HPE D6020 Maintenance And Service Manual

Hide thumbs Also See for HPE D6020:
Table of Contents

Advertisement

Quick Links

HPE FlexNetwork MSR Router Series
Comware 7 Fundamentals Command Reference
Part number: 5200-2363
Software version: MSR-CMW710-R0411
Document version: 6W101-20161114

Advertisement

Table of Contents
loading

Summary of Contents for HPE HPE D6020

  • Page 1 HPE FlexNetwork MSR Router Series Comware 7 Fundamentals Command Reference Part number: 5200-2363 Software version: MSR-CMW710-R0411 Document version: 6W101-20161114...
  • Page 2 © Copyright 2016 Hewlett Packard Enterprise Development LP The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
  • Page 3: Table Of Contents

    Contents Basic CLI commands ········································································1 alias ···································································································································· 1 display | { begin | exclude | include } ·························································································· 2 display | by-linenum ··············································································································· 3 display > ······························································································································ 4 display >> ···························································································································· 5 display alias ························································································································· 6 display history-command ········································································································ 7 display history-command all ····································································································...
  • Page 4 ip alias ······························································································································ 70 line ··································································································································· 71 line class ··························································································································· 74 lock ·································································································································· 76 lock-key ····························································································································· 77 lock reauthentication ············································································································ 78 parity ································································································································ 79 protocol inbound ················································································································· 79 redirect disconnect ·············································································································· 81 redirect enable ···················································································································· 82 redirect listen-port················································································································ 82 redirect passthrough ············································································································ 83 redirect refuse-negotiation·····································································································...
  • Page 5 ftp··································································································································· 121 ftp client ipv6 source ·········································································································· 122 ftp client source ················································································································· 123 ftp ipv6 ···························································································································· 123 get ·································································································································· 124 help ································································································································ 126 lcd ·································································································································· 126 ls ···································································································································· 127 mkdir ······························································································································ 128 newer ······························································································································ 129 open ······························································································································· 129 passive ···························································································································· 130 put ··································································································································...
  • Page 6 tar list ······························································································································ 176 umount ···························································································································· 176 undelete ·························································································································· 177 Configuration file management commands ········································ 179 archive configuration ·········································································································· 179 archive configuration interval ······························································································· 180 archive configuration location ······························································································ 180 archive configuration max ··································································································· 182 backup startup-configuration ······························································································· 183 configuration encrypt ·········································································································· 184 configuration replace file ·····································································································...
  • Page 7 display install package ······································································································· 257 display ip routing-table ······································································································· 258 display ipv6 routing-table ···································································································· 259 display version ·················································································································· 260 format ····························································································································· 260 ftp··································································································································· 261 mkdir ······························································································································ 261 more ······························································································································· 262 move ······························································································································ 262 ping ································································································································ 263 ping ipv6 ·························································································································· 264 pwd ································································································································...
  • Page 8 display scheduler schedule ································································································· 314 display system stable state·································································································· 315 display transceiver alarm ···································································································· 317 display transceiver diagnosis ······························································································· 318 display transceiver interface ································································································ 319 display transceiver manuinfo ······························································································· 320 display version ·················································································································· 321 display version-update-record ······························································································ 321 header ···························································································································· 322 job ··································································································································...
  • Page 9: Basic Cli Commands

    Basic CLI commands alias Use alias to configure a command alias. Use undo alias to delete a command alias. Syntax alias alias command undo alias alias Default The device has a set of system-defined command aliases, as listed in Table Table 1 System-defined command aliases Command alias Command or command keyword...
  • Page 10: Display | { Begin | Exclude | Include

    • Enter ship routing-table to execute the display ip routing-table command. • Enter ship interface to execute the display ip interface command. The command string can include up to nine parameters. Each parameter starts with the dollar sign ($) and a sequence number in the range of 1 to 9. For example, you can configure the alias shinc for the display ip $1 | include $2 command.
  • Page 11: Display | By-Linenum

    Views Any view Predefined user roles network-admin network-operator Parameters command: Specifies the keywords and arguments of a display command. To display available keywords and arguments, enter display ?. begin: Displays the first line matching the specified regular expression and all subsequent lines. exclude: Displays all lines not matching the specified regular expression.
  • Page 12: Display

    Examples # Display VLAN 999 settings, with each output line identified by a number. <Sysname> display vlan 999 | by-linenum VLAN ID: 999 VLAN type: Static Route interface: Configured IPv4 address: 192.168.2.1 IPv4 subnet mask: 255.255.255.0 Description: For LAN Access Name: VLAN 0999 Tagged ports: None...
  • Page 13: Display

    VLAN ID: 1 VLAN type: Static Route interface: Not configured Description: VLAN 0001 Name: VLAN 0001 Tagged ports: None Untagged ports: GigabitEthernet1/0/2 display >> Use display >> to append the output from a display command to the end of a file. Syntax display command >>...
  • Page 14: Display Alias

    IPv4 address: 192.168.2.1 IPv4 subnet mask: 255.255.255.0 Description: For LAN Access Name: VLAN 0999 Tagged ports: None Untagged ports: GigabitEthernet1/0/1 display alias Use display alias to display command aliases. Syntax display alias [ alias ] Views Any view Predefined user roles network-admin network-operator Parameters...
  • Page 15: Display History-Command

    display history-command Use display history-command to display all commands that are saved in the command history buffer for the current CLI session. Syntax display history-command Views Any view Predefined user roles network-admin network-operator Usage guidelines The system automatically saves commands you have successfully executed to the command history buffer for the current CLI session.
  • Page 16: Display Hotkey

    A user logout does not cause the system to delete commands from the history buffer for all CLI sessions. Examples # Display all commands saved in the command history buffer for all CLI sessions. <Sysname> display history-command all Date Time Terminal User 03/16/2012 20:03:33 vty0...
  • Page 17: Hotkey

    CTRL_T NULL CTRL_U NULL -System-reserved hotkeys- CTRL_A Move the cursor to the beginning of the line. CTRL_B Move the cursor one character to the left. CTRL_C Stop the current command. CTRL_D Erase the character at the cursor. CTRL_E Move the cursor to the end of the line. CTRL_F Move the cursor one character to the right.
  • Page 18: Quit

    Views System view Predefined user roles network-admin Parameters CTRL_G: Assigns a command to Ctrl+G. CTRL_L: Assigns a command to Ctrl+L. CTRL_O: Assigns a command to Ctrl+O. CTRL_T: Assigns a command to Ctrl+T. CTRL_U: Assigns a command to Ctrl+U. command: Specifies the command to be assigned to the hotkey. Usage guidelines The system defines some hotkeys and provides five configurable command hotkeys.
  • Page 19: Repeat

    repeat Use repeat to repeat commands in the command history buffer for the current CLI session. Syntax repeat [ number ] [ count times ] [ delay seconds ] Views Any view Predefined user roles network-admin Parameters number: Specifies the number of the most recently executed commands in the command history buffer for the current CLI session that you want to execute.
  • Page 20: Return

    33% in last 5 seconds 32% in last 1 minute 33% in last 5 minutes <Sysname> display clock 12:20:28 UTC Thu 06/19/2014 Related commands display history-command escape-key history-command max-size return Use return to return to user view from any other view. Syntax return Views...
  • Page 21: Screen-Length Disable

    Views User view Predefined user roles network-admin Usage guidelines If you disable pausing between screens of output, all output is displayed. The screen is refreshed continuously until the final screen is displayed. This command takes effect only for the current CLI session. When you are logged out, the default is restored.
  • Page 22: Rbac Commands

    RBAC commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. description Use description to configure a description for a user role for easy identification.
  • Page 23 Parameters name role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. If you do not specify a user role name, the command displays information about all user roles, including the predefined user roles. Examples # Display information about user role 123. <Sysname>...
  • Page 24 Role: network-operator Description: Predefined network operator role has access to all read commands on the device VLAN policy: Permit (default) Interface policy: Permit (default) VPN instance policy: Permit (default) Security zone policy: Permit (default) ------------------------------------------------------------------- Rule Perm Type Scope Entity ------------------------------------------------------------------- sys-1 permit...
  • Page 25 Description: Predefined level-1 role VLAN policy: Permit (default) Interface policy: Permit (default) VPN instance policy: Permit (default) Security zone policy: Permit (default) ------------------------------------------------------------------- Rule Perm Type Scope Entity ------------------------------------------------------------------- sys-1 permit command tracert * sys-2 permit command telnet * sys-3 permit command ping *...
  • Page 26 Interface policy: Permit (default) VPN instance policy: Permit (default) Security zone policy: Permit (default) Role: level-7 Description: Predefined level-7 role VLAN policy: Permit (default) Interface policy: Permit (default) VPN instance policy: Permit (default) Security zone policy: Permit (default) Role: level-8 Description: Predefined level-8 role VLAN policy: Permit (default) Interface policy: Permit (default)
  • Page 27 Role: level-12 Description: Predefined level-12 role VLAN policy: Permit (default) Interface policy: Permit (default) VPN instance policy: Permit (default) Security zone policy: Permit (default) Role: level-13 Description: Predefined level-13 role VLAN policy: Permit (default) Interface policy: Permit (default) VPN instance policy: Permit (default) Security zone policy: Permit (default) Role: level-14 Description: Predefined level-14 role...
  • Page 28 Rule Perm Type Scope Entity ------------------------------------------------------------------- sys-1 deny command sys-2 permit command display security-logfile summary sys-3 permit command system-view ; info-center securi ty-logfile directory * sys-4 permit command security-logfile save sys-5 permit command cd * sys-6 permit command copy * sys-7 permit command...
  • Page 29 Field Description • network-operator. • level-n (where n represents an integer in the range of 0 to 15). • security-audit. • guest-manager. Description User role description. VLAN policy of the user role: • Deny—Denies access to all VLANs except for permitted VLANs.
  • Page 30: Display Role Feature

    Field Description features in the feature group, as specified in the Entity field. • web-menu—Controls access to Web menus. • xml-element—Controls access to XML elements. • oid—Controls access to MIB nodes. Command string, feature name, feature group, Web menu, XML element, or OID specified in the user role rule: Entity •...
  • Page 31 system-view ; interface *; mpls enable * system-view ; interface *; mpls mtu * system-view ; mpls bfd * system-view ; snmp-agent trap enable mpls display mpls interface * display mpls label * display mpls lsp * display mpls nib * display mpls nid * display mpls summary * display mpls tunnel *...
  • Page 32 Field Description All commands that start with the domain keyword in system view, system-view ; domain * and all commands in ISP domain view. All commands that start with the header keyword in system view. system-view ; header * All commands that start with the aaa keyword in system view. system-view ;...
  • Page 33: Display Role Feature-Group

    Related commands feature display role feature-group Use display role feature-group to display feature group information. Syntax display role feature-group [ name feature-group-name ] [ verbose ] Views Any view Predefined user roles network-admin network-operator Parameters name feature-group-name: Specifies a feature group. The feature-group-name argument represents the feature group name, a case-sensitive string of 1 to 31 characters.
  • Page 34 Feature: bgp (Border Gateway Protocol related commands) Feature: l3vpn (Layer 3 Virtual Private Network related commands) Feature: route-policy (Routing Policy related commands) Feature: mt (Multiple-topology related commands) Feature: multicast (Multicast related commands) Feature: pim (Protocol Independent Multicast related commands) Feature: igmp (Internet Group Management Protocol related commands) Feature: mld (Multicast Listener Discovery related commands)
  • Page 35: Feature

    Feature: lisp (LISP protocol related commands) Feature: bgp (Border Gateway Protocol related commands) Feature: l3vpn (Layer 3 Virtual Private Network related commands) Feature: route-policy (Routing Policy related commands) Feature: mt (Multiple-topology related commands) Feature: multicast (Multicast related commands) Feature: pim (Protocol Independent Multicast related commands) Feature: igmp (Internet Group Management Protocol related commands)
  • Page 36: Interface Policy Deny

    role feature-group interface policy deny Use interface policy deny to enter user role interface policy view. Use undo interface policy deny to restore the default. Syntax interface policy deny undo interface policy deny Default A user role has access to all interfaces. Views User role view Predefined user roles...
  • Page 37: Permit Interface

    [Sysname-role-role1-ifpolicy] permit interface gigabitethernet 1/0/1 to gigabitethernet 1/0/5 Related commands display role permit interface role permit interface Use permit interface to configure a list of interfaces accessible to a user role. Use undo permit interface to disable the access of a user role to specific interfaces. Syntax permit interface interface-list undo permit interface [ interface-list ]...
  • Page 38: Permit Security-Zone

    # Permit user role role1 to execute all commands available in interface view and VLAN view. <Sysname> system-view [Sysname] role name role1 [Sysname-role-role1] rule 1 permit command system-view ; interface * [Sysname-role-role1] rule 2 permit command system-view ; vlan * # Permit the user role to access GigabitEthernet 1/0/1, and GigabitEthernet 1/0/5 to GigabitEthernet 1/0/7.
  • Page 39 Parameters security-zone-name&<1-10>: Specifies a space-separated list of up to 10 security zone names. Each name is a case-sensitive string of 1 to 31 characters. Usage guidelines To permit a user role to access a security zone after you configure the security-zone policy deny command, you must add the security zone to the permitted security zone list of the policy.
  • Page 40: Permit Vlan

    permit vlan Use permit vlan to configure a list of VLANs accessible to a user role. Use undo permit vlan to remove the permission for a user role to access specific VLANs. Syntax permit vlan vlan-id-list undo permit vlan [ vlan-id-list ] Default No permitted VLANs are configured in user role VLAN policy view.
  • Page 41: Permit Vpn-Instance

    Verify that you cannot use the user role to work on any VLANs except for VLANs 2, 4, and 50 to 100: # Verify that you can create VLAN 100 and enter the VLAN view. [Sysname] vlan 100 [Sysname-vlan100] quit # Verify that you can add GigabitEthernet 1/0/1 to VLAN 100 as an access port.
  • Page 42: Role

    The undo permit vpn-instance command removes the entire list of permitted VPN instances if you do not specify a VPN instance. Any change to a user role VPN instance policy takes effect only on users who log in with the user role after the change.
  • Page 43: Role Default-Role Enable

    Predefined user roles network-admin Parameters name role-name: Specifies a username. The role-name argument is a case-sensitive string of 1 to 63 characters. Usage guidelines You can create a maximum of 64 user roles in addition to the predefined user roles. To change the permissions assigned to a user role, you must first enter the user role view.
  • Page 44: Role Feature-Group

    Parameters role-name: Specifies a user role by its name for the default user role. The user role must already exist. The argument is a case-sensitive string of 1 to 63 characters. If you do not specify a user role, the default user role is network-operator. Usage guidelines The default user role feature assigns the default user role to AAA-authenticated users if the authentication server (local or remote) does not assign any user roles to the users.
  • Page 45: Rule

