Page 1
HP MSM7xx Controllers CLI Reference Guide ProCurve 5400zl Switches HP MSM7xx Controllers CLI Installation and Getting Started Guide Reference Guide...
Page 3
HP MSM7xx Controllers CLI Reference Guide...
Page 4
Hewlett-Packard. connection with the furnishing, performance, or use of this material. Publication Number The only warranties for HP products and services are set forth 5998-1432 in the express warranty statements accompanying such December 2011 products and services.
Products covered....................1-2 Important terms .....................1-2 Typographical conventions ..................1-2 Command syntax ....................1-2 Management tool ....................1-3 New in this release .......................1-4 HP support ........................1-4 Before contacting support ................1-4 Online documentation ....................1-5 Configuring CLI support....................1-5 Secure shell access....................1-6 Authentication .......................1-6 Serial port access....................1-7 Starting a CLI session on the serial port ............1-7...
Page 6
CLI commands View context .........................2-3 arping ........................2-3 enable........................2-3 nslookup .........................2-3 ping ..........................2-3 ps ..........................2-3 quit...........................2-3 show license ......................2-4 show logging filtered.....................2-4 top..........................2-4 traceroute .......................2-4 Enable context......................2-5 reboot device......................2-5 show certificate .....................2-5 show certificate binding ..................2-5 iperf .........................2-5 ping ..........................2-5 arping ........................2-6 arp..........................2-6 end ...........................2-6 quit...........................2-6...
Page 7
show radius statistics....................2-8 show radius users ....................2-8 show users......................2-9 show discrete pin....................2-9 config........................2-9 show all config .......................2-9 controlled network....................2-9 show controlled network config................2-9 Config context ......................2-10 vlan ........................2-10 interface ........................2-10 dhcp public ip default lease period ..............2-10 dhcp public ip subnet..................2-10 certificate......................2-10 certificate binding....................2-10 certificate revocation ..................2-11...
Page 8
show mac list .......................2-14 ipsec policy......................2-14 admin local authentication.................2-14 admin radius authentication ................2-15 admin radius authentication server ..............2-15 ip http port......................2-15 ip https port ......................2-15 snmp-server trap certificate-expired..............2-15 snmp-server trap certificate-expires-soon ............2-16 snmp-server trap web-fail...................2-16 snmp-server trap web-login................2-16 snmp-server trap web-logout ................2-16 username ......................2-16 web admin kickout ....................2-17 web allow......................2-17...
Page 11
firmware-update start ..................2-37 firmware-update time..................2-37 firmware-update uri ....................2-37 firmware-update weekday..................2-38 snmp-server trap firmware-update..............2-38 ip name-server......................2-38 ip name-server cache ..................2-38 ip name-server dynamic..................2-38 ip name-server interception ................2-39 ip name-server switch-on-servfail ..............2-39 ip name-server switch-over ................2-39 ip name-server logout-info .................2-39 access controller shared secret .................2-39 radius-server profile ....................2-40 ip-qos profile ......................2-40 access controller....................2-40...
Page 12
discovery protocol device-id................2-44 service controller ap authentication credentials..........2-44 service controller ap authentication enable.............2-44 service controller ap authentication file............2-45 service controller ap authentication radius-server .........2-45 service controller ap authentication refresh-rate..........2-45 service controller ap authentication source file..........2-45 service controller ap authentication source local...........2-45 service controller ap authentication source radius ........2-45 service controller discovery................2-46 service controller primary..................2-46...
Page 13
dot1x supplicant timeout..................2-52 dynamic key ......................2-52 dynamic key interval ...................2-53 key chain.......................2-53 config-version.......................2-53 radius-server accounting session ..............2-53 radius-server client....................2-53 radius-server local eap-peap ................2-53 radius-server local eap-tls...................2-54 radius-server local eap-ttls .................2-54 radius-server local pap..................2-54 radius-server ssid detection nas-id..............2-54 show radius-server ....................2-54 active-directory check attribute ................2-54 active-directory check user access ..............2-55 active-directory device name ................2-55...
Page 14
sflow destination 80211 ..................2-58 show sflow destination ..................2-58 show sflow sampling-polling................2-59 sflow sampling .....................2-59 sflow polling......................2-59 sflow interface .....................2-59 mac lockout entry....................2-59 show mac lockout ....................2-59 team communication ip address................2-59 team communication vlan ..................2-60 team management address.................2-60 team manager.......................2-60 team name ......................2-60 teaming .........................2-60 team communication interface ................2-60 team communication interface ................2-60...
Page 16
session page ......................2-73 transport page ......................2-73 welcome url......................2-74 notify user location changes ................2-74 Default user session profile context ................2-75 accounting interim update .................2-75 idle timeout ......................2-75 maximum input octets ..................2-75 maximum input packets ..................2-75 maximum output octets..................2-76 maximum output packets...................2-76 maximum total octets ..................2-76 maximum total packets ..................2-76 nat one-to-one ......................2-76...
