assign a specified access policy for the inbound traffic on an interface. Use the no form of this command to remove an access policy association. Note Configured access policies will only be active if the ip firewall command has been entered at the Global Configuration mode prompt to enable the SROS security features.
  • Page 903 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup auto-backup Use the backup auto-backup command to configure the sub-interface to automatically attempt a backup upon failure. Use the no form of this command to disable automatic backup on an interface. Syntax Description No subcommands.
  • Page 904 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup auto-restore Use the backup auto-restore command to configure the sub-interface to automatically discontinue backup when all network conditions are operational. Use the no form of this command to disable the auto-restore feature.
  • Page 905 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup backup-delay <seconds> Use the backup backup-delay command to configure the amount of time the router will wait after the failure condition is recognized before attempting to backup the link. Use the no form of this command to return to the default value.
  • Page 906 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup call-mode <role> Use the backup call-mode command to specify whether the configured backup interfaces answers or originates (or a combination of both) backup calls. Use the no form of this command to return to the default value.
  • Page 907 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set interface fr 1 point-to-point frame-relay lmi-type ansi no shutdown bind 1 t1 1/1 1 fr 1 interface fr 1.16 point-to-point frame-relay interface-dlci 16 ip address 10.1.1.2 255.255.255.252 backup call-mode originate backup number 5551111 analog ppp 1 backup number 5552222 analog ppp 1 no shutdown...
  • Page 908 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set tdm-group 1 timeslots 1-24 no shutdown interface fr 1 point-to-point frame-relay lmi-type ansi no shutdown bind 1 t1 1/1 1 fr 1 interface fr 1.100 point-to-point frame-relay interface-dlci 100 ip address 10.1.1.1 255.255.255.252 backup call-mode answer backup number 555-8888 analog ppp 1...
  • Page 909 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set Dialing Out 1. The SROS determines to place an outbound call when either the Layer 1 or Layer 2 has a failure. 2. When placing outbound calls, the SROS matches the number dialed to a PPP interface. 3.
  • Page 910 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup connect-timeout <seconds> Use the backup connect-timeout command to specify the number of seconds to wait for a connection after a call is attempted before trying to call again or dialing a different number. It is recommended this number be greater than 60.
  • Page 911 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup force [backup | primary] Use the backup force command to manually override the automatic backup feature. This can be used to force a link into backup to allow maintenance to be performed on the primary link without disrupting data. Use the no form of this command to return to the normal backup operation state.
  • Page 912 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup maximum-retry <attempts> Use the backup maximum-retry command to select the number of calls the router will make when attempting to backup a link. Use the no form of this command to return to the default state. For more detailed information on Frame Relay backup functionality, refer to the Functional Notes section of the command backup call-mode <role>...
  • Page 913 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup number <digits> [analog | digital-56k | digital 64k] <isdn min chan> <isdn max chan> ppp <interface> Use the backup number command to configure the phone number and the call type the router will dial upon network failure.
  • Page 914 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup priority <value> Use the backup priority command to select the backup priority for this interface. This allows the user to establish the highest priority backup link and ensure that link will override backups attempted by lower priority links.
  • Page 915 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup randomize-timers Use the backup randomize-timers command to randomize the call timers to minimize potential contention for resources. Use the no form of this command to return to the default value. For more detailed information on Frame Relay backup functionality, refer to the Functional Notes section of the command backup call-mode <role>...
  • Page 916 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup redial-delay <seconds> Use the backup redial-delay command to configure the delay after an unsuccessful call until the call will be re-tried. For more detailed information on Frame Relay backup functionality, refer to the Functional Notes section of the command backup call-mode <role>...
  • Page 917 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup restore-delay <seconds> Use the backup restore-delay command to configure the amount of time the router will wait after the network is restored before disconnecting the backup link and reverting to the primary. This setting is used to prevent disconnecting the backup link if the primary link is “bouncing”...
  • Page 918 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup schedule [day | enable-time | disable-time] Use the backup schedule command to set the time of day that backup will be enabled. Use this command if backup is desired only during normal business hours and on specific days of the week. Use the no form of this command to disable backup (as specified).
  • Page 919 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set backup shutdown Use the backup shutdown command to deactivate all backup functionality in the unit. Backup configuration parameters are kept intact, but the unit will not initiate (or respond) to backup sequences in the event of a network outage.
