Page 1 HPE FlexFabric 7900 Switch Series Fundamentals Command Reference Part number: 5200-0971 Software version: Release 2150 and later Document version: 6W100-20160506...
Page 2 © Copyright 2016 Hewlett Packard Enterprise Development LP The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Page 3: Table Of Contents
Contents Basic CLI commands ······················································································ 1 alias ···························································································································································· 1 display | { begin | exclude | include } ·········································································································· 2 display | by-linenum ··································································································································· 3 display > ····················································································································································· 4 display >> ··················································································································································· 5 display alias ················································································································································ 6 display history-command ··························································································································· 7 display history-command all ·······················································································································...
Page 4 RBAC commands ························································································· 49 description ················································································································································ 49 display role ··············································································································································· 49 display role feature ··································································································································· 51 display role feature-group ························································································································ 55 feature ······················································································································································ 55 interface policy deny ································································································································ 56 permit interface ········································································································································ 57 permit vlan ················································································································································ 59 permit vpn-instance ·································································································································· 60 role ···························································································································································...
Page 5 reget ······················································································································································· 100 rename ··················································································································································· 101 reset ······················································································································································· 102 restart ····················································································································································· 102 rhelp ······················································································································································· 103 rmdir ······················································································································································· 104 rstatus ···················································································································································· 105 status ······················································································································································ 107 system ···················································································································································· 108 user ························································································································································ 108 verbose ·················································································································································· 109 ? ····························································································································································· 110 TFTP commands ························································································ 111 tftp ··························································································································································...
Page 6 save ························································································································································ 153 startup saved-configuration ···················································································································· 156 Software upgrade commands ····································································· 158 boot-loader file ······································································································································· 158 boot-loader update ································································································································· 160 bootrom backup ····································································································································· 161 bootrom restore ······································································································································ 162 bootrom update ······································································································································ 163 bootrom-update security-check enable ·································································································· 164 display boot-loader ································································································································· 165 version auto-update enable ····················································································································...
Page 7 display memory-threshold ······················································································································ 219 display power ········································································································································· 220 display scheduler job ······························································································································ 221 display scheduler logfile ························································································································· 221 display scheduler reboot ························································································································ 222 display scheduler schedule ···················································································································· 223 display system stable state ···················································································································· 224 display system-working-mode ················································································································ 225 display transceiver alarm ······················································································································· 226 display transceiver diagnosis ·················································································································...
Page 8 display provision failed-config ················································································································ 273 provision ················································································································································· 274 slot ·························································································································································· 275 reset provision failed-config ··················································································································· 275 Document conventions and icons ······························································· 277 Conventions ··················································································································································· 277 Network topology icons ·································································································································· 278 Support and other resources ······································································ 279 Accessing Hewlett Packard Enterprise Support ···························································································· 279 Accessing updates ·········································································································································...
Page 9: Basic Cli Commands
Basic CLI commands alias Use alias to configure a command alias. Use undo alias to remove a command alias. Syntax alias alias command undo alias alias Default The system defines a set of command aliases, as listed in Table Table 1 System-defined command aliases Alias Command string access-list...
Page 10: Display | { Begin | Exclude | Include
Enter ship interface to execute the display ip interface command. • The command string can include up to nine parameters. Each parameter starts with the dollar sign ($) and a sequence number in the range of 1 to 9. For example, you can configure the alias shinc for the display ip $1 | include $2 command.
Page 11: Display | By-Linenum
Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters command: Specifies the keywords and arguments of a display command. To display available keywords and arguments, enter display ?. begin: Displays the first line matching the specified regular expression and all subsequent lines. exclude: Displays all lines not matching the specified regular expression.
Page 12: Display
Each line number is displayed as a 5-character string and might be followed by a colon (:) or hyphen (-). If you specify the | by-linenum option and the | begin regular-expression option for a display command, a hyphen is displayed for all lines that do not match the regular expression. Examples # Display VLAN 999 settings, with each output line identified by a number.
Page 13: Display
Examples # Save VLAN 1 settings to a separate file named vlan.txt. <Sysname> display vlan 1 > vlan.txt # Verify the content of the vlan.txt file. <Sysname> more vlan.txt VLAN ID: 1 VLAN type: Static Route interface: Not configured Description: VLAN 0001 Name: VLAN 0001 Tagged ports: None...
Page 14: Display Alias
Route interface: Not configured Description: VLAN 0001 Name: VLAN 0001 Tagged ports: None Untagged ports: FortyGigE1/0/2 VLAN ID: 999 VLAN type: Static Route interface: Configured IP address: 192.168.2.1 Subnet mask: 255.255.255.0 Description: For LAN Access Name: VLAN 0999 Tagged ports: None Untagged ports: FortyGigE1/0/1...
Page 15: Display History-Command
show display sirt display ip routing-table write save # Display the command alias shinc. <Sysname> display alias shinc Alias Command key shinc display $1 | include $2 Related commands alias display history-command Use display history-command to display all commands that are saved in the command history buffer for the current CLI session.
Page 16: Display Hotkey
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Usage guidelines The system automatically saves commands successfully executed by users to the command history buffer for all CLI sessions. Users can view them and execute them again. Up to 1024 commands can be saved in the command history buffer. When this number is reached, the system deletes the earliest commands to make room for newly executed commands.
Page 17: Hotkey
CTRL_O undo debugging all -Undefined command hotkeys- CTRL_T NULL CTRL_U NULL -System-reserved hotkeys- CTRL_A Move the cursor to the beginning of the line. CTRL_B Move the cursor one character to the left. CTRL_C Stop the current command. CTRL_D Erase the character at the cursor. CTRL_E Move the cursor to the end of the line.
Page 18: Quit
Predefined user roles network-admin mdc-admin Parameters CTRL_G: Assigns a command to Ctrl+G. CTRL_L: Assigns a command to Ctrl+L. CTRL_O: Assigns a command to Ctrl+O. CTRL_T: Assigns a command to Ctrl+T. CTRL_U: Assigns a command to Ctrl+U. command: Specifies the command to be assigned to the hotkey. Usage guidelines The system defines some hotkeys and provides five configurable command hotkeys.
Page 19: Return
return Use return to return to user view from any other view. Syntax return Views Any view except user view Predefined user roles network-admin network-operator mdc-admin mdc-operator Usage guidelines Pressing Ctrl+Z has the same effect as the return command. Examples # Return to user view from FortyGigE 1/0/1 interface view.
Page 20: System-View
