H3C S5830V2 Command Reference Manual

H3C S5830V2 Command Reference Manual

Switch series fundamentals
Hide thumbs Also See for S5830V2:
Table of Contents

Advertisement

H3C S5830V2 & S5820V2 Switch Series
Fundamentals

Command Reference

Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: 6W100-20160130
Document version: Release 2422P01

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the S5830V2 and is the answer not in the manual?

Questions and answers

Summary of Contents for H3C S5830V2

  • Page 1: Command Reference

    H3C S5830V2 & S5820V2 Switch Series Fundamentals Command Reference Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Software version: 6W100-20160130 Document version: Release 2422P01...
  • Page 2 , H3CS, H3CIE, H3CNE, Aolynk, Care, , IRF, NetPilot, Netflow, SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners Notice The information in this document is subject to change without notice.
  • Page 3 Preface The H3C S5830V2 & S5820V2 documentation set describes the commands and command syntax options available for the H3C S5830V2 & S5820V2 Switch Series. The Fundamentals Command Reference describes commands that help you get started with the device, including: •...
  • Page 4 Convention Description Braces enclose a set of required syntax choices separated by vertical bars, from which { x | y | ... } you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, [ x | y | ... ] from which you select one or none.
  • Page 5 Represents a security card, such as a firewall, load balancing, NetStream, SSL VPN, IPS, or ACG card. About the H3C S5830V2 & S5820V2 documentation set The H3C S5830V2 & S5820V2 documentation set includes the following categories of documents: Category Documents Purposes...
  • Page 6: Obtaining Documentation

    Obtaining documentation Access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com. Click the following links to obtain different categories of product documentation: [Technical Documents]—Provides hardware installation, software upgrading, and software feature...
  • Page 7: Table Of Contents

    Contents Basic CLI commands ······················································································ 1     command-alias enable ······························································································································· 1   command-alias mapping ···························································································································· 1   display | { begin | exclude | include } ·········································································································· 2   display | by-linenum ··································································································································· 3   display > ····················································································································································· 4  ...
  • Page 8 RBAC commands ························································································· 47     description ················································································································································ 47   display role ··············································································································································· 47   display role feature ··································································································································· 49   display role feature-group ························································································································ 51   feature ······················································································································································ 53   interface policy deny ································································································································ 53   permit interface ········································································································································ 54  ...
  • Page 9   quit ··························································································································································· 96   reget ························································································································································· 96   rename ····················································································································································· 97   reset ························································································································································· 97   restart ······················································································································································· 98   rhelp ························································································································································· 98   rmdir ······················································································································································· 100   rstatus ···················································································································································· 101   status ······················································································································································ 102   system ···················································································································································· 103  ...
  • Page 10   display default-configuration ·················································································································· 145   display diff ·············································································································································· 145   display saved-configuration ···················································································································· 147   display startup ········································································································································ 148   display this ············································································································································· 149   reset saved-configuration ······················································································································· 150   restore startup-configuration ·················································································································· 151   save ························································································································································ 152   startup saved-configuration ····················································································································...
  • Page 11   format ····················································································································································· 209   ftp ··························································································································································· 210   install load ·············································································································································· 210   interface m-eth0 ····································································································································· 211   ip address ··············································································································································· 212   ip gateway ·············································································································································· 212   ipv6 address ··········································································································································· 213   ipv6 gateway ·········································································································································· 213   mkdir ······················································································································································ 214  ...
  • Page 12   memory-threshold usage ······················································································································· 257   monitor cpu-usage enable ······················································································································ 258   monitor cpu-usage interval ····················································································································· 258   monitor cpu-usage threshold ·················································································································· 259   password-recovery enable ····················································································································· 260   reboot ····················································································································································· 260   reset scheduler logfile ···························································································································· 262   reset version-update-record ··················································································································· 262  ...
  • Page 13: Basic Cli Commands

    Basic CLI commands command-alias enable Use command-alias enable to enable the command keyword alias function. Use undo command-alias enable to disable the command keyword alias function. Syntax command-alias enable undo command-alias enable Default The command keyword alias function is disabled. Views System view Predefined user roles...
  • Page 14: Display | { Begin | Exclude | Include

    Predefined user roles network-admin Parameters cmdkey: Specifies the first keyword of a non-undo command or the second keyword of an undo command. You must enter the keyword in its complete form. alias: Specifies an alias for the keyword, a string of 1 to 20 characters. It must be different from the first keyword of any non-undo command and the second keyword of any undo command.
  • Page 15: Display | By-Linenum

    Usage guidelines Use the | { begin | exclude | include } regular-expression option with a display command to filter the command output. For more information about regular expressions, see Fundamentals Configuration Guide. Examples # Display the lines that contain vlan in the running configuration. <Sysname>...
  • Page 16: Display

    display > Use display > to save the output from a display command to a separate file. Syntax display command > filename Views Any view Predefined user roles network-admin network-operator Parameters command: Specifies the keywords and arguments of a display command. To display available keywords and arguments, enter display ?.
  • Page 17: Display Command-Alias

    Parameters command: Specifies the keywords and arguments of a display command. To display available keywords and arguments, enter display ?. filename: Specifies the name of the file that is used to save the output, a string of 1 to 63 characters. Usage guidelines The display commands show the configuration, statistics, and states of the device.
  • Page 18: Display History-Command

    display history-command Use display history-command to display all commands that are saved in the command history buffer for the current CLI session. Syntax display history-command Views Any view Predefined user roles network-admin network-operator Usage guidelines The system automatically saves commands you have successfully executed to the command history buffer for the current CLI session.
  • Page 19: Display Hotkey

    Examples # Display all commands saved in the command history buffer for all CLI sessions. <Sysname> display history-command all Date Time Terminal User 03/16/2012 20:03:33 vty0 192.168.1.26 Cmd:dis his all 03/16/2012 20:03:29 vty0 192.168.1.26 Cmd:sys Related commands display history-command display hotkey Use display hotkey to display hotkey information.
  • Page 20: Hotkey

    CTRL_P Display the previous command in the history buffer. CTRL_R Redisplay the current line. CTRL_V Paste text from the clipboard. CTRL_W Delete the word to the left of the cursor. CTRL_X Delete all characters from the beginning of the line to the cursor. CTRL_Y Delete all characters from the cursor to the end of the line.
  • Page 21: Quit

    Examples # Assign the display tcp status command to the hotkey Ctrl+T. <Sysname> system-view [Sysname] hotkey ctrl_t display tcp status Related commands display hotkey quit Use quit to return to the upper-level view. Syntax quit Views Any view Predefined user roles network-admin network-operator Usage guidelines...
  • Page 22: Screen-Length Disable

    screen-length disable Use screen-length disable to disable pausing between screens of output for the current session. Use undo screen-length disable to enable pausing between screens of output for the current session. Syntax screen-length disable undo screen-length disable Default The default varies by settings of the screen-length command in user line view. The following are the default settings for the screen-length command: •...
  • Page 23 System View: return to User View with Ctrl+Z. [Sysname]...
  • Page 24: Login Management Commands

    Login management commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. Some login management commands are available in both user line view and user line class view.
  • Page 25: Authentication-Mode

    [Sysname-line-aux0] activation-key s To verify the configuration: Exit the console session. [Sysname-line-aux0] return <Sysname> quit Log in again through the AUX line. The following message appears: Press ENTER to get started. Press Enter. Pressing Enter does not start a session. Enter s.
  • Page 26: Auto-Execute Command

    In VTY line view, this command is associated with the protocol inbound command. If you specify a non-default value for only one of the two commands in VTY line view, the other command uses the default setting, regardless of the setting in VTY line class view. Examples # Enable the none authentication mode for user line VTY 0.
  • Page 27: Command Accounting

    The device automatically Telnets to 192.168.1.41, and the following output is displayed: C:\> telnet 192.168.1.40 ****************************************************************************** * Copyright (c) 2004-2014 Hangzhou H3C Tech. Co., Ltd. All rights reserved. * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed.
  • Page 28: Command Authorization

    Use undo command accounting to restore the default. Syntax command accounting undo command accounting Default Command accounting is disabled, and the accounting server does not record executed commands. Views User line view, user line class view Predefined user roles network-admin Usage guidelines When command accounting is enabled but command authorization is not, every executed command is recorded on the HWTACACS server.
  • Page 29: Databits

    Usage guidelines When command authorization is enabled, a command is available only if the following requirements are met: • The user has the commensurate user role. • The user is authorized to use the command by the AAA scheme. If the command authorization command is configured in user line class view, command authorization is enabled on all user lines in the class.
  • Page 30: Display Line

    [Sysname] line aux 0 [Sysname-line-aux0] databits 5 display line Use display line to display user line information. Syntax display line [ number1 | { aux | vty } number2 ] [ summary ] Views Any view Predefined user roles network-admin network-operator Parameters number1: Specifies the absolute number of a user line, in the range of 0 to 192.
  • Page 31: Display Telnet Client

    … 112:XXXX XXXX XXXX XXXX Line type : [VTY] 129:UUXX XXXX XXXX XXXX … 176:XXXX XXXX XXXX XXXX 3 lines used. 190 lines not used. Table 2 Command output Fields Description The number indicates the absolute number of the first user line of the user line class, starting from 0.
  • Page 32 Views Any view Predefined user roles network-admin network-operator Parameters number1: Specifies the absolute number of a user line, in the range of 0 to 192. aux: Specifies the AUX line. vty: Specifies the VTY line. number2: Specifies the relative number of a user line. The value range is 0 to 128 for the AUX line and 0 to 63 for the VTY line.
  • Page 33: Display Users

    176:XXXX XXXX XXXX XXXX 3 lines used. 190 lines not used. Table 4 Command output Fields Description The number indicates the absolute number of the first user line of the user line class, starting from 0. The status indicates whether the user lines of the user line class are being used (X for unused and U for used).
  • Page 34: Escape-Key

    Field Description Line Type and relative number of the user line. Idle Time elapsed after the user's most recent input, in the format hh:mm:ss. Time Login time of the user. Process ID of the user session. Type User type, such as Telnet, SSH. Indicates the user line you are using.
  • Page 35: Flow-Control

    You can execute this command multiple times, but only the most recent configuration takes effect. To view the current shortcut key definition, use the display current-configuration command. This command is available in both user line view and user line class view. A non-default setting in either view takes precedence over a default setting in the other view.
  • Page 36: Free Line

    Usage guidelines This command is not supported in VTY line view. The device supports flow control in both the inbound and outbound directions. • For flow control in the inbound direction, the local device listens to flow control information from the remote device.
  • Page 37: Free User-Interface

    VTY 1 Location: 192.168.1.26 : Current operation user. : Current operation user works in async mode. If the operations of the user on VTY 1 impact your operations, log out the user. <Sysname> free line vty 1 Are you sure to free line vty1? [Y/N]:y [OK] free user-interface Use free user-interface to release a user line.
  • Page 38: History-Command Max-Size

    Are you sure to free line vty1? [Y/N]:y [OK] history-command max-size Use history-command max-size to set the size of the command history buffer for a user line. Use undo history-command max-size to restore the default. Syntax history-command max-size size-value undo history-command max-size Default The buffer of a user line saves up to 10 history commands.
  • Page 39: Line

    Views User line view, user line class view Predefined user roles network-admin Parameters minutes: Specifies the number of minutes for the timer, in the range of 0 to 35791. The default is 10 minutes. seconds: Specifies the number of seconds for the timer, in the range of 0 to 59. The default is 0 seconds.
  • Page 40: Line Class

    To configure the same settings for multiple user lines, use this command to enter multiple user line views. Examples # Enter the view of user line AUX 0. <Sysname> system-view [Sysname] line aux 0 [Sysname-line-aux0] # Enter the views of user lines VTY 0 to VTY 4. <Sysname>...
  • Page 41: Lock