  • Page 920 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set bandwidth <value> Use the bandwidth command to provide the bandwidth value of an interface to the higher-level protocols. This value is used in cost calculations. Use the no form of this command to restore the default values. Syntax Description <value>...
  • Page 921 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set bridge-group <group#> Use the bridge-group command to assign an interface to the specified bridge group. This command is supported on all Ethernet interfaces, PPP virtual interfaces, and Frame Relay virtual sub-interfaces. Use the no form of this command to remove the interface from the bridge group.
  • Page 922 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set crypto map <mapname> Use the crypto map command to associate crypto maps with the interface. Note When you apply a map to an interface, you are applying all crypto maps with the given map name.
  • Page 923 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set Interfaces (Ethernet, Frame Relay, PPP, local) Static Filter Static Filter (in) (out) IPSec IPSec Decrypt/Discard Encrypt NAT/ACP/ Firewall Router As shown in the diagram above, data coming into the product is first processed by the static filter associated with the interface on which the data is received.
  • Page 924 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set dynamic-dns Use the dynamic-dns command to configure Dynamic DNS service provided by Dynamic Network Services, Inc. (www.dyndns.org). Use the no versions of these commands to disable these features. Variations of this command include: dynamic-dns custom <hostname>...
  • Page 925 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set dyndns-static - The Static DNS service is similar to Dynamic DNS service, in that it allows a hostname such as yourname.dyndns.org to point to your IP address. Unlike a Dynamic DNS host, a Static DNS host does not expire after 35 days without updates, but updates take longer to propagate though the DNS system.
  • Page 926 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set frame-relay bc <committed burst value> Use the frame-relay bc command to set the b (committed burst) value for a Frame Relay sublink. The value is in bits. Use the no form of this command to return to default. Syntax Description <committed burst value>...
  • Page 927 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set frame-relay be <excessive burst value> Use the frame-relay be command to set the b (excessive burst) value for a Frame Relay sublink. The value is in bits. Use the no form of this command to return to default. Syntax Description <excessive burst value>...
  • Page 928 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set frame-relay fragment <threshold> Use the frame-relay fragment command to set the FRF.12 fragmentation threshold. Use the no form of this command to erase the configured threshold. Syntax Description <threshold>...
  • Page 929 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set frame-relay interface-dlci <dlci> Use the frame-relay interface-dlci command to configure the Data Link Connection Identifier (DLCI) for the Frame Relay sub-interface. This setting should match the DLCI supplied by your Frame Relay service provider.
  • Page 930 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip access-group <listname> [in | out] Use the ip access-group command to create an access list to be used for packets transmitted on or received from the specified interface. Use the no form of this command to disable this type of control. Syntax Description <listname>...
  • Page 931 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip address dhcp Use the ip address dhcp command to use Dynamic Host Configuration Protocol (DHCP) to obtain an address on the interface. Use the no form of this command to remove a configured IP address (using DHCP) and disable DHCP operation on the interface.
  • Page 932 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set Default Values <administrative distance> By default, the administrative distance value is 1. client-id Optional. By default, the client identifier is populated using the following formula: TYPE: INTERFACE SPECIFIC INFO : MAC ADDRESS Where TYPE specifies the media type in the form of one hexadecimal byte hardware-address <hardware-address>...
  • Page 933 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set Usage Examples The following example enables DHCP operation on the virtual Frame Relay interface (labeled 1.16): ProCurve(config)#interface frame-relay 1.16 ProCurve(config-fr 1.16)#ip address dhcp The following example enables DHCP operation on the virtual Frame Relay sub-interface (labeled 1.16) utilizing hostname procurve and does not allow obtaining a default route, domain name, or nameservers.
  • Page 934 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip address <address> <mask> [secondary] Use the ip address command to define an IP address on the specified interface. Use the optional secondary keyword to define a secondary IP address. Use the no form of this command to remove a configured IP address.
  • Page 935 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip dhcp [release | renew] Use the ip dhcp command to release or renew the DHCP IP address. This command is only applicable when using DHCP for IP address assignment. Syntax Description release Releases DHCP IP address.
  • Page 936 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip helper-address <address> Use the ip helper-address command to configure the SROS to forward User Datagram Protocol (UDP) broadcast packets received on the interface. Use the no form of this command to disable forwarding packets.