This command takes effect only for the current session. When you are logged out, the default is restored. Examples # Disable pausing between screens of output for the current session. <Sysname> screen-length disable Related commands screen-length system-view Use system-view to enter system view from user view. Syntax system-view Views...
Page 21: Login Management Commands
Login management commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. Some login management commands are available in both user line view and user line class view: •...
Page 22: Authentication-Mode
Examples # Configure character s as the shortcut key for starting a terminal session on the user line AUX 0. <Sysname> system-view [Sysname] line aux 0 [Sysname-line-aux0] activation-key s To verify the configuration: Exit the console session. [Sysname-line-aux0] return <Sysname> quit Log in again through the AUX line.
Page 23: Auto-Execute Command
Usage guidelines When the authentication mode is none, any user can log in without authentication. To improve device security, use the password or scheme authentication mode. In VTY line view, this command is associated with the protocol inbound command. If you specify a non-default value for only one of the two commands in VTY line view, the other command uses the default setting, regardless of the setting in VTY line class view.
Page 24 Views User line view, user line class view Predefined user roles network-admin mdc-admin Parameters command: Specifies the command to be automatically executed. Usage guidelines This command is not supported in AUX line view or AUX line class view. This command is available in both user line view and user line class view: •...
Page 25: Command Accounting
****************************************************************************** <Sysname.41> This operation is the same as directly logging in to the device at 192.168.1.41 through Telnet. When you break the Telnet connection to 192.168.1.41, the Telnet connection to 192.168.1.40 is broken at the same time. command accounting Use command accounting to enable command accounting. Use undo command accounting to restore the default.
Page 26: Databits
Syntax command authorization undo command authorization Default Command authorization is disabled. Logged-in users can execute commands without authorization. Views User line view, user line class view Predefined user roles network-admin mdc-admin Usage guidelines When command authorization is enabled, a command is available only if the user has the commensurate user role and is authorized to use the command by the AAA scheme.
Page 27: Display Line
Parameters 5: Uses five data bits for each character. 6: Uses six data bits for each character. 7: Uses seven data bits for each character. 8: Uses eight data bits for each character. Usage guidelines This command is not supported in VTY line view. This setting must be the same as that on the configuration terminal.
Page 28: Display Telnet Client
: Line is active. : Line is active and in async mode. : Absolute index of line. Type : Type and relative index of line. Auth : Login authentication mode. : Physical port of the line. : Authentication use AAA. : No authentication is required.
Page 29: Display User-Interface
network-operator mdc-admin mdc-operator Examples # Display the Telnet client configuration of the device when it serves as a Telnet client. <Sysname> display telnet client The source IP address is 1.1.1.1. The output shows that the device uses the source IPv4 address 1.1.1.1 for outgoing Telnet packets when it serves as a Telnet client.
Page 30: Display Users
VTY 0 : Line is active. : Line is active and in async mode. : Absolute index of line. Type : Type and relative index of line. Auth : Login authentication mode. : Physical port of the line. : Authentication use AAA. : No authentication is required.
Page 31: Escape-Key
Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters all: Displays all user lines supported by the device. Examples # Display online user information. <Sysname> display users Line Idle Time Type VTY 0 00:10:49 Jun 11 11:27:32 + 11 VTY 1 00:00:00 Jun 11 11:39:40 Following are more details.
Page 32 Default Pressing Ctrl+C terminates a task. Views User line view, user line class view Predefined user roles network-admin mdc-admin Parameters character: Specifies the shortcut key. It can be a single character, a key sequence, or the ASCII code value (in the range of 0 to 127) of the character or key sequence. default: Restores the default escape key sequence Ctrl+C.
Page 33: Flow-Control
2 packet(s) transmitted 2 packet(s) received 0.00% packet loss round-trip min/avg/max = 3/3/3 ms <Sysname> flow-control Use flow-control to configure the flow control mode. Use undo flow-control to restore the default. Syntax flow-control { hardware | none | software } undo flow-control Default The flow control mode is none.
Page 34: Free User-Interface
Syntax free line { number1 | { aux | vty } number2 } Views User view Predefined user roles network-admin mdc-admin Parameters number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode and 0 to 71 in IRF mode.
Page 35: History-Command Max-Size
Views User view Predefined user roles network-admin mdc-admin Parameters number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode and 0 to 71 in IRF mode. aux: Specifies the AUX line. vty: Specifies the VTY line.
Page 36: Idle-Timeout
Default The buffer of a user line saves up to 10 history commands. Views User line view, user line class view Predefined user roles network-admin mdc-admin Parameters size-value: Specifies the maximum number of history commands the buffer can store, in the range of 0 to 256.
Page 37: Line
Parameters minutes: Specifies the number of minutes for the timer, in the range of 0 to 35791. The default is 10 minutes. seconds: Specifies the number of seconds for the timer, in the range of 0 to 59. The default is 0 seconds.
Page 38: Line Class
To configure the same settings for multiple user lines, use this command to enter multiple user line views. Examples # Enter the view of user line AUX 0. <Sysname> system-view [Sysname] line aux 0 [Sysname-line-aux0] # Enter the views of user lines VTY 0 to VTY 4. <Sysname>...
Page 39: Lock
[Sysname-line-class-vty] idle-timeout 15 # In AUX line class view, configure character s as the shortcut key for starting a terminal session. <Sysname> system-view [Sysname] line class aux [Sysname-line-class-aux] activation-key s [Sysname-line-class-aux] quit # In AUX 0 line view, restore the default shortcut key for starting a terminal session. [Sysname] line aux 0 [Sysname-line-aux0] undo activation-key Alternatively:...
Page 40: Parity
To unlock the user line, press Enter and enter the correct password. Examples # Lock the current user line and then unlock it. <Sysname> lock Please input password<1 to 16> to lock current line: Password: Again: locked ! // The user line is locked. To unlock it, press Enter and enter the password: Password: <Sysname>...
Page 41: Protocol Inbound
protocol inbound Use protocol inbound to enable a user line to support Telnet, SSH, or both protocols. Use undo protocol inbound to restore the default. Syntax In non-FIPS mode: protocol inbound { all | ssh | telnet } undo protocol inbound In FIPS mode: protocol inbound ssh undo protocol inbound...
Page 42: Screen-Length
[Sysname-line-class-vty] protocol inbound ssh [Sysname-line-class-vty] line vty 0 4 [Sysname-line-vty0-4] authentication-mode none screen-length Use screen-length to set the maximum number of lines to be displayed on a screen. Use undo screen-length to restore the default. Syntax screen-length screen-length undo screen-length Default Up to 24 lines are displayed on a screen.
Page 43: Send
send Use send to send messages to user lines. Syntax send { all | number1 | { aux | vty } number2 } Views User view Predefined user roles network-admin mdc-admin Parameters all: Specifies all user lines. number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode and 0 to 71 in IRF mode.
Page 44: Shell
Syntax set authentication password { hash | simple } password undo set authentication password Default No password is set for password authentication. Views User line view, user line class view Predefined user roles network-admin mdc-admin Parameters hash: Sets a hashed password. simple: Sets a plaintext password.
Page 45: Speed
Default The terminal service is enabled on all user lines. Views User line view, user line class view Predefined user roles network-admin mdc-admin Usage guidelines The undo shell command is not supported in AUX line view or AUX line class view. You cannot disable the terminal service on the user line you are using.
Page 46: Stopbits
Usage guidelines This command is not supported in VTY line view. The configuration terminal and the device must be configured with the same transmission rate to communicate. Examples # Set the transmission rate to 19200 bps for user line AUX 0. <Sysname>...
Page 47: Telnet Client Source
Syntax telnet remote-host [ service-port ] [ vpn-instance vpn-instance-name ] [ source { interface interface-type interface-number | ip ip-address } ] [ dscp dscp-value ] Views User view Predefined user roles network-admin mdc-admin Parameters remote-host: Specifies the IPv4 address or host name of a remote host. A host name can be a case-insensitive string of 1 to 253 characters.
Page 48: Telnet Ipv6
Default No source IPv4 address or source interface is specified for outgoing Telnet packets. The source IPv4 address is the primary IPv4 address of the outbound interface. Views System view Predefined user roles network-admin mdc-admin Parameters interface interface-type interface-number: Specifies a source interface. The primary IPv4 address of the interface will be used as the source IPv4 address for outgoing Telnet packets.
Page 49: Telnet Server Acl
port-number: Specifies the TCP port number for the Telnet service on the remote host. The value range is 0 to 65535 and the default is 23. vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the remote host belongs. The vpn-instance-name argument represents the VPN instance name, a case-sensitive string of 1 to 31 characters.
Page 50: Telnet Server Dscp
Examples # Permit only the user at 1.1.1.1 to Telnet to the device. <Sysname> system-view [Sysname] acl number 2001 [Sysname-acl-basic-2001] rule permit source 1.1.1.1 0 [Sysname-acl-basic-2001] quit [Sysname] telnet server acl 2001 telnet server dscp Use telnet server dscp to set the DSCP value for IPv4 to use for outgoing Telnet packets on a Telnet server.
Page 51: Telnet Server Ipv6 Acl
Default The Telnet server feature is disabled. Views System view Predefined user roles network-admin mdc-admin Usage guidelines This command is not supported in FIPS mode. Administrators can Telnet to the device only when the Telnet server feature is enabled. Examples # Enable the Telnet server feature.
Page 52: Telnet Server Ipv6 Dscp
Examples # Permit only the user at 2000::1 to Telnet to the device. <Sysname> system-view [Sysname] acl ipv6 number 2001 [Sysname-acl6-basic-2001] rule permit source 2000::1 128 [Sysname-acl6-basic-2001] quit [Sysname] telnet server ipv6 acl ipv6 2001 telnet server ipv6 dscp Use telnet server ipv6 dscp to specify the DSCP value for IPv6 to use for Telnet packets sent to a Telnet client.
Page 53: User-Interface
Default The terminal display type is ANSI. Views User line view, user line class view Predefined user roles network-admin mdc-admin Parameters ansi: Specifies the terminal display type ANSI. vt100: Specifies the terminal display type VT100. Usage guidelines The device supports two terminal display types: ANSI and VT100. As a best practice, set the display type to VT100 on both the device and the configuration terminal.
Page 54: User-Interface Class
last-number2: Specifies the relative number of the last user line. This number cannot be smaller than first-number2. Usage guidelines To configure settings for a single user line, use this command to enter the user line view. To configure the same settings for multiple user lines, use this command to enter multiple user line views.
Page 55: User-Role
• A setting in user line view takes effect immediately and affects the online user. A setting in user line class view does not affect online users and takes effect only for users who log in after the configuration is completed. This command is an older version of the line class command.
Page 56 Default An AUX line user is assigned the user role network-admin. Users of other user lines are assigned the user role network-operator. Views User line view, user line class view Predefined user roles network-admin mdc-admin Parameters role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role can be user-defined or predefined (network-admin, network-operator, or level-0 to level-15).
Page 57: Rbac Commands
RBAC commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. description Use description to configure a description for a user role.
Page 58 mdc-admin mdc-operator Parameters name role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. If you do not specify a user role name, the command displays information about all user roles, including the predefined user roles. Examples # Display information about user role 123.
Page 59: Display Role Feature
Field Description user role to access all interfaces. Permitted interfaces Interfaces accessible to the user role. VPN instance policy of the user role: • deny—Denies access to all VPN instances except permitted VPN instance policy VPN instances. • permit (default)—Default VPN instance policy, which enables the user role to access all VPN instances.
Page 60 Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters name feature-name: Displays the commands of a feature. The feature-name argument specifies the feature name, and all letters must be in lower case. verbose: Displays the commands of each feature. Usage guidelines If you specify neither name feature-name nor verbose, the display role feature command displays only the list of features available in the system.
Page 61 reset saved-configuration * startup saved-configuration * display transceiver * bootrom * bootrom-access * system-view ; temperature-limit * system-view ; sysname * system-view ; clock timezone * system-view ; clock summer-time * system-view ; configuration replace file * system-view ; transceiver * system-view ;...