    <Sysname> system-view [Sysname] role feature-group name security-features [Sysname-featuregrp-security-features] Related commands display role feature-group display role feature feature rule Use rule to create or change a user role rule for controlling command, Web menu, XML element, or MIB node access. Use undo rule to delete user role rules. Syntax rule number { deny | permit } { command command-string | { execute | read | write } * { feature [ feature-name ] | feature-group feature-group-name | oid oid-string | web-menu [ web-string ] |...
  • Page 46 feature [ feature-name ]: Specifies one or all features. The feature-name argument represents a feature name. If you do not specify a feature name, you specify all the features in the system. When you specify a feature, the feature name must be the same, including the case, as the name displayed by the display role feature command.
  • Page 47 rule 3 deny command ping  • If a predefined user role rule and a user-defined user role rule conflict, the user-defined user role rule takes effect. The following guidelines apply to OID rules: • The system compares an OID with the OIDs specified in rules, and it uses the longest match principle to select a rule for the OID.
  • Page 48 Rule Guidelines rule. For example, "rule 1 deny command dis arp source *" denies access to the commands display arp source-mac interface and display arp source-suppression. To control access to a command, you must specify the command immediately behind the view to which the command is assigned. The rules that control command access for any subview do not apply to the command.
  • Page 49: Security-Zone Policy Deny

    security-zone policy deny Use security-zone policy deny to enter user role security zone policy view. Use undo security-zone policy deny to restore the default. Syntax security-zone policy deny undo security-zone policy deny Default A user role has access to all security zones. Views User role view Predefined user roles...
  • Page 50: Super

    Related commands display role permit security-zone role super Use super to obtain another user role without reconnecting to the device. Syntax super [ role-name ] Views User view Predefined user roles network-admin Parameters role-name: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system and cannot be security-audit or guest-manager.
  • Page 51: Super Authentication-Mode

    super authentication-mode Use super authentication-mode to set an authentication mode for temporary user role authorization. Use undo super authentication-mode to restore the default. Syntax super authentication-mode { local | scheme } * undo super authentication-mode Default Local password authentication applies. Views System view Predefined user roles...
  • Page 52: Super Default Role

    super default role Use super default role to specify the default target user role for temporary user role authorization. Use undo super default role to restore the default. Syntax super default role role-name undo super default role Default The default target user role is network-admin. Views System view Predefined user roles...
  • Page 53: Vlan Policy Deny

    Views System view Predefined user roles network-admin Parameters role role-name: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system and cannot be security-audit or guest-manager. If you do not specify a user role, the command sets a password for the default target user role which is set by using the super default role command.
  • Page 54: Vpn-Instance Policy Deny

    undo vlan policy deny Default A user role has access to all VLANs. Views User role view Predefined user roles network-admin Usage guidelines To restrict the VLAN access of a user role to a set of VLANs, perform the following tasks: Use vlan policy deny to enter user role VLAN policy view.
  • Page 55 Syntax vpn-instance policy deny undo vpn-instance policy deny Default A user role has access to all VPN instances. Views User role view Predefined user roles network-admin Usage guidelines To restrict the VPN instance access of a user role to a set of VPN instances, perform the following tasks: Use vpn-instance policy deny to enter user role VPN instance policy view.
  • Page 56: Login Management Commands

    Login management commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. Some login management commands are available in both user line view and user line class view.
  • Page 57 Combined key ASCII code value Ctrl+B Ctrl+C Ctrl+D Ctrl+E Ctrl+F Ctrl+G Ctrl+H Ctrl+I Ctrl+J Ctrl_K Ctrl_L Ctrl+M Ctrl+N Ctrl+O Ctrl+P Ctrl+Q Ctrl+R Ctrl+S Ctrl+T Ctrl+U Ctrl+V Ctrl+W Ctrl+X Ctrl+Y Ctrl+Z Examples # Configure character s as the terminal session activation key for console line 0. <Sysname>...
  • Page 58: Authentication-Mode

    Pressing Enter does not start a session. Press s. A terminal session is started. <Sysname> authentication-mode Use authentication-mode to set the authentication mode for a user line. Use undo authentication-mode to restore the default. Syntax In non-FIPS mode: authentication-mode { none | password | scheme } undo authentication-mode In FIPS mode: authentication-mode scheme...
  • Page 59: Auto-Execute Command

    Examples # Enable the none authentication mode for VTY line 0. <Sysname> system-view [Sysname] line vty 0 [Sysname-line-vty0] authentication-mode none # Enable password authentication for VTY line 0 and set the password to 321. <Sysname> system-view [Sysname] line vty 0 [Sysname-line-vty0] authentication-mode password [Sysname-line-vty0] set authentication password simple 321 # Enable scheme authentication for VTY line 0.
  • Page 60 Usage guidelines CAUTION: After configuring this command for a user line, you might be unable to access the CLI through the user line. Make sure you can access the CLI through a different user line before you configure this command and save the configuration. This command is not supported in console line view or console line class view.
  • Page 61: Command Accounting

    This operation is the same as directly logging in to the device at 192.168.1.41 through Telnet. When you close the Telnet connection to 192.168.1.41, the Telnet connection to 192.168.1.40 is closed at the same time. command accounting Use command accounting to enable command accounting. Use undo command accounting to disable command accounting.
  • Page 62: Databits

    undo command authorization Default Command authorization is disabled. Logged-in users can execute commands without authorization. Views User line view User line class view Predefined user roles network-admin Usage guidelines When command authorization is enabled, a user can only use commands that are permitted by both the AAA scheme and user role.
  • Page 63: Display Line

    7: Uses seven data bits for a character. 8: Uses eight data bits for a character. Usage guidelines This command is not supported in VTY line class view. This setting must be the same as the setting on the configuration terminal. Examples # Configure AUX 0 to use seven data bits for a character.
  • Page 64 Hardware Keyword compatibility MSR2003 MSR2004-24/2004-48 MSR3012/3024/3044/3064 MSR4060/4080 console: Specifies the console line. The following matrix shows the console keyword and hardware compatibility: Hardware Keyword compatibility MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) MSR958 (JH300A/JH301A) MSR1002-4/1003-8S MSR2003 MSR2004-24/2004-48 MSR3012/3024/3044/3064 MSR4060/4080 tty: Specifies the TTY line. vty: Specifies the VTY line. number2: Specifies the relative number of a user line.
  • Page 65 Hardware Value ranges • tty–1 to 2304 • vty–0 to 63 summary: Displays summary information about user lines. If you do not specify this keyword, the command displays detailed information. Examples # Display information about console line 0. <Sysname> display line 0 Type Tx/Rx Modem Auth...
  • Page 66: Display Telnet Client

    Fields Description For example, if "2:UXXX X" is displayed, there are five user lines of the user line class, which use the absolute numbers 2 through 6. User line 2 is in use, and the other user lines are not. display telnet client Use display telnet client to display the packet source setting for the Telnet client.
  • Page 67 Hardware Value range MSR2004-24/2004-48 0 to 225 MSR3012/3024/3044/3064 0 to 417 MSR4060/4080 0 to 2399 aux: Specifies the AUX line. The following matrix shows the aux keyword and hardware compatibility: Hardware Keyword compatibility MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) MSR958 (JH300A/JH301A) MSR1002-4/1003-8S MSR2003 MSR2004-24/2004-48 MSR3012/3024/3044/3064 MSR4060/4080 console: Specifies the console line.
  • Page 68 Hardware Value ranges • vty–0 to 63 • aux–0 to 1 • tty–1 to 160 MSR2003 • vty–0 to 63 • aux–0 • tty–1 to 160 MSR2004-24/2004-48 • vty–0 to 63 • aux–0 • tty–1 to 352 MSR3012/3024/3044/3064 • vty–0 to 63 •...
  • Page 69: Display Users

    # Display summary information about all user lines. <Sysname> display user-interface summary Line type : [CON] Line type : [AUX] Line type : [VTY] 2:UXXX X 2 lines used. 5 lines not used. Table 10 Command output Fields Description number: Absolute number of the first user line in the user line class. status: User line status.
  • Page 70: Escape-Key

    The output shows that two users have logged in to the device: one is using VTY line 0 and the other (yourself) is using VTY line 1. Your IP address is 192.168.1.26. Table 11 Command output Field Description Absolute number of the user line. Line Type and relative number of the user line.
  • Page 71: Flow-Control

    As a best practice, use a key sequence as the escape key. If you define a single character as the escape key, pressing the key while a command is being executed stops the command. If no command is being executed, pressing the key enters the character as a common character. If you Telnet from the device to a remote device, pressing the key enters the character as a common character on the remote device.
  • Page 72: Free Line

    Views User line view Predefined user roles network-admin Parameters hardware: Performs hardware flow control. none: Disables flow control. software: Performs software flow control. direction1, direction2: Specify the software flow control direction and hardware flow control direction. • in: Listens to flow control information from the remote device. •...
  • Page 73 Parameters number1: Specifies the absolute number of a user line. The following matrix shows the value ranges for the number1 argument: Hardware Value range MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) 0 to 144 MSR958 (JH300A/JH301A) 0 to 144 MSR1002-4/1003-8S 0 to 144 MSR2003 0 to 225 MSR2004-24/2004-48 0 to 225 MSR3012/3024/3044/3064...
  • Page 74 Hardware Value ranges • console–0 • tty–1 to 80 MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) • vty–0 to 63 • console–0 • tty–1 to 80 MSR958 (JH300A/JH301A) • vty–0 to 63 • aux–0 • tty–1 to 80 MSR1002-4/1003-8S • vty–0 to 63 • aux–0 to 1 •...
  • Page 75: Free User-Interface

    free user-interface Use free user-interface to release a user line. Syntax free user-interface { number1 | { aux | console | tty | vty } number2 } Views User view Predefined user roles network-admin Parameters number1: Specifies the absolute number of a user line. The following matrix shows the value ranges for the number1 argument: Hardware Value range...
  • Page 76 Hardware Keyword compatibility MSR2003 MSR2004-24/2004-48 MSR3012/3024/3044/3064 MSR4060/4080 tty: Specifies the TTY line. vty: Specifies the VTY line. number2: Specifies the relative number of a user line. The following matrix shows the value ranges for the number2 argument: Hardware Value ranges •...
  • Page 77: History-Command Max-Size

    VTY 0 Location: 192.168.1.12 VTY 1 Location: 192.168.1.26 : Current operation user. : Current operation user works in async mode. # Release VTY line 1. <Sysname> free user-interface vty 1 Are you sure to free line vty1? [Y/N]:y [OK] history-command max-size Use history-command max-size to set the size of the command history buffer for a user line.
  • Page 78: Idle-Timeout

    idle-timeout Use idle-timeout to set the CLI connection idle-timeout timer. Use undo idle-timeout to restore the default. Syntax idle-timeout minutes [ seconds ] undo idle-timeout Default The CLI connection idle-timeout timer is 10 minutes. Views User line view User line class view Predefined user roles network-admin Parameters...
  • Page 79: Line

    Predefined user roles network-admin Parameters ip-address: Specifies the IP address to be associated with the Telnet redirect listening port. The IP address cannot be the address of an interface on the device, but can belong to the same subnet. port-number: Specifies a Telnet redirect listening port number in the range of 2000 to 50000. Usage guidelines For a user to Telnet to a device through a Telnet redirect server, associate a Telnet redirect listening port with an IP address of the redirect server.
  • Page 80 last-number1: Specifies the absolute number of the last user line. This number cannot be smaller than first-number1. The following matrix shows the value ranges for the last-number1 argument: Hardware Value range MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) 1 to 144 MSR958 (JH300A/JH301A) 1 to 144 MSR1002-4/1003-8S 1 to 144 MSR2003...
  • Page 81 Hardware Value ranges • console–0 • tty–1 to 80 MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) • vty–0 to 63 • console–0 • tty–1 to 80 MSR958 (JH300A/JH301A) • vty–0 to 63 • aux–0 • tty–1 to 80 MSR1002-4/1003-8S • vty–0 to 63 • aux–0 to 1 •...
  • Page 82: Line Class

    Hardware Value ranges • console–1 to 15 • tty–2 to 2304 • vty–1 to 63 Usage guidelines To configure settings for a single user line, use this command to enter the user line view. To configure the same settings for multiple user lines, use this command to enter multiple user line views.
  • Page 83 Keyword Hardware compatibility MSR4060/4080 console: Specifies the console line. The following matrix shows the console keyword and hardware compatibility: Keyword Hardware compatibility MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) MSR958 (JH300A/JH301A) MSR1002-4/1003-8S MSR2003 MSR2004-24/2004-48 MSR3012/3024/3044/3064 MSR4060/4080 tty: Specifies the TTY line class view. vty: Specifies the VTY line class view. Usage guidelines To configure the same settings for all user lines of a line class, use this command to enter the user line class view.
  • Page 84: Lock

    • A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view. • A setting in user line class view does not take effect for current online users. It takes effect only for new login users.
  • Page 85: Lock-Key

    Predefined user roles network-admin Usage guidelines This command is not supported in FIPS mode. This command locks the current user line to prevent unauthorized users from using the line. You must set the password for unlocking the line as prompted. The user line is locked after you enter the password and confirm the password.
  • Page 86: Lock Reauthentication

    Usage guidelines As a best practice, specify a combined key as the user line locking key. If you specify a single character as the key, the character acts only as the user line locking key. You cannot type the character for any commands, keywords, or arguments. Pressing this shortcut key is equivalent to executing the lock reauthentication command.
  • Page 87: Parity

    <Sysname> lock reauthentication Please press Enter to unlock the screen. // The user line is locked. To unlock it, press Enter and enter the login password: Password: <Sysname> Related commands lock-key parity Use parity to specify the parity. Use undo parity to restore the default. Syntax parity { even | mark | none | odd | space } undo parity...
  • Page 88 Syntax In non-FIPS mode: protocol inbound { all | pad | ssh | telnet } undo protocol inbound In FIPS mode: protocol inbound ssh undo protocol inbound Default In non-FIPS mode, all protocols are supported. In FIPS mode, SSH is supported. Views VTY line view VTY line class view...
  • Page 89: Redirect Disconnect

    [Sysname-line-vty0-4] authentication-mode none To verify the configuration: Telnet to the device. <Client> telnet 192.168.1.241 Trying 192.168.1.241 ... Press CTRL+K to abort Connected to 192.168.1.241 ... ****************************************************************************** * Copyright (c) 2010-2016 Hewlett Packard Enterprise Development LP * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed.
  • Page 90: Redirect Enable

    redirect enable Use redirect enable to enable Telnet redirect for a user line. Use undo redirect enable to disable Telnet redirect for a user line. Syntax redirect enable undo redirect enable Default Telnet redirect is disabled for a user line. Views AUX line view TTY line view...
  • Page 91: Redirect Passthrough

    Views AUX line view TTY line view Predefined user roles network-admin Parameters port-number: Specifies the number of the Telnet redirect listening port, in the range of 2000 to 50000. Usage guidelines The device redirects only Telnet connection requests destined for the Telnet redirect listening port. Examples # Set the Telnet redirect listening port number to 3000.
  • Page 92: Redirect Refuse-Negotiation

    [Sysname-line-tty1] redirect passthrough Related commands redirect disconnect redirect enable redirect refuse-negotiation Use redirect refuse-negotiation to disable Telnet option negotiation for Telnet redirect. Use undo redirect refuse-negotiation to restore the default. Syntax redirect refuse-negotiation undo redirect refuse-negotiation Default Telnet option negotiation is enabled. Views AUX line view TTY line view...
  • Page 93: Screen-Length