  • Page 937 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip igmp Use the ip igmp command to configure multicasting-related functions for the interface. Syntax Description immediate-leave Specifies that if only one host (or IGMP snooping switch) is connected to the interface, when a leave is received, multicast of that group is immediately terminated as opposed to sending a group query and timing out the group if no device responds.
  • Page 938 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip mcast-stub downstream Use the ip mcast-stub downstream command to enable multicast forwarding and IGMP (router mode) on an interface and place it in multicast stub downstream mode. Use the no form of this command to disable. Syntax Description No subcommands.
  • Page 939 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip mcast-stub fixed Use the ip mcast-stub fixed command to allow forwarding of multicast traffic on a selected interface after enabling multicast routing. Use the no form of this command to disable this mode. Syntax Description No subcommands.
  • Page 940 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip mcast-stub helper-enable Use the ip mcast-stub helper-enable command to assign the ip mcast-stub helper-address as the IGMP proxy. Use the no form of this command to disable. Syntax Description No subcommands.
  • Page 941 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip mcast-stub upstream Use the ip mcast-stub upstream command to enable multicast forwarding on an interface and place it in multicast stub upstream mode. Use the no form of this command to disable. Syntax Description No subcommands.
  • Page 942 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip ospf Use the ip ospf command to customize OSPF settings (if needed). Syntax Description authentication-key Specifies a simple-text authentication password to be used by other routers using <password> the OSPF simple password authentication.
  • Page 943 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip ospf authentication [message-digest | null] Use the ip ospf authentication command to authenticate an interface that is performing OSPF authentication. Syntax Description message-digest Optional. Selects message-digest authentication type. null Optional.
  • Page 944 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip ospf network [broadcast | point-to-point] Use the ip ospf network command to specify the type of network on this interface. Syntax Description broadcast Sets the network type for broadcast. point-to-point Sets the network type for point-to-point.
  • Page 945 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip pim sparse-mode Use the ip pim sparse-mode command to enable PIM Sparse Mode on the interface. Use the no form of this command to disable PIM Sparse Mode. Syntax Description No subcommands.
  • Page 946 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip pim-sparse dr-priority <value> Use the ip pim-sparse dr-priority command to specify the priority of this PIM interface for use when selecting the designated router (DR). Use the no form of this command to return to the default value. Syntax Description <value>...
  • Page 947 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip pim-sparse hello-timer <time> Use the ip pim-sparse hello-timer command to set the time interval at which periodic hello messages are transmitted out the interface. Each PIM interface has an independent hello-timer. Use the no form of this command to return to the default value.
  • Page 948 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip pim-sparse nbr-timeout <time> Use the ip pim-sparse nbr-timeout command to specify the interval the PIM interface waits before declaring that the neighbor is not present. Use the no form of this command to return to the default value. Syntax Description <time>...
  • Page 949 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip pim-sparse override-interval <time> Use the ip pim-sparse override-interval command to specify the delay interval after a join/prune in which another router on the LAN may override the join/prune. Use the no form of this command to return to the default value.
  • Page 950 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip pim-sparse propagation-delay <time> Use the ip pim-sparse propagation-delay command to specify the expected propagation delay for join/prune messages. Set the propagation delay (in milliseconds) to estimate the amount of delay found in the local link.
  • Page 951 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip policy route-map <mapname> Use the ip policy route-map command to assign a policy route map to this interface. Use the no form of this command to remove the assignment. Removing a route map from the interface does not remove the route map configuration parameters from the system.
  • Page 952 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip proxy-arp <address> <subnet mask> Use the ip proxy-arp to enable proxy Address Resolution Protocol (ARP) on the interface. Use the no form of this command to disable this feature. Syntax Description <address>...
  • Page 953 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip rip receive version [1 | 2] Use the ip rip receive version command to configure the RIP version the unit accepts in all RIP packets received on the interface. Use the no form of this command to restore the default value. Syntax Description Accepts only received RIP version 1 packets on the interface.
  • Page 954 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip rip send version [1 | 2] Use the ip rip send version command to configure the RIP version the unit sends in all RIP packets transmitted on the interface. Use the no form of this command to restore the default value. Syntax Description Transmits only RIP version 1 packets on the interface.
  • Page 955 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip rip summary-address <network address> <network mask> Use the ip rip summary-address command to manually summarize the routes Routing Information Protocol (RIP) will advertise and send out a specified interface. Use the no form of this command to disable this mode.