Page 17
User account context....................2-85 end .........................2-85 access controlled ....................2-85 access-controlled profile ..................2-85 access-controlled virtual ap ................2-85 active ........................2-86 chargeable user identity ..................2-86 control method ....................2-86 egress vlan ......................2-86 end time ........................2-86 idle timeout ......................2-86 max user sessions....................2-87 password.......................2-87 regular profile ......................2-87 regular virtual ap ....................2-87 session timeout ....................2-87 subscription plan ....................2-88...
Page 18
nat limit port range size ..................2-94 ip address dhcp client-id..................2-94 end .........................2-95 pppoe auto-reconnect ..................2-95 pppoe mru ......................2-95 pppoe mtu......................2-95 pppoe unnumbered .....................2-95 ip nat outside source static ................2-96 ip address alternate .....................2-96 LAN IP interface context...................2-97 end .........................2-97 ip address......................2-97 ip address management ..................2-97 tagged ........................2-97 untagged .......................2-97...
Page 19
wpa-psk.......................2-102 authentication server request radius cui ............2-103 dot1x session page ....................2-103 wpa terminate controller ..................2-103 wireless filters....................2-103 wireless filters mac ...................2-103 wireless filters rule input..................2-104 wireless filters rule output ................2-104 wireless filters type ...................2-104 mac-filters local ....................2-105 mac-filters......................2-106 mac-filters mode ....................2-106 mac authentication accounting ...............2-106 mac authentication accounting radius profile ..........2-106 mac authentication radius profile ..............2-106...
Page 20
layer3 mobility hns method................2-111 add ip-qos profile ....................2-111 delete ip-qos profile all..................2-111 delete ip-qos profile...................2-111 qos ........................2-112 upstream diffserv tagging .................2-113 wmm advertising ....................2-113 html redirection ....................2-113 local nas id......................2-113 bandwidth......................2-113 bandwidth default rates ..................2-113 bandwidth default rates maximum ..............2-114 radius accounting realms .................2-114 radius authentication realms ................2-114 identify stations by ip only ................2-114...
Page 21
VLAN interface context ...................2-120 end ........................2-120 ip address......................2-120 ip address mode....................2-120 tagged ........................2-120 untagged ......................2-120 ip default-gateway .....................2-121 ip nat........................2-121 RADIUS profiles context..................2-122 end ........................2-122 radius-server accounting port ................2-122 radius-server alternate hosts................2-122 radius-server authentication method ..............2-122 radius-server authentication port ..............2-122 radius-server deadtime ..................2-123 radius-server host ....................2-123 radius-server key 2 ....................2-123...
Page 22
GRE interface context .....................2-128 end force ......................2-128 gre name ......................2-128 ip address......................2-128 peer ip address....................2-128 remote ip address ....................2-128 IPsec context ......................2-129 end ........................2-129 active ........................2-129 authentication ....................2-129 cipher ........................2-129 dns domain ......................2-129 dns server ......................2-129 incoming nat.......................2-130 incoming traffic network..................2-130 interface ......................2-130 local id.........................2-130 mode........................2-130...
Page 23
PPTP client interface ....................2-135 active ........................2-135 pptp client credentials ..................2-135 pptp client domain name ..................2-135 pptp client server address ................2-135 end ........................2-135 ip nat........................2-135 pptp client auto route discovery..............2-136 pptp client lcp echo ...................2-136 Keychain context......................2-137 end ........................2-137 key ........................2-137 key chain name ....................2-137 Keys context ......................2-138 end ........................2-138...
Page 24
receiver .......................2-143 user ........................2-143 version.........................2-143 Active Directory Group context ................2-144 end ........................2-144 access controlled ....................2-144 access-controlled profile ..................2-144 access-controlled virtual ap ................2-144 active ........................2-145 active-directory group name ................2-145 egress vlan ......................2-145 regular profile ....................2-145 regular virtual ap ....................2-145 Controlled APs context ...................2-147 end ........................2-147 execute action....................2-147 execute system action..................2-147...
Page 25
Controlled APs network configuration context ...........2-151 end ........................2-151 interface wireless ....................2-151 local mesh group ....................2-151 local mesh provisioning group.................2-151 provisioning connectivity .................2-151 provisioning discovery..................2-151 radius profile ......................2-151 show tech......................2-152 switch port......................2-152 syslog........................2-152 inherit vlan port2 ....................2-152 vlan port2......................2-152 vlan port2 id .......................2-152 inherit country code ..................2-152 world-mode dot11 country code..............2-153 inherit ipv6 ra conversion.................2-153...
Page 33
end ................2-168 ingress rate..............2-183 end ................2-175 ingress traffic type ............. 2-183 end ................2-176 inherit 8021x ............... 2-156 end ................2-179 inherit country code ..........2-152 end ................2-180 inherit ipv6 ra conversion ......... 2-153 end ................2-181 inherit l3subnets............