    TTY line view Predefined user roles network-admin Parameters time: Specifies the idle-timeout timer in seconds. The value range is 30 to 86400. To disable the timeout mechanism, set the timeout timer to 0. Usage guidelines If no data is received from a Telnet client before the timer expires, the user line terminates the redirected connection.
  • Page 94: Send

    The setting in user line view takes effect immediately for the current session. The setting in user line class view takes effect for login sessions that are established after the setting is configured. Examples # Set the maximum number of lines to send at a time to 30 for console line 0. <Sysname>...
  • Page 95 Keyword Hardware compatibility MSR2004-24/2004-48 MSR3012/3024/3044/3064 MSR4060/4080 console: Specifies the console line. The following matrix shows the console keyword and hardware compatibility: Keyword Hardware compatibility MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) MSR958 (JH300A/JH301A) MSR1002-4/1003-8S MSR2003 MSR2004-24/2004-48 MSR3012/3024/3044/3064 MSR4060/4080 tty: Specifies the TTY line. vty: Specifies the VTY line. number2: Specifies the relative number of a user line.
  • Page 96: Set Authentication Password

    Hardware Value ranges • tty–1 to 2304 • vty–0 to 63 Usage guidelines You can use this command to send notifications to online users before performing an operation that might affect other online users, for example, before rebooting the device. To end a message, press Enter.
  • Page 97: Shell

    Usage guidelines Only users assigned with the network-admin or level-15 user role can execute this command. Other users cannot execute this command, even if they are granted the right to execute this command. This command is not supported in FIPS mode. This command is available in both user line view and user line class view.
  • Page 98: Speed

    Examples # Disable the terminal service for VTY lines VTY 0 through 4 so no user can log in to the device through the user lines. <Sysname> system-view [Sysname] line vty 0 4 [Sysname-line-vty0-4] undo shell Disable ui-vty0-4 , are you sure? [Y/N]:y [Sysname-line-vty0-4] speed Use speed to set the transmission rate (also called the baud rate) on a user line.
  • Page 99: Stopbit-Error Intolerance

    [Sysname] line aux 0 [Sysname-line-aux0] speed 19200 stopbit-error intolerance Use stopbit-error intolerance to enable stop bit setting consistency detection. Use undo stopbit-error intolerance to disable stop bit setting consistency detection. Syntax stopbit-error intolerance undo stopbit-error intolerance Default Stop bit setting consistency detection is disabled. Views User line view Predefined user roles...
  • Page 100: Telnet

    1.5: Uses one and a half stop bits. The device does not support using one and a half stop bits. If you specify this keyword, two stop bits are used. 2: Uses two stop bits. Usage guidelines This command is not supported in VTY line view. The configuration terminal and the device must use the same number of stop bits to communicate.
  • Page 101: Telnet Client Source

    Examples # Telnet to host 1.1.1.2, using 1.1.1.1 as the source IP address for outgoing Telnet packets. <Sysname> telnet 1.1.1.2 source ip 1.1.1.1 Related commands telnet client source telnet client source Use telnet client source to specify a source IPv4 address or source interface for the Telnet client to use for outgoing Telnet packets.
  • Page 102: Telnet Server Acl

    Views User view Predefined user roles network-admin Parameters remote-host: Specifies the IPv6 address or host name of a remote host. A host name can be a case-insensitive string of 1 to 253 characters. Valid characters include letters, digits, hyphens (-), underscores (_), and dots (.).
  • Page 103: Telnet Server Dscp

    Predefined user roles network-admin Parameters mac: Specifies a Layer 2 ACL. To specify an ACL of a different type, do not specify this keyword. acl-number: Specifies an ACL by its number. If you specify the mac keyword, the value range of this argument is 4000 to 4999.
  • Page 104: Telnet Server Enable

    Examples # Set the DSCP value for IPv4 to use for outgoing Telnet packets to 30 on a Telnet server. <Sysname> system-view [Sysname] telnet server dscp 30 telnet server enable Use telnet server enable to enable the Telnet server. Use undo telnet server enable to disable the Telnet server. Syntax telnet server enable undo telnet server enable...
  • Page 105: Telnet Server Ipv6 Dscp

    mac: Specifies a Layer 2 ACL. To specify an ACL of a different type, do not specify this keyword. acl-number: Specifies an ACL by its number. If you specify the ipv6 keyword, the value range of this argument is 2000 to 3999. If you specify the mac keyword, the value range of this argument is 4000 to 4999.
  • Page 106: Telnet Server Ipv6 Port

    telnet server ipv6 port Use telnet server ipv6 port to specify the IPv6 Telnet service port number. Use undo telnet server ipv6 port to restore the default. Syntax telnet server ipv6 port port-number undo telnet server ipv6 port Default The IPv6 Telnet service port number is 23. Views System view Predefined user roles...
  • Page 107: Terminal Type

    Examples # Set the IPv4 Telnet service port number to 1025. <Sysname> system-view [Sysname] telnet server port 1025 terminal type Use terminal type to specify the terminal display type. Use undo terminal type to restore the default. Syntax terminal type { ansi | vt100 } undo terminal type Default The terminal display type is ANSI.
  • Page 108 Views System view Predefined user roles network-admin Parameters first-number1: Specifies the absolute number of the first user line. The following matrix shows the value ranges for the first-number1 argument: Hardware Value range MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) 0 to 144 MSR958 (JH300A/JH301A) 0 to 144 MSR1002-4/1003-8S 0 to 144 MSR2003...
  • Page 109 console: Specifies the console line. The following matrix shows the console keyword and hardware compatibility: Keyword Hardware compatibility MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) MSR958 (JH300A/JH301A) MSR1002-4/1003-8S MSR2003 MSR2004-24/2004-48 MSR3012/3024/3044/3064 MSR4060/4080 tty: Specifies the TTY line. vty: Specifies the VTY line. first-number2: Specifies the relative number of the first user line. The following matrix shows the value ranges for the first-number2 argument: Hardware Value ranges...
  • Page 110: User-Interface Class

    Hardware Value ranges • console–0 • tty–2 to 80 MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) • vty–1 to 63 • console–0 • tty–2to 80 MSR958 (JH300A/JH301A) • vty–1 to 63 • aux–0 • tty–2 to 80 MSR1002-4/1003-8S • vty–1 to 63 • aux–1 • tty–2 to 160 MSR2003 •...
  • Page 111 Syntax user-interface class { aux | console | tty | vty } Views System view Predefined user roles network-admin Parameters aux: Specifies the AUX line class view. The following matrix shows the aux keyword and hardware compatibility: Keyword Hardware compatibility MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A) MSR958 (JH300A/JH301A) MSR1002-4/1003-8S...
  • Page 112 • activation-key • auto-execute command • authentication-mode • command accounting • command authorization • escape-key • history-command max-size • idle-timeout • protocol inbound • screen-length • set authentication password • shell • terminal type • user-role For commands that are available in both user line view and user line class view, the device uses the following rules to determine the settings to be activated: •...
  • Page 113: User-Role

    Press Enter. Pressing Enter does not start a session. Enter s. A terminal session is started. <Sysname> Related commands user-interface user-role Use user-role to assign a user role to a user line. The device assigns the user role to a user of the line when the user logs in.
  • Page 114 [Sysname] line aux 0 [Sysname-line-aux0] user-role network-admin...
  • Page 115: Ftp Commands

    FTP commands Commands and descriptions for centralized devices apply to the following routers: • MSR1002-4/1003-8S. • MSR2003. • MSR2004-24/2004-48. • MSR3012/3024/3044/3064. • MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A). • MSR958 (JH300A/JH301A). Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers. The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode.
  • Page 116: Display Ftp-User

    ftp timeout display ftp-user Use display ftp-user to display detailed information about online FTP users. Syntax display ftp-user Views Any view Predefined user roles network-admin network-operator Examples # Display detailed information about online FTP users. <Sysname> display ftp-user UserName HostIP Port HomeDir root...
  • Page 117: Free Ftp User-Ip

    Syntax free ftp user username Views User view Predefined user roles network-admin Parameters username: Specifies a username. To display online FTP users, execute the display ftp-user command. Examples # Release the FTP connections established by using the user account ftpuser. <Sysname>...
  • Page 118: Ftp Server Acl

    Views User view Predefined user roles network-admin Parameters ipv6-address: Specifies the source IPv6 address of an FTP connection. To view the source IPv6 addresses of FTP connections, execute the display ftp-user command. port port: Specifies the source port of an FTP connection. To view the source ports of FTP connections, execute the display ftp-user command.
  • Page 119: Ftp Server Dscp

    [Sysname] ftp server acl 2001 ftp server dscp Use ftp server dscp to set the DSCP value for IPv4 to use for FTP packets sent to an FTP client. Use undo ftp server dscp to restore the default. Syntax ftp server dscp dscp-value undo ftp server dscp Default IPv4 uses the DSCP value 0 for FTP packets sent to an FTP client.
  • Page 120: Ftp Server Ipv6 Dscp

    [Sysname] ftp server enable ftp server ipv6 dscp Use ftp server ipv6 dscp to set the DSCP value for IPv6 to use for FTP packets sent to an FTP client. Use undo ftp server ipv6 dscp to restore the default. Syntax ftp server ipv6 dscp dscp-value undo ftp server ipv6 dscp...
  • Page 121: Ftp Timeout

    Usage guidelines After you associate an SSL server policy with the device, a client that supports SFTP will establish a secure connection to the device to ensure data security. Examples # Associate the SSL server policy myssl with the FTP server. <Sysname>...
  • Page 122: Append

    append Use append to add the content of a file on the FTP client to a file on the FTP server. Syntax append localfile [ remotefile ] Views FTP client view Predefined user roles network-admin Parameters localfile: Specifies a file on the FTP client. remotefile: Specifies a file on the FTP server.
  • Page 123: Binary

    Examples # Set the file transfer mode to ASCII. ftp> ascii 200 TYPE is now ASCII Related commands binary binary Use binary to set the file transfer mode to binary, which is also called the flow mode. Syntax binary Default The file transfer mode is binary.
  • Page 124 Examples # Terminate the connection to the FTP server and return to user view. ftp> bye 221-Goodbye. You uploaded 2 and downloaded 2 kbytes. 221 Logout. <Sysname> Related commands quit Use cd to change the current working directory to another directory on the FTP server. Syntax cd { directory | ..
  • Page 125: Cdup

    cdup Use cdup to enter the upper directory of the FTP server. Syntax cdup Views FTP client view Predefined user roles network-admin Usage guidelines You can perform this operation only after you log in to the FTP server. This command does not change the working directory if the current directory is the FTP root directory.
  • Page 126: Debug

    221 Logout. ftp> Related commands disconnect debug Use debug to enable or disable FTP client debugging. Syntax debug Default FTP client debugging is disabled. Views FTP client view Predefined user roles network-admin Usage guidelines When FTP client debugging is enabled, executing this command disables FTP client debugging. When FTP client debugging is disabled, executing this command enables FTP client debugging.
  • Page 127: Dir

    Examples # Delete file b.txt. ftp> delete b.txt 250 Deleted b.txt Use dir to display detailed information about the files and subdirectories in the current directory on the FTP server. Use dir remotefile to display detailed information about a file or directory on the FTP server. Use dir remotefile localfile to save detailed information about a file or directory on the FTP server to a local file.
  • Page 128: Disconnect

    226-Glob: a.txt # Display the content of the file s.txt. ftp> bye 221-Goodbye. You uploaded 0 and downloaded 2 kbytes. 221 Logout. <Sysname> more s.txt -rwxr-xr-x 1481 Jul 7 12:34 a.txt Related commands disconnect Use disconnect to terminate the connection to the FTP server without exiting FTP client view. Syntax disconnect Views...
  • Page 129: Ftp

    <Sysname> display ftp client source The source IP address of the FTP client is 1.1.1.1. The source IPv6 address of the FTP client is 2001::1. Use ftp to log in to an FTP server and enter FTP client view. Syntax ftp [ ftp-server [ service-port ] [ vpn-instance vpn-instance-name ] [ dscp dscp-value | source { interface interface-type interface-number | ip source-ip-address } ] ] * Views...
  • Page 130: Ftp Client Ipv6 Source

    User (192.168.0.211:(none)): abc 331 Give me your password, please Password: 230 Logged in successfully Remote system type is MSDOS. ftp> ftp client ipv6 source Use ftp client ipv6 source to specify the source IPv6 address for FTP packets sent to an IPv6 FTP server.
  • Page 131: Ftp Client Source

    ftp client source Use ftp client source to specify the source IPv4 address for FTP packets sent to an IPv4 FTP server. Use undo ftp client source to restore the default. Syntax ftp client source { interface interface-type interface-number | ip source-ip-address } undo ftp client source Default No source IPv4 address is specified for FTP packets sent to an IPv4 FTP server.
  • Page 132: Get

    Views User view Predefined user roles network-admin Parameters ftp-server: Specifies the IPv6 address or host name of an FTP server. A host name can be a case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits, hyphens (-), underscores (_), and dots (.).
  • Page 133 Syntax get remotefile [ localfile ] Views FTP client view Predefined user roles network-admin Parameters remotefile: Specifies the file to be downloaded. localfile: Specifies a name for the downloaded file. If you do not specify this argument, the system uses the name of the source file. Usage guidelines You can perform this operation only after you log in to the FTP server.
  • Page 134: Help

    # (Distributed devices in IRF mode.) Download a file to the root directory of the flash memory on the MPU that resides in slot 1 of member device 1. Save the file as c.txt. ftp> get a.txt chassis1#slot1#flash:/c.txt local: chassis1#slot1#flash:/c.txt remote: a.txt 150 Connecting to port 47460 226 File successfully transferred 1569 bytes received in 0.0564 seconds (27.2 kbyte/s)
  • Page 135 Use lcd directory to change the local working directory of the FTP client to the specified directory. Use lcd / to change the local working directory of the FTP client to the local root directory. Syntax lcd [ directory | / ] Views FTP client view Predefined user roles...
  • Page 136: Mkdir

    ftp> ls 150 Connecting to port 50201 -rwxr-xr-x 1481 Jul 7 15:36 a.txt drwxr-xr-x 8192 Jul 2 14:33 diagfile drwxr-xr-x 8192 Jul 7 15:21 ftp drwxr-xr-x 8192 Jul 5 09:15 logfile drwxr-xr-x 8192 Jul 2 14:33 seclog -rwxr-xr-x 40808448 Jul 2 14:33 simware-cmw710-sys tem-a1801.bin -rwxr-xr-x...
  • Page 137: Newer

    257 "newdir" : The directory was successfully created newer Use newer to update a local file by using a file on the FTP server. Syntax newer remotefile [ localfile ] Views FTP client view Predefined user roles network-admin Parameters remotefile: Specifies a file on the FTP server. localfile: Specifies the local file to be updated.
  • Page 138: Passive

    Usage guidelines After you issue this command, the system will prompt you to enter the username and password. After you log in to one FTP server, you must disconnect from the server before you can use the open command to log in to another server. Examples # In FTP client view, log in to the FTP server 192.168.40.7.
  • Page 139: Put

    Use put to upload a file from the FTP client to the FTP server. Syntax put localfile [ remotefile ] Views FTP client view Predefined user roles network-admin Parameters localfile: Specifies the local file to be uploaded. remotefile: Specifies the name of the file for saving the uploaded file on the FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server.
  • Page 140: Pwd