    # In AUX line class view, configure character s as the shortcut key for starting a terminal session. <Sysname> system-view [Sysname] line class aux [Sysname-line-class-aux] activation-key s [Sysname-line-class-aux] quit # In AUX line view, restore the default shortcut key for starting a terminal session. [Sysname] line aux 0 [Sysname-line-aux0] undo activation-key Alternatively:...
  • Page 42: Parity

    Examples # Lock the current user line and then unlock it. <Sysname> lock Please input password<1 to 16> to lock current line: Password: Again: locked ! // The user line is locked. To unlock it, press Enter and enter the password: Password: <Sysname>...
  • Page 43: Protocol Inbound

    protocol inbound Use protocol inbound to enable a user line to support Telnet, SSH, or both protocols. Use undo protocol inbound to restore the default. Syntax In non-FIPS mode: protocol inbound { all |ssh | telnet } undo protocol inbound In FIPS mode: protocol inbound ssh undo protocol inbound...
  • Page 44: Screen-Length

    Trying 192.168.1.241 ... Press CTRL+K to abort Connected to 192.168.1.241 ... ****************************************************************************** * Copyright (c) 2004-2014 Hangzhou H3C Tech. Co., Ltd. All rights reserved. * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ****************************************************************************** <Server>...
  • Page 45: Send

    Parameters screen-length: Specifies the maximum number of lines to be displayed on a screen, in the range of 0 to 512. Setting this argument to 0 disables pausing between screens of output. Usage guidelines This command sets the maximum number of lines that can be displayed on one screen when the screen pause feature is enabled.
  • Page 46: Set Authentication Password

    Examples # Before you restart the device, send a notification to VTY 1 to inform the user. <Sysname> send vty 1 Input message, end with Enter; abort with CTRL+C: Your attention, please. I will reboot the system in 3 minutes. Send message? [Y/N]:y The message should appear on the screen of the user's configuration terminal, as shown in the following example:...
  • Page 47: Shell

    <Sysname> system-view [Sysname] line aux 0 [Sysname-line-aux0] authentication-mode password [Sysname-line-aux0] set authentication password simple hello When you log in again through user line AUX 0, you must enter the password hello to pass authentication. Related commands authentication-mode shell Use shell to enable the terminal service for a user line. Use undo shell to disable the terminal service for a user line.
  • Page 48: Stopbits

    Syntax speed speed-value undo speed Default The transmission rate is 9600 bps on a user line. Views User line view Predefined user roles network-admin Parameters speed-value: Specifies the transmission rate in bps. Supported transmission rates vary by configuration environment. The transmission rates for asynchronous serial interfaces might include: •...
  • Page 49: Telnet

    Views User line view Predefined user roles network-admin Parameters 1: Uses one stop bit. 1.5: Uses one and a half stop bits. The device does not support using one and a half stop bits. If you specify this keyword, two stop bits are used. 2: Uses two stop bits.
  • Page 50: Telnet Client Source

    dscp dscp-value: Specifies the DSCP value for IP to use in outgoing Telnet packets to indicate the packet transmission priority. The value range is 0 to 63. The default is 48. Usage guidelines This command is not supported in FIPS mode. To terminate the current Telnet connection, press Ctrl+K or execute the quit command.
  • Page 51: Telnet Ipv6

    Related commands display telnet client configuration telnet ipv6 Use telnet ipv6 to Telnet to a host in an IPv6 network. Syntax telnet ipv6 remote-host [ -i interface-type interface-number ] [ port-number ] [ vpn-instance vpn-instance-name ] [ dscp dscp-value ] Views User view Predefined user roles...
  • Page 52: Telnet Server Dscp

    Views System view Predefined user roles network-admin Parameters acl-number: Specifies an ACL by its number. The following are the value ranges: Basic ACL—2000 to 2999. • Advanced ACL—3000 to 3999. • Ethernet frame header ACL—4000 to 4999. • Usage guidelines This command is not supported in FIPS mode.
  • Page 53: Telnet Server Enable

    Usage guidelines This command is not supported in FIPS mode. The DSCP value is carried in the ToS field of an IP packet, and it indicates the transmission priority of the packet. Examples # Set the DSCP value for IPv4 to use for outgoing Telnet packets to 30 on a Telnet server. <Sysname>...
  • Page 54: Telnet Server Ipv6 Dscp

    Predefined user roles network-admin Parameters acl-number: Specifies an IPv6 ACL by its number. The following are the value ranges: Basic ACL—2000 to 2999. The ipv6 option is required. • Advanced ACL—3000 to 3999. The ipv6 option is required. • Ethernet frame header ACL—4000 to 4999. Do not specify the ipv6 option. •...
  • Page 55: Terminal Type

    The DSCP value is carried in the Traffic class field of an IPv6 packet, and it indicates the transmission priority of the packet. Examples # Set the DSCP value for IPv6 to use for outgoing Telnet packets to 30 on a Telnet server. <Sysname>...
  • Page 56: User-Interface Class

    Predefined user roles network-admin Parameters first-number1: Specifies the absolute number of the first user line, in the range of 0 to 192. last-number1: Specifies the absolute number of the last user line. This number cannot be smaller than first-number1. aux: Specifies the AUX line. vty: Specifies the VTY line.
  • Page 57 Usage guidelines This command is an older version reserved for backward compatibility purposes. As a best practice, use the line class command. To configure the same settings for all user lines of a line class, you can use this command to enter the user line class view.
  • Page 58: User-Role

    user-role Use user-role to assign a user role to a user line so users logged in through the user line get the user role at login. Use undo user-role to remove a user role or restore the default. Syntax user-role role-name undo user-role [ role-name ] Default An AUX line user is assigned the user role network-admin.
  • Page 59: Rbac Commands

    RBAC commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. description Use description to configure a description for a user role.
  • Page 60 Parameters name role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. If you do not specify a user role name, the command displays information about all user roles, including the predefined user roles. Examples # Display information about the user role 123. <Sysname>...
  • Page 61: Display Role Feature

    Field Description • deny—Denies access to any VPN except permitted VPNs. • permit (default)—Default VPN instance policy, which enables the user role to access any VPN instance. Permitted VPN instances VPNs accessible to the user role. User role rule number. A user role rule specifies access permissions for items, including commands, feature-specific commands, XML elements, and MIB Rule...
  • Page 62 Parameters name feature-name: Displays the commands of a feature. The feature-name argument specifies the feature name, and all letters must be in lowercase. verbose: Displays the commands of each feature. Usage guidelines If you specify neither the name feature-name option nor the verbose keyword, the command displays only the list of features available in the system.
  • Page 63: Display Role Feature-Group

    Table 7 Command output (display role feature name aaa) Field Description Feature Displays the name and brief function description of the feature. All commands that start with the domain keyword in system view, system-view ; domain * and all commands in ISP domain view. system-view ;...
  • Page 64 network-operator Parameters name feature-group-name: Specifies a feature group. The feature-group-name argument represents the feature group name, a case-sensitive string of 1 to 31 characters. If you do not specify a feature group, the command displays information about all feature groups. verbose: Displays the commands of each feature in the specified feature group.
  • Page 65: Feature

    • role feature-group feature Use feature to add a feature to a feature group. Use undo feature to remove a feature from a feature group. Syntax feature feature-name undo feature feature-name Default A user-defined feature group does not have any features. Views Feature group view Predefined user roles...
  • Page 66: Permit Interface

    Views User role view Predefined user roles network-admin Usage guidelines To restrict the interface access of a user role to a set of interfaces, perform the following tasks: Use interface policy deny to enter user role interface policy view. Use permit interface to specify accessible interfaces. NOTE: The interface policy deny command denies the access of the user role to all interfaces if the permit interface command is not configured.
  • Page 67 undo permit interface [ interface-list ] Default No permitted interfaces are configured in user role interface policy view. Views User role interface policy view Predefined user roles network-admin Parameters interface interface-list: Specifies a space-separated list of up to 10 interface items. Each interface item specifies one interface in the interface-type interface-number form or a range of interfaces in the interface-type interface-number to interface-type interface-number form.
  • Page 68: Permit Vlan

    [Sysname] interface ten-gigabitethernet 1/0/1 [Sysname-Ten-GigabitEthernet1/0/1] quit # Verify that you can assign Ten-GigabitEthernet 1/0/5 to VLAN 10. In this example, the user role can access any VLAN because the default VLAN policy of the user role is used. [Sysname] vlan 10 [Sysname-vlan10] port ten-gigabitethernet 1/0/5 [Sysname-vlan10] quit # Verify that you cannot enter Ten-GigabitEthernet 1/0/2 interface view.
  • Page 69: Permit Vpn-Instance

    Any change to a user role VLAN policy takes effect only on users who log in with the user role after the change. Examples Configure user role role1: # Permit the user role to execute all commands available in interface view and VLAN view. <Sysname>...
  • Page 70 Parameters vpn-instance-name&<1-10>: Specifies a space-separated list of up to 10 MPLS L3VPN names. Each name is a case-sensitive string of 1 to 31 characters. Usage guidelines To permit a user role to access an MPLS L3VPN after you configure the vpn-instance policy deny command, you must add the VPN to the permitted VPN list of the policy.
  • Page 71: Role

    role Use role to create a user role and enter user role view. If the user role has been created, you directly enter the user role view. Use undo role to delete a user role. Syntax role name role-name undo role name role-name Default The system has the following predefined user roles: network-admin, network-operator, level-n (where n represents an integer in the range of 0 to 15), and security-audit.
  • Page 72: Role Feature-Group

    Syntax role default-role enable [ role-name ] undo role default-role enable Default The default user role feature is disabled. AAA users who do not have a user role cannot log in to the device. Views System view Predefined user roles network-admin Parameters role-name: Specifies a user role by its name for the default user role.
  • Page 73: Rule

    Usage guidelines The L2 feature group includes all Layer 2 feature commands, and the L3 feature group includes all Layer 3 feature commands. These predefined feature groups are not user configurable. In addition to the predefined feature groups L2 and L3, you can create up to 64 user role feature groups.
  • Page 74 • All printable characters. execute: Specifies the execute commands, XML elements, or MIB nodes. An execute command (for example, ping), XML element, or MIB node executes a specific function or program. read: Specifies the read commands, , XML elements, or MIB nodes. A read command (for example, display, dir, more, or pwd), XML element, or MIB node displays configuration or maintenance information.
  • Page 75 • The system compares an OID with the OIDs specified in rules, and it uses the longest match principle to select a rule for the OID. For example, a user role cannot access the MIB node with OID 1.3.6.1.4.1.25506.141.3.0.1 if the user role contains rules configured by using the following commands: rule 1 permit read write oid 1.3.6 rule 2 deny read write oid 1.3.6.1.4.1...
  • Page 76 Rule Guidelines "debugging * event" command string represents all event debugging commands available in user view. You can specify a keyword by entering the first few characters of the keyword. Any command that starts with this character string matches the rule.
  • Page 77: Super

    • display role feature-group • role super Use super to obtain another user role without reconnecting to the device. Syntax super [ rolename ] Views User view Predefined user roles network-admin Parameters rolename: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system.
  • Page 78: Super Default Role

    Syntax super authentication-mode { local | scheme } * undo super authentication-mode Default Local password authentication applies. Views System view Predefined user roles network-admin Parameters local: Enables local password authentication. scheme: Enables remote AAA authentication. Usage guidelines For local password authentication, use the super password command to set a password. For remote AAA authentication, set the username and password on the RADIUS or HWTACACS server.
  • Page 79: Super Password

    undo super default role Default The default target user role is network-admin. Views System view Predefined user roles network-admin Parameters rolename: Specifies the name of the default target user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system. Usage guidelines The default target user role is applied to the super or super password command when you do not specify a user role for the command.
  • Page 80: Vlan Policy Deny