Page 34
ipass id ................2-68 mac authentication accounting........ 2-106 ipass login url ............... 2-72 mac authentication local........... 2-107 ipass name ..............2-68 mac authentication radius profile......2-106 iperf ................. 2-5 mac authentication remote........2-107 ip-qos profile ..............2-40 mac authentication request radius cui ....2-107 ipsec policy..............
Page 36
service controller discovery........2-46 show tech ..............2-152 service controller primary ip addr......2-46 show trunks ..............2-13 service controller primary .......... 2-46 show user profiles details ........... 2-51 service controller priority........... 2-46 show user profiles............2-51 service controller provisioning ........2-47 show users ..............
Page 37
soap-server allow............2-34 username............... 2-16 soap-server http authentication password ....2-34 username............... 2-88 soap-server http authentication username....2-34 version ................. 2-143 soap-server http authentication......... 2-34 virtual ap binding ............2-149 soap-server port ............2-34 virtual ap name............. 2-99 soap-server ssl with client certificate ....... 2-35 virtual ap ...............
Page 39
Introduction Contents About this guide ......................1-2 Products covered....................1-2 Important terms .....................1-2 Typographical conventions ..................1-2 New in this release .......................1-4 HP support ........................1-4 Online documentation ....................1-5 Configuring CLI support....................1-5 Secure shell access....................1-6 Authentication .......................1-6 Serial port access....................1-7 Entering strings ......................1-8 Context hierarchy ......................1-9 Sample CLI sessions ....................1-10...
Introduction About this guide About this guide This guide explains how to work with the Command Line Interface (CLI) on HP MSM7xx Controllers. Products covered This guide covers the following products: Model Part MSM710 Access Controller J9328A MSM710 Mobility Controller...
Example Description Items enclosed in square brackets are optional. You end [force] can either include them or not. Do not include the brackets. In this example you can either include “force” or omit it. Items enclosed in parenthesis and separated by a firewall mode (high|low|none) vertical line indicate a choice.
ProCurve. Additionally, your HP-authorized networking products reseller can provide you with assistance. Before contacting support To make the support process most efficient, before calling your networking dealer or HP Support, you first should collect the following information: Collect this information Where to find it Product identification.
Online documentation Online documentation You can download documentation from the HP Support Website at: www.hp.com/support/manuals. Search by product name or part number. Configuring CLI support CLI support is configured using the management tool on the controller. Select Controller >> Management > CLI to open the Command Line Interface (CLI) configuration page.
Configuring CLI support Secure shell access Enable this option to allow access to the CLI via an SSH session. The CLI supports SSH on the standard TCP port (22). SSH connections to the CLI can be made on any active interface. Support for each interface must be explicitly enabled under Security on the Controller >>...
Configuring CLI support Serial port access Access to the CLI via the console port is available on the MSM710 and MSM760. Enable the CLI on serial port When enabled, access to the command line interface is permitted via the serial port. Use hardware flow control Enables hardware flow control.
Entering strings CLI> Entering strings When entering a value that contains spaces, you must enclose it in quotation marks. For example, if the command syntax is: ssid <name> You must specify one of the following: ssid ANameWithNoSpaces ssid "A name with spaces"...
Context hierarchy Context hierarchy CLI commands are grouped into functional contexts. The following table shows the context hierarchy and the commands used to switch from the parent context: Context hierarchy To switch to this context from parent context View (This is the root context. No command is needed.) Enable enable Config...
Sample CLI sessions Context hierarchy To switch to this context from parent context Wireless interface interface wireless (single|dual|triple) <number> RADIUS profile radius profile <profile> Local mesh profile local mesh group <group> Local mesh provisioning local mesh provisioning group Provisioning connectivity provisioning connectivity Provisioning discovery provisioning discovery...
Sample CLI sessions CLI(config-if-ip)# no ip nat CLI(config-if-ip)# ip address alternate 192.168.23.56 CLI(config-if-ip)# end CLI(config)# end CLI# quit Example 2 This sample CLI session shows you how to create a static trunk on the E-MSM720 that is bound to a network profile called static trunk on port 2. The trunk is created on trunk group 1 using a VLAN ID of 900 (tagged).
File transfer File transfer In some cases you may need to transfer files (certificates or configuration) to the controller. Commands that have this capability typically include <uri> or <url> in their parameter list. Note When you enter the commands discussed here, the files are transferred immediately. File transfer can be performed in two ways.
Page 51
Chapter 2: CLI commands CLI commands Contents View context .........................2-3 Enable context......................2-5 Config context ......................2-10 Access Controller context..................2-62 Default user session profile context ................2-75 Session profile context ....................2-79 User account context....................2-85 Internet port interface context .................2-89 LAN port interface context ..................2-91 WAN IP interface context..................2-93 LAN IP interface context...................2-97 Public access RADIUS attributes context...............2-98...