Page 62 system-view ; domain * system-view ; header * system-view ; aaa * display domain * system-view ; user-group * system-view ; local-user * display local-user * display user-group * display debugging local-server debugging local-server * super * display password-control * reset password-control * system-view ;...
Page 63: Display Role Feature-Group
display role feature-group Use display role feature-group to display feature group information. Syntax display role feature-group [ name feature-group-name ] [ verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters name feature-group-name: Specifies a feature group. The feature-group-name argument represents the feature group name, a case-sensitive string of 1 to 31 characters.
Page 64: Interface Policy Deny
undo feature feature-name Default A user-defined feature group does not have any features. Views Feature group view Predefined user roles network-admin mdc-admin Parameters feature-name: Specifies a feature name. You must enter the feature name as the feature name is displayed, including the case. Usage guidelines Repeat the feature command to add multiple features to a feature group.
Page 65: Permit Interface
Use permit interface to specify accessible interfaces. NOTE: The interface policy deny command denies the access of the user role to all interfaces if the permit interface command is not configured. To configure an interface, make sure the interface is permitted by the user role interface policy in use. You can perform the following tasks on an accessible interface: •...
Page 66 mdc-admin Parameters interface interface-list: Specifies a space-separated list of up to 10 interface items. Each interface item specifies one interface in the interface-type interface-number form or a range of interfaces in the interface-type interface-number to interface-type interface-number form. If you specify an interface range, the end interface must meet the following requirements: •...
Page 67: Permit Vlan
[Sysname] interface fortygige 1/0/2 Permission denied. Related commands display role interface policy deny role permit vlan Use permit vlan to configure a list of VLANs accessible to a user role. Use undo permit vlan to remove the permission for a user role to access specific VLANs. Syntax permit vlan vlan-id-list undo permit vlan [ vlan-id-list ]...
Page 68: Permit Vpn-Instance
[Sysname-role-role1] rule 2 permit command system-view ; vlan * # Permit the user role to access VLANs 2, 4, and 50 to 100. [Sysname-role-role1] vlan policy deny [Sysname-role-role1-vlanpolicy] permit vlan 2 4 50 to 100 [Sysname-role-role1-vlanpolicy] quit [Sysname-role-role1] quit Verify that you cannot use the user role to work on any VLANs except VLANs 2, 4, and 50 to 100: # Verify that you can create VLAN 100 and enter the VLAN view.
Page 69: Role
policy. With the user role, you can perform the following tasks on the VPN instances in the permitted VPN instance list: • Create, remove, or configure the VPN instances. • Enter the VPN instance views. • Specify the VPN instances in feature commands. You can repeat the permit vpn-instance command to add permitted MPLS L3VPN instances to a user role VPN instance policy.
Page 70: Role Default-Role Enable
Syntax role name role-name undo role name role-name Default The system has the following predefined user roles: network-admin, network-operator, mdc-admin, mdc-operator, and level-n (where n represents an integer in the range of 0 to 15). Views System view Predefined user roles network-admin mdc-admin Parameters...
Page 71: Role Feature-Group
Default The default user role feature is disabled. AAA users who do not have a user role cannot log in to the device. Views System view Predefined user roles network-admin mdc-admin Parameters role-name: Specifies a user role by its name for the default user role. The user role must already exist.
Page 72: Rule
Parameters name feature-group-name: Specifies a feature group name. The feature-group-name argument is a case-sensitive string of 1 to 31 characters. Usage guidelines The L2 feature group includes all Layer 2 feature commands, and the L3 feature group includes all Layer 3 feature commands. These predefined feature groups are not user configurable. In addition to the predefined feature groups L2 and L3, you can create a maximum of 64 user role feature groups.
Page 73 command command-string: Specifies a command string. The command-string argument is a case-sensitive string of 1 to 128 characters, including the following characters: • The wildcard asterisk (*). • The delimiters space and tab. • All printable characters. execute: Specifies the execute commands, XML elements, or MIB nodes. An execute command (for example, ping), XML element, or MIB node executes a specific function or program.
Page 74 • If a predefined user role rule and a user-defined user role rule conflict, the user-defined user role rule takes effect. The following guidelines apply to OID rules: • The system compares an OID with the OIDs specified in rules, and it uses the longest match principle to select a rule for the OID.
Page 75 Rule Guidelines any printable characters behind the asterisk. For example, the "system ; *" command string represents all commands available in system view and all subviews of the system view. The "debugging * event" command string represents all event debugging commands available in user view.
Page 76: Super
Related commands display role display role feature display role feature-group role super Use super to obtain another user role without reconnecting to the device. Syntax super [ rolename ] Views User view Predefined user roles network-admin mdc-admin Parameters rolename: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system.
Page 77: Super Authentication-Mode
super authentication-mode Use super authentication-mode to set an authentication mode for temporary user role authorization. Use undo super authentication-mode to restore the default. Syntax super authentication-mode { local | scheme } * undo super authentication-mode Default Local password authentication applies. Views System view Predefined user roles...
Page 78: Super Default Role
super default role Use super default role to specify the default target user role for temporary user role authorization. Use undo super default role to restore the default. Syntax super default role rolename undo super default role Default If you log in to the default MDC, the default target user role is network-admin. If you log in to a non-default MDC, the default target user role is mdc-admin.
Page 79: Vlan Policy Deny
Default No password is set for a user role. Views System view Predefined user roles network-admin mdc-admin Parameters role rolename: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system. If you do not specify a user role, the command sets a password for the default target user role.
Page 80 Syntax vlan policy deny undo vlan policy deny Default A user role has access to all VLANs. Views User role view Predefined user roles network-admin mdc-admin Usage guidelines To restrict the VLAN access of a user role to a set of VLANs, perform the following tasks: Use vlan policy deny to enter user role VLAN policy view.
Page 81: Vpn-Instance Policy Deny
vpn-instance policy deny Use vpn-instance policy deny to enter user role VPN instance policy view. Use undo vpn-instance policy deny to restore the default user role VPN instance policy. Syntax vpn-instance policy deny undo vpn-instance policy deny Default A user role has access to all VPN instances. Views User role view Predefined user roles...
Page 82 Related commands display role permit vpn-instance role...
Page 83: Ftp Commands
FTP commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. FTP is not supported in FIPS mode. FTP server commands display ftp-server Use display ftp-server to display FTP server configuration and status information.
Page 84: Free Ftp User
Syntax display ftp-user Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display detailed information about logged-in FTP users. <Sysname> display ftp-user UserName HostIP Port HomeDir root 192.168.20.184 46539 flash: If a username exceeds 10 characters, a host IP address exceeds 15 bits, or a directory name exceeds 37 bits, the exceeded part is displayed in the next line and right justified, as shown below.
Page 85: Free Ftp User-Ip
mdc-admin Parameters username: Specifies a username. You can use the display ftp-user command to display FTP user information. Examples # Release the FTP connections established by using the user account ftpuser. <Sysname> free ftp user ftpuser Are you sure to free FTP connection? [Y/N]:y <Sysname>...
Page 86: Ftp Server Acl
Parameters ipv6-address: Specifies the source IPv6 address of an FTP connection. To view the source IPv6 addresses of FTP connections, execute the display ftp-user command. port port: Specifies the source port of an FTP connection. To view the source ports of FTP connections, execute the display ftp-user command.
Page 87: Ftp Server Dscp
ftp server dscp Use ftp server dscp to set the DSCP value for IPv4 to use for outgoing FTP packets on an FTP server. Use undo ftp server dscp to restore the default. Syntax ftp server dscp dscp-value undo ftp server dscp Default IPv4 uses the DSCP value 0 for outgoing FTP packets on an FTP server.
Page 88: Ftp Server Ipv6 Dscp
Examples # Enable the FTP server. <Sysname> system-view [Sysname] ftp server enable ftp server ipv6 dscp Use ftp server ipv6 dscp to set the DSCP value for IPv6 to use for FTP packets sent to an FTP client. Use undo ftp server ipv6 dscp to restore the default. Syntax ftp server ipv6 dscp dscp-value undo ftp server ipv6 dscp...
Page 89: Ftp Client Commands
Predefined user roles network-admin mdc-admin Parameters minute: Specifies an idle-timeout interval in the range of 1 to 35791 minutes. Usage guidelines If no data transfer occurs on an FTP connection within the idle-timeout interval, the FTP server closes the FTP connection to release resources. Examples # Set the FTP connection idle-timeout timer to 36 minutes.
Page 90: Ascii
receive in IMAGE / Binary mode 226 Transfer finished successfully. 4987 bytes sent in 0.00104 seconds (4.56 Mbyte/s) ascii Use ascii to set the file transfer mode to ASCII. Syntax ascii Default The file transfer mode is binary. Views FTP client view Predefined user roles network-admin mdc-admin...
Page 91: Bye
mdc-admin Usage guidelines You can perform this operation only after you log in to the FTP server. The carriage return characters vary with operating systems. For example, Hewlett Packard Enterprise and Windows use /r/n, and Linux uses /n. To transfer files between two systems that use different carriage return characters, determine FTP transfer mode according to the file type.
Page 92: Cdup
Views FTP client view Predefined user roles network-admin mdc-admin Parameters directory: Specifies the name of the target directory in the format [drive:][/]path, where drive represents the storage medium name, typically flash or cf. If the target directory does not exist, the cd command does not change the current working directory.
Page 93: Close
Views FTP client view Predefined user roles network-admin mdc-admin Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Change the working directory to the upper directory. ftp> pwd 257 "C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\desk\125X" is current directory ftp>...
Page 94: Debug
debug Use debug to enable or disable FTP client debugging. Syntax debug Default FTP client debugging is disabled. Views FTP client view Predefined user roles network-admin mdc-admin Usage guidelines When FTP client debugging is enabled, executing this command disables FTP client debugging. When FTP client debugging is disabled, executing this command enables FTP client debugging.
Page 95: Dir
Use dir to display detailed information about the files and subdirectories in the current directory on the FTP server. Use dir remotefile to display detailed information about a specific file or directory on the FTP server. Use dir remotefile localfile to save detailed information about a specific file or directory on the FTP server to a local file.
Page 96: Disconnect
<Sysname> more s.txt -rwxr-xr-x 1481 Jul 7 12:34 a.txt Related commands disconnect Use disconnect to terminate the connection to the FTP server without exiting FTP client view. Syntax disconnect Views FTP client view Predefined user roles network-admin mdc-admin Usage guidelines You can perform this operation only after you log in to the FTP server.
Page 97: Ftp
Use ftp to log in to an FTP server and enter FTP client view. Syntax ftp [ ftp-server [ service-port ] [ vpn-instance vpn-instance-name ] [ dscp dscp-value | source { interface interface-type interface-number | ip source-ip-address } ] ] * Views User view Parameters...
Page 98: Ftp Client Ipv6 Source
200 Type is Image (Binary) ftp> ftp client ipv6 source Use ftp client ipv6 source to specify the source IPv6 address for FTP packets sent to an IPv6 FTP server. Use undo ftp client ipv6 source to restore the default. Syntax ftp client ipv6 source { interface interface-type interface-number | ipv6 source-ipv6-address } undo ftp client ipv6 source...
Page 99: Ftp Ipv6
Syntax ftp client source { interface interface-type interface-number | ip source-ip-address } undo ftp client source Default No source IPv4 address is configured for outgoing FTP packets. The device uses the primary IPv4 address of the output interface for the route to the server as the source IP address. Views System view Predefined user roles...
Page 100: Get
Parameters ftp-server: Specifies the IPv6 address or host name of an FTP server. A host name can be a case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits, hyphens (-), underscores (_), and dots (.). service-port: Specifies the TCP port number of the FTP server, in the range of 0 to 65535.
Page 101: Help
Views FTP client view Predefined user roles network-admin mdc-admin Parameters remotefile: Specifies the name of the file to be downloaded. localfile: Specifies a name for the downloaded file. Usage guidelines You can perform this operation only after you log in to the FTP server. To save the downloaded file to the working directory accessed by the ftp command, the localfile argument must specify a file name such as a.cfg.