    Parameters role rolename: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system. If you do not specify a user role, the command sets a password for the default target user role. hash: Sets a hashed password.
  • Page 81: Vpn-Instance Policy Deny

    Predefined user roles network-admin Usage guidelines To restrict the VLAN access of a user role to a set of VLANs, perform the following tasks: Use vlan policy deny to enter user role VLAN policy view. Use permit vlan to specify accessible VLANs. NOTE: The vlan policy deny command denies the access of the user role to all VLANs if the permit vlan command is not configured.
  • Page 82 Views User role view Predefined user roles network-admin Usage guidelines To restrict the VPN access of a user role to a set of VPNs, perform the following tasks: Use vpn-instance policy deny to enter user role VPN instance policy view. Use permit vpn-instance to specify accessible VPNs.
  • Page 83: Ftp Commands

    FTP commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. FTP is not supported in FIPS mode. FTP server commands display ftp-server Use display ftp-server to display FTP server configuration and status information.
  • Page 84: Free Ftp User

    Views Any view Predefined user roles network-admin network-operator Examples # Display detailed information about logged-in FTP users. <Sysname> display ftp-user UserName HostIP Port HomeDir root 192.168.20.184 46539 flash: A field value is wrapped if its length exceeds the limit. The wrapped value is right justified. The limits for fields are as follows: UserName—10 characters.
  • Page 85: Free Ftp User-Ip

    Parameters username: Specifies a username. You can use the display ftp-user command to display FTP user information. Examples # Release the FTP connections established by using the user account ftpuser. <Sysname> free ftp user ftpuser Are you sure to free FTP connection? [Y/N]:y <Sysname>...
  • Page 86: Ftp Server Acl

    port port: Specifies the source port of an FTP connection. You can use the display ftp-user command to view the source ports of FTP connections. Examples # Release the FTP connections established from IPv6 address 2000::154. <Sysname> free ftp user-ip ipv6 2000::154 Are you sure to free FTP connection? [Y/N]:y <Sysname>...
  • Page 87: Ftp Server Enable

    Syntax ftp server dscp dscp-value undo ftp server dscp Default IPv4 uses the DSCP value 0 for outgoing FTP packets on an FTP server. Views System view Predefined user roles network-admin Parameters dscp-value: Specifies a DSCP value in the range of 0 to 63. Usage guidelines The DSCP value is carried in the ToS field of an IP packet, and it indicates the transmission priority of the packet.
  • Page 88: Ftp Server Ssl-Server-Policy

    Use undo ftp server ipv6 dscp to restore the default. Syntax ftp server ipv6 dscp dscp-value undo ftp server ipv6 dscp Default IPv6 uses the DSCP value 0 for outgoing FTP packets on an FTP server. Views System view Predefined user roles network-admin Parameters dscp-value: Specifies a DSCP value in the range of 0 to 63.
  • Page 89: Ftp Timeout

    <Sysname> system-view [Sysname] ftp server ssl-server-policy myssl Related commands • ftp server enable • ssl server-policy (Security Command Reference) ftp timeout Use ftp timeout to set the FTP connection idle-timeout timer. Use undo ftp timeout to restore the default. Syntax ftp timeout minute undo ftp timeout Default...
  • Page 90: Ascii

    Views FTP client view Predefined user roles network-admin Parameters localfile: Specifies a local file on the FTP client. remotefile: Specifies a remote file on the FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Append the content of the local a.txt file to the b.txt file on the FTP server.
  • Page 91: Binary

    Related commands binary binary Use binary to set the file transfer mode to binary, which is also called the flow mode. Syntax binary Default The file transfer mode is binary. Views FTP client view Predefined user roles network-admin Usage guidelines You can perform this operation only after you log in to the FTP server.
  • Page 92 ftp> bye 221-Goodbye. You uploaded 2 and downloaded 2 kbytes. 221 Logout. <Sysname> Related commands quit Use cd to change the current working directory to another directory on the FTP server. Syntax cd { directory | .. | / } Views FTP client view Predefined user roles...
  • Page 93: Cdup

    Related commands • cdup • cdup Use cdup to enter the upper directory of the FTP server. This command does not change the working directory if the current directory is the FTP root directory. Syntax cdup Views FTP client view Predefined user roles network-admin Usage guidelines...
  • Page 94: Debug

    ftp> close 221-Goodbye. You uploaded 0 and downloaded 0 kbytes. 221 Logout. ftp> Related commands disconnect debug Use debug to enable or disable FTP client debugging. Syntax debug Default FTP client debugging is disabled. Views FTP client view Predefined user roles network-admin Usage guidelines When FTP client debugging is enabled, executing this command disables FTP client debugging.
  • Page 95: Delete

    Field Description • 8::124—IPv6 address of the FTP server. • 50198—Port number of the FTP server. Received FTP reply code. 200 represents the reply 200 PORT command successful code, defined in RFC 959. ---> RETR a.txt Downloads file a.txt. delete Use delete to permanently delete a file on the FTP server.
  • Page 96: Disconnect

    localfile: Specifies the name of the local file used for saving the displayed information. Usage guidelines You can perform this operation only after you log in to the FTP server. In FTP client view, executing the dir command is the same as executing the ls command. Examples # Display detailed information about the files and subdirectories in the current directory on the FTP server.
  • Page 97: Display Ftp Client Source

    Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Terminate the connection to the FTP server without exiting the FTP client view. ftp> disconnect 221-Goodbye. You uploaded 0 and downloaded 0 kbytes. 221 Logout.
  • Page 98: Ftp Client Ipv6 Source

    vpn-instance vpn-instance-name: Specifies the VPN instance to which the FTP server belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the FTP server belongs to the public network, do not specify this option. dscp dscp-value: Specifies the DSCP value for IPv4 to use in outgoing FTP packets to indicate the packet transmission priority.
  • Page 99: Ftp Client Source

    Predefined user roles network-admin Parameters interface interface-type interface-number: Specifies an interface by its type and number. The device will use the interface's IPv6 address as the source address. For successful FTP packet transmission, make sure the interface is up and is configured with an IPv6 address. ipv6 source-ipv6-address: Specifies an IPv6 address.
  • Page 100: Ftp Ipv6

    Usages guidelines If you execute this command multiple times, the most recent configuration takes effect. The source address specified with the ftp command takes precedence over the source address specified with the ftp client source command. The source address specified with the ftp client source command applies to all FTP connections. The source address specified with the ftp command applies only to the current FTP connection.
  • Page 101: Get

    interface has a link local address. For more information about link local addresses, see Layer 3—IP Services Configuration Guide. Usage guidelines This command is only applicable to IPv6 networks. If no parameters are specified, this command enters the FTP client view. If the FTP server parameters are specified, you are prompted to enter the username and password for logging in to the FTP server.
  • Page 102: Help

    # Download file a.txt to the Flash root directory of member device 1 and save it as c.txt. ftp> get a.txt slot1#flash:/c.txt Related commands help Use help to display all commands supported by an FTP client. Use help command-name to display the help information of a command. Syntax help [ command-name ] Views...
  • Page 103 Syntax lcd [ directory | / ] Views FTP client view Predefined user roles network-admin Parameters directory: Specifies a local directory of the FTP client. There must be a slash sign (/) before the name of the storage medium, for example, /flash:/logfile. /: Specifies the root directory of the FTP client.
  • Page 104: Mkdir

    150 Connecting to port 50201 -rwxr-xr-x 1481 Jul 7 15:36 a.txt -rwxr-xr-x 0 Sep 27 2010 base.bin drwxr-xr-x 8192 Jul 2 14:33 diagfile drwxr-xr-x 8192 Jul 7 15:21 ftp -rwxr-xr-x 0 Sep 27 2010 kernel.bin drwxr-xr-x 8192 Jul 5 09:15 logfile drwxr-xr-x 8192 Jul 2 14:33 seclog...
  • Page 105: Newer

    ftp> mkdir newdir 257 "newdir" : The directory was successfully created newer Use newer to update a local file by using a remote file on the FTP server. Syntax newer remotefile [ localfile ] Views FTP client view Predefined user roles network-admin Parameters remotefile: Specifies the name of the remote file on the FTP server.
  • Page 106: Passive

    Usage guidelines After you issue this command, the system will prompt you to enter the username and password. After you log in to one FTP server, you must disconnect from the server before you can use the open command to log in to another server. Examples # In FTP client view, log in to the FTP server 192.168.40.7.
  • Page 107: Put

    Use put to upload a file on the client to the remote FTP server. Syntax put localfile [ remotefile ] Views FTP client view Predefined user roles network-admin Parameters localfile: Specifies the name of the local file to be uploaded. remotefile: Specifies the file name for saving the uploaded file on the FTP server.
  • Page 108: Quit

    Examples # Display the currently accessed directory on the remote FTP server. ftp> cd subdir 250 OK. Current directory is /subdir ftp> pwd 257 "/subdir" is your current location quit Use quit to terminate the connection to the FTP server and return to user view. Syntax quit Views...
  • Page 109: Rename

    Examples # Get the part of the s.bin file that is missing due to transmission interruption. ftp> reget s.bin rename Use rename to rename a file. Syntax rename [ oldfilename [ newfilename ] ] Views FTP client view Predefined user roles network-admin Parameters oldfilename: Specifies the original file name.
  • Page 110: Restart

    Predefined user roles network-admin Examples # Clear the reply information received from the FTP server. ftp> reset restart Use restart to specify the file retransmission offset. Syntax restart marker Views FTP client view Predefined user roles network-admin Parameters marker: Specifies the retransmission offset, in bytes. Usage guidelines The file retransmission starts from the (offset+1)th byte.
  • Page 111 Views FTP client view Predefined user roles network-admin Parameters protocol-command: Specifies an FTP-related command. Usage guidelines You can perform this operation only after you log in to the FTP server. Examples # Display the FTP-related commands supported by the FTP. ftp>...
  • Page 112: Rmdir

    Field Description REST Restarts. RETR Downloads files. STOR Uploads files. APPE Appends uploading. DELE Deletes files. Creates folders. XMKD Extended command with the meaning of MKD. Removes folders. XRMD Extended command with the meaning of RMD. ABOR Aborts the transmission. SIZE Size of the transmission file.
  • Page 113: Rstatus

    rstatus Use rstatus to display FTP server status. Use rstatus remotefile to display detailed information about a directory or file on the FTP server. Syntax rstatus [ remotefile ] Views FTP client view Predefined user roles network-admin Parameters remotefile: Specifies a directory or file on the FTP server. Usage guidelines You can perform this operation only after you log in to the FTP server.
  • Page 114: Status

    Filed Description 211 End of status End of the display of FTP server status. # Display file a.txt. ftp> rstatus a.txt 213-Status follows: -rw-r--r-- 80 Jul 18 02:58 a.txt 213 End of status Table 14 Command output Field Description 213-Status follows: Beginning of the display of the file, where 213 specifies the FTP command.
  • Page 115: System

    Examples # Display FTP status. ftp> status Connected to 192.168.1.56. No proxy connection. Not using any security mechanism. Mode: stream; Type: ascii; Form: non-print; Structure: file Verbose: on; Bell: off; Prompting: on; Globbing: off Store unique: off; Receive unique: off Case: off;...
  • Page 116: User

    user Use user to change to another user account after login. Syntax user username [ password ] Views FTP client view Predefined user roles network-admin Parameters username: Specifies the username of the target user account. password: Specifies the password of the target user account. Usage guidelines You can perform this operation only after you log in to the FTP server.
  • Page 117 Usage guidelines This command takes effect only for the current session. When you log in again, the command restores to the default setting. Examples # Disable the device from displaying detailed information about FTP operations. ftp> verbose Verbose mode off. # Execute the get command.
  • Page 118 cdup help reset close restart # Display the help information for the dir command. ftp> ? dir list contents of remote directory Related commands help...
  • Page 119: Tftp Commands