Page 52
CLI commands Syslog context ......................2-132 PPTP client interface ....................2-135 Keychain context......................2-137 Keys context ......................2-138 Subscription plan context ..................2-139 SNMP user context ....................2-142 SNMP notification receiver context ..............2-143 Active Directory Group context ................2-144 Controlled APs context ...................2-147 Controlled APs group context ................2-149 Controlled APs base group context ...............2-150 Controlled APs network configuration context ...........2-151 Controlled APs VSC binding context..............2-162...
This is the root of the command tree. arping Supported on: MSM710 E-MSM720 MSM760 MSM765zl arping [ -AbDfhqUV] [ -c <count>] [ -w <deadline>] [ -s <source>] -I <interface> <destination> Pings a destination on a device interface using ARP packets.
CLI commands View context show license Supported on: MSM710 E-MSM720 MSM760 MSM765zl show license (eula | gpl | other) Displays license information. show logging filtered Supported on: MSM710 E-MSM720 MSM760 MSM765zl show logging [filtered] Displays the system log. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Displays all running processes.
CLI commands Enable context Enable context Path: View > Enable This context provides access to various utilities. reboot device Supported on: MSM710 E-MSM720 MSM760 MSM765zl reboot device Restarts the system. show certificate Supported on: MSM710 E-MSM720 MSM760 MSM765zl show certificate Displays current certificates.
CLI commands Enable context show bridge Supported on: MSM710 E-MSM720 MSM760 MSM765zl show bridge Displays bridge information. show bridge forwarding Supported on: MSM710 E-MSM720 MSM760 MSM765zl show bridge forwarding Displays bridge forwarding information. show dns cache Supported on: MSM710 E-MSM720 MSM760 MSM765zl show dns cache [<serial>]...
CLI commands Enable context show users Supported on: MSM710 E-MSM720 MSM760 MSM765zl show users [<filter>] Displays all users on this controller. show discrete pin Supported on: MSM710 E-MSM720 MSM760 MSM765zl show discrete pin Displays the state of the discrete pin.
Switches to the specified physical interface (port). dhcp public ip default lease period Supported on: MSM710 E-MSM720 MSM760 MSM765zl dhcp public ip default lease period <number> Defines the amount of time a public IP address lease will be valid. dhcp public ip subnet...
(web-management | html-auth | soap | eap) <certname> Unassigns a certificate from a service. certificate revocation Supported on: MSM710 E-MSM720 MSM760 MSM765zl certificate revocation <uri> <certname> Adds a Certificate Revocation List (CRL) to an existing authority certificate. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context.
CLI commands Config context show config factory Supported on: MSM710 E-MSM720 MSM760 MSM765zl show config [factory] Generates a list of CLI commands that can be used to define the currently loaded configuration. show network-profiles Supported on: MSM710 E-MSM720 MSM760 MSM765zl show network-profiles Displays all currently defined network profiles.
Supported on: E-MSM720 show vlans Displays VLAN information. virtual ap Supported on: MSM710 E-MSM720 MSM760 MSM765zl virtual ap <name> Creates a new VSC (VAP) profile or switches to the existing VSC (VAP) context with the specified name. no virtual ap <name>...
Switches operational mode to CAP MultiService Access Point. Switches operational mode to CAP MultiService Controller. Switches operational mode to WAB Wireless Station. show subscription plan Supported on: MSM710 E-MSM720 MSM760 MSM765zl show subscription plan [<name>] Displays one or more subscription plans. subscription plan Supported on: MSM710 E-MSM720 MSM760 MSM765zl subscription plan <name>...
CLI commands Config context admin radius authentication Supported on: MSM710 E-MSM720 MSM760 MSM765zl admin radius authentication Sets the authentication of manager logins to occur using RADIUS. no admin radius authentication Disables manager authentication via RADIUS. admin radius authentication server Supported on: MSM710 E-MSM720 MSM760 MSM765zl admin radius authentication server <name>...
CLI commands Config context snmp-server trap certificate-expires-soon Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server trap certificate-expires-soon Send a trap when the SSL certificate is about to expire. A trap is sent every 12 hours starting 15 days before the certificate expires.
CLI commands Config context web admin kickout Supported on: MSM710 E-MSM720 MSM760 MSM765zl web admin kickout Enables a new manager login to terminate an existing manager session. no web admin kickout Stops a new manager from logging in until an existing manager logs out.
CLI commands Config context web access interface gre Supported on: MSM710 E-MSM720 MSM760 MSM765zl web access interface gre <name> Enables access to the management tool via the specified GRE tunnel. no web access interface gre <name> Disables access to the management tool via the specified GRE tunnel.
This list is sent to all devices that request an IP address, encoded as DHCP option 43 (Vendor-specific information). This option is only interpreted by HP APs that are operating in controlled mode. Controlled mode APs use these addresses to connect with the controllers in the order that they appear in the list.