Page 102: Lcd
Use help command-name to display the help information of a specific command. Syntax help [ command-name ] Views FTP client view Predefined user roles network-admin mdc-admin Parameters command-name: Specifies a command supported by the FTP client. Usage guidelines In FTP client view, executing the help command is the same as entering?. Examples # Display all commands supported by the FTP client.
Page 103 Parameters directory: Specifies a local directory of the FTP client. There must be a slash sign (/) before the name of the storage medium, for example, /flash:/logfile. /: Specifies the root directory of the FTP client. Examples # Display the local working directory. ftp>...
Page 104: Mkdir
-rwxrwxrwx 1 noone nogroup 1 Apr 8 15:20 4.txt drwxrwxrwx 1 noone nogroup 0 Mar 26 14:30 Compatiable drwxrwxrwx 1 noone nogroup 0 Mar 26 14:30 Incompatiable drwxrwxrwx 1 noone nogroup 0 Apr 1 15:34 aa 226 Transfer finished successfully 226 11 matches total Related commands mkdir...
Page 105: Open
localfile: Specifies the name of the local file to be updated. Usage guidelines You can perform this operation only after you log in to the FTP server. If the local file does not exist, this command downloads the file from the FTP server and saves it locally.
Page 106: Passive
331 Give me your password, please Password: 230 Logged in successfully Remote system type is MSDOS. ftp> passive Use passive to set the FTP operation mode to passive. Syntax passive Default The FTP operation mode is passive. Views FTP client view Predefined user roles network-admin mdc-admin...
Page 107: Pwd
Parameters localfile: Specifies the name of the local file to be uploaded. remotefile: Specifies the file name for saving the uploaded file on the FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server. To upload a file in the working directory accessed by the ftp command, the localfile argument must specify a file name such as a.cfg.
Page 108: Quit
Predefined user roles network-admin mdc-admin Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Display the currently accessed directory on the remote FTP server. ftp> cd subdir 250 "C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\desk\125X\subdir" is current directory ftp>...
Page 109: Rename
Parameters remotefile: Specifies the name of the file on the FTP server. localfile: Specifies the name of the local file. Usage guidelines You can perform this operation only after you log in to the FTP server. If a file download is not completed due to network problems or insufficient storage space, you can use the reget command to get the missing part of the file from the FTP server after you solve the problem.
Page 110: Reset
(to-name) b.txt 350 Enter the name to rename it to... 250 File renamed successfully • Method 3 ftp> rename a.txt b.txt 350 Enter the name to rename it to... 250 File renamed successfully reset Use reset to clear the reply information received from the FTP server in the buffer. Syntax reset Views...
Page 111: Rhelp
ftp> put h.c h.c local: h.c remote: h.c 350 Restart position accepted (2). 150 Ok to send data. 226 File receive OK. 80 bytes sent in 0.000445 seconds (175.6 kbyte/s) ftp> dir 150 Here comes the directory listing. -rw-r--r-- 82 Jul 18 02:58 h.c rhelp Use rhelp to display the FTP-related commands supported by the FTP server.
Page 112: Rmdir
Field Description SYST System parameters. TYPE Request type. Changes the current working directory. XCWD Extended command with the meaning of CWD. Prints the working directory. CDUP Changes the directory to the upper directory. XCUP Extended command with the meaning of CDUP. XPWD Extended command with the meaning of PWD.
Page 113: Rstatus
Predefined user roles network-admin mdc-admin Parameters directory: Specifies the name of a directory on the remote FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server. To perform this operation, you must have delete permission on the FTP server. Delete all files and subdirectories in a directory before you delete the directory.
Page 114 TYPE: ASCII No session bandwidth limit Session timeout in seconds is 300 Control connection is plain text Data connections will be plain text At session startup, client count was 1 vsFTPd 2.0.6 - secure, fast, stable 211 End of status Table 13 Command output Filed Description...
Page 115: Status
Field Description x—Execution permission. • Number of connections. Name of the file owner. Group number of the file owner. File size, in bytes. Jul 18 02:58 Date and time when the file was most recently modified. a.txt File name. 213 End of status End of the display of the file information.
Page 116: System
Field Description Ntrans: off Does not use the input-output transmission table. The file name does not use the input-to-output Nmap: off mapping template. Does not end with a pound sign (#) and uses "PORT" Hash mark printing: off; Use of PORT cmds: on data transmission.
Page 117: Verbose
Examples # After logging in to the FTP server, use the username ftp and password 123456 to re-log in to the FTP server (the output might vary by the FTP server): • Method 1 ftp> user ftp 123456 331 Password required for ftp. 230 User logged in.
Page 118: Related Commands
226 Transfer finished successfully. 6324 bytes received in 0.0104 seconds (594.7 kbyte/s)ftp> get a.cfg 2.cfg 227 Entering Passive Mode (192,168,1,58,68,14) 150-Accepted data connection 150 The computer is your friend. Trust the computer 226 File successfully transferred 3796 bytes received in 0.00762 seconds (486.5 kbyte/s) Use ? to display all commands supported by an FTP client.
Page 119: Tftp Commands
TFTP commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. TFTP is not supported in FIPS mode. tftp Use tftp to download a file from the TFTP server to the local device or upload a local file to the TFTP server in an IPv4 network.
Page 120: Tftp Client Ipv6 Source
• interface interface-type interface-number: Specifies an interface by its type and number. The primary IPv4 address of this interface will be used as the source IPv4 address for outgoing TFTP packets. Make sure the interface is up and has the primary IPv4 address configured. Otherwise, the transmission fails.
Page 121: Tftp Client Source
Default No source address is specified for TFTP packets sent to an IPv6 TFTP server. The device selects a source IPv6 address as defined in RFC 3484. Views System view Predefined user roles network-admin mdc-admin Parameters interface interface-type interface-number: Specifies an interface by its type and number. The device will use the interface's IPv6 address as the source address.
Page 122: Tftp Ipv6
Parameters interface interface-type interface-number: Specifies the source interface for establishing TFTP connections. The primary IPv4 address of the source interface is used as the source IPv4 address for packets sent to a TFTP server. Make sure the interface is up and has the primary IPv4 address configured.
Page 123: Tftp-Server Acl
sget: Downloads a file and saves the file to memory before writing it to the destination folder. The system starts to write the file to the destination folder only after the file is downloaded and saved to memory successfully. If the destination folder already has a file using the same name, the system overwrites the existing file.
Page 124: Tftp-Server Ipv6 Acl
Views System view Predefined user roles network-admin mdc-admin Parameters acl-number: Specifies the number of a basic ACL, in the range of 2000 to 2999. Usage guidelines You can use an ACL to deny or permit the device's access to specific TFTP servers. Examples # Allow the device to access only the TFTP server at 1.1.1.1.
Page 125 [Sysname-acl6-basic-2001] quit [Sysname] tftp-server ipv6 acl 2001...
Page 126: File System Management Commands
File system management commands IMPORTANT: • Before managing storage media, files, and directories, make sure you know the possible impacts. • A file or directory whose name starts with a period (.) is considered a hidden file or directory. Do not give a common file or directory a name that starts with a period.
Page 127: Copy
# In standalone mode, change back to the root directory of the MPU. <Sysname> cd flash:/ # In IRF mode, change to the Flash root directory of the global standby MPU that resides in member device 2. <Sysname> cd chassis2#slot0#flash:/ # In IRF mode, change back to the Flash root directory of the global active MPU.
Page 128: Delete
Location Name format Remarks server number]/file path[/file name]. the URL tftp://1.1.1.1/startup.cfg. Examples # Copy the test.cfg file in the current folder and save it to the current folder as testbackup.cfg. <Sysname> copy test.cfg testbackup.cfg Copy flash:/test.cfg to flash:/testbackup.cfg?[Y/N]:y Copying file flash:/test.cfg to flash:/testbackup.cfg...Done. # Copy 1.cfg from the Flash's test folder to the USB disk's first partition, and save it to the testbackup folder as 1backup.cfg.
Page 129 Syntax delete [ /unreserved ] file-url Views User view Predefined user roles network-admin mdc-admin Parameters /unreserved: Permanently deletes the specified file. If you do not specify this keyword, the command moves the file to the recycle bin. file-url: Specifies the name of the file to be deleted. Asterisks (*) are acceptable as wildcards. For example, to remove files with the .txt extension in the current directory, enter delete *.txt.
Page 130: Dir
• Method 1 <Sysname> delete chassis2#slot0#flash:/1.cfg Delete chassis2#slot0#flash:/1.cfg?[Y/N]:y Deleting file chassis2#slot0#flash:/1.cfg...Done. • Method 2 <Sysname> cd chassis2#slot0#flash:/ <Sysname> delete 1.cfg Delete chassis2#slot0#flash:/1.cfg?[Y/N]:y Deleting file chassis2#slot0#flash:/1.cfg...Done. Related commands reset recycle-bin undelete Use dir to display files or folders. Syntax dir [ /all ] [ file-url | /all-filesystems ] Views User view Predefined user roles...
Page 131: Fdisk
Directory of flash:/ Directory of usb0:/ # In IRF mode, display information about all files and folders in the storage media of the master. <Sysname> dir /all Directory of flash:/ # In IRF mode, display files and folders in the root directory of every storage medium in the IRF fabric.
Page 132 Syntax fdisk medium-name [ partition-number ] Views User view Predefined user roles network-admin mdc-admin Parameters medium-name: Specifies the name of the storage medium to be partitioned. partition-number: Specifies the number of partitions, in the range of 1 to 4. Usage guidelines The Flash cannot be partitioned.
Page 133: File Prompt
# Divide the USB disk on the device into three partitions and specify the size for each partition: <Sysname> fdisk usb: The capacity of usb: : 256M bytes Partition 1 (32MB~224MB, 256MB, Press CTRL+C to quit or Enter to use all available space):128 // Enter 128 to set the size of the first partition to 128 MB.
Page 134: Fixdisk
Parameters alert: Prompts for confirmation when a destructive file or folder operation is being performed. quiet: Gives no confirmation prompt for file or folder operations. Usage guidelines In quiet mode, the system does not prompt for confirmation when a user performs a file or folder operation.
Page 135: Gunzip
Predefined user roles network-admin mdc-admin Parameters medium-name: Specifies the name of a storage medium. Usage guidelines Formatting a storage medium permanently deletes all files on the storage medium. If a startup configuration file exists on the storage medium, back it up if necessary. To format a partitioned storage medium, you must format the partitions individually.
Page 136: Gzip
472972 KB total (472840 KB free) Decompress the file system.bin.gz. <Sysname> gunzip system.bin.gz Decompressing file system.bin.gz... Done. Verify the decompress operation. <Sysname> dir system.* Directory of flash: 1 -rw- 0 May 30 2012 11:42:25 system.bin 472972 KB total (472844 KB free) gzip Use gzip to compress a file.
Page 137: Mkdir
Syntax md5sum file-url Views User view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters file-url: Specifies the name of a file. Usage guidelines The digest can be used to verify the integrity of the file. For example, you can use this command to calculate the digest of a software image file and compare it with that provided on the Hewlett Packard Enterprise website to identify whether the file has been tampered with.
Page 138: More
<Sysname> mkdir test Creating directory flash:/test... Done. # Create the test/subtest folder in the current directory. <Sysname> mkdir test/subtest Creating directory flash:/test/subtest... Done. # In standalone mode, create the test folder. <Sysname> mkdir test Creating directory flash:/test... Done. # In IRF mode, create the test folder on the master. <Sysname>...
Page 139: Mount
version 7.1.045, Ess 2106 sysname Sysname telnet server enable ---- More ---- # In IRF mode, display the contents of the testcfg.cfg file on the master. <Sysname> more testcfg.cfg version 7.1.045, Ess 2106 sysname Sysname telnet server enable ---- More ---- # In IRF mode, display the contents of the testcfg.cfg file on the global standby MPU that resides in member device 2.
Page 140: Move
Usage guidelines To avoid file system corruption, do not install or remove storage media while the system is mounting a storage medium. To mount a partitioned storage medium, you must mount all the partitions individually, instead of mounting the storage medium as a whole. Examples # In standalone mode, mount a USB disk.
Page 141: Pwd
Use pwd to display the current working directory. Syntax Views User view Predefined user roles network-admin mdc-admin Examples # Display the current working directory. <Sysname> pwd flash: rename Use rename to rename a file or folder. Syntax rename fileurl-source fileurl-dest Views User view Predefined user roles...
Page 142: Rmdir
Views User view Predefined user roles network-admin mdc-admin Parameters /force: Deletes all files in the recycle bin without prompting for confirmation. If you do not specify this option, the command prompts you to confirm the deletion. Usage guidelines The delete file-url command only moves a file to the recycle bin. To permanently delete the file, use the reset recycle-bin command to clear the recycle bin.