    TFTP commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. TFTP is not supported in FIPS mode. tftp Use tftp to download a file from a TFTP server or upload a file to a TFTP server in an IPv4 network.
  • Page 120: Tftp Client Ipv6 Source

    • ip source-ip-address: Specifies an IPv4 address. For successful TFTP packet transmission, make sure this address is the IPv4 address of an interface in up state on the device. Usages guidelines The source address specified with the tftp command takes precedence over the source address specified with the tftp client source command.
  • Page 121: Tftp Client Source

    Predefined user roles network-admin Parameters interface interface-type interface-number: Specifies an interface by its type and number. The device will use the interface's IPv6 address as the source address. For successful TFTP packet transmission, make sure the interface is up and is configured with an IPv6 address. ipv6 source-ipv6-address: Specifies an IPv6 address .
  • Page 122: Tftp Ipv6

    Usages guidelines If you execute this command multiple times, the most recent configuration takes effect. The source address specified with the tftp command takes precedence over the source address specified with the tftp client source command. The source address specified with the tftp client source command applies to all TFTP connections. The source address specified with the tftp command applies only to the current TFTP connection.
  • Page 123: Tftp-Server Acl

    vpn-instance vpn-instance-name: Specifies the VPN instance to which the TFTP server belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the TFTP server belongs to the public network, do not specify this option. dscp dscp-value: Specifies the DSCP value for IPv6 to use in outgoing TFTP packets to indicate the packet transmission priority.
  • Page 124: Tftp-Server Ipv6 Acl

    Usages guidelines You can use an ACL to deny or permit the device's access to specific TFTP servers. Examples # Allow the device to access only the TFTP server at 1.1.1.1. <Sysname> System-view [Sysname] acl number 2000 [Sysname-acl-basic-2000] rule permit source 1.1.1.1 0 [Sysname-acl-basic-2000] quit [Sysname] tftp-server acl 2000 tftp-server ipv6 acl...
  • Page 125: File System Management Commands

    File system management commands IMPORTANT: • Before managing storage media, files, and directories, make sure you know the possible impacts. • A file or directory whose name starts with a period (.) is considered a hidden file or directory. Do not give a common file or directory a name that starts with a period.
  • Page 126: Copy

    <Sysname> cd test # Return to the upper directory. <Sysname> cd .. # Access the flash root directory of the subordinate member with the member ID 2 after you log in to the master. <Sysname> cd slot2#flash:/ # Change back to the flash root directory of the master. <Sysname>...
  • Page 127 To specify a file or directory, use the following guidelines: Location Name format Remarks Use the file name On the guidelines in Fundamentals device Configuration Guide. The username and password must be the same as those configured on the FTP server. If the server authenticates users Enter the URL in the format only by the username, you are not required to enter the of ftp://FTP...
  • Page 128: Delete

    Copying file flash:/test.cfg to ftp://user:private@1.1.1.1/testbackup.cfg... Done. # Copy test.cfg from the working directory on TFTP server 1.1.1.1. Save the copy to the local current folder as testbackup.cfg. <Sysname> copy tftp://1.1.1.1/test.cfg testbackup.cfg Copy tftp://1.1.1.1/test.cfg to flash:/testbackup.cfg?[Y/N]:y Copying file tftp://1.1.1.1/test.cfg to flash:/testbackup.cfg... Done. # Copy test.cfg from the current folder.
  • Page 129 Predefined user roles network-admin Parameters /unreserved: Permanently deletes the specified file. If you do not specify this keyword, the command moves the file to the recycle bin. file-url: Specifies the name of the file to be deleted. Asterisks (*) are acceptable as wildcards. For example, to remove files with the .txt extension in the current directory, enter delete *.txt.
  • Page 130: Dir

    Use dir to display files or folders. Syntax dir [ /all ] [ file-url | /all-filesystems ] Views User view Predefined user roles network-admin Parameters /all: Displays all files and folders in the current directory, visible or hidden. If you do not specify this option, only visible files and folders are displayed.
  • Page 131: Fdisk

    Field Description File or folder information: • 0—File or folder number, which is automatically allocated by the system. • -rwh—Attributes of the file or folder. The first character is the folder indicator (d for folder and – for file). The second character indicates whether the file or folder is readable (r for readable).
  • Page 132 usb: will be divided into the following partitions: DeviceName Capacity usba0: 85MB usba1: 85MB usba2: 86MB All data on usba: will be lost, continue? [Y/N]:y Partitioning usba:...Done. # Divide the USB disk on the device into one partition in an interactive way. <Sysname>...
  • Page 133: File Prompt

    file prompt Use file prompt to set the operation mode for files and folders. Use undo file prompt to restore the default. Syntax file prompt { alert | quiet } undo file prompt Default The operation mode is alert. The system prompts for confirmation when you perform a destructive file or folder operation.
  • Page 134: Format

    Examples # Restore the space of the flash memory. <Sysname> fixdisk flash: Restoring flash: may take some time... Restoring flash:...Done. format Use format to format a storage medium. Syntax format medium-name Views User view Predefined user roles network-admin Parameters medium-name: Specifies the name of a storage medium. The value varies by device model. Usage guidelines Formatting a storage medium permanently deletes all files on the storage medium.
  • Page 135: Gzip

    Parameters filename: Specifies the name of the file to be decompressed. This argument must have .gz as the extension. Usage guidelines This command deletes the specified file after decompressing it. Examples # Decompress the file system.bin.gz: Before decompressing the file, you can display files whose names start with the system. string. <Sysname>...
  • Page 136: Md5Sum

    <Sysname> gzip system.bin Compressing file flash:/system.bin... Done. Verify the compress operation. <Sysname> dir system.* Directory of flash: 1 -rw- 20 Jun 14 2012 10:18:53 system.bin.gz 472972 KB total (472840 KB free) md5sum Use md5sum to use the MD algorithm to calculate the digest of a file. Syntax md5sum file-url Views...
  • Page 137: More

    To use this command to create a folder, the specified directory must already exist. For example, to create the flash:/test/mytest folder, the test folder must already exist. Otherwise, the mytest folder is not created. Examples # Create the test folder in the current directory. <Sysname>...
  • Page 138: Mount

    sysname Sysname ---- More ---- mount Use mount to mount a hot swappable storage medium. Syntax mount medium-name Default A storage medium is automatically mounted and in mounted state after being connected to the device, and you can use it without mounting it. Views User view Predefined user roles...
  • Page 139: Pwd

    Predefined user roles network-admin Parameters fileurl-source: Specifies the name of the source file. fileurl-dest: Specifies the name of the destination file or folder. Usage guidelines If you specify a destination folder, the system moves the source file to the specified folder without changing the file name.
  • Page 140: Reset Recycle-Bin

    Parameters fileurl-source: Specifies the name of the source file or folder. fileurl-dest: Specifies the name of the destination file or folder. Usage guidelines This command is not executed if the destination file or folder name is already used by an existing file or folder in the current working directory.
  • Page 141: Rmdir

    rmdir Use rmdir to remove a folder. Syntax rmdir directory Views User view Predefined user roles network-admin Parameters directory: Specifies a folder name. Usage guidelines To remove a directory, you must delete all files and subfolders in the directory permanently or move them to the recycle bin.
  • Page 142: Tar Create

    Related commands md5sum tar create Use tar create to archive files and folders. Syntax tar create [ gz ] archive-file fileurl-dest [ verbose ] source fileurl-source-list&<1-5> Views User view Predefined user roles network-admin Parameters gz: Uses gzip to compress the files and folders before archiving them. archive-file fileurl-dest: Specifies the archive file name.
  • Page 143: Tar List

    Views User view Predefined user roles network-admin Parameters archive-file fileurl-dest: Specifies the archive file name. The suffix can be .tar or .tar.gz. verbose: Displays the names of the successfully extracted files and folders. screen: Displays the content of the extracted files and folders on the screen. The extracted files are not saved.
  • Page 144: Umount

    Predefined user roles network-admin Parameters archive-file fileurl-dest: Specifies the archive file name. The suffix can be .tar or .tar.gz. Examples # Display the names of archived files and folders. <Sysname> tar list archive-file a.tar.gz a.cfg Related commands • tar create •...
  • Page 145: Undelete

    Related commands mount undelete Use undelete to restore a file from the recycle bin. Syntax undelete file-url Views User view Predefined user roles network-admin Parameters file-url: Specifies the name of the file to be restored. Usage guidelines If a file with the same name already exists in the directory, the system prompts whether or not you want to overwrite the existing file.
  • Page 146: Configuration File Management Commands

    Configuration file management commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. archive configuration Use archive configuration to manually archive the running configuration to the configuration archive directory.
  • Page 147: Archive Configuration Location

    Default The system does not automatically archive the running configuration. Views System view Predefined user roles network-admin Parameters minutes: Specifies the interval (in minutes) for automatically saving the running configuration. The value range is 10 to 525600 (365 days). Usage guidelines Before enabling automatic configuration archiving, use the archive configuration location command to specify the configuration archive directory and archive file name prefix.
  • Page 148 Predefined user roles network-admin Parameters directory: Specifies the name of a configuration archive directory, a case-insensitive string of 1 to 63 characters. The directory name must take the format storage-medium-name:/folder-name. This directory must already exist on the master. filename-prefix: Specifies a file name prefix for configuration archives, a case-insensitive string of 1 to 30 characters.
  • Page 149: Archive Configuration Max

    archive configuration max Use archive configuration max to set the maximum number of configuration archives. Use undo archive configuration max to restore the default. Syntax archive configuration max file-number undo archive configuration max Default Up to five configuration archives can be saved. Views System view Predefined user roles...
  • Page 150: Configuration Commit

    Syntax backup startup-configuration to tftp-server [ dest-filename ] Views User view Predefined user roles network-admin Parameters tftp-server: Specifies a TFTP server by its IPv4 address or host name. The host name is a case-insensitive string of 1 to 253 characters. Valid characters include letters, digits, hyphens (-), underscores (_), and dots (.).
  • Page 151: Configuration Commit Delay

    # Commit the settings configured after the configuration commit delay command was executed. [Sysname] configuration commit # Commit the settings configured after the configuration commit delay command was executed. In this example, the commit operation fails, because the allowed delay time has expired. The device is rolling back the configuration to the settings before the configuration commit delay command was executed.
  • Page 152: Configuration Encrypt

    Predefined user roles network-admin Parameters private-key: Encrypts configuration with a private key. All H3C devices running Comware 7 software use the same private key. public-key: Encrypts configuration with a public key. All H3C devices running Comware 7 software use the same public key.
  • Page 153: Display Archive Configuration

    Predefined user roles network-admin Parameters filename: Specifies the name of the replacement configuration file for configuration rollback. The file name is a string of 5 to 195 characters suffixed with the .cfg extension, and can include path information. Usage guidelines To replace the running configuration with the configuration in a configuration file without rebooting the device, use the configuration rollback function.
  • Page 154: Display Current-Configuration

    Wed Jan 15 14:20:18 2012 my_archive_1.cfg Wed Jan 15 14:33:10 2012 my_archive_2.cfg Wed Jan 15 14:49:37 2012 my_archive_3.cfg '#' indicates the most recent archive file. Next archive file to be saved: my_archive_4.cfg Table 18 Command output Field Description Absolute path of the directory for saving running-configuration Location archives.
  • Page 155: Display Current-Configuration Diff