CLI commands Config context dhcp server logout html user Supported on: MSM710 E-MSM720 MSM760 MSM765zl dhcp server logout html user Logout HTML users upon discovery request. no dhcp server logout html user Do not logout HTML user upon discovery request.
DHCP server to assign IP addresses on this network to all client stations. The controller handles all mapping between the two subnets internally. clock Supported on: MSM710 E-MSM720 MSM760 MSM765zl clock <time> <date> Sets the system time and date. Parameters Time as hh:mm:ss.
CLI commands Config context ntp protocol Supported on: MSM710 E-MSM720 MSM760 MSM765zl ntp protocol (ntp | sntp) Sets the network time protocol to use. ntp server Supported on: MSM710 E-MSM720 MSM760 MSM765zl ntp server Enable this option to have the controller periodically contact a network time server to update its internal clock.
CLI commands Config context clock custom dst ends Supported on: MSM710 E-MSM720 MSM760 MSM765zl clock custom dst ends <day> <weekday> <month> <time> Set parameters of the rule defining the end of daylight savings time. Parameters Day of the month. Range 1 - 31.
CLI commands Config context config-update automatic Supported on: MSM710 E-MSM720 MSM760 MSM765zl config-update automatic Enables scheduled configuration restore or backup. no config-update automatic Disables scheduled configuration restore or backup. The controller can automatically download the configuration file from a local or remote URL (restore).
CLI commands Config context snmp-server trap config-change Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server trap config-change Send a trap whenever the configuration is changed. no snmp-server trap config-change Do not send this trap. snmp-server trap config-update Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server trap config-update Send a trap whenever the firmware is updated.
CLI commands Config context snmp-server allow Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server allow <ip address>/<mask> Adds a host to the list of IP address from which access to the SNMP interface is permitted. no snmp-server allow <ip address>/<mask> Removes a host from the list of IP address from which access to the SNMP interface is permitted.
Parameters Location where the controller is installed. <name> snmp-server port Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server port <port number> Sets the port the controller will use to respond to SNMP requests. Parameters SNMP port number. Range 1 - 65535.
CLI commands Config context snmp-server trap destination Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server trap destination <host> <[port number]> Add a new trap destination. no snmp-server trap destination <host> [<port>] Deletes the specified trap destination. Parameters Sets the IP address or domain name of the host that the controller will send <host>...
CLI commands Config context snmp-server version 2c Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server version 2c Enable support for SNMP version 2c. no snmp-server version 2c Disable support for SNMP version 2c. snmp-server version 3 Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server version 3 Enable support for SNMP version 3.
Blocks SNMP access on the upstream port. snmp-server access vpn Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server access vpn Enables access to the management tool via a VPN connection. no snmp-server access vpn Blocks access to the management tool via a VPN connection.
CLI commands Config context snmp-server trap device-security-failure Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server trap device-security-failure Send a trap when the device is not able to establish a secure connection with the service controller. no snmp-server trap device-security-failure Do not send a trap about device security failure.
Blocks access to the management tool via the LAN port. snmp-server user Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server user <name> Creates a new SNMP user or switches to the SNMP user context with the specified user name. no snmp-server user <name>...
CLI commands Config context soap-server allow Supported on: MSM710 E-MSM720 MSM760 MSM765zl soap-server allow <ip address>/<mask> Adds a host to the list of IP addresses from which access to the SOAP interface is permitted. no soap-server allow <ip address>/<mask> Removes a host from the list of IP addresses from which access to the SOAP interface is permitted.
SSL disabled for SOAP server. soap-server ssl with client certificate Supported on: MSM710 E-MSM720 MSM760 MSM765zl soap-server ssl with client certificate Enable the use of client certificate with SSL for SOAP server. no soap-server ssl with client certificate Disable the use of client certificate with SSL for SOAP server.
CLI commands Config context soap-server access vpn Supported on: MSM710 E-MSM720 MSM760 MSM765zl soap-server access vpn Enables access to the management tool via a VPN connection. no soap-server access vpn Blocks access to the management tool via a VPN connection.
CLI commands Config context firmware-update automatic Supported on: MSM710 E-MSM720 MSM760 MSM765zl firmware-update automatic Enables scheduled firmware upgrades. no firmware-update automatic Disables scheduled firmware upgrade. The controller can automatically retrieve and install firmware from a local or remote URL at preset times.
Sets the shared secret used to communicate with the controller. no access controller shared secret Sets the shared secret used to communicate with the access controller. The controller will only accept authentication/location-aware information from HP APs that have a matching shared secret to its own. 2-39...
CLI commands Config context radius-server profile Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server profile <name> Creates a new RADIUS profile or switches to the RADIUS context with the specified profile name. no radius-server profile <name> Deletes the specified RADIUS profile.