Page 143: Sha256Sum
Usage guidelines To remove a directory, you must delete all files and subfolders in the directory permanently or move them to the recycle bin. If you move them to the recycle bin, executing the rmdir command permanently deletes them. Examples # Remove the subtest folder.
Page 144: Tar Extract
Predefined user roles network-admin mdc-admin Parameters gz: Uses gzip to compress the files and folders before archiving them. archive-file fileurl-dest: Specifies the archive file name. If you specified the gz keyword, the suffix of this argument must be .tar.gz. If you did not specify the gz keyword, the suffix of this argument must be .tar.
Page 145: Tar List
to directory-name: Saves the extracted files and folders to a path. Usage guidelines If you do not specify the screen keyword or the to directory-name option, the command extracts the archived files and folders and saves them to the same folder as the archive file. Examples # Extract files and folders, and save them to the same folder as the archive file.
Page 146: Umount
Related commands tar create tar extract umount Use umount to unmount a hot swappable storage medium. Syntax umount medium-name Default A storage medium is automatically mounted and placed in mounted state. Views User view Predefined user roles network-admin mdc-admin Parameters medium-name: Specifies the name of a storage medium.
Page 147 Syntax undelete file-url Views User view Predefined user roles network-admin mdc-admin Parameters file-url: Specifies the name of the file to be restored. Usage guidelines If another file that has the same name exists in the directory, the system prompts you about whether to overwrite the existing file.
Page 148: Configuration File Management Commands
Configuration file management commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. Unless otherwise stated, the term "MPU"...
Page 149: Configuration Commit Delay
Views System view Predefined user roles network-admin mdc-admin Usage guidelines You must execute the configuration commit delay command before executing this command. As a best practice, enable the information center and configure the information center to output logs to the console. Determine whether to commit the settings depending on the logs. For more information about the information center, see Network Management and Monitoring Configuration Guide.
Page 150: Configuration Encrypt
As a best practice, set the allowed delay time in the following situations: • The user configures the device remotely. The user might be disconnected from the device because of a setting. If the configuration commit delay command is configured and the setting is not committed, the user can reconnect to the device after the delay time expires.
Page 151: Display Current-Configuration
Usage guidelines Configuration encryption enables the device to automatically encrypt a configuration file when saving the running configuration to the file. Only HPE devices running Comware V7 software can decrypt the encrypted configuration file. Examples # Enable the public-key method for configuration encryption. <Sysname>...
Page 152: Display Current-Configuration Diff
authorization-attribute user-role network-admin authorization-attribute user-role network-operator return # Display Ethernet interface configuration. <Sysname> display current-configuration interface fortygige 1/0/1 interface FortyGigE1/0/1 port link-mode route return display current-configuration diff Use display current-configuration diff to display the configuration differences between the running configuration and the next-startup configuration file. Syntax display current-configuration diff Views...
Page 153: Display Default-Configuration
telnet server enable Table 18 Command output Field Description • A displays the source configuration for comparison, which can be Startup configuration, Current configuration, or the name of the - - - A source configuration file with its directory information. •...
Page 154: Display Diff
<Sysname> display default-configuration display diff Use display diff to display the configuration differences between two configuration files or between a configuration file and the running configuration. Syntax display diff configfile file-name-s { configfile file-name-d | current-configuration | startup-configuration } display diff current-configuration { configfile file-name-d | startup-configuration } display diff startup-configuration { configfile file-name-d | current-configuration } Views Any view...
Page 155: Display Saved-Configuration
- sysname test + sysname test1 telnet server enable # Display the configuration differences between test.cfg and testsys.cfg on the master and subordinate devices in an HPE 7904/HPE 7904 TAA IRF fabric. <Sysname> display diff configfile chassis1#slot0#flash:/test.cfg configfile chassis2#slot0#flash:/testsys.cfg --- flash:/test.cfg +++ chassis2#slot0#flash:/testsys.cfg @@ -6,7 +6,7 @@ stp global enable...
Page 156: Display Startup
Syntax display saved-configuration Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Usage guidelines Use this command to verify that important settings have been saved to the configuration file for the next system startup. This command selects the configuration file to display in the following order: If the main startup configuration file is available, this command displays the contents of the main startup configuration file.
Page 157 Predefined user roles network-admin network-operator mdc-admin mdc-operator Usage guidelines Current startup configuration file is the configuration file that has been loaded. Next-startup configuration file is the configuration file used at the next startup. In standalone mode on an HPE 7910/HPE 7910 TAA switch, the standby MPU always uses the same current startup configuration file as the active MPU.
Page 158: Display This
Chassis 2 Slot 11: Current startup saved-configuration file: NULL Next main startup saved-configuration file: flash:/startup.cfg Next backup startup saved-configuration file: flash:/startup2.cfg Table 20 Command output Field Description Displays the startup configuration files on the global active MainBoard MPU. Configuration file that the global active MPU has started up Current startup saved-configuration file with.
Page 159: Reset Saved-Configuration
[Sysname] interface fortygige 1/0/1 [Sysname-FortyGigE1/0/1] display this interface FortyGigE1/0/1 port link-mode route return # Display the running configuration on user lines. <Sysname> system-view [Sysname] line vty 0 [Sysname-line-vty0] display this line aux 0 user-role network-admin line vty 0 63 authentication-mode none user-role network-admin user-role network-operator return...
Page 160: Restore Startup-Configuration
For example, if the reset saved-configuration backup command is executed, the backup next-startup configuration file setting is set to NULL, but the file is still used as the main file. To delete the file, you must also execute the reset saved-configuration main command. If no configuration file attribute is specified, the reset saved-configuration command deletes the main next-startup configuration file.
Page 161: Save
src-filename: Specifies the file name of the configuration file to be downloaded. Usage guidelines This command is not supported in FIPS mode. Before restoring the configuration file for the next startup, make sure the following requirements are met: • The server is reachable. •...
Page 162 Use save [ safely ] [ backup | main ] [ force ] to save the running configuration to a file in the root directory of the default storage medium. This command applies to each MPU in the IRF fabric. It specifies the file as a next-startup configuration file at the same time.
Page 163 the system automatically aborts the operation. If you enter Y within the time limit, you can continue the save process and change the next-startup configuration file during this process. Usage guidelines If the file specified for the command does not exist, the system creates the file before saving the configuration.
Page 164: Startup Saved-Configuration
Validating file. Please wait... Saved the current configuration to mainboard device successfully. Chassis 1 Slot 11: Save next configuration file successfully. Related commands • display current-configuration • display saved-configuration startup saved-configuration In standalone mode: Use startup saved-configuration to specify a file as a next-startup configuration file. For an HPE 7910/HPE 7910 TAA switch, this command applies to both the active and standby MPUs.
Page 165 The startup saved-configuration command applies to each MPU. To successfully configure the command, follow these guidelines: • Make sure the specified configuration file is valid and saved to the root directory of the default storage medium on each MPU. • Make sure all MPUs use the same type of storage medium as the default storage medium.
Page 166: Software Upgrade Commands
Software upgrade commands The HPE 7904/HPE 7904 TAA switch uses one built-in MPU (slot 0) and the HPE 7910/HPE 7910 TAA switch uses two removable switching fabric modules (slots 10 and 11) for switching and control. Unless otherwise stated, the term "MPU" collectively refers to the switching fabric modules on the HPE 7910/HPE 7910 TAA switch and the built-in MPU on the HPE 7904/HPE 7904 TAA switch.
Page 167 slot slot-number: Specifies the slot number of the MPU for which the startup images are specified. (In standalone mode.) chassis chassis-number slot slot-number: Specifies the MPU for which the startup images are specified in the IRF fabric. The chassis-number argument represents the IRF member ID of the device that holds the card, and the slot-number argument represents the slot number of the card.
Page 168: Boot-Loader Update
ssh.bin This command will set the backup startup software images. Continue? [Y/N]:Y Add images to target slot. flash:/boot.bin already exists on chassis 1 slot 10. flash:/system.bin already exists on chassis 1 slot 10. flash:/ssh.bin already exists on chassis 1 slot 10. Overwrite it? [Y/N]:y Decompressing file boot.bin to flash:/boot.bin........Done.
Page 169: Bootrom Backup
• The backup image list is used if the active MPU or global active MPU started up with the main startup images. The startup images synchronized to the standby MPU are set as main startup images, regardless of whether the source startup images are main or backup. To avoid problems, make sure the image list used for synchronization is the same as the current software images list.
Page 170: Bootrom Restore
mdc-admin Parameters slot slot-number-list: Specifies a space-separated list of up to seven slot number items. Each item specifies a card by its slot number or a range of cards in the form of start-slot-number to end-slot-number. For example, slot 0 to 1 2. (In standalone mode.) chassis chassis-number: Specifies an IRF member device by its member ID.
Page 171: Bootrom Update
slot slot-number-list: Specifies a space-separated list of up to seven slot number items. Each item specifies a card by its slot number or a range of cards in the form of start-slot-number to end-slot-number on the specified IRF member device. For example, slot 0 to 1 2. (In IRF mode.) Examples # In standalone mode, restore the entire BootWare image.
Page 172: Bootrom-Update Security-Check Enable
shorten the subsequent upgrade time, reducing the risk of upgrade failure caused by unexpected electricity failure. The BootWare image is contained in the Boot image file. To upgrade the BootWare image separately, use the Boot image file. Before specifying the BootWare upgrade file, you must save the upgrade file to the device. •...
Page 173: Display Boot-Loader
Examples # Enable BootWare image validity check. <Sysname> system-view [Sysname] bootrom-update security-check enable display boot-loader Use display boot-loader to display current software images and startup software images. Syntax In standalone mode: display boot-loader [ slot slot-number ] In IRF mode: display boot-loader [ chassis chassis-number [ slot slot-number ] ] Views Any view...
Page 174: Version Auto-Update Enable
Software images on chassis 0 slot 10: Current software images: flash:/7900-CMW710-BOOT.bin flash:/7900-CMW710-SYSTEM.bin Main startup software images: flash:/7900-CMW710-BOOT.bin flash:/7900-CMW710-SYSTEM.bin flash:/7900-CMW710-SSH.bin Backup startup software images: flash:/7900-CMW710-BOOT.bin flash:/7900-CMW710-SYSTEM.bin Table 21 Command output Field Description In standalone mode, this field displays the Comware images on Software images on slot slot-number the MPU in a specific slot.
Page 175: Version Check Ignore
To make sure the standby MPU always runs the same software images as the active MPU, configure both the version auto-update enable command and the undo version check ignore command. The startup software version check function examines the standby MPU's startup software images for version inconsistency with the active MPU's current software images at startup.
Page 176 Examples # Enable startup software version check for the standby MPU. <Sysname> system-view [Sysname] undo version check ignore Related commands version auto-update enable...
Page 177: Issu Commands
ISSU commands You can use ISSU to upgrade startup software images only for two-chassis IRF fabrics. When the master reboots for an upgrade, the subordinate member takes over to ensure service continuity. The HPE 7904/HPE 7904 TAA switch uses one built-in MPU (slot 0) and the HPE 7910/HPE 7910 TAA switch uses two removable switching fabric modules (slots 10 and 11) for switching and control.
Page 178 HP-US. • HPE. The Comware system can be upgraded from a version with the HP or Software image signature HP-US signature to a version with the HPE signature. To upgrade the Comware system from a version without a signature to a version with the HPE signature, you must first complete one of the following tasks: •...
Page 179: Display Install Committed
Related commands install active display install committed Use display install committed to display main startup software images. Syntax display install committed [ chassis chassis-number slot slot-number ] [ verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters chassis chassis-number slot slot-number: Specifies a card on an IRF member device.