    Usage guidelines Use this command to verify the configuration you have made. If the system has automatically changed the setting you have made for a parameter, this command displays the effective setting instead of the configured one. An automatic change typically occurs because of system restrictions.
  • Page 156 Usage guidelines This command compares the running configuration with the next-startup configuration file in the following steps: Compares the running configuration with the main next-startup configuration file. If the main next-startup configuration file is unavailable or corrupt, this command compares the running configuration with the backup next-startup configuration file.
  • Page 157: Display Default-Configuration

    • display saved-configuration display default-configuration Use display default-configuration to display the factory defaults. Syntax display default-configuration Views Any view Predefined user roles network-admin network-operator Usage guidelines Factory defaults are product-specific default settings that are different from initial settings. These default settings ensure that the device can start up and run correctly when it does not have a startup configuration file or the configuration file is corrupt.
  • Page 158 comparison. In the other two display diff commands, this keyword specifies the target configuration file. Usage guidelines If you specify the startup-configuration keyword, the system searches for the next-startup configuration file for comparison in the following order: The main next-startup configuration file. The backup next-startup configuration file if the main next-startup configuration file is unavailable or corrupt.
  • Page 159: Display Saved-Configuration

    - sysname TEST + sysname TEST1 telnet server enable For descriptions about the command output, see Table Related commands • display current-configuration • display current-configuration diff • display saved-configuration display saved-configuration Use display saved-configuration to display the contents of the configuration file for the next system startup.
  • Page 160: Display Startup

    domain default enable system vlan 1 domain system ---- More ---- Related commands • reset saved-configuration • save display startup Use display startup to display the names of the current startup configuration file and the next-startup configuration files. Syntax display startup Views Any view Predefined user roles...
  • Page 161: Display This

    Field Description Current startup saved-configuration file Configuration file that the device has started up with. Next main startup saved-configuration file Main configuration file to be used at the next startup. Next backup startup saved-configuration file Backup configuration file to be used at the next startup. Slot n Displays the startup configuration files on member device n.
  • Page 162: Reset Saved-Configuration

    user-role network-admin line vty 0 63 authentication-mode none user-role network-admin user-role network-operator idle-timeout 0 0 return reset saved-configuration Use reset saved-configuration to delete next-startup configuration files. Syntax reset saved-configuration [ backup | main ] Views User view Predefined user roles network-admin Parameters backup: Deletes the backup next-startup configuration file.
  • Page 163: Restore Startup-Configuration

    MainBoard: Configuration file is cleared. Slot 2: Erase next configuration file successfully Related commands display saved-configuration restore startup-configuration Use restore startup-configuration to download a configuration file from a TFTP server and specify it as the main next-startup configuration file. Syntax restore startup-configuration from tftp-server src-filename Views User view...
  • Page 164: Save

    Now restoring the next startup-configuration file from main board to backup board. Please wait...finished. Related commands backup startup-configuration save Use save file-url [ all | slot slot-number ] to save the running configuration to a configuration file, without specifying the file as a next-startup configuration file. Use save [ safely ] [ backup | main ] [ force ] to save the running configuration to a file in the root directory of the default storage medium.
  • Page 165: Startup Saved-Configuration

    If you do not specify the file-url option for the command, the command saves the running configuration to an .mdb binary file as well as a .cfg text file. The two files use the same file name. An .mdb file takes less time to load than a .cfg file. If you specify the file-url option for the command, the command only saves the running configuration to the specified .cfg file.
  • Page 166 Syntax startup saved-configuration cfgfile [ backup | main ] undo startup saved-configuration Default No next-startup configuration file is specified. Views User view Predefined user roles network-admin Parameters cfgfile: Specifies the name of a configuration file. The file name must be a string of 5 to 195 characters suffixed with the .cfg extension, and can include the path information.
  • Page 167 Related commands display startup...
  • Page 168: Software Upgrade Commands

    Software upgrade commands The switch can start up from the built-in flash memory or the USB disk. As a best practice, store the startup images in the built-in flash memory. If you store the startup images on the USB disk, do not remove the USB disk during the startup process.
  • Page 169: Boot-Loader Pex File

    slot slot-number: Specifies the IRF member ID of the device for which the startup images are specified. backup: Specifies the files as backup startup files. Backup startup images are used only when main images are not available. main: Specifies the files as main startup files. The device always first attempts to start up with main images.
  • Page 170 Syntax boot-loader pex pex-model file boot boot-package system system-package [ feature feature-package&<1-30> ] boot-loader pex pex-model file ipe ipe-filename Views User view Predefined user roles network-admin Parameters pex pex-model: Specifies the PEX model, a case-insensitive string of up to 63 characters. You must enter the complete PEX model name for the device to identify the PEX correctly.
  • Page 171: Boot-Loader Update

    When an .ipe image package file is used for upgrade, you must choose whether to delete the file after the system decompresses the file. The boot-loader pex file command overwrites the entire PEX startup software image list. To add new startup feature images, specify all feature image files in the old startup image list, including feature image files.
  • Page 172: Bootrom Update

    Views User view Predefined user roles network-admin Parameters all: Upgrades all the subordinate devices. slot: Specifies the IRF member ID of a subordinate device. Usage guidelines You can use this command to synchronize startup images after adding new member devices. The startup images synchronized to the subordinate device are set as main startup images, regardless of whether the source startup images are main or backup.
  • Page 173: Display Boot-Loader

    Predefined user roles network-admin Parameters file file-url: Specifies the file that contains the Boot ROM image in the flash. The file-url argument represents the file name, a string of 1 to 63 characters. slot slot-number-list: Specifies a space-separated list of up to seven IRF member ID or PEX items. For each item, you can specify IRF member devices or PEXs.
  • Page 174: Display Boot-Loader Pex

    <Sysname> display boot-loader Software images on slot 0: Current software images: flash:/simware-cmw710-boot-a1701.bin flash:/simware-cmw710-system-a1701.bin Main startup software images: flash:/simware-cmw710-boot-a1701.bin flash:/simware-cmw710-system-a1701.bin flash:/simware-cmw710-ssh-a1701.bin Backup startup software images: flash:/simware-cmw710-boot-a1701.bin flash:/simware-cmw710-system-a1701.bin Table 21 Command output Field Description This field displays the Comware images on the IRF member Software images on slot slot-number device.
  • Page 175: Reset Boot-Loader Pex

    Examples # Display the PEX startup software images on all parent devices. <Sysname> display boot-loader pex Main load software image files for PEXs to load from the parent device: PEX model: PEX-S5120HI flash:/rpu-s5120hi-boot.bin flash:/rpu-s5120hi-system.bin PEX model: PEX-S6300 flash:/boot.bin flash:/system.bin Backup load software image files for PEXs to load from the parent device: PEX model: PEX-S5120HI flash:/rpu-s5120hi-boot.bin flash:/rpu-s5120hi-system.bin...
  • Page 176: Warm-Reboot

    warm-reboot Use warm-reboot to upgrade Comware software through a warm reboot. Syntax warm-reboot [ file { boot boot-package | system system-package | feature feature-package &<1-30> } ] warm-reboot [ file ipe ipe-filename ] Views User view Predefined user roles network-admin Parameters boot boot-package: Specifies a .bin boot image file, a case-insensitive string of up to 63 characters.
  • Page 177 <Sysname> warm-reboot file feature flash:/feature.bin This operation will delete the rollback point information for the previous upgrade and maybe get unsaved configuration lost. Continue? [Y/N]:Y Upgrade summary according to following table: flash:/feature.bin Running Version New Version Alpha 7122 Alpha 7123 Slot Upgrade Way Warm Reboot...
  • Page 178: Issu Commands

    # Display detailed information about active software images. <Sysname> display install active verbose Active packages on slot 1: flash:/boot.bin [Package] Vendor: H3C Product: xxxx Service name: boot Platform version: 7.1.022 Product version: Test 2201 Supported board: mpu [Component]...
  • Page 179: Display Install Backup

    Service name: system Platform version: 7.1.022 Product version: Test 2201 Supported board: mpu [Component] Component: system Description: system package Table 23 Command output Field Description Active software images on the specified member. The argument n indicates Active packages on slot n the member ID of the member.
  • Page 180: Display Install Committed

    # Display detailed information about backup startup software images. <Sysname> display install backup verbose Backup startup software images on slot 1: flash:/boot-a0201.bin [Package] Vendor: H3C Product: xxxx Service name: boot Platform version: 7.1.022 Product version: Beta 1330 Supported board: mpu...
  • Page 181 # Display detailed information about main startup software images. <Sysname> display install committed verbose Committed packages on slot 1: flash:/boot-a0201.bin [Package] Vendor: H3C Product: xxxx Service name: boot Platform version: 7.1.022 Product version: Beta 1330 Supported board: mpu [Component]...
  • Page 182: Display Install Inactive

    <Sysname> display install inactive Inactive packages on slot 1: flash:/ssh-feature.bin # Display detailed information about inactive software images in the root directory of each storage medium. <Sysname> display install inactive verbose Inactive packages on slot 1: flash:/ssh-feature.bin [Package] Vendor: H3C...
  • Page 183: Display Install Ipe-Info

    Product: XXXX Service name: ssh Platform version: 7.1.022 Product version: Beta 1330 Supported board: mpu [Component] Component: ssh Description: ssh package For information about the command output, see Table Related commands install deactivate display install ipe-info Use display install ipe-info to display the software images included in an .ipe file. Syntax display install ipe-info ipe-filename Views...
  • Page 184: Display Install Log

    Syntax display install job Views Any view Predefined user roles network-admin network-operator Examples # Display ongoing ISSU activate, deactivate, and rollback operations. <Sysname> display install job JobID:5 Action:install activate flash:/ssh-feature.bin on slot 1 The output shows that the device is executing the install activate flash:/ssh-feature.bin slot 1 command.
  • Page 185: Display Install Package

    Job 1 completed successfully at 01/01/2011 04:53:46. Detail of activating packages on slot 1. Got upgrade policy successfully. ---------------------------------------------------------------------- Install job 2 started by user admin at 01/01/2011 04:55:23. Job 2 completed successfully at 01/01/2011 04:55:29. Detail of activating packages on slot 1. Got upgrade policy successfully.
  • Page 186: Display Install Rollback

    Vendor: H3C Product: xxxx Service name: system Platform version: 7.1.022 Product version: Beta 1330 Supported board: mpu # Display detailed information about software image file system.bin. <Sysname> display install package flash:/system.bin verbose flash:/system.bin [Package] Vendor: H3C Product: xxxx Service name: system Platform version: 7.1.022...
  • Page 187: Display Install Which

    Related commands • install rollback • reset install rollback oldest display install which Use display install which to display all software image files that include a specific component or file. Syntax display install which { component name | file filename } [ slot slot-number ] Views Any view Predefined user roles...
  • Page 188: Display Issu Rollback-Timer

    display issu rollback-timer Use display issu rollback-timer to display automatic rollback timer information. Syntax display issu rollback-timer Views Any view Predefined user roles network-admin network-operator Usage guidelines Change to the automatic rollback interval does not take effect on the ongoing ISSU process. The current remaining rollback time might be greater than the configured automatic rollback interval.
  • Page 189 Usage guidelines During an ISSU that uses issu commands, you can use this command to verify the ISSU status and determine what to do next. This command does not apply to an ISSU that uses install commands, because the ISSU state machine is not involved.
  • Page 190: Display Version Comp-Matrix