CLI commands Config context certificate ipsec revocation Supported on: MSM710 E-MSM720 MSM760 MSM765zl certificate ipsec revocation <uri> Loads a new CRL file from the specified URI. The URI can be local: local://FILENAME or remote ftp://host/path certificate ssl Supported on: MSM710 E-MSM720 MSM760 MSM765zl certificate ssl <uri>...
CLI commands Config context lldp holdtime-multiplier Supported on: MSM710 E-MSM720 MSM760 MSM765zl lldp holdtime-multiplier <hold> Sets the hold time multiplier for LLDPDU transmissions. The value of Multiplier is multiplied by the refresh-interval to define Time to live. Time to live indicates the length of time that neighbors will consider LLDP information sent by this agent to be valid.
Displays LLDP statistics for all ports or a specific port . discovery protocol Supported on: MSM710 E-MSM720 MSM760 MSM765zl discovery protocol Enables broadcast of HP device information for interoperability with CDP-enabled networking hardware. no discovery protocol Disables broadcast of HP device information. discovery protocol device-id...
Config context service controller ap authentication file Supported on: MSM710 E-MSM720 MSM760 MSM765zl service controller ap authentication file <name> Sets the file to use for authentication of controlled access points. This must be an ASCII file with one or more MAC addresses in it. Each address must appear on a separate line.
CLI commands Config context service controller discovery Supported on: MSM710 E-MSM720 MSM760 MSM765zl service controller discovery Enable controller discovery. no service controller discovery Disable service controller discovery. service controller primary Supported on: MSM710 E-MSM720 MSM760 MSM765zl service controller primary Become the Primary controller.
Allow discovery on the specified interface. no service controller discovery interface <interface> Denies discovery on the specified interface. service controller provisioning Supported on: MSM710 E-MSM720 MSM760 MSM765zl service controller provisioning Enable the AP provisioning system. no service controller provisioning Disable the AP provisioning system.
All traffic assigned to a particular bandwidth level shares the allocated bandwidth for that level. bandwidth control internet-port normal Supported on: MSM710 MSM760 MSM765zl bandwidth control internet-port normal <min-tx-%> <min-rx-%> <max-tx-%> <max- rx-%> Sets the bandwidth rates (Tx minimum, Tx maximum, Rx minimum, and Rx maximum) for traffic classed as Normal.
CLI commands Config context bandwidth control Supported on: E-MSM720 bandwidth control Enables bandwidth control for traffic going between the Access and the Internet network. no bandwidth control Disables bandwidth control for traffic going between the Access and the Internet network. bandwidth control high Supported on: E-MSM720 bandwidth control high <min-tx-%>...
Sets the bandwidth rates (Tx minimum, Tx maximum, Rx minimum, and Rx maximum) for traffic classed as Very High. ip route gateway Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip route gateway<destination>/<mask> <gateway> <[metric]> Adds a static route. no ip route gateway <destination>/<mask> <gateway> <[metric]>...
CLI commands Config context firewall mode Supported on: MSM710 E-MSM720 MSM760 MSM765zl firewall mode (high|low|none) Sets the firewall mode. Parameters Permits all outgoing traffic. Blocks all externally initiated connections. high Permits all incoming and outgoing traffic, except for NetBIOS traffic. Use this option if you require active FTP sessions.
Supported on: MSM710 E-MSM720 MSM760 MSM765zl dynamic key interval (5m | 10m | 15m | 30m | 1h | 2h | 4h | 8h | 12h) Specifies how often (in minutes or hours) that the group (broadcast) key is changed for 802.1X and WPA.
CLI commands Config context radius-server local eap-tls Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server local eap-tls Allow EAP-TLS. no radius-server local eap-tls Disallow EAP-TLS. radius-server local eap-ttls Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server local eap-ttls Allow EAP-TTLS. no radius-server local eap-ttls Disallow EAP-TTLS.
CLI commands Config context active-directory check user access Supported on: MSM710 E-MSM720 MSM760 MSM765zl active-directory check user access Check Active Directory for user access. no active-directory check user access Do not check Active Directory for user access. active-directory device name...
CLI commands Config context active-directory join Supported on: MSM710 E-MSM720 MSM760 MSM765zl active-directory join <username> <password> Joins with Active Directory. show active-directory Supported on: MSM710 E-MSM720 MSM760 MSM765zl show active-directory Displays Active Directory settings. show active-directory group Supported on: MSM710 E-MSM720 MSM760 MSM765zl show active-directory group <name>...
CLI commands Config context user tracking port Supported on: MSM710 E-MSM720 MSM760 MSM765zl user tracking port <number> Specifies where UDP port capture data should be sent. persistent user information Supported on: MSM710 E-MSM720 MSM760 MSM765zl persistent user information Save user account information locally.
Supported on: MSM710 E-MSM720 MSM760 MSM765zl show mac lockout Displays all entries in the MAC lockout list. team communication ip address Supported on: E-MSM720 MSM760 MSM765zl team communication ip address <ip address>/<mask> Sets the team communcation VLAN IP Address. 2-59...