    226 File successfully transferred 1569 bytes sent in 0.000671 seconds (2.23 Mbyte/s) # (Distributed devices in IRF mode.) Upload a file from a global standby MPU (in slot 1 of member device 1) to the FTP server. Save the file as b.txt. ftp>...
  • Page 141: Reget

    221 Logout. <Sysname> Related commands reget Use reget to get the missing part of a file from the FTP server. Syntax reget remotefile [ localfile ] Views FTP client view Predefined user roles network-admin network-operator Parameters remotefile: Specifies a file on the FTP server. localfile: Specifies a local file.
  • Page 142: Reset

    Parameters oldfilename: Specifies the original file name. newfilename: Specifies the new file name. Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Rename the file a.txt as b.txt. • Method 1: ftp>...
  • Page 143: Rhelp

    Predefined user roles network-admin Parameters marker: Specifies the retransmission offset, in bytes. Usage guidelines The file retransmission starts from the (offset+1)th byte. You can perform this operation only after you log in to the FTP server. Support for this command depends on the FTP server. Examples # Set retransmission offset to 2 bytes and retransmit the file h.c.
  • Page 144 XPWD LIST NLST MLSD PORT EPRT PASV EPSV REST RETR STOR APPE DELE MKD XMKD RMD XRMD ABOR SIZE RNFR RNTO 214 UNIX Type: L8 Table 14 Command output Field Description USER Username, corresponding to the xx command in FTP client view. PASS Password.
  • Page 145: Rmdir

    rmdir Use rmdir to permanently delete a directory from the FTP server. Syntax rmdir directory Views FTP client view Predefined user roles network-admin Parameters directory: Specifies a directory on the FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server. To perform this operation, you must have delete permission on the FTP server.
  • Page 146 Examples # Display FTP server status. ftp> rstatus 211-FTP server status: Connected to 192.168.20.177 Logged in as root TYPE: ASCII No session bandwidth limit Session timeout in seconds is 300 Control connection is plain text Data connections will be plain text At session startup, client count was 1 vsFTPd 2.0.6 - secure, fast, stable 211 End of status...
  • Page 147: Status

    Field Description The second bit through the tenth bit are divided into three groups. Each group contains three characters, representing the access permission of the owner, group, and other users. • -—No permission. • r—Read permission. • w—Write permission. • x—Execution permission.
  • Page 148: System

    Field Description The name of the file on the FTP server is unique and Store unique: off; Receive unique: off the name of the local file is unique. Does not support obtaining multiple files once and Case: off; CR stripping: on deletes "\r"...
  • Page 149: Verbose

    After you log in to an FTP server, you can initiate an FTP authentication to change to a new account. By changing to a new account, you can get a different privilege without re-establishing the FTP connection. Make sure the specified username and password have been configured on the FTP server. If the username or password is not configured, this command fails and the FTP connection is closed.
  • Page 150 150 The computer is your friend. Trust the computer 226 File successfully transferred 3796 bytes received in 0.00762 seconds (486.5 kbyte/s) Use ? to display all commands supported by an FTP client. Use ? command-name to display the help information for a command. Syntax ? [ command-name ] Views...
  • Page 151: Tftp Commands

    TFTP commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. TFTP is not supported in FIPS mode. tftp Use tftp to download a file from a TFTP server or upload a file to a TFTP server in an IPv4 network.
  • Page 152: Tftp Client Ipv6 Source

    • ip source-ip-address: Specifies an IPv4 address. For successful TFTP packet transmission, make sure this address is the IPv4 address of an interface in up state on the device. Usage guidelines The source address specified with the tftp command takes precedence over the source address specified with the tftp client source command.
  • Page 153: Tftp Client Source

    Default No source address is specified for TFTP packets sent to an IPv6 TFTP server. The device selects a source IPv6 address as defined in RFC 3484. Views System view Predefined user roles network-admin Parameters interface interface-type interface-number: Specifies an interface by its type and number. The device will use the interface's IPv6 address as the source address.
  • Page 154: Tftp Ipv6

    Parameters interface interface-type interface-number: Specifies an interface by its type and number. The device will use the interface's primary IPv4 address as the source address. For successful TFTP packet transmission, make sure the interface is up and has the primary IPv4 address configured. ip source-ip-address: Specifies an IPv4 address.
  • Page 155: Tftp-Server Acl

    memory successfully. If the destination folder already has a file using the same name, the system overwrites the existing file. If the download or save-to-memory operation fails, the existing file in the destination folder is not overwritten. source-file: Specifies the source file name, a case-insensitive string of 1 to 255 characters. destination-file: Specifies the destination file name, a case-insensitive string of 1 to 255 characters.
  • Page 156: Tftp-Server Ipv6 Acl

    Views System view Predefined user roles network-admin Parameters acl-number: Specifies the number of a basic ACL, in the range of 2000 to 2999. Usage guidelines You can use an ACL to deny or permit the device's access to specific TFTP servers. Examples # Allow the device to access only the TFTP server at 1.1.1.1.
  • Page 157: File System Management Commands

    File system management commands Commands and descriptions for centralized devices apply to the following routers: • MSR1002-4/1003-8S. • MSR2003. • MSR2004-24/2004-48. • MSR3012/3024/3044/3064. • MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A). • MSR958 (JH300A/JH301A). Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers. The following matrix shows the supported storage medium types: Hardware Supported storage medium types...
  • Page 158: Auto-Copy Destination-Directory

    • Use the absolute path to specify a file or directory. For example, use the dir flash:/ command to display the files and directories in the flash: file system. • Use the cd command to change the working directory to the root directory of the file system before accessing a file or directory in the file system.
  • Page 159: Auto-Copy Source-Directory

    you must specify a source directory and a destination directory for the copy operation. All files in the source directory will be copied to the destination directory. Examples # Specify the root directory of the flash: file system as the destination directory for automatic copying. <Sysname>...
  • Page 160 Use cd to change the working directory. Syntax cd { directory | .. } Views User view Predefined user roles network-admin Parameters directory: Specifies the destination directory. ..: Specifies the parent directory. If the working directory is the root directory, an error message appears when you execute the cd ..
  • Page 161: Copy

    Standby 1 00e8-fc0f-8c02 -------------------------------------------------- * indicates the device is the master. + indicates the device through which the user logs in. The bridge MAC of the IRF is: 5cdd-70a5-8698 Auto upgrade : yes Mac persistent : 6 min Domain ID Auto merge : yes The output shows that the IRF fabric has two members and four MPUs.
  • Page 162 vpn-instance vpn-instance-name: Specifies the VPN instance to which the destination FTP or TFTP server belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the server belongs to the public network, do not specify this option. source interface interface-type interface-number: Specifies the source interface used to connect to the server.
  • Page 163 Copy ftp://user:private@1.1.1.1/test.cfg to flash:/testbackup.cfg? [Y/N]:y Copying file ftp://user:private@1.1.1.1/test.cfg to flash:/testbackup.cfg... Done. # Copy test.cfg from the current directory. Save the copy to the working directory on the FTP server 1.1.1.1 as testbackup.cfg. The FTP username is user. The password is private. <Sysname>...
  • Page 164: Delete

    # (Distributed devices in IRF mode.) Copy a configuration file of the global active MPU to the root directory of a file system on a global standby MPU. <Sysname> copy test.cfg chassis1#slot1#cfa0:/ Copy flash:/test.cfg to chassis1#slot1#cfa0:/test.cfg? [Y/N]:y Copying file flash:/test.cfg to chassis1#slot1#cfa0:/test.cfg...Done. # (Distributed devices in IRF mode.) Copy a configuration file of one global standby MPU to the root directory of a file system on another global standby MPU.
  • Page 165 Deleting the file permanently will take a long time. Please wait... Deleting file flash:/1.cfg...Done. # (Centralized devices in IRF mode.) Remove file 1.cfg from the current directory. <Sysname> delete 1.cfg Delete flash:/1.cfg? [Y/N]:y Deleting file flash:/1.cfg...Done. # (Centralized devices in IRF mode.) Permanently delete file 1.cfg from the root directory of a file system on the master.
  • Page 166: Dir

    <Sysname> delete 1.cfg Delete cfa0:/1.cfg? [Y/N]:y Deleting file cfa0:/1.cfg...Done. # (Distributed devices in IRF mode.) Permanently delete file 1.cfg from the root directory of a file system on the global active MPU. <Sysname> delete /unreserved 1.cfg The file cannot be restored. Delete cfa0:/1.cfg? [Y/N]:y Deleting the file permanently will take a long time.
  • Page 167 • Execute the dir /all .trash command. • Execute the cd .trash command and then the dir command. Examples # (Centralized devices in standalone mode.) Display information about all files and directories in the current directory. <Sysname> dir /all Directory of flash:/ # (Centralized devices in standalone mode.) Display files and directories in the root directories of all file systems on the device.
  • Page 168 Directory of slot7#cfa0:/ Directory of slot7#cfa0:/ # (Distributed devices in standalone mode.) Display information about all files and directories in a file system of the standby MPU (in slot 1). <Sysname> cd slot1#cfa0:/ <Sysname> dir /all Directory of slot1#cfa0:/ # (Distributed devices in IRF mode.) Display information about all files and directories in a file system of the global active MPU.
  • Page 169: File Prompt

    Field Description • Apr 26 2014 13:45:28—Last date and time when the file or directory was modified. • xx.xx—File or directory name. file prompt Use file prompt to set the operation mode for files and directories. Use undo file prompt to restore the default. Syntax file prompt { alert | quiet } undo file prompt...
  • Page 170: Format

    Usage guidelines Use this command to fix a file system when space in the file system cannot be used or released. You can repair a file system only when no other users are accessing the file system. Examples # Repair the flash: file system. <Sysname>...
  • Page 171: Gzip

    Usage guidelines This command deletes the specified file after decompressing it. Examples # Decompress file system.bin.gz: Before decompressing the file, you can display files whose names start with the system. string. <Sysname> dir system.* Directory of flash: 1 -rw- 20 Jun 14 2012 10:18:53 system.bin.gz 472972 KB total (472840 KB free) Decompress file system.bin.gz.
  • Page 172: Md5Sum

    472972 KB total (472844 KB free) Compress file system.bin. <Sysname> gzip system.bin Compressing file flash:/system.bin..Done. Verify the compress operation. <Sysname> dir system.* Directory of flash: 1 -rw- 20 Jun 14 2012 10:18:53 system.bin.gz 472972 KB total (472840 KB free) md5sum Use md5sum to use the MD5 algorithm to calculate the digest of a file.
  • Page 173: More

    Usage guidelines The name of the directory to be created must be unique in the parent directory. You can create a directory only in an existing directory. For example, to create the flash:/test/mytest directory, make sure the test directory already exists. Examples # Create the test directory in the current directory.
  • Page 174 <Sysname> more testcfg.cfg version 7.20, Beta 1201, Standard sysname Sysname vlan 2 return <Sysname> # (Centralized devices in IRF mode.) Display the contents of the testcfg.cfg file on a subordinate member. <Sysname> more slot2#flash:/testcfg.cfg version 7.20, Release 0000 sysname Test ---- More ---- # (Distributed devices in standalone mode.) Display the contents of the testcfg.cfg file on the standby MPU (in slot 1).
  • Page 175: Mount

    ---- More ---- mount Use mount to mount a file system. Syntax mount filesystem Views User view Predefined user roles network-admin Parameters filesystem: Specifies the name of a file system. Usage guidelines Generally, file systems on hot-swappable storage media are automatically mounted when the storage media are connected to the device.
  • Page 176: Move

    Related commands umount move Use move to move a file. Syntax move source-file { dest-file | dest-directory } Views User view Predefined user roles network-admin Parameters source-file: Specifies the name of the source file. dest-file: Specifies the name of the destination file. dest-directory: Specifies the name of the destination directory.
  • Page 177: Rename

    rename Use rename to rename a file or directory. Syntax rename { source-file | source-directory } { dest-file | dest-directory } Views User view Predefined user roles network-admin Parameters source-file: Specifies the name of the source file. source-directory: Specifies the name of the source directory. dest-file: Specifies the name of the destination file.
  • Page 178: Rmdir

    Clear flash:/a.cfg? [Y/N]:y Clearing file flash:/a.cfg... Done. Clear flash:/b.cfg? [Y/N]:y Clearing file flash:/b.cfg... Done. # Delete the b.cfg file from the recycle bin. (In this example there are two files in the recycle bin.) <Sysname> reset recycle-bin Clear flash:/a.cfg? [Y/N]:n Clear flash:/b.cfg? [Y/N]:y Clearing file flash:/b.cfg...
  • Page 179 Predefined user roles network-admin Parameters -s source-ip: Specifies the source IPv4 address for packets sent to the Rsync server. The IP address must have been configured on the device. If you do not specify this option, the device uses the primary IPv4 address of the outgoing interface as the source IPv4 address.
  • Page 180: Rsync Client Source

    Examples # Synchronize files and directories in the test/dir1 directory of the Rsync server at 1.1.1.1 to the flash:/rsyncdir directory on the device. Both the username and the password are admin. <Sysname> rsync 1.1.1.1 test/dir1/ flash:/rsyncdir admin admin receiving incremental file list created directory /mnt/flash:/rsyncdir a.cfg b.txt...
  • Page 181: Sha256Sum

    Predefined user roles network-admin Parameters interface interface-type interface-number: Specifies the source interface used to synchronize files and directories from an Rsync server. After you specify the source interface, the device uses the primary IPv4 address of the source interface as the source IP address for outgoing packets. For success file transfer, make sure the source interface has a primary IP address and is in up state.
  • Page 182: Tar Create

    Parameters file: Specifies the name of a file. Usage guidelines You can use file digests to verify file integrity. Examples # Use the SHA-256 algorithm to calculate the digest of file system.bin. <Sysname> sha256sum system.bin SHA256 digest: 0851e0139f2770e87d01ee8c2995ca9e59a8f5f4062e99af14b141b1a36ca152 tar create Use tar create to archive files and directories.
  • Page 183: Tar Extract

    test/subtest/ test/subtest/aa.log Related commands tar extract tar list tar extract Use tar extract to extract files and directories. Syntax tar extract archive-file file [ verbose ] [ screen | to directory ] Views User view Predefined user roles network-admin Parameters archive-file file: Specifies the archive file name.
  • Page 184: Tar List

    version 7.1.055, Demo 2501008 sysname Sysname Related commands tar create tar list tar list Use tar list to display the names of archived files and directories. Syntax tar list archive-file file Views User view Predefined user roles network-admin Parameters archive-file file: Specifies the archive file name. The suffix can be .tar or .tar.gz. Examples # Display the names of archived files and directories.
  • Page 185: Undelete

    Parameters filesystem: Specifies the name of a file system. Usage guidelines File systems on storage media are automatically mounted when storage media are connected to the device. To remove a hot-swappable storage medium from the device, you must first unmount the file system on the storage medium to disconnect the medium from the device.
  • Page 186 Views User view Predefined user roles network-admin Parameters file: Specifies the name of the file to be restored. Usage guidelines If a file with the same name already exists in the directory, the system prompts whether or not you want to overwrite the existing file. If you enter Y, the existing file is overwritten. If you enter N, the command is not executed.
  • Page 187: Configuration File Management Commands