Page 180: Display Install Ipe-Info
Product version: Beta 1330 Supported board: mr, lc, sfc Version type: debug [Component] Component: boot Description: boot package Software image signature: HP flash:/system-a0201.bin [Package] Vendor: HPE Product: xxxx Service name: system Platform version: 7.1 Product version: Beta 1330 Supported board: mr, lc, sfc...
Page 181: Display Install Package
<Sysname> display install ipe-info flash:/version.ipe Verifying the IPE file and the images.............Done. HPE xxx images in IPE: CMW710-BOOT.bin CMW710-SYSTEM.bin Software image signature: HP Related commands display install package display install package Use display install package to display software image information. Syntax...
Page 182: Display Issu Rollback-Timer
Service name: system Platform version: 7.1.022 Product version: Beta 1330 Supported board: mpu Version type: debug Software image signature: HP # Display detailed information about the software image system.bin. <Sysname> display install package flash:/system.bin verbose flash:/system.bin [Package] Vendor: HPE Product: xxxx Service name: system Platform version: 7.1.022...
Page 183: Display Issu State
Rollback time remaining : 40 minutes # Display automatic rollback timer information after the issu accept command is executed. <Sysname> display issu rollback-timer Rollback timer: Not working Rollback interval: 30 minutes # Display automatic rollback timer information when no ISSU is in progress. <Sysname>...
Page 184 Table 23 Command output Field Description ISSU status: Init—The ISSU process has not started or has finished. • Loading—The system is executing the issu load command. • • Loaded—The issu load command is completed. Switching—The system is executing the issu run switchover command. •...
Page 185: Display Version Comp-Matrix
display version comp-matrix Use display version comp-matrix to display version compatibility information. Syntax display version comp-matrix display version comp-matrix file { boot filename | system filename } * display version comp-matrix file ipe ipe-filename Views Any view Predefined user roles network-admin network-operator mdc-admin...
Page 186: Install Activate
7.1.045-2203 Version dependency boot list: 7.1.045 Chassis Slot Upgrade Way Reboot Reboot Table 24 Command output Field Description Verifying the file The system was verifying the validity of the file. • Under a system image, this field displays all system image versions that are compatible with the system image.
Page 187 Predefined user roles network-admin mdc-admin Parameters patch filename: Specifies a patch image file. The file must be saved in the root directory of a storage medium on an MPU. The filename argument can be a string in the slotn#storage medium:/filename.extension or chassismslotn#storage medium:/filename.extension format. The file extension can be .bin or .ipe.
Page 188: Install Add
install deactivate install add Use install add to decompress .bin images from an .ipe file. Syntax install add ipe-filename medium-name: Views User view Predefined user roles network-admin mdc-admin Parameters ipe-filename: Specifies an .ipe file. The file must be saved in the root directory of a storage medium in the IRF fabric.
Page 189: Install Deactivate
For software changes to survive a reboot, you must execute the install commit command after you execute the install deactivate command. The install activate command updates both the current software image list and the main startup software image list. You do not need to use the install commit command to commit the software changes.
Page 190: Issu Accept
To examine the synchronization progress, use the display device and display system internal ha service-group commands. The synchronization is completed if the following conditions are met: • All cards of the subordinate device are in normal state. • The Action field of the display system internal ha service-group command is 0 for each service. Examples # Deactivate the patch images in file patch.bin on the card in slot 10 of IRF member 1.
Page 191: Issu Load
mdc-admin Parameters chassis chassis-number: Specifies the member ID of the original master. Usage guidelines To verify that the ISSU upgrade is complete, execute the display issu state command. Make sure the ISSU state field displays Init. You cannot use the issu rollback command to roll back the software version after you execute the issu commit command.
Page 192 system: Specifies a system image file. filename: Specifies a .bin image file. The file must be saved in the root directory of a storage medium on the global active MPU. This argument can be a case insensitive string of up to 63 characters in the storage medium:/filename.bin format.
Page 193: Issu Rollback
Field Description Slot Slot number of the card. issu rollback Use issu rollback to cancel the ISSU and roll back to the original software version. Syntax issu rollback Views User view Predefined user roles network-admin mdc-admin Usage guidelines The device supports automatic rollback and manual rollback. You can use this command to perform a manual rollback while an ISSU is in one of the following states: •...
Page 194: Issu Run Switchover
Use undo issu rollback-timer to restore the default. Syntax issu rollback-timer minutes undo issu rollback-timer Default The automatic rollback timer is set to 45 minutes. Views System view Predefined user roles network-admin mdc-admin Parameters minutes: Specifies the automatic rollback interval, in the range of 0 to 120 minutes. Setting the interval to 0 disables automatic rollback.
Page 195 The issu load command separates the upgraded subordinate device from the existing IRF fabric to form a new IRF fabric. When you execute the issu run switchover command, the master in the old IRF fabric reboots to join the new IRF fabric as a subordinate member. Before you execute the issu run switchover command on the old master, make sure the new master has finished synchronizing its configuration and status data with the old master.
Page 196: Python Commands
Python commands exit() Use exit() to exit the Python shell. Syntax exit() Views Python shell Predefined user roles network-admin mdc-admin Usage guidelines To return to user view from the Python shell, you must use this command. You cannot use the quit command for the purpose.
Page 197: Python Filename
Examples # Enter the Python shell. <Sysname> python Python 2.7.3 (default, Sep 22 2014, 17:10:05) [GCC 4.4.1] on linux2 Type "help", "copyright", "credits" or "license" for more information. >>> >>> exit() <Sysname> python filename Use python filename to execute a Python script. Syntax python filename [ param ] Views...
Page 198: Device Management Commands
Device management commands The HPE 7904/HPE 7904 TAA switch uses one built-in MPU (slot 0) and the HPE 7910/HPE 7910 TAA switch uses two removable switching fabric modules (slots 10 and 11) for switching and control. Unless otherwise stated, the term "card" collectively refers to LPUs, switching fabric modules, and MPUs.
Page 199: Clock Protocol
clock summer-time clock timezone display clock clock protocol Use clock protocol to specify the system time source. Use undo clock protocol to restore the default. Syntax clock protocol { none | ntp mdc mdc-id } undo clock protocol Default The device uses the NTP time source specified on the default MDC. Views System view Predefined user roles...
Page 200: Clock Summer-Time
<Sysname> system-view [Sysname] clock protocol ntp clock summer-time Use clock summer-time to configure the device to use daylight saving time during a specific period of time. Use undo clock summer-time to cancel the configuration. Syntax clock summer-time name start-time start-date end-time end-date add-time undo clock summer-time Default Daylight saving time is disabled.
Page 201: Clock Timezone
week—Represents week of the month. It takes first, second, third, fourth, fifth, or last. day—Takes Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, or Saturday. add-time: Specifies the time to be added to the standard time, in the hh:mm:ss format. The hh value is in the range of 0 to 23, the mm value is in the range of 0 to 59, and the ss value is in the range of 0 to 59.
Page 202: Command
segment can be omitted. If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds segments are 0 (hh:00:00), you can omit both of the segments. For example, to specify 08:00:00, you can enter 8. Usage guidelines Correct system time is essential to network management and communication.
Page 203: Copyright-Info Enable
The system does not check the validity of the command argument. You must make sure the command is supported by the device, is input in the correct format, and uses valid values. Otherwise, the command cannot be executed automatically. Examples # Assign commands to the backupconfig job to back up configuration file startup.cfg to the TFTP server at 192.168.100.11.
Page 204: Diagnostic Start Test
* no decompiling or reverse-engineering shall be allowed. ****************************************************************************** User interface aux0 is available. Press ENTER to get started. # Disable copyright statement display. <Sysname> system-view [Sysname] undo copyright-info enable • When a Telnet user logs in, the user view prompt appears: <Sysname>...
Page 205: Display Alarm
===============system-view===================== System View: return to User View with Ctrl+Z. ===============undo stp enable===================== ===============probe-view===================== ===========undo monitor inner-channel================= display alarm Use display alarm to display alarm information. Syntax In standalone mode: display alarm [ slot slot-number ] In IRF mode: display alarm [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles...
Page 206: Display Clock
<Sysname> display alarm Chassis Slot Level Info ERROR Chassis 1 fan 1 is faulty INFO Chassis 1 power 6 is absent. ERROR Chassis 1 slot 11 temperature is too high, above the warning limit. ERROR Chassis 2 fan 1 is faulty INFO Chassis 2 power 6 is absent.
Page 207: Display Copyright
Related commands clock datetime clock summer-time clock timezone display copyright Use display copyright to display the copyright statement, including software and hardware copyright statements. Syntax display copyright Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display the copyright statement. <Sysname>...
Page 208 chassis chassis-number slot slot-number: Specifies a card on an IRF member device by its slot number and the member ID. If you do not specify this option, the command displays the CPU usage statistics for all cards in the IRF fabric. (In IRF mode.) cpu cpu-number: Displays the CPU usage statistics.
Page 209: Display Cpu-Usage Configuration
Field Description Slot x CPU y CPU usage Usage statistics for CPU y of the card in slot x. (In standalone mode.) Chassis x Slot y CPU z CPU Usage statistics for CPU z of the card in slot y on member device x. (In IRF usage mode.) display cpu-usage configuration...
Page 210 In IRF mode: display cpu-usage history [ job job-id ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters job job-id: Specifies a process by its ID. If you do not specify this option, the command displays the historical CPU usage statistics for the entire system, which is the sum of the historical CPU usage statistics for all processes in the system.
Page 211 60%| 55%| 50%| 45%| 40%| 35%| 30%| 25%| 20%| 15%| 10%| ######## ------------------------------------------------------------ (minutes) cpu-usage (Slot 1 CPU 0) last 60 minutes (SYSTEM) ---- More ---- The output shows the historical CPU usage statistics for the entire system (with the name SYSTEM) in the last 60 minutes: •...
Page 212: Display Device
------------------------------------------------------------ (minutes) cpu-usage (Slot 1 CPU 0) last 60 minutes (scmd) ---- More ---- The output shows the historical CPU usage statistics of process 1 (with the process name scmd) in the last 60 minutes. A process name with square brackets ([ ]) means that the process is a kernel process.
Page 213 LSV1QGS12SA1 Normal 7910-2150 None NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None LSVM1SRPC1 Master 7910-2150 None NONE Fault NONE...
Page 214: Display Device Manuinfo
NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None NONE Absent NONE None 2/10 LSVM1SRPC1 Standby 7910-2150 None 2/11 NONE Absent NONE None The output shows that the IRF fabric has two member devices. The card in slot 10 on member device 1 is the global active MPU.
Page 215 Parameters chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.) slot slot-number: Specifies a card by its slot number. Usage guidelines In standalone mode, the command displays electronic label information for all cards if you do not specify the slot slot-number option.
Page 216 Power 1 DEVICE_NAME : HPE FlexFabric 7900 1800w AC Power Supply Unit (JG840A) DEVICE_SERIAL_NUMBER : 210231A2KXH138000012 MAC_ADDRESS : NONE MANUFACTURING_DATE : 2015-08-23 VENDOR_NAME : HPE Power 2 DEVICE_NAME : HPE FlexFabric 7900 1800w AC Power Supply Unit (JG840A) DEVICE_SERIAL_NUMBER : 210231A2KXH138000012 MAC_ADDRESS : NONE MANUFACTURING_DATE...
Page 217: Display Device Manuinfo Fan
DEVICE_NAME : HPE FlexFabric 7900 1800w AC Power Supply Unit (JG840A) DEVICE_SERIAL_NUMBER : 210231A2KXH138000012 MAC_ADDRESS : NONE MANUFACTURING_DATE : 2015-08-23 VENDOR_NAME : HPE Power 2 DEVICE_NAME : HPE FlexFabric 7900 1800w AC Power Supply Unit (JG840A) DEVICE_SERIAL_NUMBER : 210231A2KXH138000012 MAC_ADDRESS : NONE MANUFACTURING_DATE : 2015-08-23...
Page 218: Display Device Manuinfo Power
DEVICE_NAME : HPE FlexFabric 7910 Back (Power side) to Front (Port side) Airflow Fan Tray(JG844A) DEVICE_SERIAL_NUMBER : 210231A2L1H138000011 MAC_ADDRESS : NONE MANUFACTURING_DATE : 2015-08-10 VENDOR_NAME : HPE display device manuinfo power Use display device manuinfo power to display the electronic label information of a power supply. Syntax In standalone mode: display device manuinfo power power-id...
Page 219: Display Diagnostic Content