CLI commands Config context team communication vlan Supported on: E-MSM720 MSM760 MSM765zl team communication vlan <id> Sets the team communcation VLAN ID. no team communication vlan Disables usage of a VLAN for team communication. team management address Supported on: E-MSM720 MSM760 MSM765zl team management address <ip address>/<mask>...
CLI commands Config context team communication vlan Supported on: MSM760 MSM765zl team communication vlan Enables the use of a VLAN for team communication. no team communication vlan Disables usage of a VLAN for team communication. team management interface Supported on: MSM760 MSM765zl team management interface (internet | lan | vlan) [<name>]...
Access Controller context station http proxy support Supported on: MSM710 E-MSM720 MSM760 MSM765zl station http proxy support Enables support for client stations that are configured to use a proxy server for HTTP and HTTPS, without requiring users to reconfigure their systems.
CLI commands Access Controller context remember html users Supported on: MSM710 E-MSM720 MSM760 MSM765zl remember html users Enables support for remembering (automatically re-authenticating) HTML-authenticated users who leave the network but return within the remember delay interval. no remember html users Disables support for remembering HTML-authenticated users.
CLI commands Access Controller context show paypal Supported on: MSM710 E-MSM720 MSM760 MSM765zl show paypal Shows LLDP statistics for all ports or a specific port . paypal api-url Supported on: MSM710 E-MSM720 MSM760 MSM765zl paypal api-url (default | url) [<url>] Set or unset a custom PayPal API URL.
CLI commands Access Controller context authentication http Supported on: MSM710 E-MSM720 MSM760 MSM765zl authentication http <number> Sets the port number the controller will be used to provide standard HTTP access to the management tool. HTTP connections made to this port are met with a warning and the browser is redirected to the secure web server port.
NOC authentication is active. When the list is empty, authentication requests are accepted from any address. noc authentication Supported on: MSM710 E-MSM720 MSM760 MSM765zl noc authentication Enables support for NOC authentication. no noc authentication Disables support for NOC authentication.
Disables user agent filtering. noc access interface vlan Supported on: MSM710 E-MSM720 MSM760 MSM765zl noc access interface vlan <name> Adds the specified VLAN to the list of interfaces that authentication requests are accepted on. no noc access interface vlan <name>...
CLI commands Access Controller context wispr login url Supported on: MSM710 E-MSM720 MSM760 MSM765zl wispr login url <url> Specifies the WISPr login url assigned to the controller. no wispr login url Deletes the WISPr login url assigned to the controller.
Range: 5-99999 seconds in 15 second increments. use access-list Supported on: MSM710 E-MSM720 MSM760 MSM765zl use access-list <listname> Specifies the name of the access list to use. no use access-list Do not use an access list.
CLI commands Access Controller context http proxy upstream Supported on: MSM710 E-MSM720 MSM760 MSM765zl http proxy upstream <string> Specifies the host:port of the HTTP Proxy Upstream server. no http proxy upstream Do not use an HTTP Proxy Upstream server. https ssl certificate...
CLI commands Access Controller context ipass login url Supported on: MSM710 E-MSM720 MSM760 MSM765zl ipass login url <url> Specifies the URL of the IPass login page. The controller will automatically redirect users with IPass client software to this page. no ipass login url No IPass login URL.
CLI commands Access Controller context messages Supported on: MSM710 E-MSM720 MSM760 MSM765zl messages <url> Specifies the URL of a new message file. no messages No new messages file. Use default. noc ssl ca-certificate Supported on: MSM710 E-MSM720 MSM760 MSM765zl noc ssl ca-certificate <url>...
CLI commands Access Controller context welcome url Supported on: MSM710 E-MSM720 MSM760 MSM765zl welcome url <url> Specifies the URL of a welcome page. no welcome url No welcome page. notify user location changes Supported on: MSM710 E-MSM720 MSM760 MSM765zl notify user location changes Notify RADIUS on location changes.
The "no" form will remove the attributes. accounting interim update Supported on: MSM710 E-MSM720 MSM760 MSM765zl accounting interim update <number> Sets the default accounting interim update interval (in seconds) for all users that do not have a specific interval set in their profile.
CLI commands Default user session profile context maximum output octets Supported on: MSM710 E-MSM720 MSM760 MSM765zl maximum output octets <value> Sets the maximum output limit in octets for all users that do not have a specific limit set in their profile.
CLI commands Default user session profile context session timeout Supported on: MSM710 E-MSM720 MSM760 MSM765zl session timeout <number> Sets the default session timeout for all users that do not have a specific limit set in their profile. no session timeout Removes this attribute.
Session profile context Path: View > Enable > Config > Session profile Use this context to define settings for a user’s session profile. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. access controlled Supported on: MSM710 E-MSM720 MSM760 MSM765zl access controlled Set profile as access-controlled.