  • Page 956 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip route-cache Use the ip route-cache command to enable route caching on the interface. Use the no form of this command to disable route caching and return to process switching mode. Note Using Network Address Translation (NAT) or the SROS firewall capabilities on an interface requires process switching mode (using the no ip route-cache command).
  • Page 957 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip unnumbered <interface> Use the ip unnumbered command to use the IP address assigned to the specified interface for all IP processing on the active interface. Use the no form of this command to remove the unnumbered configuration.
  • Page 958 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set ip urlfilter <name> Use the ip urlfilter command to apply a URL filter to the interface for all inbound or outbound traffic. Use the no form of this command to remove the URL filter from an interface. Variations of this command include: ip urlfilter <name>...
  • Page 959 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set lldp receive Use the lldp receive command to allow LLDP packets to be received on this interface. Syntax Description No subcommands. Default Values By default, all interfaces are configured to send and receive LLDP packets. Usage Examples The following example configures the Frame Relay sub-interface to receive LLDP packets: ProCurve(config)#interface frame-relay 1.16...
  • Page 960 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set lldp send [management-address l port-description l system-capabilities l system-description l system-name] Use the lldp send command to configure this interface to transmit LLDP packets or to control the types of information contained in the LLDP packets transmitted by this interface.
  • Page 961 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set lldp send-and-receive Use the lldp send-and-receive command to configure this interface to transmit and receive LLDP packets. Syntax Description No subcommands. Default Values By default, all interfaces are configured to transmit and receive LLDP packets of all types. Functional Notes Individual LLDP information can be enabled or disabled using the various forms of the lldp send command.
  • Page 962 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set mtu <size> Use the mtu command to configure the maximum transmit unit (MTU) size for the active interface. Use the no form of this command to return to the default value. Syntax Description <size>...
  • Page 963 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set schedule <name> Use the schedule command to create a general purpose schedule. Use the no form of this command to delete a schedule. Variations of this command include: schedule <name>...
  • Page 964 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set Functional Notes Periodic schedules can be expressed in the format <day> <time> to <day> <time> (for example, periodic monday 08:15 to wednesday 17:15), or up to 7 days can be entered (for example, periodic tuesday wednesday thursday 08:15 to 17:15).
  • Page 965 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set spanning-tree bpdufilter [enable | disable] Use the spanning-tree bpdufilter command to block BPDUs from being transmitted and received on this interface. To return to the default value, use the no form of this command. Syntax Description enable Enables the BPDU filter.
  • Page 966 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set spanning-tree bpduguard [enable | disable] Use the spanning-tree bpduguard command to block BPDUs from being received on this interface. To return to the default value, use the no form of this command. Syntax Description enable Enables the BPDU block.
  • Page 967 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set spanning-tree edgeport Use the spanning-tree edgeport command to set this interface to be an edgeport. This command overrides the Global setting. Use the no form of this command to return the interface to normal operation (non-edgeport).
  • Page 968 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set spanning-tree link-type [auto | point-to-point | shared] Use the spanning-tree link-type command to configure the spanning-tree protocol link type for an interface. To return to the default value, use the no form of this command. Syntax Description auto Link type is determined by the port’s duplex settings.
  • Page 969 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set spanning-tree path-cost <value> Use the spanning-tree path-cost command to assign a cost to a bridge group that is used when computing the spanning-tree root path. To return to the default path-cost value, use the no form of this command. Syntax Description <value>...
  • Page 970 SROS Command Line Interface Reference Guide Frame Relay Sub-Interface Config Command Set spanning-tree port-priority <value> Use the spanning-tree port-priority command to select the priority level of a port associated with a bridge. To return to the default bridge-group priority value, use the no version of this command. Syntax Description <value>...

  • Page 971: Hdlc Command Set

    SROS Command Line Interface Reference Guide HDLC Command Set HDLC C OMMAND To activate the HDLC mode, enter the interface hdlc command at the Global Configuration mode prompt. For example: ProCurve>enable ProCurve#configure terminal ProCurve(config)#interface hdlc 1 ProCurve(config-hdlc 1)# The following commands are common to multiple command sets and are covered in a centralized section of this guide.
  • Page 972 SROS Command Line Interface Reference Guide HDLC Command Set max-reserved-bandwidth <percent> on page 1027 mtu <size> on page 1028 qos-policy [in | out] <mapname> on page 1029 snmp trap link-status on page 1030 5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P.