display diagnostic content Use display diagnostic content to display global on-demand diagnostic test configuration. Syntax In standalone mode: display diagnostic content [ slot slot-number ] [ verbose ] In IRF mode: display diagnostic content [ chassis chassis-number [ slot slot-number ] ] [ verbose ] Views Any view Predefined user roles...
Page 220: Display Diagnostic-Information
PortMonitor **M*PA 00:00:10 ComponentMonitor **M*PA 00:00:30 HGMonitor **M*PI 00:00:10 # In IRF mode, display brief configuration information for global on-demand diagnostic tests on slot 4 of IRF member device 1. <sysname> display diagnostic content chassis 1 slot 4 Diagnostic test suite attributes: #B/*: Bootup test/NA #O/*: Ondemand test/NA #M/*: Monitoring test/NA...
Page 221: Display Environment
Parameters hardware: Displays hardware-related operating statistics. infrastructure: Displays operating statistics for the fundamental modules. l2: Displays operating statistics for the Layer 2 features. l3: Displays operating statistics for the Layer 3 features. service: Displays operating statistics for upper-layer features. filename: Specifies a .tar.gz file to save the statistics to the file. Usage guidelines For diagnostics or troubleshooting, you can use separate display commands to collect running status data module by module or use the display diagnostic-information command to bulk collect...
Page 222 Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.) slot slot-number: Specifies a card by its slot number. Usage guidelines In standalone mode, the command displays information about all temperature sensors on the device if you do not specify the slot slot-number option.
Page 223: Display Exception Filepath
hotspot 2 61 hotspot 3 57 hotspot 4 49 hotspot 1 34 hotspot 2 31 hotspot 3 44 hotspot 4 35 hotspot 5 53 hotspot 1 36 hotspot 2 61 hotspot 3 57 hotspot 4 49 Table 32 Command output Field Description Temperature...
Page 224: Display Fan
Examples # In standalone mode, display the directory for saving core files on the active MPU. <Sysname> display exception filepath The exception filepath on slot 0 is flash:. # In standalone mode, display the directory for saving core files on the standby MPU. <Sysname>...
Page 225: Display Memory
Normal 7285 Normal 7389 Normal 7242 Normal 7552 Fan-tray 2: Status : Absent display memory Use display memory to display memory usage. Syntax In standalone mode: display memory [ slot slot-number [ cpu cpu-number ] ] In IRF mode: display memory [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles...
Page 226 # In IRF mode, display memory usage. <Sysname> display memory The statistics about memory is measured in KB: Chassis 1 Slot 0: Total Used Free Shared Buffers Cached FreeRatio Mem: 3983116 1141416 2841700 346488 71.3% -/+ Buffers/Cache: 794860 3188256 Swap: Chassis 1 Slot 1: Total Used...
Page 227: Display Memory-Threshold
display memory-threshold Use display memory-threshold to display memory alarm thresholds and statistics. Syntax In standalone mode: display memory-threshold [ slot slot-number [ cpu cpu-number ] ] In IRF mode: display memory-threshold [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles...
Page 228: Display Power
First notification at: 0.0 Latest notification at: 0.0 Total number of notifications sent: 0 [Enter severe low-memory state] First notification at: 0.0 Latest notification at: 0.0 Total number of notifications sent: 0 [Back to severe low-memory state] First notification at: 0.0 Latest notification at: 0.0 Total number of notifications sent: 0 [Enter critical low-memory state]...
Page 229: Display Scheduler Job
display scheduler job Use display scheduler job to display job configuration information. Syntax display scheduler job [ job-name ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters job-name: Specifies a job by its name, a case-sensitive string of 1 to 47 characters. If you do not specify this option, the command displays the configuration information for all jobs.
Page 230: Display Scheduler Reboot
Examples # Display job execution log information. <Sysname> display scheduler logfile Logfile Size: 1902 Bytes. Job name : shutdown Schedule name : shutdown Execution time : Tue Dec 27 10:44:42 2015 Completion time : Tue Dec 27 10:44:47 2015 --------------------------------- Job output ----------------------------------- <Sysname>system-view System View: return to User View with Ctrl+Z.
Page 231: Display Scheduler Schedule
Related commands scheduler reboot at scheduler reboot delay display scheduler schedule Use display scheduler schedule to display schedule information. Syntax display scheduler schedule [ schedule-name ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters schedule-name: Specifies a schedule by its name, a case-sensitive string of 1 to 47 characters. If you do not specify this option, the command displays information about all schedules.
Page 232: Display System Stable State
Field Description Job name Name of a job under the schedule. Result of the most recent execution: • Successful. Failed. • Waiting—The device is executing the schedule and the job is waiting to be • Last execution executed. status In process—The job is being executed. •...
Page 233: Display System-Working-Mode
Table 36 Command output Field Description System status: • Stable—The system is operating stably. System state • Not ready—The system is not operating stably. You cannot perform an ISSU when the system is in this state. System redundancy status: • Stable—Both MPUs are operating stably.
Page 234: Display Transceiver Alarm
Examples # Display system working mode information. <Sysname> display system-working-mode The current system working mode is standard. The next system working mode is standard. display transceiver alarm Use display transceiver alarm to display transceiver alarms. Syntax display transceiver alarm interface [ interface-type interface-number ] Views Any view Predefined user roles...
Page 235: Display Transceiver Diagnosis
RX loss of signal(channel 4) RX power low(channel 1) RX power low(channel 2) RX power low(channel 3) RX power low(channel 4) Table 38 Command output Field Description transceiver current alarm information Alarms present on the transceiver module. RX loss of signal Received signals are lost.
Page 236: Display Transceiver Interface
Alarm thresholds: Temp.(°C) Voltage(V) Bias(mA) RX power(dBm) TX power(dBm) High 3.63 10.00 3.40 2.97 0.50 -13.51 Table 39 Command output Field Description transceiver diagnostic information Digital diagnosis information of the transceiver module in the interface. Temp.(°C) Temperature in °C, accurate to 1°C. Voltage(V) Voltage in V, accurate to 0.01 V.
Page 237: Display Transceiver Manuinfo
Field Description Transceiver Type Transceiver type. Connector type options: MPO—Multi-fiber Push On. • Connector Type RJ-45. • • Fiber transceiver—Central wavelength (in nm) of the transmit laser. If the transceiver supports multiple wavelengths, every two wavelength values are Wavelength(nm) separated by a comma. •...
Page 238: Display Version
FortyGigE1/0/1 transceiver manufacture information: Manu. Serial Number : 213410A0000054000251 Manufacturing Date : 2015-09-01 Vendor Name : HPE Table 41 Command output Field Description Manu. Serial Number Serial number generated during production of the transceiver module. Date when the electronic label information was written to the transceiver Manufacturing Date module.
Page 239: Exception Filepath
Usage guidelines The device records its current startup software version information and all subsequent version update information. Such information can survive reboots. A maximum of 10 records can be saved. Examples # Display the startup software image upgrade history records. <Sysname>...
Page 240: Header
If the specified directory is not accessible or is NULL, the system cannot save core files or the • diagnostic information collected by using the display diagnostic-information command. Examples # Specify the directory for saving core files as flash:. <Sysname> exception filepath flash: Related commands display exception filepath process core...
Page 241: Job
Please input banner content, and quit with the character '%'. Welcome to motd(header motd)% [Sysname] header shell Please input banner content, and quit with the character '%'. Welcome to shell(header shell)% In this example, the percentage sign (%) is the starting and ending character of the text argument. Entering the percentage sign after the text quits the header command.
Page 242: Memory-Threshold
Parameters job-name: Specifies the job name, a case-sensitive string of 1 to 47 characters. Usage guidelines You can assign multiple jobs to a schedule. The jobs in a schedule are executed concurrently. The jobs to be assigned to a schedule must already exist. To create a job, use the scheduler job command.
Page 243: Memory-Threshold Usage
severe severe-value: Specifies the severe alarm threshold in MB. This threshold must be equal to or less than the minor alarm threshold. Setting this threshold to 0 disables the severe alarm feature. critical critical-value: Specifies the critical alarm threshold in MB. This threshold must be equal to or less than the severe alarm threshold.
Page 244: Monitor Cpu-Usage Enable
Predefined user roles network-admin mdc-admin Parameters memory-threshold: Specifies the memory usage threshold in percentage. The value range is 0 to 100. slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command sets the memory usage threshold for the active MPU or switching fabric module. (In standalone mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device by its slot number and the member ID.
Page 245: Monitor Cpu-Usage Interval
Parameters slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command enables CPU usage monitoring on the active MPU or switching fabric module. (In standalone mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device by its slot number and the member ID.
Page 246: Monitor Cpu-Usage Threshold
cpu cpu-number: Specifies a CPU by its number. The cpu-number argument must be 0. Examples # Configure the interval at which the device samples CPU usage statistics as 5 seconds. <Sysname> system-view [Sysname] monitor cpu-usage interval 5Sec Related commands display cpu-usage display cpu-usage configuration display cpu-usage history monitor cpu-usage enable...
Page 247: Password-Recovery Enable
Usage guidelines The device samples CPU usage at an interval of 1 minute. If the sample is greater than the CPU usage threshold, the device sends a trap. Examples # Set the CPU usage threshold to 80%. <Sysname> system-view [Sysname] monitor cpu-usage threshold 80 Related commands display cpu-usage display cpu-usage configuration...
Page 248: Process Core
[Sysname] undo password-recovery enable process core Use process core to enable or disable the system to generate core files for crashes of a process and set the maximum number of core files. Syntax In standalone mode: process core { maxcore value | off } { job job-id | name process-name } [ slot slot-number [ cpu cpu-number ] ] In IRF mode: process core { maxcore value | off } { job job-id | name process-name } [ chassis chassis-number...
Page 249: Reboot
Examples # Disable core file generation for the process routed. <Sysname> process core off name routed # Enable core file generation for the process dbmd and set the maximum number of core files to 5. <Sysname> process core maxcore 5 name dbmd Related commands exception filepath reboot...
Page 250 To reboot the active MPU, perform the following tasks: − Identify whether the standby MPU is installed and operating correctly. − Use the display system stable state command to display system stability and status information. If the standby MPU is not installed, the entire device will be rebooted. If the standby MPU is installed and is operating correctly, a switchover will occur.
Page 251: Reset Scheduler Logfile
# If any configuration has changed, reboot the device but do not save the configuration. <Sysname> reboot Start to check configuration with next startup configuration file, please wait..DONE! Current configuration may be lost after the reboot, save current configuration? [Y/N]:n This command will reboot the device.
Page 252: Reset Version-Update-Record
Views User view Predefined user roles network-admin mdc-admin Examples # Clear job execution log information. <Sysname> reset scheduler logfile Related commands display scheduler logfile reset version-update-record Use reset version-update-record to clear the startup software image upgrade history records of the active MPU or switching fabric module.
Page 253: Scheduler Logfile Size
Views System view Predefined user roles network-admin mdc-admin Parameters job-name: Specifies the job name, a case-sensitive string of 1 to 47 characters. Usage guidelines A job can be referenced by multiple schedules. In job view, you can assign commands to the job. Examples # Create a job named backupconfig and enter job view.
Page 254: Scheduler Reboot At
Related commands display scheduler logfile scheduler reboot at Use scheduler reboot at to specify the reboot date and time. Use undo scheduler reboot to remove the reboot schedule configuration. Syntax scheduler reboot at time [ date ] undo scheduler reboot Default No reboot date or time is specified.
Page 255: Scheduler Reboot Delay
scheduler reboot delay Use scheduler reboot delay to specify the reboot delay time. Use undo scheduler reboot to remove the reboot schedule configuration. Syntax scheduler reboot delay time undo scheduler reboot Default No reboot delay time is specified. Views User view Predefined user roles network-admin mdc-admin...
Page 256: Shutdown-Interval
Views System view Predefined user roles network-admin mdc-admin Parameters schedule-name: Specifies the schedule name, a case-sensitive string of 1 to 47 characters. Usage guidelines You can schedule a job to have the device automatically run a command or a set of commands without administrative interference.
Page 257: Switch-Fabric Isolate
Parameters time: Specifies a detection timer (in seconds) in the range of 0 to 300. Setting it to 0 disables the detection feature. Usage guidelines The device starts a detection timer when a port is shut down by a protocol. If the port is still down when the detection timer expires, the device automatically brings up the port so the port status reflects the port's actual physical status.