    Configuration file management commands Commands and descriptions for centralized devices apply to the following routers: • MSR1002-4/1003-8S. • MSR2003. • MSR2004-24/2004-48. • MSR3012/3024/3044/3064. • MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A). • MSR958 (JH300A/JH301A). Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers. The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements.
  • Page 188: Archive Configuration Interval

    archive configuration interval Use archive configuration interval to enable automatic running-configuration archiving and set the archiving interval. Use undo archive configuration interval to disable automatic running-configuration archiving. Syntax archive configuration interval interval undo archive configuration interval Default The automatic running-configuration archiving feature is disabled. Views System view Predefined user roles...
  • Page 189 Use undo archive configuration location to restore the default. Syntax archive configuration location directory filename-prefix filename-prefix undo archive configuration location Default No configuration archive directory or configuration archive file name prefix is set. Views System view Predefined user roles network-admin Parameters directory: Specifies the name of a configuration archive directory, a case-insensitive string of 1 to 63 characters.
  • Page 190: Archive Configuration Max

    • The serial number for new configuration archives starts at 1. The undo archive configuration location command removes the configuration archive directory and file name prefix settings. The command also performs the following operations: • Disables the configuration archive feature (both manual and automatic methods). •...
  • Page 191: Backup Startup-Configuration

    Changing the limit setting to a lower value does not cause immediate deletion of excess archives. Instead, the configuration archive feature deletes the oldest n files when a new archive is manually or automatically saved, where n = current archive count – new archive limit + 1. For example, seven configuration archives have been saved before the archive limit is set to four.
  • Page 192: Configuration Encrypt

    <Sysname> backup startup-configuration to 2.2.2.2 192-168-1-26.cfg Backing up the main startup configuration file to 2.2.2.2… Done. # Back up the main next-startup configuration file to the IPv4 TFTP server at 2.2.2.2 in the MPLS L3VPN instance VPN1, and set the target file name to 192-168-1-26.cfg. <Sysname>...
  • Page 193: Configuration Replace File

    configuration replace file Use configuration replace file to perform configuration rollback. Syntax configuration replace file filename Views System view Predefined user roles network-admin Parameters filename: Specifies the name of the replacement configuration file suffixed with the .cfg extension for configuration rollback. Excluding the .cfg extension, the file name is a case-insensitive string of 1 to 255 characters and can include path information.
  • Page 194: Display Current-Configuration

    Examples # Display configuration archive information. <Sysname> display archive configuration Location: flash:/archive Filename prefix: my_archive Archive interval in minutes: 120 Maximum number of archive files: 10 Saved archive files: No. TimeStamp FileName Wed Oct 15 14:20:18 2015 my_archive_1.cfg Wed Oct 15 14:33:10 2015 my_archive_2.cfg Wed Oct 15 14:49:37 2015 my_archive_3.cfg...
  • Page 195 network-operator Parameters configuration [ module-name ]: Displays feature configuration. The module-name argument specifies a feature module. If you do not specify a feature module, the command displays all feature settings you have made. controller: Displays OpenFlow port configuration. exclude-provision: Excludes preprovisioned settings from the running configuration. interface [ interface-type [ interface-number ] ]: Displays interface configuration, where the interface-type argument represents the interface type and the interface-number argument represents the interface number.
  • Page 196: Display Current-Configuration Diff

    return display current-configuration diff Use display current-configuration diff to display the configuration differences between the running configuration and the next-startup configuration file. Syntax display current-configuration diff Views Any view Predefined user roles network-admin network-operator Usage guidelines The system searches for the next-startup configuration file for comparison in the following order: The main next-startup configuration file.
  • Page 197: Display Default-Configuration

    Field Description • B displays the target configuration for comparison, which can be Current configuration, Startup configuration, or the name of the target configuration file with its directory information. Location summary for a command line difference: • -linenumber1,number1—A total number of number1 lines are excerpted from line number linenumber1 in A.
  • Page 198 Syntax display diff configfile file-name-s { configfile file-name-d | current-configuration | startup-configuration } display diff current-configuration { configfile file-name-d | startup-configuration } display diff startup-configuration { configfile file-name-d | current-configuration } Views Any view Predefined user roles network-admin network-operator Parameters configfile file-name-s: Specifies the source configuration file for comparison.
  • Page 199: Display Saved-Configuration

    <Sysname> The output shows that test.cfg contains VLAN 400 and VLAN 500 while startup.cfg contains VLAN 300. # Display the configuration differences between the running configuration and the next-startup configuration file. <Sysname> display diff current-configuration startup-configuration --- Current configuration +++ Startup configuration @@ -17,9 +17,7 @@ vlan 200 -vlan 400...
  • Page 200: Display Startup

    If only the backup startup configuration file is available, this command displays the contents of the backup file. If both the main and backup startup configuration files are not available, this command does not display anything. Examples # Display the contents of the configuration file for the next system startup. <Sysname>...
  • Page 201 (Distributed devices in IRF mode.) The global standby MPUs always use the same current startup configuration file as the global active MPU. After an active/standby switchover, it is normal that the current startup configuration files on all MPUs are displayed as NULL. This is because the new global active MPU continues to run with the running configuration rather than rebooting with a startup configuration file.
  • Page 202: Display This

    Field Description (Distributed devices in standalone mode.) Displays the startup configuration files on the MPU in slot n. Slot n (Centralized devices in IRF mode.) Displays the startup configuration files on member device n. # (Distributed devices in IRF mode.) Display names of the startup configuration files. <Sysname>...
  • Page 203: Reset Saved-Configuration

    This command does not display parameters that are using the default settings. Some parameters can be successfully set even if their dependent features are not enabled. For these parameters, this command displays their settings after the dependent features are enabled. This command can be executed in any user line view to display the running configuration of all user lines.
  • Page 204 Usage guidelines CAUTION: • (Centralized devices in standalone or IRF mode.) This command permanently deletes the next-startup configuration file from the device in standalone mode or from all member devices on an IRF fabric. Before performing this task, back up the file as needed. •...
  • Page 205: Restore Startup-Configuration

    Configuration file in flash: is being cleared. Please wait ... MainBoard: Configuration file is cleared. Chassis 2 Slot 2: Erase next configuration file successfully Related commands display saved-configuration restore startup-configuration Use restore startup-configuration to download a configuration file from a TFTP server and specify it as the main next-startup configuration file.
  • Page 206 This command downloads the configuration file to the root directory of the default storage medium on each member device and specifies the file as the main next-startup configuration file. If the default storage medium has been partitioned, the configuration file is saved on the first partition. Make sure all IRF members use the same type of default storage medium.
  • Page 207: Save

    # (Distributed devices in standalone mode.) Download the configuration file test.cfg from the IPv6 TFTP server at 2001::2 in the public network, and specify the file as the main next-startup configuration file. <Sysname> restore startup-configuration from ipv6 2001::2 test.cfg Restoring the next startup-configuration file from 2001::2... Done..
  • Page 208 Use save [ safely ] [ backup | main ] [ force ] [ changed ] to save the running configuration to a file in the root directory of the default storage medium. This command specifies the file as a next-startup configuration file at the same time.
  • Page 209 specify the all keyword or a member ID, the file path cannot include a member ID. If the file path includes a folder name, the folder must already exist. (Centralized devices in IRF mode.) file-url: Specifies a file path for saving the running configuration. The file name must use the .cfg extension.
  • Page 210 If you do not specify the file-url option for the command, the command saves the running configuration to an .mdb binary file as well as a .cfg text file. The two files use the same file name. An .mdb file takes less time to load than a .cfg file. If you specify the file-url option for the command, the command only saves the running configuration to the specified .cfg file.
  • Page 211: Startup Saved-Configuration

    (To leave the existing filename unchanged, press the enter key): Validating file. Please wait... Saved the current configuration to mainboard device successfully. Chassis 1 Slot 1: Save next configuration file successfully. Related commands display current-configuration display saved-configuration startup saved-configuration Use startup saved-configuration to specify a file as a next-startup configuration file. Use undo startup saved-configuration to set the system to start up with factory defaults at the next startup.
  • Page 212 members. All IRF members must use the same type of storage medium as the default storage medium. If you do not specify either backup or main, the startup saved-configuration command specifies the main next-startup configuration file. Even though the main and backup next-startup configuration files can be the same one, specify them as separate files for high availability.
  • Page 213: Software Upgrade Commands

    Software upgrade commands Commands and descriptions for centralized devices apply to the following routers: • MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A). • MSR958 (JH300A/JH301A). • MSR1002-4/1003-8S. • MSR2003. • MSR2004-24/2004-48. • MSR3012/3024/3044/3064. Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers. The router can start up from the built-in flash memory or the USB disk.
  • Page 214 feature feature-package: Specifies a space-separated list of up to 30 .bin feature image files. Specify each .bin file in the filesystemname/filename.bin format. The files must be stored in the root directory of a file system on the device. The value string excluding the file system location section (if any) can have a maximum of 63 characters.
  • Page 215 If you specify an .ipe file, the command sets all images as startup software images except  for the image that does not have a license. For more information about licensing, see Fundamentals Configuration Guide. If the upgrade images are not stored on the hardware in the slot you specified to upgrade, the system automatically copies the images to that hardware.
  • Page 216: Boot-Loader Update

    The images that have passed all examinations will be used as the main startup software images at the next reboot on slot 0. # (Centralized devices in IRF mode.) Specify flash:/all.ipe as the main startup image file for IRF member device 1. <Sysname>...
  • Page 217 Syntax Distributed devices in standalone mode/centralized devices in IRF mode: boot-loader update { all | slot slot-number } Distributed devices in IRF mode: boot-loader update { all | chassis chassis-number slot slot-number } Views User view Predefined user roles network-admin Parameters all: Upgrades the standby MPU.
  • Page 218 The startup images synchronized to the subordinate device are set as main startup images, regardless of whether the source startup images are main or backup. • If the master device has started up with main startup images, its main startup images are synchronized to the subordinate device, regardless of whether any main startup image has been respecified on the master device.
  • Page 219: Bootrom Update

    Verifying the file flash:/ system.bin on chassis 1 slot 0..Done. Copying main startup software images to chassis 1 slot 1. Please wait... Done. Setting copied images as main startup software images for chassis 1 slot 1... Done. The images that have passed all examinations will be used as the main startup software images at the next reboot on chassis 1 slot 1.
  • Page 220: Display Boot-Loader

    subslot subslot-number-list: Specifies a list of up to seven subslot number items. Each item specifies a subcard by its subslot number or a range of subcards in the form of start-subslot-number to end-subslot-number. If you do not specify a subcard, this command loads the Boot ROM image for the base card.
  • Page 221 Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies the slot number of an MPU. If you do not specify an MPU, this command displays the software images on each MPU. (Distributed devices in standalone mode.) slot slot-number: Specifies the member ID of an IRF member device. If you do not specify a member device, this command displays the software images on each IRF member device.
  • Page 222: Firmware Update

    Main startup software images: flash:/boot.bin flash:/system.bin Backup startup software images: flash:/boot.bin flash:/system.bin Table 25 Command output Field Description This field displays the Comware images on the MPU in the specified slot. (Centralized devices in standalone mode.) Software images on slot slot-number This field displays the Comware images on the member device.
  • Page 223 slot slot-number: Specifies a card by its slot number. (Distributed devices in standalone mode.) slot slot-number: Specifies an IRF member device. The slot-number argument represents its IRF member ID. (Centralized devices in IRF mode.) subslot subslot-number: Specifies a subcard by its subslot number. If you do not specify a subcard, the command upgrades firmware for all subcards on the base card.
  • Page 224: Version Auto-Update Enable

    Updating firmware for CPLD on the specified card or subcard. Continue?[Y/N]:y Updating the firmware… Please power cycle the card or subcard to activate the firmware. # (Distributed devices in IRF mode.) Upgrade CPLD 1 in slot 1 on IRF member device 1. <Sysname>...
  • Page 225: Version Check Ignore

    version check ignore Use version check ignore to disable startup software version check for the standby MPU at startup. Use undo version check ignore to enable this feature. Syntax version check ignore undo version check ignore Default The startup software images on the standby MPU are checked for version inconsistency with the current software images on the active MPU.
  • Page 226: Issu Commands

    ISSU commands Commands and descriptions for centralized devices apply to the following routers: • MSR1002-4/1003-8S. • MSR2003. • MSR2004-24/2004-48. • MSR3012/3024/3044/3064. • MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A). • MSR958 (JH300A/JH301A). Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers. display install active Use display install active to display active software images.
  • Page 227 flash:/system.bin flash:/feature.bin # (Distributed devices in standalone mode/centralized devices in IRF mode.) Display active software images. <Sysname> display install active Active packages on slot 1: flash:/boot.bin flash:/system.bin flash:/feature.bin # (Distributed devices in IRF mode.) Display active software images. <Sysname> display install active Active packages on chassis 1 slot 1: flash:/boot.bin flash:/system.bin...
  • Page 228 Platform version: 7.1.022 Product version: Test 2201 Supported board: cen [Component] Component: test Description: test package # (Distributed devices in standalone mode/centralized devices in IRF mode.) Display detailed information about active software images. <Sysname> display install active verbose Active packages on slot 1: flash:/boot.bin [Package] Vendor: XXX...
  • Page 229 flash:/boot.bin [Package] Vendor: xxx Product: xxxx Service name: boot Platform version: 7.1.022 Product version: Test 2201 Supported board: mpu [Component] Component: boot Description: boot package flash:/system.bin [Package] Vendor: xxx Product: xxxx Service name: system Platform version: 7.1.022 Product version: Test 2201 Supported board: mpu [Component] Component: system...
  • Page 230: Display Install Backup

    Field Description Image type: • boot—Boot image. • system—System image. Service name • boot patch—Patch image for the boot image. • system patch—Patch image for the system image. • Any other value indicates a feature image. Cards supported by the software image: •...
  • Page 231 # Display detailed information about backup startup software images. <Sysname> display install backup verbose Backup startup software images on slot 1: flash:/boot-a0201.bin [Package] Vendor: HPE Product: xxxx Service name: boot Platform version: 7.1 Product version: Beta 1330 Supported board: mpu...
  • Page 232: Display Install Committed

    For information about the command output, see Table Related commands boot-loader file display install committed display install committed Use display install committed to display main startup software images. Syntax Centralized devices in standalone mode: display install committed [ verbose ] Distributed devices in standalone mode/centralized devices in IRF mode: display install committed [ slot slot-number ] [ verbose ] Distributed devices in IRF mode:...
  • Page 233 # Display detailed information about main startup software images. <Sysname> display install committed verbose Committed packages on slot 1: flash:/boot-a0201.bin [Package] Vendor: HPE Product: xxxx Service name: boot Platform version: 7.1 Product version: Beta 1330 Supported board: mr, lc, sfc...
  • Page 234: Display Install Inactive

    # Display detailed information about inactive software images in the root directories of the file systems. <Sysname> display install inactive verbose Inactive packages on slot 1: flash:/ssh-feature.bin [Package] Vendor: HPE Product: XXXX Service name: ssh Platform version: 7.1 Product version: Beta 1330 Supported board: mr, lc, sfc...
  • Page 235: Display Install Ipe-Info