  • Page 973 SROS Command Line Interface Reference Guide HDLC Command Set access-policy <policyname> Use the access-policy command to assign a specified access policy for the inbound traffic on an interface. Use the no form of this command to remove an access policy association. Note Configured access policies will only be active if the ip firewall command has been entered at the Global Configuration mode prompt to enable the SROS security features.
  • Page 974 SROS Command Line Interface Reference Guide HDLC Command Set alias link<“text”> Each configured HDLC interface (when referenced using SNMP) contains a link (physical port) and a bundle (group of links). RFC 1471 (for Link Connection Protocol) provides an interface table to manage lists of bundles and associated links.
  • Page 975 SROS Command Line Interface Reference Guide HDLC Command Set backup auto-backup Use the backup auto-backup command to configure the interface to automatically attempt a backup upon failure. Use the no form of this command to disable auto-backup functionality. Syntax Description No subcommands.
  • Page 976 SROS Command Line Interface Reference Guide HDLC Command Set backup auto-restore Use the backup auto-restore command to configure the interface to automatically discontinue backup when all network conditions are operational. Use the no form of this command to disable the auto-restore feature.
  • Page 977 SROS Command Line Interface Reference Guide HDLC Command Set backup backup-delay <seconds> Use the backup backup-delay command to configure the amount of time the router will wait after the failure condition is recognized before attempting to backup the link. Use the no form of this command to return to the default value.
  • Page 978 SROS Command Line Interface Reference Guide HDLC Command Set backup call-mode <role> Use the backup call-mode command to specify whether the configured backup interfaces answers or originates (or a combination of both) backup calls. Use the no form of this command to return to the default value.
  • Page 979 SROS Command Line Interface Reference Guide HDLC Command Set interface fr 1 point-to-point frame-relay lmi-type ansi no shutdown bind 1 t1 1/1 1 fr 1 interface fr 1.16 point-to-point frame-relay interface-dlci 16 ip address 10.1.1.2 255.255.255.252 backup call-mode originate backup number 5551111 analog ppp 1 backup number 5552222 analog ppp 1 no shutdown interface ppp 1...
  • Page 980 SROS Command Line Interface Reference Guide HDLC Command Set tdm-group 1 timeslots 1-24 no shutdown interface fr 1 point-to-point frame-relay lmi-type ansi no shutdown bind 1 t1 1/1 1 fr 1 interface fr 1.100 point-to-point frame-relay interface-dlci 100 ip address 10.1.1.1 255.255.255.252 backup call-mode answer backup number 555-8888 analog ppp 1 interface ppp 1...
  • Page 981 SROS Command Line Interface Reference Guide HDLC Command Set 3. When placing the call, the SROS uses the configuration of the related PPP interface for authentication and IP negotiation. 4. If the call fails to connect on the first number dialed, the SROS places a call to the second number if configured.
  • Page 982 SROS Command Line Interface Reference Guide HDLC Command Set backup connect-timeout <seconds> Use the backup connect-timeout command to specify the number of seconds to wait for a connection after a call is attempted before trying to call again or dialing a different number. Recommended value is greater than 60.
  • Page 983 SROS Command Line Interface Reference Guide HDLC Command Set backup force [backup | primary] Use the backup force command to manually override the automatic backup feature. This can be used to force a link into backup to allow maintenance to be performed on the primary link without disrupting data. Use the no form of this command to return to the normal backup operation state.
  • Page 984 SROS Command Line Interface Reference Guide HDLC Command Set backup maximum-retry <attempts> Use the backup maximum-retry command to select the number of calls the router will make when attempting to backup a link. Use the no form of this command to return to the default state. For more detailed information on backup functionality, refer to the Functional Notes section of the command backup call-mode <role>...
  • Page 985 SROS Command Line Interface Reference Guide HDLC Command Set backup number <digits> [analog | digital-56k | digital 64k] <isdn min chan> <isdn max chan> ppp <interface> Use the backup number command to configure the phone number and the call type the router will dial upon network failure.
  • Page 986 SROS Command Line Interface Reference Guide HDLC Command Set backup priority <value> Use the backup priority command to select the backup priority for the primary interface. This allows the user to establish the highest priority backup link and ensure that link will override backups attempted by lower priority links.