Page 258: Sysname
Usage guidelines This command is supported only on an HPE 7910/HPE 7910 TAA switch. Isolating a switching fabric module or some of its channels reduces the forwarding bandwidth of the system. If the device has only one switching fabric module, isolating the module disables the device from forwarding traffic.
Page 259: System-Working-Mode
system-working-mode Use system-working-mode to set the system operating mode. Use undo system-working-mode to restore the default. Syntax system-working-mode { advance | bridgee | standard } undo system-working-mode Default The device operates in standard mode. Views System view Predefined user roles network-admin mdc-admin Parameters...
Page 260 Syntax In standalone mode: temperature-limit slot slot-number hotspot sensor-number lowlimit warninglimit [ alarmlimit ] undo temperature-limit slot slot-number hotspot sensor-number In IRF mode: temperature-limit chassis chassis-number { slot slot-number } hotspot sensor-number lowlimit warninglimit [ alarmlimit ] undo temperature-limit chassis chassis-number { slot slot-number } hotspot sensor-number Default To view the default settings, use the undo temperature-limit command to restore the defaults and then execute the display environment command.
Page 261: Time At
# In IRF mode, set the low-temperature threshold for hotspot sensor 1 on the card in slot 1 on IRF member device 1 to –10°C (14°F), the warning threshold to 70°C (158°F), and the alarming threshold to 90°C (194°F). <Sysname> system-view [sysname] temperature-limit chassis 1 slot 1 hotspot 1 -10 70 90 time at Use time at to specify an execution date and time for a non-periodic schedule.
Page 262 Syntax time once at time [ month-date month-day | week-day week-day&<1-7> ] time once delay time undo time Default No execution time or day is specified for a non-periodic schedule. Views Schedule view Predefined user roles network-admin mdc-admin Parameters at time: Specifies the execution time in the hh:mm format, where hh is in the range of 0 to 23, and mm is in the range of 0 to 59.
Page 263: Time Repeating
[Sysname-schedule-saveconfig] time once at 12:00 week-day mon fri # Configure the device to execute schedule saveconfig after 10 minutes. <Sysname> system-view [Sysname] scheduler schedule saveconfig [Sysname-schedule-saveconfig] time once delay 10 Related commands scheduler schedule time repeating Use time repeating to specify an execution time table for a periodic schedule. Use undo time to delete the execution time table configuration for a periodic schedule.
Page 264: User-Role
The time repeating at time [ month-date [ month-day | last ] | week-day week-day&<1-7> ] command configures the device to execute a schedule at the specified time on every specified day in a month or week. The time at command, the time once command, and the time repeating command overwrite one another, whichever is configured most recently takes effect.
Page 265 Parameters role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role can be user-defined or predefined. Predefined user roles include network-admin, mdc-admin, network-operator, mdc-operator, level-0 to level-15, and security-audit. Usage guidelines By assigning user roles to and removing user roles from a schedule, you can control the commands to be executed in the schedule.
Page 266: Mdc Commands
MDC commands The HPE 7904/HPE 7904 TAA switch uses one built-in MPU (slot 0) and the HPE 7910/HPE 7910 TAA switch uses two removable switching fabric modules (slots 10 and 11) for switching and control. Unless otherwise stated, the term "card" collectively refers to LPUs, switching fabric modules, and MPUs.
Page 267 administrators can access and manage their respective MDCs. The IP addresses for virtual management Ethernet interfaces do not need to belong to the same network segment. • The interface belongs to the default MDC. To assign a physical interface that belongs to one non-default MDC to another non-default MDC, you must remove the existing assignment by using the undo allocate interface command.
Page 268: Display Mdc
• Assigning an IRF physical interface to or reclaiming an IRF physical interface from an MDC causes the following problems: The IRF configuration on the interface is lost. The IRF link is closed. To avoid IRF fabric split, make sure each member device always has a minimum of one IRF link in up state.
Page 269: Display Mdc Interface
Field Description MDC. Related commands display mdc interface Use display mdc interface to display the interfaces of MDCs. Syntax display mdc [ name mdc-name ] interface Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters name mdc-name: Specifies an MDC by its name, a case-sensitive string of 1 to 15 characters. If you do not specify this option, the command displays the interfaces of all MDCs.
Page 270 In IRF mode: display mdc [ name mdc-name ] resource [ cpu | memory ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters name mdc-name: Specifies an MDC by its name, a case-sensitive string of 1 to 15 characters. If you do not specify this option, the command displays the usage of all MDCs.
Page 271 Slot 10 CPU 0: Name Weight Usage(%) Admin sub1 Slot 11 CPU 0: Name Weight Usage(%) Admin sub1 # In IRF mode, display the CPU and memory space usage of all MDCs on all cards in the IRF fabric. <Sysname> display mdc resource Memory usage: Chassis 1 slot 1 CPU 0: Used 17.7MB, Free 3309.5MB, Total 3327.3MB...
Page 272: Limit-Resource Cpu
Field Description CPU z (In IRF mode.) Weight CPU weight. Quota (MB) Maximum amount of memory space for the MDC, in MB. Available(MB) Available amount of memory space for the MDC, in MB. limit-resource cpu Use limit-resource cpu to specify a CPU weight for an MDC. Use undo limit-resource cpu to restore the default.
Page 273: Limit-Resource Memory
limit-resource memory Use limit-resource memory to specify a memory space percentage for an MDC. Use undo limit-resource memory to restore the default. Syntax In standalone mode: limit-resource memory slot slot-number [ cpu cpu-number ] ratio limit-ratio undo limit-resource memory slot slot-number [ cpu cpu-number ] In IRF mode: limit-resource memory chassis chassis-number slot slot-number [ cpu cpu-number ] ratio limit-ratio...
Page 274: Location
<Sysname> system-view [Sysname] mdc sub1 [Sysname-mdc-2-sub1] limit-resource memory chassis 2 slot 10 ratio 30 location Use location to authorize an MDC to use an LPU. Use undo location to reclaim the authorization. Syntax In standalone mode: location slot slot-number undo location slot slot-number In IRF mode: location chassis chassis-number slot slot-number undo location chassis chassis-number slot slot-number...
Page 275: Switchto Mdc
[Sysname-mdc-2-sub1] location slot 3 # In IRF mode, authorize MDC sub1 to use the LPU in slot 3 on IRF member device 2. <Sysname> system-view [Sysname] mdc Admin [Sysname-mdc-1-Admin] undo location chassis 2 slot 3 The configuration associated with the specified slot of MDC will be lost. Continue? [Y/N]:y [Sysname] mdc sub1 [Sysname-mdc-2-sub1] location chassis 2 slot 3 switchto mdc...
Page 276: Mdc
Use mdc to create an MDC and enter MDC view. If the MDC already exists, you enter the MDC view directly. Use undo mdc to delete an MDC. Syntax mdc mdc-name [ id mdc-id ] undo mdc mdc-name Default There is a default MDC with the name Admin and the ID 1. Views System view Predefined user roles...
Page 277: Mdc Commands For Non-Default Mdcs
Views MDC view Predefined user roles network-admin Usage guidelines After an MDC is started, administrators of the MDC can log in to the MDC for MDC configuration and maintenance. Stop an MDC with caution. Stopping an MDC interrupts all services on the MDC and logs out all login users on the MDC.
Page 278: Display Mdc Resource
Syntax display mdc interface Views Any view Predefined user roles mdc-admin mdc-operator Examples # Display the interfaces of the current MDC. <sub1> display mdc interface MDC a's interface(s): FortyGigE1/1/0/1 FortyGigE1/1/0/2 FortyGigE1/1/0/3 FortyGigE1/1/0/4 FortyGigE1/1/0/5 FortyGigE1/1/0/6 display mdc resource Use display mdc resource to display the CPU and memory usage of the current MDC. Syntax In standalone mode: display mdc resource [ cpu | memory ] [ slot slot-number [ cpu cpu-number ] ]...
Page 279: Switchback
Slot 10 CPU 0: Used 353.1MB, Free 7591.5MB, Total 7944.6MB Name Quota(MB) Used(MB) Available(MB) sub1 7944.6 48.9 7591.5 Slot 11 CPU 0: Used 259.1MB, Free 7685.5MB, Total 7944.6MB Name Quota(MB) Used(MB) Available(MB) sub1 7944.6 43.9 7685.5 CPU usage: Slot 10 CPU 0: Name Weight Usage(%)
Page 280 Usage guidelines You can use this command to return to the default MDC only after you use the switchto command to log in to a non-default MDC. If you log in to a non-default MDC by using any other method (such as Telnet), you cannot use this command to access the default MDC.
Page 281: Preprovisioning Commands
Preprovisioning commands chassis slot Use chassis slot to select a slot to provision and enter slot view on an IRF fabric. Syntax chassis chassis-number slot slot-number Views System view Predefined user roles network-admin mdc-admin Parameters chassis chassis-number slot slot-number: Specifies an interface card slot on an IRF member device. The chassis-number argument represents the member ID of the IRF member device.
Page 282: Provision
Use this command to verify the application result of preprovisioned commands except for the following commands: • duplex • location • speed • sflow To verify the application result of the listed commands, use the display current-configuration command. The display provision failed-config command might display incorrect application results for the listed commands.
Page 283: Slot
The device automatically creates interfaces when you enable preprovisioning for a module. The display interface command does not display these interfaces until the module comes online. When you disable preprovisioning for a slot, the device removes all preconfigured settings from the slot.
Page 284 Syntax reset provision failed-config Views User view Predefined user roles network-admin mdc-admin Usage guidelines Installing modules in preprovisioned slots might leave a number of application failure records. Use this command to release the space used by the records. Examples # Clear application failure records for preprovisioned commands. <Sysname>...
Page 285: Document Conventions And Icons
Document conventions and icons Conventions This section describes the conventions used in the documentation. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown.
Page 286: Network Topology Icons
Network topology icons Convention Description Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
Page 287: Support And Other Resources
Support and other resources Accessing Hewlett Packard Enterprise Support • For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website: www.hpe.com/assistance • To access documentation and support services, go to the Hewlett Packard Enterprise Support Center website: www.hpe.com/support/hpesc Information to collect •...
Page 288: Websites
Packard Enterprise Support Center. You must have an HP Passport set up with relevant entitlements. Websites Website Link Networking websites Hewlett Packard Enterprise Information Library for www.hpe.com/networking/resourcefinder Networking Hewlett Packard Enterprise Networking website www.hpe.com/info/networking Hewlett Packard Enterprise My Networking website www.hpe.com/networking/support...
Page 289: Documentation Feedback
For more information and device support details, go to the following website: www.hpe.com/info/insightremotesupport/docs Documentation feedback Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hpe.com).
Page 290: Index
Index A B C D E F G H I J L M N O P Q R S T U V W configuration commit delay,141 configuration encrypt,142 activation-key,13 copy,119 alias,1 copyright-info enable,195 allocate interface,258 Customer self repair,280 append,81 ascii,82 authentication-mode,14 databits,18 auto-execute...
Page 291 display device manuinfo power,210 display system stable state,224 display diagnostic content,211 display system-working-mode,225 display diagnostic-information,212 display telnet client,20 display diff,146 display this,150 display environment,213 display transceiver alarm,226 display exception filepath,215 display transceiver diagnosis,227 display fan,216 display transceiver interface,228 display ftp client source,88 display transceiver manuinfo,229...
Page 292 timeout,80 mdc,268 start,268 memory-threshold,234 get,92 memory-threshold usage,235 gunzip,127 mkdir,96 gzip,128 mkdir,129 monitor cpu-usage enable,236 header,232 monitor cpu-usage interval,237 help,93 monitor cpu-usage threshold,238 history-command max-size,27 more,130 hotkey,9 mount,131 move,132 idle-timeout,28 install activate,178 newer,96 install add,180 install commit,180 open,97 install deactivate,181 interface policy deny,56 issu accept,182...
Page 293 reget,100 status,107 Remote support,280 stopbits,38 rename,101 super,68 rename,133 super authentication-mode,69 reset,102 super default role,70 reset provision failed-config,275 super password,70 reset recycle-bin,133 switchback,271 reset saved-configuration,151 switch-fabric isolate,249 reset scheduler logfile,243 switchto mdc,267 reset version-update-record,244 sysname,250 restart,102 system,108 restore startup-configuration,152 system-view,12 return,11 system-working-mode,251 rhelp,103 rmdir,104...
Page 294 undelete,138 verbose,109 user,108 version auto-update enable,166 user-interface,45 version check ignore,167 user-interface class,46 vlan policy deny,71 user-role,47 vpn-instance policy deny,73 user-role,256 Websites,280...

HP FlexFabric 7900 Series Command Reference Manual

Basic CLI Commands

Login Management Commands

RBAC Commands

FTP Commands

TFTP Commands

File System Management Commands

Configuration File Management Commands

Software Upgrade Commands

ISSU Commands

Python Commands

Device Management Commands

MDC Commands

Preprovisioning Commands

Document Conventions and Icons

Support and Other Resources

Quick Links

Related Manuals for HP FlexFabric 7900 Series

Summary of Contents for HP FlexFabric 7900 Series