    Field Description Loaded—The issu load command is completed. • Switching—The system is executing the issu run switchover command. • • Switchover—The issu run switchover command is completed. Accepted—The issu accept command is completed. • Committing—The system is executing the issu commit command. •...
  • Page 191 Views Any view Predefined user roles network-admin network-operator Parameters boot: Specifies a boot image file. system: Specifies a system image file. feature: Specifies a space-separated list of up to 30 feature image files. filename: Specifies the name of a .bin file in the root directory of a storage medium on the master, in the storage-medium:/base-filename.bin format.
  • Page 192 Version compatibility list: E2206P02 R2207 R2208 R2208P01 Version dependency boot list: 7.1.035P02 7.1.035P03 7.1.035P04 7.1.035P05 # Display compatibility information for flash:/boot-a2403.bin and flash:/system-a2403.bin, and the recommended ISSU method. (In this example, the specified versions are incompatible with the running versions.) <Sysname>...
  • Page 193 7.1.035P05 7.1.035P07 7.1.035P08 Slot Upgrade Way ISSU Reboot ISSU Reboot # Display the following information: • Compatibility information for the upgrade images that are used for the parent device upgrade. • Compatibility information for the upgrade images that are used for the S5120HI PEX upgrade. •...
  • Page 194 Version: 7.1.041 System image: flash:/rpu-s5120hi-system-d2404.bin Version: D2404 Version compatibility list: D2404 Version dependency boot list: 7.1.041 Feature image: flash:/s5120hi-feature1-d2404.bin Version: D2404 Version compatibility list: D2404 Version dependency system list: D2402 D2404 Incompatible upgrade. # Display the following information: • Compatibility information for the upgrade images that are used for the parent device upgrade. •...
  • Page 195 D2403 Version compatibility list: D2402 D2403 Version dependency system list: D2402 D2403 Compatible info of S5120HI: Feature image: flash:/s5120hi-feature1-d2403.bin Version: D2403 Version compatibility list: D2402 D2403 Version dependency system list: D2402 D2403 Slot Upgrade Way File Upgrade File Upgrade Table 25 Command output Field Description •...
  • Page 196: Install Abort

    Related commands issu load install abort Use install abort to abort an ISSU operation. Syntax install abort Views User view Predefined user roles network-admin Usage guidelines The system creates a software image management job each time you use the install activate, install add, install commit, install deactivate, install remove, or install rollback to command.
  • Page 197 patch: Specifies a patch image file. filename: Specifies the name of a .bin file in the root directory of a storage medium on the master, in the storage-medium:/base-filename.bin format. It can be a case-insensitive string of up to 63 characters and cannot contain slot information. slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number.
  • Page 198: Install Add

    flash:/system.bin Running Version New Version Beta 1330 Beta 1331 flash:/feature.bin Running Version New Version None Beta 1330 Slot Upgrade Way Service Upgrade Upgrading software images to compatible versions. Continue? [Y/N]:y This operation maybe take several minutes, please wait...............Done. Table 26 Command output Field Description Upgrade summary according...
  • Page 199: Install Commit

    Predefined user roles network-admin Parameters ipe-filename: Specifies the name of an .ipe file in the root directory of a storage medium on the master, in the storage-medium:/base-filename.ipe format. It can be a case-insensitive string of up to 63 characters and cannot contain slot information. medium-name: Specifies the name of the storage medium for saving the software images.
  • Page 200: Install Deactivate

    Both the install commit and boot-loader file commands change main startup software images. To change backup startup images or add inactive images as main startup images, however, you must use the boot-loader file command. For more information about main and backup startup software images, see Fundamental Configuration Guide.
  • Page 201: Install Remove

    Related commands • display install active • display install inactive install remove Use install remove to remove inactive software images. Syntax install remove [ slot slot-number ] { filename | inactive } Views User view Predefined user roles network-admin Parameters slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX that has storage media by its virtual slot number.
  • Page 202 Predefined user roles network-admin Parameters point-id: Specifies a rollback point ID. This option is supported only when there are two or more rollback points. To view available rollback points, use the display install rollback command. original: Rolls back to the software images that were running before the ISSU. Usage guidelines The system creates a rollback point for each service or file upgrade performed through activate or deactivate operation.
  • Page 203: Install Verify

    The output shows the SSH feature has been rolled back to the original version. Image flash:/ssh-feature-a0201.bin has been removed. Related commands display install rollback install verify Use install verify to verify the software change confirmation status and software image integrity and consistency.
  • Page 204: Issu Accept

    issu accept Use issu accept to accept the upgrade to a compatible version and delete the automatic rollback timer. Syntax issu accept Views User view Predefined user roles network-admin Usage guidelines The system cannot perform automatic rollback for the ISSU process after you execute this command. However, you can still use the issu rollback command to perform a manual rollback.
  • Page 205 For an IRF fabric with a single member, this command ends the ISSU process. When this command is completed, the ISSU status changes to Init, and the ISSU process cannot be rolled back. At reboot, a subordinate device automatically synchronizes the master device's configuration and status data.
  • Page 206: Issu Load

    issu load Use issu load to upgrade the software images of subordinate members and configure the upgrade images as the main startup software images for the subordinate members. Syntax issu load file { boot filename | system filename | feature filename&<1-30> } * slot slot-number&<1-9>...
  • Page 207 on the subordinate device. To check the synchronization progress, use the display device command. The synchronization is completed when all member device are in normal state. For more information about ISSU methods, see Fundamentals Configuration Guide. Examples # Upgrade member device 2 (subordinate member) with the feature image file flash:/feature.bin. (In this example, the image is compatible with the running images.) <Sysname>...
  • Page 208: Issu Pex

    issu pex Use issu pex to specify images used for PEX upgrade. Syntax issu pex pex-model file { boot filename | system filename | feature filename&<1-30> } * issu pex pex-model file ipe ipe-filename Views User view Predefined user roles network-admin Parameters pex-model: Specifies the PEX model, a case-insensitive string.
  • Page 209: Issu Rollback

    Examples # Specify flash:/devkit.bin as the image for upgrading S5120HI PEXs. S5120HI PEXs do not have a storage medium. <Sysname> issu pex PEX-S5120HI file feature flash:/devkit.bin Verifying the file flash:/devkit.bin on slot 1...Done. <Sysname> # Specify flash:/devkit.bin as the image for upgrading S5500 PEXs. S5500 PEXs have storage media.
  • Page 210: Issu Rollback-Timer

    Views User view Predefined user roles network-admin Usage guidelines The device supports automatic rollback and manual rollback. This command performs a manual rollback. You can perform a manual rollback while an ISSU is in one of the following states: • Loaded.
  • Page 211: Issu Run Switchover

    Predefined user roles network-admin Parameters minutes: Specifies the automatic rollback interval in minutes, in the range of 0 to 120. Setting it to 0 disables the automatic rollback feature. Usage guidelines The automatic software version rollback feature is only available on a multichassis IRF fabric during an ISSU to a compatible version.
  • Page 212: Reset Install Log-History Oldest

    Examples # On a multichassis IRF fabric, perform a master/subordinate switchover during an ISSU to a compatible version. <Sysname> issu run switchover Upgrade summary according to following table: flash:/feature.bin Running Version New Version Alpha 7122 Alpha 7123 Slot Switchover Way Active standby process switchover Upgrading software images to compatible versions.
  • Page 213: Reset Install Rollback Oldest

    Predefined user roles network-admin Parameters log-number: Specifies the number of ISSU log entries to be deleted. Usage guidelines This command clears the specified number of log entries, beginning with the oldest log entry. Examples # Clear the two oldest ISSU log entries. <Sysname>...
  • Page 214: Emergency Shell Commands

    Emergency shell commands Unless otherwise stated, a file name or path argument in this document is case insensitive, and must indicate the storage medium and contain no slot information. The path information might contain multiple levels of directories, and each can include 1 to 255 characters. The file name alone (without the path information) can include 1 to 255 characters.
  • Page 215: Dir

    Parameters file-url: Specifies the name of the file to be deleted. Examples # Delete the tt.cfg file from the current directory. <boot> delete flash:/tt.cfg Delete flash:/tt.cfg? [Y/N]:y Deleting the file permanently will take a long time. Please wait... Start to delete flash:/tt.cfg...Done. Use dir to display files or directories.
  • Page 216 -rw- 33161216 Jan 01 00:00:28 .pathfile drw- Jan 01 2011 00:00:24 seclog drw- Jan 01 2011 00:00:24 diagfile drw- Jan 01 2011 00:12:20 logfile -rw- Jan 01 2011 05:28:14 lauth.dat drw- Jan 01 2011 00:00:30 license -rw- 1646 Jan 01 2011 05:46:24 ifindex.dat 524288 KB total (147072 KB free) # Display all unhidden files and directories in the system.
  • Page 217: Display Copyright

    The software package must be saved in the root directory of the storage medium. Examples # Display information about the system.bin software package. <boot> display install package flash:/system.bin flash:/system.bin [Package] Vendor: H3C Product: S5820V2_S5830V2 Service name: system Platform version: 7.1.045 Product version: ESS 2415 Supported board: mpu...
  • Page 218: Display Interface M-Eth0

    Field Description Type of the service package: boot—Boot image. • system—System image. • Service name • patch—Patch package. The value of this field is any other value for feature packages. Platform version Platform version number. Product version number. You determine whether the version of a system image Product version matches that of a boot image by checking the value of this field.
  • Page 219: Display Ip Routing-Table

    Field Description the cable has a problem. UP—The interface has been enabled by using the undo • shutdown command, and its physical status is up. Line protocol current state Link layer status of the interface. The Maximum Transmit Unit MTU of the interface. IPv4 address of the interface.
  • Page 220: Display Ipv6 Routing-Table

    Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.116.0 255.255.255.0 0 m-eth0 default 192.168.116.1 0.0.0.0 0 m-eth0 Table 32 Command output Field Description Kernel IP routing table IPv4 routing information. Destination address. For the default route, the value of this field is default. Destination Gateway address.
  • Page 221: Display Version

    Table 33 Command output Field Description Kernel IPv6 routing table IPv6 routing information. Flags: • A—The route was learned from a route advertisement. • C—The route is a cached route used to fast forward packets. • Flags D—The route is the default route learned through neighbor discovery.
  • Page 222: Ftp

    Usage guidelines Use the format command with caution. This command permanently deletes all files and directories from a storage medium, including the startup boot image and startup configuration files. The deleted files and directories cannot be restored. Without a boot image, the device cannot reboot. Examples # Format the Flash.
  • Page 223: Interface M-Eth0

    Parameters system-package: Specifies the name of the system image, a case-insensitive string of 1 to 63 characters. This file must be saved in the root directory of the current member device's storage medium, with the extension .bin. The file name must indicate the storage medium and cannot contain slot information, for example, flash:/startup-system.bin.
  • Page 224: Ip Address

    ip address Use ip address to assign an IPv4 address to the management Ethernet port. Use undo ip address to restore the default. Syntax ip address ip-address { mask-length | mask } undo ip address Default The management Ethernet port has no IPv4 address. Views Management Ethernet port view Parameters...
  • Page 225: Ipv6 Address

    Usage guidelines When the device needs to communicate with a device on a remote IPv4 network, you must specify an IPv4 gateway for the management Ethernet port. If you execute this command multiple times, the most recent configuration takes effect. Changing or removing the IPv4 address of the management Ethernet port removes the port's IPv4 gateway configuration.
  • Page 226: Mkdir

    undo ipv6 gateway Default The management Ethernet port has no IPv6 gateway configured. Views Management Ethernet port view Parameters link-local: Specifies the Link-local address of an IPv6 gateway. Usage guidelines When the device needs to communicate with a device on a remote IPv6 network, you must specify an IPv6 gateway for the management Ethernet port.
  • Page 227: More

    more Use more to display the contents of a file. Syntax more file-url Views User view Parameters file-url: Specifies a file name. Examples # Display the contents of file test.txt. <boot> more flash:/test.txt Have a nice day. move Use move to move a file. Syntax move fileurl-source fileurl-dest Views...
  • Page 228: Ping

    ping Use ping to check the connectivity to an IPv4 address. Syntax ping [ -c count | -s size ] * ip-address Views Any view Parameters -c count: Specifies the number of ICMP echo requests to send, in the range of 1 to 2147483647. The default is 5.
  • Page 229: Ping Ipv6