  • Page 987 SROS Command Line Interface Reference Guide HDLC Command Set backup randomize-timers Use the backup randomize-timers command to randomize the call timers to minimize potential contention for resources. Use the no form of this command to return to the default value. For more detailed information on backup functionality, refer to the Functional Notes section of the command backup call-mode <role>...
  • Page 988 SROS Command Line Interface Reference Guide HDLC Command Set backup redial-delay <seconds> Use the backup redial-delay command to configure the delay after an unsuccessful call until the call will be re-tried. For more detailed information on backup functionality, refer to the Functional Notes section of the command backup call-mode <role>...
  • Page 989 SROS Command Line Interface Reference Guide HDLC Command Set backup restore-delay <seconds> Use the backup restore-delay command to configure the amount of time the router will wait after the network is restored before disconnecting the backup link and reverting to the primary. This setting is used to prevent disconnecting the backup link if the primary link is “bouncing”...
  • Page 990 SROS Command Line Interface Reference Guide HDLC Command Set backup schedule [day | enable-time | disable-time] Use the backup schedule command to set the time of day that backup will be enabled. Use this command if backup is desired only during normal business hours and on specific days of the week. Use the no form of this command to disable backup (as specified).
  • Page 991 SROS Command Line Interface Reference Guide HDLC Command Set backup shutdown Use the backup shutdown command to deactivate all backup functionality in the unit. Backup configuration parameters are kept intact, but the unit will not initiate (or respond) to backup sequences in the event of a network outage.
  • Page 992 SROS Command Line Interface Reference Guide HDLC Command Set bandwidth <value> Use the bandwidth command to provide the bandwidth value of an interface to the higher-level protocols. This value is used in cost calculations. Use the no form of this command to restore the default values. Syntax Description <value>...
  • Page 993 SROS Command Line Interface Reference Guide HDLC Command Set bridge-group <group#> Use the bridge-group command to assign an interface to the specified bridge group. Use the no form of this command to remove the interface from the bridge group. Syntax Description <group#>...
  • Page 994 SROS Command Line Interface Reference Guide HDLC Command Set crypto map <mapname> Use the crypto map command to associate crypto maps with the interface. Note When you apply a map to an interface, you are applying all crypto maps with the given map name.
  • Page 995 SROS Command Line Interface Reference Guide HDLC Command Set Interfaces (Ethernet, Frame Relay, PPP, local) Static Filter Static Filter (in) (out) IPSec IPSec Decrypt/Discard Encrypt NAT/ACP/ Firewall Router As shown in the previous diagram, data coming into the product is first processed by the static filter associated with the interface on which the data is received.
  • Page 996 SROS Command Line Interface Reference Guide HDLC Command Set dynamic-dns Use the dynamic-dns command to configure Dynamic DNS service provided by Dynamic Network Services, Inc. (www.dyndns.org). Use the no versions of these commands to disable these features. Variations of this command include: dynamic-dns custom <hostname>...
  • Page 997 SROS Command Line Interface Reference Guide HDLC Command Set dyndns-static - The Static DNS service is similar to Dynamic DNS service, in that it allows a hostname such as yourname.dyndns.org to point to your IP address. Unlike a Dynamic DNS host, a Static DNS host does not expire after 35 days without updates, but updates take longer to propagate though the DNS system.
  • Page 998 SROS Command Line Interface Reference Guide HDLC Command Set fair-queue <threshold> Use the fair-queue command to enable weighted fair queuing (WFQ) on an interface. Use the no form of this command to disable WFQ and enable FIFO (first-in-first-out) queueing for an interface. WFQ is enabled by default for WAN interfaces.
  • Page 999 SROS Command Line Interface Reference Guide HDLC Command Set hold-queue <queue size> out Use the hold-queue command to change the overall size of an interface's WAN output queue. Use the no form of this command to return to the default setting. Syntax Description <queue size>...
  • Page 1000 SROS Command Line Interface Reference Guide HDLC Command Set ip access-group <listname> [in | out] Use the ip access-group command to create an access list to be used for packets transmitted on or received from the specified interface. Use the no form of this command to disable this type of control. Syntax Description <listname>...
  • Page 1001 SROS Command Line Interface Reference Guide HDLC Command Set ip address <address> <mask> [secondary] Use the ip address command to define an IP address on the specified interface. Use the optional secondary keyword to define a secondary IP address. Use the no form of this command to remove a configured IP address.

This manual is also suitable for:

Procurve secure router 7203dl j8753a j8753a

Table of Contents