    (if any) can have a maximum of 63 characters. Examples # Display information about the .ipe file flash:/test.ipe. <Sysname> display install ipe-info flash:/test.ipe Verifying the file flash:/test.ipe on the device....Done. HPE Device images in IPE: boot.bin system.bin Related commands display install package display install job Use display install job to display ongoing ISSU activate, deactivate, and rollback operations.
  • Page 236: Display Install Log

    Examples # (Centralized devices in standalone mode.) Display ongoing ISSU activate, deactivate, and rollback operations. <Sysname> display install job JobID:5 Action:install activate flash:/ssh-feature.bin on the device The output shows that the device is executing the install activate flash:/ssh-feature.bin command. # (Distributed devices in standalone mode/centralized devices in IRF mode.) Display ongoing ISSU activate, deactivate, and rollback operations.
  • Page 237: Display Install Package

    Install job 1 started by user root at 04/28/2016 08:39:29. Job 1 completed successfully at 04/28/2016 08:39:30. Install job 1 started by user root at 04/28/2016 08:39:29. Install activate flash:/ssh.bin on slot 1 Job 1 completed successfully at 04/28/2016 08:39:30. Install job 1 started by user root at 04/28/2016 08:39:29.
  • Page 238 Displays detailed information. If you do not specify this keyword, the command displays only basic software image information. Examples # Display information about system.bin. <Sysname> display install package flash:/system.bin flash:/system.bin [Package] Vendor: HPE Product: MSR2000 Service name: boot Platform version: 7.1.064P23 Product version: ESS 0602 Supported board: MSR2003,MSR2004-24,MSR2004-48 Software image signature: HP # Display detailed information about system.bin.
  • Page 239: Display Install Rollback

    Software image signature: HP For information about the command output, see Table display install rollback Use display install rollback to display rollback point information. Syntax display install rollback [ point-id ] Views Any view Predefined user roles network-admin network-operator Parameters point-id: Specifies a rollback point ID.
  • Page 240 # Display all software image files that include pkg_ctr. <Sysname> display install which file pkg_ctr Verifying the file flash:/msr2000-cmw710-system-e0602.bin on slot 1..Done. Found pkg_ctr in flash:/msr2000-cmw710-system-e0602.bin on slot 1. flash:/msr2000-cmw710-system-e0602.bin [Package] Vendor: HPE Product: MSR2000 Service name: system Platform version: 7.1.064 Product version: ESS 0602 Supported board: MSR2003,MSR2004-24,MSR2004-48 Software image signature: HP Verifying the file flash:/msr2000-cmw710-boot-e0602.bin on slot 1...Done.
  • Page 241: Display Version Comp-Matrix

    Field Description [Package] Detailed information about the software image. Image type: • boot—Boot image. • system—System image. Service name • patch—Patch image. • Any other value indicates a feature image. Cards supported by the software image: • cen—Centralized device. Supported board •...
  • Page 242 • Compatibility information for upgrade images. • Recommended ISSU methods for upgrading the running images to the upgrade images. If one or more images are incompatible, the incompatible upgrade method applies. The entire system needs to be rebooted during an incompatible upgrade. Examples # Display compatibility information for the running images.
  • Page 243 System image: flash:/system-e2205.bin Version: V200R001B02D012 Version compatibility list: V200R001B02D012 Version dependency boot list: 7.1.035 Feature image: flash:/dhcp-e2205.re.bin Version: V200R001B02D012 Version compatibility list: V200R001B02D012 Version dependency system list: V200R001B02D012 V200R001B02D014 Incompatible upgrade. # (Centralized devices in IRF mode.) Display compatibility information for upgrade images as well as the recommended ISSU method.
  • Page 244 # (Distributed devices in standalone mode.) Display compatibility information for a feature upgrade image as well as the recommended ISSU methods. (In this example, the specified image is compatible with the running images.) <Sysname> display version comp-matrix file feature flash:/cmw710-cfa-a7125.bin Verifying the file flash:/cmw710-cfa-a7125.bin on slot 0..Done.
  • Page 245 V700R001B31D002 Chassis Slot Upgrade Way Service Upgrade Service Upgrade Service Upgrade Service Upgrade Service Upgrade Service Upgrade Service Upgrade Service Upgrade Influenced service according to following table on chassis 1 slot 0: flash:/cmw710-cfa-a7122.bin Influenced service according to following table on chassis 1 slot 7: flash:/cmw710-cfa-a7122.bin Influenced service according to following table on chassis 1 slot 9: flash:/cmw710-cfa-a7122.bin...
  • Page 246: Install Abort

    Field Description are compatible with the system image. • Under a feature image, this field shows all feature image versions that are compatible with the feature image. Boot image versions that support the system image. To install the system Version dependency boot list image, you must install one of the boot image versions that are in the list.
  • Page 247: Install Activate

    To obtain the ID of a job, use the display install job command. Examples # Abort all ongoing ISSU operations. <Sysname> install abort Related commands display install job install activate Use install activate to activate software images, or identify the ISSU method and the possible impact on the device.
  • Page 248 all: Specifies all member devices. (Centralized devices in IRF mode.) all: Specifies all cards. (Distributed devices in IRF mode.) slot slot-number: Specifies a card by its slot number. (Distributed devices in standalone mode.) slot slot-number: Specifies an IRF member device by its member ID. (Centralized devices in IRF mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device.
  • Page 249 Upgrade Way: Service Upgrade Influenced service according to following table: flash:/ssh2.bin IFMGR LAGG The output shows that a service upgrade is recommended. The SSH, IFMGR, CFA, and LAGG modules will be rebooted during the upgrade. # (Distributed devices in standalone mode.) Identify the ISSU method for feature upgrade with ssh2.bin on the standby MPU (in slot 1) and the upgrade impact.
  • Page 250 <Sysname>install activate feature flash:/ssh2.bin chassis 1 slot 1 test Copying file flash:/ssh2.bin to chassis1#slot1#flash:/ssh2.bin..Done. Verifying the file flash:/ssh2.bin on chassis 1 slot 1..Done. Upgrade summary according to following table: flash:/ssh2.bin Running Version New Version Beta 1330 Beta 1331 Chassis Slot Upgrade Way Service Upgrade Influenced service according to following table:...
  • Page 251 Running Version New Version Beta 1330 Beta 1331 flash:/feature.bin Running Version New Version None Beta 1330 Slot Upgrade Way Service Upgrade Upgrading software images to compatible versions. Continue? [Y/N]:y This operation might take several minutes, please wait...............Done. # (Centralized devices in IRF mode.) Activate the system image in system.bin and the feature images in feature.bin on member device 2.
  • Page 252: Install Add

    This operation might take several minutes, please wait...............Done. Table 30 Command output Field Description Verifying the file The system was verifying the validity of the file. Upgrade summary according Upgrade summary. to following table Running Version Version number of the running software. New Version Version number of the new software.
  • Page 253: Install Commit

    Parameters ipe-filename: Specifies an .ipe file in the filesystemname/filename.ipe format. The file must be saved in the root directory of a file system on the device. The value string excluding the file system location section (if any) can have a maximum of 63 characters. filesystem: Specifies the destination file system for the software images in the filesystemname format.
  • Page 254: Install Deactivate

    Examples # Commit software changes. <Sysname> install commit This operation will take several minutes, please wait......Done. Related commands install activate install deactivate install rollback install deactivate Use install deactivate to deactivate feature images and patch images. Syntax Centralized devices in standalone mode: install deactivate feature filename&<1-30>...
  • Page 255: Install Remove

    chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (Distributed devices in IRF mode.) Usage guidelines You can deactivate only active feature and patch images.
  • Page 256: Install Rollback To

    Predefined user roles network-admin Parameters slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command deletes inactive software images from all cards. (Distributed devices in standalone mode.) slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command deletes inactive software images from all IRF members.
  • Page 257: Install Verify

    After an ISSU reboot or reboot upgrade is performed, you can roll back the running software images only to the status before any activate or deactivate operations were performed. After a commit operation is performed, you cannot perform a rollback. For a rollback to take effect after a reboot, you must perform a commit operation to update the main startup software image list.
  • Page 258 Views User view Predefined user roles network-admin Usage guidelines To ensure a successful ISSU and make sure the system can start up and operate correctly after an ISSU, execute this command to verify the following items: • Integrity—Verify that the boot, system, and feature images are integral. •...
  • Page 259 Verifying packages on slot 1: Start to check active package completeness. Verifying the file flash:/boot-a0101.bin on slot 1.....Done. flash:/boot-a0101.bin verification successful. Verifying the file flash:/system-a0101.bin on slot 1.....Done. flash:/system-a0101.bin verification successful. Start to check active package consistency. Active packages are consistent with committed packages on their own board. Active packages are consistent with the reference packages.
  • Page 260: Reset Install Log-History Oldest

    Active packages are consistent with committed packages on their own board. Active packages are consistent with the reference packages. Verifying packages on chassis 1 slot 1: Start to check active package completeness. Verifying the file flash:/boot-a0101.bin on chassis 1 slot 1.....Done. flash:/boot-a0101.bin verification successful.
  • Page 261 Usage guidelines This command clears the specified rollback point and all rollback points older than the specified rollback point. Examples # Clear rollback point 2 and all rollback points older than rollback point 2. <Sysname> reset install rollback oldest 2 Related commands display install rollback...
  • Page 262: Emergency Shell Commands

    Emergency shell commands Commands and descriptions for centralized devices apply to the following routers: • MSR1002-4/1003-8S. • MSR2003. • MSR2004-24/2004-48. • MSR3012/3024/3044/3064. • MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A). • MSR958 (JH300A/JH301A). Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers. File system names, directory names, or file names must be compliant with the naming conventions.
  • Page 263: Delete

    Examples # Copy the file flash:/test.cfg. Save the copy to the file flash:/testbackup.cfg. <boot> copy flash:/test.cfg flash:/testbackup.cfg Copy flash:/test.cfg to flash:/testbackup.cfg?[Y/N]:y Start to copy flash:/test.cfg to flash:/testbackup.cfg...Done. # Copy the file flash:/test.cfg and save the copy to the file flash:/testbackup.cfg. Overwrite the existing file that has the same name as the destination file.
  • Page 264 Task Command Remarks current directory. Display non-hidden files Specify a directory for the dir file-url subdirectories in a directory. file-url argument. Display all files and subdirectories in a Specify a directory for the dir /all file-url directory. file-url argument. Specify a file for the file-url Display a file.
  • Page 265: Display Copyright

    -rw- May 31 2016 05:04:40 lauth.dat -rw- 4383 May 20 2016 06:15:00 test.cfg 61440 KB total (11108 KB free) # Display information about the startup.cfg file. <boot> dir flash:/startup.cfg Directory of flash: -rw- 3231 May 31 2016 09:01:41 startup.cfg 61440 KB total (11108 KB free) Table 31 Command output Field Description...
  • Page 266: Display Ip Routing-Table

    63 characters. Examples # Display information about the system.bin software package. <boot> display install package flash:/system.bin flash:/msr2000-cmw710-system-e0602.bin [Package] Vendor: HPE Product: MSR2000 Service name: system Platform version: 7.1.064 Product version: ESS 0602 Supported board: MSR2003,MSR2004-24,MSR2004-48...
  • Page 267: Display Ipv6 Routing-Table

    Examples # Display IPv4 routing information. <boot> display ip routing-table Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.116.0 255.255.255.0 0 m-eth0 default 192.168.116.1 0.0.0.0 0 m-eth0 Table 33 Command output Field Description Kernel IP routing table IPv4 routing information.
  • Page 268: Display Version

    FE80::/64 0 m-eth0 FF02::1:2/128 FF02::1:2 2888 0 m-eth0 FF00::/8 0 m-eth0 Table 34 Command output Field Description Kernel IPv6 routing table IPv6 routing information. Flags: • A—The route was learned from a route advertisement. • C—The route is a cached route used to fast forward packets.
  • Page 269: Ftp

    Parameters filesystem: Specifies a file system. Usage guidelines Use this command with caution. This command permanently deletes all files and directories from the file system, including the startup image files and startup configuration files. The deleted files and directories cannot be restored. Without startup images, the device cannot reboot. Examples # Format the flash: file system.
  • Page 270: More

    Parameters directory: Specifies a directory. Usage guidelines You can create a directory only in an existing directory. For example, to create the flash:/test/mytest directory, the directory test must already exist. The name of the directory to be created must be unique in the parent directory. Examples # Create a directory named test in the root directory of the flash: file system.
  • Page 271: Ping

    fileurl-dest: Specifies the name of the destination file or directory, a case-insensitive string of 1 to 63 characters. Usage guidelines If a file in the destination directory is using the destination file name, the system prompts whether or not to overwrite the existing file. If you enter Y, the existing file is overwritten. If you enter N, the command is not executed.
  • Page 272: Ping Ipv6

    Table 35 Command output Field Description PING 1.2.1.1 (1.2.1.1) Checking the connectivity to the device at 1.2.1.1. 56 data bytes Number of data bytes in each ICMP echo request. Received an ICMP reply from the device at 1.2.1.1. Fields of the reply: •...
  • Page 273: Pwd

    56 bytes from 2001::2: seq=3 ttl=64 time=0.887 ms 56 bytes from 2001::2: seq=4 ttl=64 time=0.791 ms --- 2001::2 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 0.791/2.053/5.420 ms For information about the fields, see Table Use pwd to display the working directory.
  • Page 274: Reset Ssh Public-Key

    Examples # (Centralized devices in standalone mode.) Reboot the device. <boot> reboot # (Distributed devices in standalone or IRF mode.) Reboot the current MPU. <boot> reboot # (Centralized devices in IRF mode.) Reboot the current member device. <boot> reboot reset ssh public-key Use reset ssh public-key to delete all SSH server public keys saved on the device.
  • Page 275: Rmdir

    * Copyright (c) 2010-2016 Hewlett Packard Enterprise Development LP * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ****************************************************************************** <Sysname.59> rmdir Use rmdir to delete an existing directory. Syntax rmdir directory Views User view Parameters directory: Specifies the directory to be deleted.
  • Page 276: Ssh2

    Examples # Shut down the management Ethernet interface. <boot> system-view [boot] interface m-eth0 [boot-m-eth0] shutdown # Bring up the management Ethernet interface. [boot-m-eth0] undo shutdown ssh2 Use ssh2 to log in to an SSH server. Syntax ssh2 { server-ipv4-address | ipv6 server-ipv6-address } Views User view Parameters...
  • Page 277: System-View

    * no decompiling or reverse-engineering shall be allowed. ****************************************************************************** <Syaname.59> system-view Use system-view to enter system view from user view. Syntax system-view Views User view Examples # Enter system view from user view. <boot> system-view [boot] Related commands quit telnet Use telnet to log in to a Telnet server.
  • Page 278 Views User view Parameters server-ipv4-address: Specifies the IPv4 address of the TFTP server in dotted decimal notation. server-ipv6-address: Specifies the IPv6 address of the TFTP server. get remote-file local-file: Downloads a file from the TFTP server. The remote-file argument indicates the file to be downloaded.
  • Page 279: Automatic Configuration Commands