    Field description 0% packet loss Percentage of echo requests that failed to be echoed back. round-trip min/avg/max = Minimum/average/maximum response time, in milliseconds. 0.717/1.101/2.243 ms ping ipv6 Use ping ipv6 to check the connectivity to an IPv6 address. Syntax ping ipv6 [ -c count | -s size ] * ipv6-address Views Any view Parameters...
  • Page 230: Quit

    Examples # Display the current path. <boot> pwd flash: quit Use quit to return to the upper level view. Syntax quit Views System view, management Ethernet port view Examples # Return from management Ethernet port view to user view. [boot-m-eth0] quit [boot] quit <boot>...
  • Page 231: Rmdir

    Warning: Permanently added '192.168.1.59' (RSA) to the list of known hosts. client001@192.168.1.59's password: ****************************************************************************** * Copyright (c) 2004-2012 Hangzhou H3C Tech. Co., Ltd. All rights reserved. * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed.
  • Page 232: Shutdown

    Remove directory flash:/mydir?[Y/N]:y Directory flash:/1 removed. Related commands • delete • • mkdir shutdown Use shutdown to shut down the management Ethernet port. Use undo shutdown to bring up the management Ethernet port. Syntax shutdown undo shutdown Default The management Ethernet port is up. Views Management Ethernet port view Usage guidelines...
  • Page 233: System-View

    Warning: Permanently added '192.168.1.59' (RSA) to the list of known hosts. client001@192.168.1.59's password: ****************************************************************************** * Copyright (c) 2004-2012 Hangzhou H3C Tech. Co., Ltd. All rights reserved. * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed.
  • Page 234: Telnet

    telnet Use telnet to log in to a Telnet server. Syntax telnet { server-ipv4-address | ipv6 server-ipv6-address } Views User view Parameters server-ipv4-address: Specifies the IPv4 address of the Telnet server in dotted decimal notation. server-ipv6-address: Specifies the IPv6 address of the Telnet server. Usage guidelines If the Telnet server does not respond, you can press Ctrl+K to abort the login attempt and try again later.
  • Page 235: Device Management Commands

    Device management commands clock datetime Use clock datetime to set the UTC time. Syntax clock datetime time date Default The UTC time is the factory-default time. Views User view Predefined user roles network-admin Parameters time: Specifies a time in the hh:mm:ss format. The value range for hh is 0 to 23. The value range for mm is 0 to 59.
  • Page 236: Clock Protocol

    clock protocol Use clock protocol to specify the system time source. Use undo clock protocol to restore the default. Syntax clock protocol { none | ntp | ptp } undo clock protocol Default The device uses the NTP time source. Views System view Predefined user roles...
  • Page 237 Predefined user roles network-admin Parameters name: Specifies a name for the daylight saving time schedule, a case-sensitive string of 1 to 32 characters. start-time: Specifies the start time in the hh:mm:ss format. The value range for hh is 0 to 23. The value range for mm is 0 to 59.
  • Page 238: Clock Timezone

    <Sysname> system-view [Sysname] clock summer-time PDT 6 08/01 6 09/01 1 Related commands • clock datetime • clock timezone • display clock clock timezone Use clock timezone to set the local time zone. Use undo clock timezone to restore the default. Syntax clock timezone zone-name { add | minus } zone-offset undo clock timezone...
  • Page 239: Command

    Related commands • clock datetime • clock summer-time • display clock command Use command to assign a command to a job. Use undo command to revoke a command. Syntax command id command undo command id Default No command is assigned to a job. Views Job view Predefined user roles...
  • Page 240 • When a Telnet user logs in, the following statement appears: ************************************************************************** * Copyright (c) 2004-2014 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. **************************************************************************** <Sysname>...
  • Page 241: Display Clock

    display clock Use display clock to display the system time, date, local time zone, and daylight saving time. Syntax display clock Views Any view Predefined user roles network-admin network-operator Examples # Display the system time and date when the local time zone is not specified. <Sysname>...
  • Page 242: Display Cpu-Usage

    <Sysname> display copyright display cpu-usage Use display cpu-usage to display CPU usage statistics. Syntax display cpu-usage [ slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number.
  • Page 243: Display Cpu-Usage Configuration

    display cpu-usage configuration Use display cpu-usage configuration to display CPU usage monitoring settings. Syntax display cpu-usage configuration [ slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles network-admin Parameters slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number.
  • Page 244 slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number. If you do not specify this option, the command displays the historical CPU usage statistics for the master device. cpu cpu-number: Displays the historical CPU usage statistics. The cpu-number argument must be 0. Usage guidelines After CPU usage monitoring is enabled, the system regularly samples CPU usage and saves the samples to the history record buffer.
  • Page 245: Display Device

    • 16 and 17 minutes ago: Approximately 5%. • 18 minutes ago: Approximately 10%. • 19 minutes ago: Approximately 5%. • Other time: 2% or lower than 2%. # Display the historical CPU usage statistics for process 1. <Sysname> display cpu-usage history job 1 100%| 95%| 90%|...
  • Page 246: Display Device Manuinfo

    Predefined user roles network-admin network-operator Parameters flash: Specifies the flash memory. usb: Specifies the device connected to the USB interface. slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number. If you do not specify this option on an IRF fabric, the command displays the device information for all member devices.
  • Page 247: Display Device Manuinfo Fan

    <Sysname> display device manuinfo Slot 1 CPU 0: DEVICE_NAME : S5820V2-52QF DEVICE_SERIAL_NUMBER : 210235A0U0H12A000002 MAC_ADDRESS : 0CDA-415E-232E MANUFACTURING_DATE : 2012-10-29 VENDOR_NAME : H3C Fan 1 DEVICE_NAME : LSWM1FANSCB DEVICE_SERIAL_NUMBER : 210231A0WFH115000073 MANUFACTURING_DATE : 2012-06-05 VENDOR_NAME : H3C Fan 2 DEVICE_NAME...
  • Page 248: Display Device Manuinfo Power

    DEVICE_NAME : LSWM1FANSCB DEVICE_SERIAL_NUMBER : 210235A36L1234567890 MANUFACTURING_DATE : 2010-01-20 VENDOR_NAME : H3C display device manuinfo power Use display device manuinfo power to display the electronic label information for a power supply. Syntax display device manuinfo slot slot-number power power-id Views...
  • Page 249: Display Diagnostic-Information

    display diagnostic-information Use display diagnostic-information to display the operating statistics for multiple feature modules in the system. Syntax display diagnostic-information [ hardware | infrastructure | l2 | l3 | service ] [ filename ] Views Any view Predefined user roles network-admin network-operator Parameters...
  • Page 250: Display Fan

    Syntax display environment [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number. If you do not specify this option on an IRF fabric, the command displays the temperature statistics for all member devices.
  • Page 251: Display Memory

    Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number. If you do not specify this option on an IRF fabric, the command displays the operating states of fans on all member devices.
  • Page 252 Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number. If you do not specify this option on an IRF fabric, the command displays memory usage on all member devices.
  • Page 253: Display Memory-Threshold

    display memory-threshold Use display memory-threshold to display memory usage thresholds and memory usage notification statistics. Syntax display memory-threshold [ slot slot-number [ cpu cpu-number ] ] Views Any view Predefined user roles network-admin Parameters slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number.
  • Page 254: Display Power

    [Back to severe low-memory state] First notification at: 0.0 Latest notification at: 0.0 Total number of notifications sent: 0 [Enter critical low-memory state] First notification at: 0.0 Latest notification at: 0.0 Total number of notifications sent: 0 Related commands • memory-threshold •...
  • Page 255: Display Scheduler Logfile

    Predefined user roles network-admin network-operator Parameters job-name: Specifies a job by its name, a case-sensitive string of 1 to 47 characters. If you do not specify this option, the command displays all jobs' configuration information. Examples # Display all jobs' configuration information. <Sysname>...
  • Page 256: Display Scheduler Reboot

    Table 41 Command output Field Description Logfile Size Size of the log file, in bytes. Schedule name Schedule to which the job belongs. Execution time Time when the job was started. Time when the job was completed. If the job has never been executed or the job has no Completion time commands, this field is blank.
  • Page 257: Display System Stable State

    Parameters schedule-name: Specifies a schedule by its name, a case-sensitive string of 1 to 47 characters. If you do not specify this option, the command displays information about all schedules. Examples # Display information about all schedules. <Sysname> display scheduler schedule Schedule name : shutdown Schedule type...
  • Page 258 Views Any view Predefined user roles network-admin network-operator Usage guidelines Before performing an ISSU or a master/subordinate switchover, use this command to verify that the system is stable. If the System State field does not display Stable, you cannot perform an ISSU. If the Redundancy Stable filed does not display Stable, you cannot perform a master/subordinate switchover.
  • Page 259: Display System-Working-Mode

    Field Description • Interface Data Batch Backup—An interface data batch backup is in progress on the member device. The member device is not operating stably. Related commands display ha service-group (High Availability Command Reference) display system-working-mode Use display system-working-mode to display system working mode information. Syntax display system-working-mode Views...
  • Page 260 Table 44 Common transceiver alarms Field Description SFP/SFP+: RX loss of signal Signal loss occurred in the inbound direction. RX power high The received optical power is high. RX power low The received optical power is low. TX fault Transmission error. TX bias high The transmitted bias current is high.
  • Page 261: Display Transceiver Diagnosis

    Field Description mismatch port configuration. Transceiver type not supported by port The port does not support this type of transceiver module. hardware Examples # Display the alarms present on the transceiver module in interface Ten-GigabitEthernet 1/0/1. <Sysname> display transceiver alarm interface ten-gigabitethernet 1/0/1 Ten-GigabitEthernet1/0/1 transceiver current alarm information: RX loss of signal RX power low...
  • Page 262: Display Transceiver Interface

    : 1000_BASE_SX_SFP Connector Type : LC Wavelength(nm) : 850 Transfer Distance(m) : 550(50um),270(62.5um) Digital Diagnostic Monitoring : YES Vendor Name : H3C Ordering Name : SFP-GE-SX-MM850 Table 47 Command output Field Description transceiver information Transceiver information. Transceiver Type Transceiver type.
  • Page 263: Display Transceiver Manuinfo

    Field Description Connector type options: MPO—Multi-fiber Push On. • Connector Type LC—1.25 mm/RJ-45 fiber connector developed by Lucent. • • RJ-45. • Fiber transceiver: Central wavelength (in nm) of the transmit laser. If the transceiver supports multiple wavelengths, every two wavelength values are Wavelength(nm) separated by a comma.
  • Page 264: Display Version

    Manu. Serial Number : 213410A0000054000251 Manufacturing Date : 2012-09-01 Vendor Name : H3C Table 48 Command output Field Description Manu. Serial Number Serial number generated during production of the transceiver module. Date when the electronic label information was written to the transceiver Manufacturing Date module.
  • Page 265: Fan Prefer-Direction

    <Sysname>display version-update-record Name Version Compile time Record 1 (updated on Sep 18 2014 at 07:55:46): * s5820v2_5830v2-cmw710-boot-r2422.bin 7.1.045 Release 2422 Sep 16 2014 13:44:42 * s5820v2_5830v2-cmw710-system-r2422.bin 7.1.045 Release 2422 Sep 16 2014 13:44:42 Table 49 Command output Field Description Name Software image file name.
  • Page 266 # Test the configuration by using Telnet. The login banner appears only when password or scheme login authentication has been configured. ****************************************************************************** * Copyright (c) 2004-2014 Hangzhou H3C Tech. Co., Ltd. All rights reserved.
  • Page 267: Job

    * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ****************************************************************************** Welcome to legal (header legal) Press Y or ENTER to continue, N to exit. Welcome to login(header login) Password: Welcome to motd(header motd) Welcome to shell(header shell) Use job to assign a job to a schedule.
  • Page 268: Memory-Threshold

    Related commands • scheduler job • scheduler schedule memory-threshold Use memory-threshold to set free-memory thresholds. Use undo memory-threshold to restore the defaults. Syntax memory-threshold [ slot slot-number [ cpu cpu-number ] ] minor minor-value severe severe-value critical critical-value normal normal-value undo memory-threshold [ slot slot-number [ cpu cpu-number ] ] Default •...
  • Page 269: Memory-Threshold Usage

    Examples # Set the minor alarm, severe alarm, critical alarm, and normal state thresholds to 64 MB, 48 MB, 32 MB, and 96 MB, respectively. <Sysname> system-view [Sysname] memory-threshold minor 64 severe 48 critical 32 normal 96 Related commands • display memory-threshold •...
  • Page 270: Monitor Cpu-Usage Enable

    monitor cpu-usage enable Use monitor cpu-usage enable to enable CPU usage recording. Use undo monitor cpu-usage enable to disable CPU usage recording. Syntax monitor cpu-usage enable [ slot slot-number [ cpu cpu-number ] ] undo monitor cpu-usage enable [ slot slot-number [ cpu cpu-number ] ] Default CPU usage recording is enabled.
  • Page 271: Monitor Cpu-Usage Threshold

    Parameters interval-value: Specifies the CPU usage sampling interval. Valid values include 5Sec for 5 seconds, 1Min for 1 minute, and 5Min for 5 minutes. slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number.
  • Page 272: Password-Recovery Enable

    [Sysname] monitor cpu-usage threshold 80 Related commands • display cpu-usage • display cpu-usage configuration • display cpu-usage history • monitor cpu-usage enable • monitor cpu-usage interval password-recovery enable Use password-recovery enable to enable password recovery capability. Use undo password-recovery enable to disable password recovery capability. Syntax password-recovery enable undo password-recovery enable...
  • Page 273 Default The default setting varies by device model. Views User view Predefined user roles network-admin Parameters slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number. If you do not specify this option on an IRF fabric, the command reboots all member devices. If you do not specify this option on an IRF 3 system, the command reboots all parent devices and PEXs.
  • Page 274: Reset Scheduler Logfile

    <Sysname> reboot Start to check configuration with next startup configuration file, please wait..DONE! Current configuration may be lost after the reboot, save current configuration? [Y/N]:n This command will reboot the device. Continue? [Y/N]:y Now rebooting, please wait... # Reboot the device immediately without performing any software check. <Sysname>...
  • Page 275: Restore Factory-Default

    Related commands display version-update-record restore factory-default Use restore factory-default to restore the factory-default settings and states. Syntax restore factory-default Views User view Predefined user roles network-admin Usage guidelines CAUTION: This command is disruptive. Use this command only when you cannot troubleshoot the device by using other methods, or you want to use the device in a different scenario.
  • Page 276: Scheduler Logfile Size

    Syntax scheduler job job-name undo scheduler job job-name Default No job exists. Views System view Predefined user roles network-admin Parameters job-name: Specifies the job name, a case-sensitive string of 1 to 47 characters. Usage guidelines A job can be referenced by multiple schedules. In job view, you can assign commands to the job. Examples # Create a job named backupconfig and enter job view.
  • Page 277: Scheduler Reboot At

    Examples # Set the size of the job execution log file to 32 KB. <Sysname> system-view [Sysname] scheduler logfile size 32 Related commands display scheduler logfile scheduler reboot at Use scheduler reboot at to specify the reboot date and time. Use undo scheduler reboot to remove the reboot schedule configuration.
  • Page 278: Scheduler Reboot Delay

    Related commands scheduler reboot delay scheduler reboot delay Use scheduler reboot delay to specify the reboot delay time. Use undo scheduler reboot to remove the reboot schedule configuration. Syntax scheduler reboot delay time undo scheduler reboot Default No reboot delay time is specified. Views User view Predefined user roles...
  • Page 279: Shutdown-Interval

    Views System view Predefined user roles network-admin Parameters schedule-name: Specifies the schedule name, a case-sensitive string of 1 to 47 characters. Usage guidelines You can schedule a job to have the device automatically run a command or a set of commands without administrative interference.
  • Page 280: Sysname

    Use sysname to set the device name. Use undo sysname to restore the default. Syntax sysname sysname undo sysname Default The default device name is H3C. Views System view Predefined user roles network-admin Parameters sysname: Specifies a name for the device, a string of 1 to 64 characters.
  • Page 281: System-Working-Mode

    system-working-mode Use system-working-mode to set the system operating mode. Use undo system-working-mode to restore the default. Syntax system-working-mode { advance | standard | expert } undo system-working-mode Default The device operates in standard mode. Views System view Predefined user roles network-admin Parameters advance: Sets the system operating mode to advanced.
  • Page 282: Time At

    Syntax temperature-limit slot slot-number hotspot sensor-number lowlimit warninglimit [ alarmlimit ] undo temperature-limit slot slot-number hotspot sensor-number Default To view the default settings, execute the undo temperature-limit and display environment commands in turn. Views System view Predefined user roles network-admin Parameters slot slot-number: Specifies an IRF member device by its member ID or a PEX by its virtual slot number.
  • Page 283: Time Once

    Views Schedule view Predefined user roles network-admin Parameters time: Specifies the schedule execution time in the hh:mm format. The value range for hh is 0 to 23. The value range for mm is 0 to 59. date: Specifies the schedule execution date in the MM/DD/YYYY or YYYY/MM/DD format. The value range for YYYY is 2000 to 2035.
  • Page 284: Time Repeating

    month-date month-day: Specifies a day in the current month, in the range of 1 to 31. If you specify a day that does not exist in the current month, the configuration takes effect on that day in the next month. week-day week-day&<1-7>: Specifies a space-separated list of up to seven week days for the schedule.
  • Page 285 Syntax time repeating [ at time [ date ] ] interval interval-time time repeating at time [ month-date [ month-day | last ] | week-day week-day&<1-7> ] undo time Default No execution time table is specified for a periodic schedule. Views Schedule view Predefined user roles...
  • Page 286: Usb Disable

    [Sysname] scheduler schedule saveconfig [Sysname-schedule-saveconfig] time repeating at 8:00 month-date 5 # Configure the device to execute schedule saveconfig at 8:00 a.m. on the last day of every month. <Sysname> system-view [Sysname] scheduler schedule saveconfig [Sysname-schedule-saveconfig] time repeating at 8:00 month-date last # Configure the device to execute schedule saveconfig at 8:00 a.m.
  • Page 287 Syntax user-role role-name undo user-role role-name Default A schedule has the user roles of the schedule creator. Views Schedule view Predefined user roles network-admin Parameters role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role can be user-defined or predefined.
  • Page 288: Tcl Commands

    Tcl commands Use cli to execute Comware commands in Tcl configuration view. Syntax cli command Views Tcl configuration view Predefined user roles network-admin Parameters command: Specifies the commands to be executed. They must be complete command lines. Usage guidelines In Tcl configuration view, a Tcl command takes preference over a Comware command when a conflict occurs.
  • Page 289: Tclsh

    Views Tcl configuration view Predefined user roles network-admin Usage guidelines To return from Tcl configuration view to user view, you can also use the quit command. To return to the upper-level view from system view or a Comware feature view, use the quit command.
  • Page 290: Python Commands

    Python commands python Use python to enter the Python shell. Syntax python Views User view Predefined user roles network-admin Usage guidelines In the Python shell, you can use the following items: • Python 2.7 commands. • Python 2.7 standard API. •...
  • Page 291 param: Specifies the parameters to be passed to the script. To enter multiple parameters, use spaces as the delimiter. Usage guidelines You cannot perform any operation while a Python script is being executed by your command. Make sure the statements in the script meet the syntax requirements. The system stops executing a Python script if it finds a statement with syntax errors.
  • Page 292: License Management Commands

    # Display detailed license information for each IRF member device. <Sysname> display license Slot 1: flash:/license/210235A0U0H12A0000652013093013451765317.ak Feature: evi SPBM EVB FCoE TRILL Product Description: H3C S5820V2 Data Center License Registered at: 2014-01-01 04:53:49 License Type: Permanent Current State: In use Command output...
  • Page 293: Display License Feature

    Field Description State of the license: • In use—The license is being used. • Usable—The license is available for use. If multiple days-restricted licenses for one feature are installed, only one license is in In use state and the rest licenses are in Usable state.
  • Page 294: Display License Device-Id

    Field Description Switches of this series do not support the EVI feature in the current software version. Licensing state of the feature: • N—Not licensed. Licensed • Y—Licensed. License type by purchasing state: • Trial—Trial license. • State Formal—Purchased license. If the feature is not licensed, this field displays a hyphen (-).
  • Page 295: License Activation-File Uninstall

    Views System view Predefined user roles network-admin Parameters file-name: Specifies the file name, a case-sensitive string of 1 to 127 characters. The activation file must be valid and stored on the device. slot slot-number: Specifies the member ID of an IRF member device. Usage guidelines To install a license activation file successfully, make sure the SN and DID used for registering the feature license matches the current SN and DID of the device.
  • Page 296: License Compress

    Use this command to revoke an unexpired license if you want to transfer the license from one device to another. If an activation file is uninstalled, the system creates an Uninstall key. Use this key together with the SN and DID of the transfer destination to register the license for the transfer destination. Trial licenses are not transferrable.
  • Page 297 you have saved the Uninstall keys so you can apply for a new activation key/file for the unexpired licenses that were covered by the uninstalled activation keys/files. Are you sure you want to continue? [Y/N]: Y This operation might take some time. Do not perform any other operations until the operation is completed or a failure message is displayed.
  • Page 298: Index

    Index A B C D E F G H I J L M N O P Q R S T U V W debug,82 delete,202 activation-key,12 delete,116 append,77 delete,83 archive configuration,134 description,47 archive configuration interval,134 dir,203 archive configuration location,135 dir,83 archive configuration max,137 dir,118...
  • Page 299 display install job,171 flow-control,23 display install log,172 format,122 display install package,173 format,209 display install package,205 free ftp user,72 display install rollback,174 free ftp user-ip,73 display install which,175 free ftp user-ip ipv6,73 display interface m-eth0,206 free line,24 display ip routing-table,207 free user-interface,25 display ipv6 routing-table,208...
  • Page 300 issu pex,196 pwd,127 issu rollback,197 python,278 issu rollback-timer,198 python filename,278 issu run switchover,199 quit,218 job,255 quit,9 quit,96 lcd,90 license activation-file install,282 reboot,260 license activation-file uninstall,283 reboot,218 license compress,284 reget,96 line,27 rename,97 line class,28 rename,127 lock,29 reset,97 ls,91 reset boot-loader pex,163 reset install log-history oldest,200 reset install rollback...
  • Page 301 shutdown,220 telnet server ipv6 dscp,42 shutdown-interval,267 temperature-limit,269 speed,35 terminal type,43 ssh2,220 tftp,107 startup saved-configuration,153 tftp,222 status,102 tftp client ipv6 source,108 stopbits,36 tftp client source,109 super,65 tftp ipv6,110 super authentication-mode,65 tftp-server acl,111 super default role,66 tftp-server ipv6 acl,112 super password,67 time at,270 sysname,268 time...

This manual is also suitable for:

S5820v2

Table of Contents