    Automatic configuration commands autodeploy sms enable Use autodeploy sms enable to enable SMS-based automatic configuration. Use undo autodeploy sms enable to disable SMS-based automatic configuration. Syntax autodeploy sms enable undo autodeploy sms enable Default SMS-based automatic configuration is enabled. Views System view Predefined user roles network-admin...
  • Page 280: Security Zone Commands

    Security zone commands display security-zone Use display security-zone to display security zone information. Syntax display security-zone [ name zone-name ] Views Any view Predefined user roles network-admin network-operator Parameters name zone-name: Specifies the security zone name, a case-insensitive string of 1 to 31 characters. If you do not specify this option, the command displays all security zones, including system-defined and user-defined security zones.
  • Page 281: Import Interface

    Views Any view Predefined user roles network-admin network-operator Examples # Display all zone pairs. <Sysname> display zone-pair security Source zone Destination zone Local Trust Local import interface Use import interface to add Layer 3 interfaces to a security zone, including Layer 3 Ethernet interfaces, Layer 3 Ethernet subinterfaces, and other types of Layer 3 logical interfaces.
  • Page 282: Security-Zone

    security-zone Use security-zone to create a security zone and enter its view, or enter the view of an existing security zone. Use undo security-zone to delete a security zone. Syntax security-zone name zone-name undo security-zone name zone-name Default No security zone exists. Views System view Predefined user roles...
  • Page 283: Zone-Pair Security

    Use undo security-zone intra-zone default permit to restore the default. Syntax security-zone intra-zone default permit undo security-zone intra-zone default permit Default The default action is deny for packets exchanged between interfaces in the same security zone. Views System view Predefined user roles network-admin Usage guidelines The default action is used when no zone pair is configured from the security zone to the security...
  • Page 284 Usage guidelines A zone pair has a source security zone and a destination security zone. The device examines received first data packets and uses zone pairs to identify data flows. A zone pair defined by using the zone-pair security source any destination any command matches all packets from one security zone to another security zone.
  • Page 285: Device Management Commands

    Device management commands Commands and descriptions for centralized devices apply to the following routers: • MSR1002-4/1003-8S. • MSR2003. • MSR2004-24/2004-48. • MSR3012/3024/3044/3064. • MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A). • MSR958 (JH300A/JH301A). Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers. card-mode Use card-mode to set the operating mode for an interface card.
  • Page 286 • e-cpos: Specifies the E-CPOS mode. All interfaces on the interface card act as 2.5 Gbps CPOS interfaces. • efm: Specifies the EFM mode. All interfaces on the interface card act as EFM interfaces. • ipsec: Specifies the IPsec mode. •...
  • Page 287: Clock Datetime

    # (Distributed devices in standalone mode.) Set the operating mode to E3 for the subcard in subslot 1 of interface card 2. <Sysname> system-view [Sysname] card-mode slot 2 subslot 1 e3 Please reboot or hot-swap the board or card (if supported) to make the configuration take effect.
  • Page 288: Clock Protocol

    <Sysname> clock datetime 8:10 2016/1/1 Related commands clock protocol clock summer-time clock timezone display clock clock protocol Use clock protocol to specify the system time source. Use undo clock protocol to restore the default. Syntax clock protocol { none | ntp} undo clock protocol Default The device uses the NTP time source.
  • Page 289: Clock Summer-Time

    clock summer-time Use clock summer-time to set the daylight saving time. Use undo clock summer-time to restore the default. Syntax clock summer-time name start-time start-date end-time end-date add-time undo clock summer-time Default The daylight saving time is not set. Views System view Predefined user roles network-admin...
  • Page 290: Clock Timezone

    Usage guidelines Correct system time is essential to network management and communication. You must configure the system time correctly before you run the device on the network. After you set the daylight saving time, the device recalculates the system time. To view the system time, use the display clock command Make sure all devices on the network are using the same daylight saving time as the local time.
  • Page 291: Command

    Make sure all devices on the network are using the same time zone as the local time. Examples # Set the name of the local time zone to Z5, and add 5 hours to the UTC time. <Sysname> system-view [Sysname] clock timezone Z5 add 5 Related commands clock datetime clock summer-time...
  • Page 292: Copyright-Info Enable

    [Sysname] scheduler job backupconfig [Sysname-job-backupconfig] command 2 tftp 192.168.100.11 put flash:/startup.cfg backup.cfg # Assign commands to the shutdownGE job to shut down GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] scheduler job shutdownGE [Sysname-job-shutdownGE] command 1 system-view [Sysname-job-shutdownGE] command 2 interface gigabitethernet 1/0/1 [Sysname-job-shutdownGE] command 3 shutdown Related commands scheduler job...
  • Page 293 display alarm [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies the entire device. The value is fixed at 0. (Centralized devices in standalone mode.) slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays alarm information for all cards.
  • Page 294: Display Clock

    Field Description generated by the chassis. (Centralized devices in IRF mode.) Alarm severity. Possible values include ERROR, WARNING, NOTICE, and INFO, in Level descending order. Detailed alarm information: • faulty—The card is starting up or faulty. • Fan n is absent—The specified fan is absent. •...
  • Page 295: Display Copyright

    network-operator Examples # Display the system time and date when the local time zone is not specified. <Sysname> display clock 10:09:00 UTC Fri 03/16/2016 # Display the system time and date when the local time zone Z5 is specified. <Sysname> display clock 15:10:00 Z5 Fri 03/16/2016 Time Zone : Z5 add 05:00:00 # Display the system time and date when the local time zone Z5 and daylight saving time PDT are...
  • Page 296 Distributed devices in IRF mode: display cpu-usage [ summary ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles network-admin network-operator Parameters summary: Displays CPU usage statistics in table form. If you do not specify this keyword, the command displays CPU usage statistics in text form.
  • Page 297 1% in last 5 minutes # (Distributed devices in standalone mode.) Display the current CPU usage statistics in table form. <Sysname> display cpu-usage Slot CPU Last 5 sec Last 1 min Last 5 min # (Centralized devices in IRF mode.) Display the current CPU usage statistics for all member devices in text form.
  • Page 298: Display Cpu-Usage Configuration

    Table 40 Command output Field Description Unit CPU usage CPU usage statistics. (Centralized devices in standalone mode.) Member ID of the IRF member device. (Distributed devices in IRF Chassis mode.) Member ID of the IRF member device. (Centralized devices in IRF mode.) Slot Slot number of the card.
  • Page 299: Display Cpu-Usage History

    slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays the CPU usage monitoring settings for the master device. (Centralized devices in IRF mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device.
  • Page 300 any options, this command displays the statistics for all processes on all cards. (Distributed devices in standalone mode.) slot slot-number: Specifies an IRF member device by its member ID. If you specify a process but do not specify a member device, this command displays the statistics for the process on the master device.
  • Page 301 ######## ------------------------------------------------------------ (minutes) cpu-usage (Chassis 1 slot 0 CPU 0) last 60 minutes (SYSTEM) The output shows the following items: • Process name. The name SYSTEM represents the entire system. • CPU that is holding the process: CPU 0 in slot 0 of member device 1. •...
  • Page 302: Display Device

    20 minutes ago: Approximately 5%.  Other time: 2% or lower than 2%.  Related commands monitor cpu-usage enable monitor cpu-usage interval display device Use display device to display device information. Syntax Centralized devices in standalone mode: display device [ cf-card | harddisk | usb ] [ slot slot-number | verbose ] Distributed devices in standalone mode/centralized devices in IRF mode: display device [ cf-card | harddisk | usb ] [ slot slot-number [ subslot subslot-number ] | verbose ] Distributed devices in IRF mode:...
  • Page 303 Hardware Keyword compatibility MSR1002-4/1003-8S MSR2003 MSR2004-24/2004-48 MSR3012/3024/3044/3064 MSR4060/4080 usb: Specifies the device connected to the USB interface. chassis chassis-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays hardware information for all member devices. (Distributed devices in IRF mode.) slot slot-number: Specifies a subcard by its slot number.
  • Page 304 # (Distributed devices in standalone mode.) Display device information. <Sysname> display device Slot No. Brd Type Brd Status Subslot Num Sft Ver Patch Ver MPU-100 Standby AAAAAA-0000 None MPU-100 Master AAAAAA-0000 None SPU-300 Normal AAAAAA-0000 None NONE Absent NONE None The output shows that the device has two MPUs and one interface card.
  • Page 305: Display Device Manuinfo

    # (Distributed devices in IRF mode.) Display device information about all IRF member devices. <Sysname> display device Chassis Slot Type State Subslot Soft Ver Patch Ver MPU-100 Master AAAAAA-0000 None NONE Absent NONE None SPU-300 Normal AAAAAA-0000 None NONE Absent NONE None SPU-300...
  • Page 306 : aaaa DEVICE_SERIAL_NUMBER : xxxx MAC_ADDRESS : 000F-E26A-58EA MANUFACTURING_DATE : 2016-01-10 VENDOR_NAME : HPE PRODUCT ID : XXXXXX # (Distributed devices in standalone mode.) Display electronic label information for the device. <Sysname> display device manuinfo Slot 0 CPU 0: DEVICE_NAME...
  • Page 307 MANUFACTURING_DATE : 2016-01-10 VENDOR_NAME : HPE PRODUCT ID : RT-MPU-100 Slot 2 CPU 0: DEVICE_NAME : RT-MPU-100 DEVICE_SERIAL_NUMBER : 210231A76VX081000020 MAC_ADDRESS : No MANUFACTURING_DATE : 2016-02-2 VENDOR_NAME : HPE PRODUCT ID : RT-MPU-100 # (Centralized devices in IRF mode.) Display electronic label information for the device.
  • Page 308: Display Device Manuinfo Fan

    Slot 1 CPU 0: subslot 0 DEVICE_NAME : RT-MPU-100 DEVICE_SERIAL_NUMBER : 210231A1UXB137000174 MAC_ADDRESS : 7425-8A76-09AA MANUFACTURING_DATE : 2016-05-26 VENDOR_NAME : HPE PRODUCT ID : RT-MPU-100 Slot 2 CPU 0: subslot 0 DEVICE_NAME : RT-SPU-200 DEVICE_SERIAL_NUMBER : 210231A1V0B139000007 MAC_ADDRESS : 7425-8AEA-1FF4...
  • Page 309 DEVICE_SERIAL_NUMBER : 210235A36L1234567890 MAC_ADDRESS : NONE MANUFACTURING_DATE : 2016-01-20 VENDOR_NAME : HPE # (Centralized devices in IRF mode.) Display electronic label information for fan 2 on IRF member device 1. <Sysname> display device manuinfo fan 2 Slot 1: Fan 2:...
  • Page 310: Display Device Manuinfo Power

    MANUFACTURING_DATE : 2016-01-20 VENDOR_NAME : HPE display device manuinfo power Use display device manuinfo power to display electronic label information for a power supply. Syntax Distributed devices in standalone mode/centralized devices in standalone mode: display device manuinfo power power-id Centralized devices in IRF mode:...
  • Page 311: Display Diagnostic-Information

    MAC_ADDRESS : NONE MANUFACTURING_DATE : 2016-01-20 VENDOR_NAME : HPE # (Centralized devices in IRF mode.) Display electronic label information for power supply 2 on IRF member device 1. <Sysname> display device manuinfo slot 1 power 2 Slot 1: Power 2:...
  • Page 312 Predefined user roles network-admin network-operator Parameters hardware: Specifies hardware-related operating information. infrastructure: Specifies operating information for the fundamental features. l2: Specifies operating information for the Layer 2 features. l3: Specifies operating information for the Layer 3 features. service: Specifies operating information for Layer 4 and upper-layer features. filename: Saves the information to a file.
  • Page 313: Display Environment

    Please wait... Related commands more tar extract display environment Use display environment to display temperature information, including the temperature thresholds and the current temperature values. Syntax Centralized devices in standalone mode: display environment Distributed devices in standalone mode: display environment [ slot slot-number ] Centralized devices in IRF mode: display environment [ slot slot-number ] Distributed devices in IRF mode:...
  • Page 314 Hardware Command compatibility MSR2004-24/2004-48 MSR3012/3024/3044/3064 MSR4060/4080 Examples # (Centralized devices in standalone mode.) Display information about all temperature sensors on the device. <Sysname> display environment Slot Subslot Sensor ID Temperature LowerLimit WarningLimit AlarmLimit ---------------------------------------------------------------------- inflow hotspot 1 # (Distributed devices in standalone mode.) Display information about all temperature sensors on the device.
  • Page 315: Display Fan

    Field Description Slot A number in this field indicates a card. (Distributed devices in standalone mode.) A number in this field indicates an IRF member device. (Centralized devices in IRF Slot mode.) A number in this field indicates a sensor on the frame or fan tray of an IRF member Slot device.
  • Page 316: Display Memory

    display memory Use display memory to display memory usage information. Syntax Centralized devices in standalone mode: display memory [ summary ] Distributed devices in standalone mode/centralized devices in IRF mode: display memory [ summary ] [ slot slot-number [ cpu cpu-number ] ] Distributed devices in IRF mode: display memory [ summary ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] Views...
  • Page 317: Display Memory-Threshold

    Field Description Member ID of the IRF member device. (Centralized devices in IRF mode.) Slot number of the card. (Distributed devices in IRF or standalone mode.) Number of the CPU. Memory usage information. Total size of the physical memory space that can be allocated. The memory space is virtually divided into two parts.
  • Page 318 slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays the memory usage thresholds and statistics for the master device. (Centralized devices in IRF mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device.
  • Page 319: Display Power

    display power Use display power to display power supply information. Syntax Distributed devices in standalone mode/centralized devices in standalone mode: display power [ power-id ] Centralized devices in IRF mode: display power [ slot slot-number [ power-id ] ] Distributed devices in IRF mode: display power [ chassis chassis-number [ power-id ] ] Views Any view...
  • Page 320: Display Scheduler Job

    Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays power supply information for all member devices. (Centralized devices in IRF mode.) chassis chassis-number: Specifies an IRF member device by its member ID.
  • Page 321: Display Scheduler Logfile

    display scheduler logfile Use display scheduler logfile to display job execution log information. Syntax display scheduler logfile Views Any view Predefined user roles network-admin network-operator Examples # Display job execution log information. <Sysname> display scheduler logfile Logfile Size: 1902 Bytes. Job name : shutdown Schedule name...
  • Page 322: Display Scheduler Schedule

    Views Any view Predefined user roles network-admin network-operator Examples # Display the automatic reboot schedule. <Sysname> display scheduler reboot System will reboot at 16:32:00 05/23/2016 (in 1 hours and 39 minutes). Related commands scheduler reboot at scheduler reboot delay display scheduler schedule Use display scheduler schedule to display schedule information.
  • Page 323: Display System Stable State

    Field Description Time to execute the schedule for the first time. If no execution time is specified, this Start time field is not displayed. Last time when the schedule was executed. If no execution time is specified, this field Last execution is not displayed.
  • Page 324 <Sysname> display system stable state System state : Not ready Redundancy state: Not ready Slot Role State Active Stable Standby HA batch backup # (Distributed devices in IRF mode.) Display system stability and status information. <Sysname> display system stable state System state : Not ready Redundancy state: Stable...
  • Page 325: Display Transceiver Alarm

    display transceiver alarm Use display transceiver alarm to display transceiver alarms. Syntax display transceiver alarm interface [ interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator Parameters interface [ interface-type interface-number ]: Specifies an interface by its type and number. If no interface is specified, this command displays the alarms present on every transceiver module.
  • Page 326: Display Transceiver Diagnosis

    Field Description Avalanche photo diode Thermoelectric cooler XENPAK: Receive Transmit power Optical power Temp Temperature WAN interface sublayer PMA/PMD Physical medium attachment/physical medium dependent Physical coding sublayer PHY XS PHY extended sublayer Examples # Display the alarms present on the transceiver module in interface GigabitEthernet 1/0/1. <Sysname>...
  • Page 327: Display Transceiver Interface

    Usage guidelines This command cannot display information about some transceiver modules. Examples # Display the current values of the digital diagnosis parameters on the transceiver module in interface GigabitEthernet 1/0/1. <Sysname> display transceiver diagnosis interface gigabitethernet 1/0/1 GigabitEthernet1/0/1 transceiver diagnostic information: Current diagnostic parameters: Temp(°C) Voltage(V)
  • Page 328: Display Transceiver Manuinfo

    Wavelength(nm) : 850 Transfer Distance(m) : 550(50um),270(62.5um) Digital Diagnostic Monitoring : YES Vendor Name : HPE Ordering Name : SFP-GE-SX-MM850 Table 55 Command output Field Description Connector types: • SC—Fiber connector developed by NTT. • LC—1.25 mm/RJ-45 fiber connector developed by Lucent.
  • Page 329: Display Version

    GigabitEthernet1/0/1 transceiver manufacture information: Manu. Serial Number : 213410A0000054000251 Manufacturing Date : 2016-06-01 Vendor Name : HPE Table 56 Command output Field Description Manu. Serial Number Serial number generated during production of the transceiver module. Date when the electronic label information was written to the transceiver Manufacturing Date module.
  • Page 330: Header

    Syntax display version-update-record Views Any view Predefined user roles network-admin network-operator Usage guidelines The device records its current startup software version information and all subsequent version update information. Such information can survive reboots. The maximum number of records is 10. Examples # Display the startup software image upgrade records.
  • Page 331 Views System view Predefined user roles network-admin Parameters incoming: Configures the banner to be displayed before a modem dial-in user accesses user view. If authentication is required, the incoming banner appears after the authentication is passed. legal: Configures the banner to be displayed before a user inputs the username and password to access the CLI.
  • Page 332: Job

    Welcome to login(header login) Login authentication Password: Welcome to shell(header shell) Use job to assign a job to a schedule. Use undo job to revoke a job. Syntax job job-name undo job job-name Default No job is assigned to a schedule. Views Schedule view Predefined user roles...
  • Page 333 Syntax Centralized devices in standalone mode: memory-threshold minor minor-value severe severe-value critical critical-value normal normal-value undo memory-threshold Distributed devices in standalone mode/centralized devices in IRF mode: memory-threshold [ slot slot-number [ cpu cpu-number ] ] minor minor-value severe severe-value critical critical-value normal normal-value undo memory-threshold [ slot slot-number [ cpu cpu-number ] ] Distributed devices in IRF mode: memory-threshold [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] minor...
  • Page 334 Hardware Value range MSR958 (JH300A/JH301A) 0 to 1004 MSR1002-4/1003-8S 0 to 1003 MSR2003 0 to 1003 MSR2004-24/2004-48 0 to 1003 MSR3012/3024/3044/3064 0 to 1972 MSR4060/4080 0 to 1972 critical critical-value: Specifies the critical alarm threshold. This threshold must be equal to or less than the severe alarm threshold.
  • Page 335: Memory-Threshold Usage

    cpu cpu-number: Specifies a CPU by its number. (Centralized devices in IRF mode/distributed devices in IRF or standalone mode.) Usage guidelines To ensure correct operation and improve memory efficiency, the system monitors the amount of free memory space in real time. If the amount of free memory space exceeds a free-memory threshold, the system generates an alarm notification and sends it to affected service modules or processes.
  • Page 336: Monitor Cpu-Usage Enable

    slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command sets the memory usage threshold for the master device. (Centralized devices in IRF mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device.
  • Page 337: Monitor Cpu-Usage Interval

    slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command enables CPU usage monitoring for the master device. (Centralized devices in IRF mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device.
  • Page 338: Monitor Cpu-Usage Threshold

    slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command sets the interval for the master device. (Centralized devices in IRF mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device.
  • Page 339: Password-Recovery Enable

    Parameters cpu-threshold: Specifies the CPU usage threshold in percentage. The value range is 0 to 100. slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command sets the CPU usage threshold for the active MPU. (Distributed devices in standalone mode.) slot slot-number: Specifies an IRF member device by its member ID.
  • Page 340: Power-Supply Off

    To enhance system security, disable password recovery capability. Availability of Boot ROM menu options depends on the password recovery capability setting. For more information, see the release notes. Examples # Disable password recovery capability. <Sysname> system-view [Sysname] undo password-recovery enable power-supply off Use power-supply off to power off a card or subcard.
  • Page 341: Power-Supply On

    Examples # (Distributed devices in standalone mode.) Power off the card in slot 9. <Sysname> power-supply off slot 9 # (Distributed devices in IRF mode.) Power off the card in slot 3 on member device 1. <Sysname> power-supply off chassis 1 slot 3 power-supply on Use power-supply on to power on a card or subcard.
  • Page 342: Power-Supply Policy Enable

    power-supply policy enable Use power-supply policy enable to enable power supply management. Use undo power-supply policy enable to disable power supply management. Syntax Distributed devices in standalone mode: power-supply policy enable undo power-supply policy enable Distributed devices in IRF mode: power-supply policy chassis chassis-number enable undo power-supply policy chassis chassis-number enable Default...
  • Page 343: Power-Supply Policy Redundant

    power-supply policy redundant Use power-supply policy redundant to specify the number of redundant power supplies. Use undo power-supply policy redundant to restore the default. Syntax Distributed devices in standalone mode: power-supply policy redundant module-count undo power-supply policy redundant Distributed devices in IRF mode: power-supply policy chassis chassis-number redundant module-count undo power-supply policy chassis chassis-number redundant Default...
  • Page 344: Reboot

    [Sysname] power-supply policy redundant 3 # (Distributed devices in IRF mode.) Set the number of redundant power supplies on IRF member device 1 to 3. <Sysname> system-view [Sysname] power-supply policy chassis 1 redundant 3 reboot Use reboot to reboot the device or a subcard. (Centralized devices in standalone mode.) Use reboot to reboot a card, a subcard, or the entire system.
  • Page 345 Usage guidelines CAUTION: • A reboot might interrupt network services. • If the main startup software images are corrupt or missing, you must re-specify a set of main startup software images before executing the reboot command. • Use the force keyword only when the device fails or a reboot command without the force keyword cannot perform a reboot correctly.
  • Page 346 − Use the display system stable state command to display system stability and status information. If the IRF fabric has only one MPU, the IRF fabric will be rebooted. If the IRF fabric has a global standby MPU and the MPU is operating correctly, a switchover will occur. NOTE: To ensure correct operation of the IRF fabric and MPUs, do not trigger a switchover by rebooting the global active MPU if the status of a card is not Stable.
  • Page 347: Remove

    <Sysname> reboot slot 2 force A forced reboot might cause the storage medium to be corrupted. Continue? [Y/N]:y Now rebooting, please wait... # (Distributed devices in IRF mode.) Reboot IRF member device 2. <Sysname> reboot chassis 2 Start to check configuration with next startup configuration file, please wait..DONE! This command will reboot the specified chassis, Continue? [Y/N]:y Now rebooting, please wait...
  • Page 348: Reset Scheduler Logfile

    slot slot-number : Specifies an IRF member device by its member ID. (Centralized devices in IRF mode.) chassis chassis-number: Specifies an IRF member device by its member ID. (Distributed devices in IRF mode.) Usage guidelines CAUTION: Unmounting an HMIM module stops all services provided by the module. The following matrix shows the command and hardware compatibility: Hardware Command compatibility...
  • Page 349: Restore Factory-Default

    Examples # Clear job execution log information. <Sysname> reset scheduler logfile Related commands display scheduler logfile restore factory-default Use restore factory-default to restore the factory-default configuration for the device. Syntax restore factory-default Views User view Predefined user roles network-admin Usage guidelines CAUTION: This command is disruptive.
  • Page 350: Scheduler Logfile Size

    Predefined user roles network-admin Parameters job-name: Specifies the job name, a case-sensitive string of 1 to 47 characters. Usage guidelines A job can be referenced by multiple schedules. In job view, you can assign commands to the job. Examples # Create a job named backupconfig and enter job view. <Sysname>...
  • Page 351: Scheduler Reboot Delay

    Use undo scheduler reboot to delete the reboot schedule configuration. Syntax scheduler reboot at time [ date ] undo scheduler reboot Default No reboot date or time is specified. Views User view Predefined user roles network-admin Parameters time: Specifies the reboot time in the hh:mm format. The value range for hh is 0 to 23. The value range for mm is 0 to 59.
  • Page 352: Scheduler Schedule

    Default No reboot delay time is specified. Views User view Predefined user roles network-admin Parameters time: Specifies the reboot delay time in the hh:mm or mm format. This argument can contain up to six characters. When in the hh:mm format, mm must be in the range of 0 to 59. Usage guidelines CAUTION: Device reboot interrupts network services.
  • Page 353: Shutdown-Interval

    To configure a schedule: Use the scheduler job command to create a job and enter job view. Use the command command to assign commands to the job. Use the scheduler schedule command to create a schedule and enter schedule view. Use the job command to assign the job to the schedule.
  • Page 354: Sysname

    Use sysname to set the device name. Use undo sysname to restore the default. Syntax sysname sysname undo sysname Default The default device name is HPE. Views System view Predefined user roles network-admin Parameters sysname: Specifies a name for the device, a string of 1 to 64 characters.
  • Page 355: Time Once

    Views Schedule view Predefined user roles network-admin Parameters time: Specifies the schedule execution time in the hh:mm format. The value range for hh is 0 to 23. The value range for mm is 0 to 59. date: Specifies the schedule execution date in the MM/DD/YYYY or YYYY/MM/DD format. The value range for YYYY is 2000 to 2035.
  • Page 356: Time Repeating

    week-day week-day&<1-7>: Specifies a space-separated list of up to seven week days for the schedule. Valid week day values include Mon, Tue, Wed, Thu, Fri, Sat, and Sun. delay time: Specifies the delay time for executing the schedule, in the hh:mm or mm format. This argument can have up to six characters.
  • Page 357 Default No execution time table is specified for a periodic schedule. Views Schedule view Predefined user roles network-admin Parameters at time: Specifies the execution time in the hh:mm format. The value range for hh is 0 to 23. The value range for mm is 0 to 59. If you do not specify this option, the current system time is used as the execution time.
  • Page 358: Usb Disable

    [Sysname-schedule-saveconfig] time repeating at 8:00 month-date last # Configure the device to execute schedule saveconfig at 8:00 a.m. every Friday and Saturday. <Sysname> system-view [Sysname] scheduler schedule saveconfig [Sysname-schedule-saveconfig] time repeating at 8:00 week-day fri sat Related commands scheduler schedule usb disable Use usb disable to disable all USB interfaces.
  • Page 359 Default A schedule has the user roles of the schedule creator. Views Schedule view Predefined user roles network-admin Parameters role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role can be user-defined or predefined. Predefined user roles include network-admin, network-operator, and level-0 to level-15.
  • Page 360: Tcl Commands

    Tcl commands Use cli to enable a Comware command to be executed in Tcl configuration view when it conflicts with a Tcl command. Syntax cli command Views Tcl configuration view Predefined user roles network-admin Parameters command: Specifies the commands to be executed. They must be complete command lines. Usage guidelines In Tcl configuration view, if a Comware command conflicts with a Tcl command, the Tcl command will be executed.
  • Page 361: Tclsh

    Views Tcl configuration view Predefined user roles network-admin Usage guidelines To return from Tcl configuration view to user view, you can also use the quit command. To return to the upper-level view after you execute Comware commands to enter system view or a Comware feature view, use the quit command.
  • Page 362: Python Commands

    Python commands python Use python to enter the Python shell. Syntax python Views User view Predefined user roles network-admin Usage guidelines In the Python shell, you can use the following items: • Python 2.7 commands. • Python 2.7 standard API. •...
  • Page 363 Usage guidelines You cannot perform any operations while a Python script is being executed by your command. Make sure the statements in the script meet the syntax requirements. The system stops executing a Python script if it finds a statement with syntax errors. When executing a script, the system uses the defaults for interactive statements.
  • Page 364: Document Conventions And Icons

    Document conventions and icons Conventions This section describes the conventions used in the documentation. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown.
  • Page 365: Network Topology Icons

    Network topology icons Convention Description Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
  • Page 366: Support And Other Resources

    Support and other resources Accessing Hewlett Packard Enterprise Support • For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website: www.hpe.com/assistance • To access documentation and support services, go to the Hewlett Packard Enterprise Support Center website: www.hpe.com/support/hpesc Information to collect •...
  • Page 367: Websites

    For more information and device support details, go to the following website: www.hpe.com/info/insightremotesupport/docs Documentation feedback Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hpe.com). When submitting your feedback, include the document title,...
  • Page 368 part number, edition, and publication date located on the front cover of the document. For online help content, include the product name, product version, help edition, and publication date located on the legal notices page.
  • Page 369: Index

    Index A B C D E F G H I J L M N O P Q R S T U V W Z databits,54 debug,118 activation-key,48 delete,255 alias,1 delete,156 append,114 delete,118 archive configuration,179 description,14 archive configuration interval,180 dir,119 archive configuration location,180 dir,255 archive configuration...
  • Page 370 display install ipe-info,227 free ftp user,108 display install job,227 free ftp user-ip,109 display install log,228 free ftp user-ip ipv6,109 display install package,257 free line,64 display install package,229 free user-interface,67 display install rollback,231 ftp,121 display install which,231 ftp,261 display ip routing-table,258 ftp client ipv6 source,122 ftp client...
  • Page 371 ls,127 reboot,265 redirect disconnect,81 redirect enable,82 md5sum,164 redirect listen-port,82 memory-threshold,324 redirect passthrough,83 memory-threshold usage,327 redirect refuse-negotiation,84 mkdir,164 redirect timeout,84 mkdir,128 reget,133 mkdir,261 Remote support,359 monitor cpu-usage enable,328 remove,339 monitor cpu-usage interval,329 rename,169 monitor cpu-usage threshold,330 rename,133 more,165 repeat,11 more,262 reset,134 mount,167 reset install log-history oldest,252...
  • Page 372 shell,89 telnet server port,98 shutdown,267 terminal type,99 shutdown-interval,345 tftp,269 speed,90 tftp,143 ssh2,268 tftp client ipv6 source,144 startup saved-configuration,203 tftp client source,145 status,139 tftp ipv6,146 stopbit-error intolerance,91 tftp-server acl,147 tftp-server ipv6 acl,148 stopbits,91 super,42 time at,346 time once,347 super authentication-mode,43 time repeating,348 super default role,44...

Table of Contents