CLI commands Session profile context arp polling interval Supported on: MSM710 E-MSM720 MSM760 MSM765zl arp polling interval <number> Sets the ARP polling interval. use arp polling interval Use the ARP polling interval. no use arp polling interval Do not use the ARP polling interval.
CLI commands Session profile context idle timeout Supported on: MSM710 E-MSM720 MSM760 MSM765zl idle timeout <number> Sets the default idle time out for all users that do not have a specific limit set in their profile. use idle timeout Use this attribute.
CLI commands Session profile context nat one-to-one Supported on: MSM710 E-MSM720 MSM760 MSM765zl nat one-to-one Enables one-to-one NAT support for all users that do not have a specific value set in their profile. no nat one-to-one Removes this attribute. use nat one-to-one Use this attribute.
CLI commands Session profile context termination action Supported on: MSM710 E-MSM720 MSM760 MSM765zl termination action (logout | reauthenticate) Sets the termination action. use termination action Use the termination action. no use termination action Do not use the termination action. user defined attribute...
Page 134
CLI commands Session profile context no use public ip subnet Do not use this attribute. 2-84...
User account context Path: View > Enable > Config > User account Use this context to modify settings for a specific user account in the local user list. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. access controlled Supported on:...
CLI commands User account context active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Enables this user account. no active Disables this user account. chargeable user identity Supported on: MSM710 E-MSM720 MSM760 MSM765zl chargeable user identity <id> Sets the CUI. use chargeable user identity Uses the CUI.
This user never times out. max user sessions Supported on: MSM710 E-MSM720 MSM760 MSM765zl max user sessions <number> Sets the maximum concurrent sessions for this user. no max user sessions This user doesn’t have a maximum concurrent sessions limit.
CLI commands User account context no session timeout This user session never times out. subscription plan Supported on: MSM710 E-MSM720 MSM760 MSM765zl subscription plan <name> Sets the subscription plan to use. no subscription plan Delete a subscription plan. username Supported on: MSM710 E-MSM720 MSM760 MSM765zl username <name>...
Internet port interface context Internet port interface context Path: View > Enable > Config > Internet port interface Use this context to configure the Internet port. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. duplex Supported on: MSM710 E-MSM720 MSM760 duplex (auto | half | full) Sets the duplex mode on Internet.
CLI commands Internet port interface context ipsec vlan interface Supported on: MSM710 E-MSM720 MSM760 MSM765zl ipsec vlan interface <name> Specifies which VLAN is used by IPsec. no ipsec vlan interface Do not use a VLAN for IPsec. 2-90...
LAN port interface context LAN port interface context Path: View > Enable > Config > LAN port interface Use this context to configure the LAN port. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. duplex Supported on: MSM710 E-MSM720 MSM760 duplex (auto | half | full) Sets the duplex mode on LAN.
CLI commands LAN port interface context ipsec vlan interface Supported on: MSM710 E-MSM720 MSM760 MSM765zl ipsec vlan interface <name> Specifies which VLAN is used by IPsec. no ipsec vlan interface Do not use a VLAN for IPsec. 2-92...
Path: View > Enable > Config > WAN IP interface Use this context to configure various IP-networking related settings on the Internet port. pppoe client user Supported on: MSM710 E-MSM720 MSM760 MSM765zl pppoe client user <username> <password> Sets the PPPoE username and password. no pppoe client user Deletes the PPPoE username.
This option enables you to manually assign an IP address to the controller. static No IP address. none ip address Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip address <ip address>/<mask> Sets a static IP address for the port. Parameters IP address. <address>...
CLI commands WAN IP interface context Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. pppoe auto-reconnect Supported on: MSM710 E-MSM720 MSM760 MSM765zl pppoe auto-reconnect The controller will automatically attempt to reconnect if the connection is lost. no pppoe auto-reconnect The controller will not automatically attempt to reconnect if the connection is lost.
IP addresses are available to you. ip nat outside source static Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip nat outside source static (tcp|udp) <visible-port> <internal-addr> <internal-port> Adds a static NAT mapping which routes the specified incoming traffic to the specified IP address on the internal network.
Path: View > Enable > Config > LAN IP interface View > Enable > Config > LAN IP interface Use this context to configure various IP-networking related settings on the LAN port. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. ip address Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip address <ip address>/<mask>...
Public access RADIUS attributes context Path: View > Enable > Config > Public access RADIUS attributes Use this context to setup retrieval of public access attributes from a RADIUS server. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. active Supported on:...
Path: View > Enable > Config > Virtual AP Use this context to configure VSC profiles (formerly called VAPs). By default, one VSC profile exists with the name "HP". This is the default profile and cannot be deleted. virtual ap name...
Virtual AP context ingress interface Supported on: MSM710 E-MSM720 MSM760 MSM765zl ingress vlan <name> Sets the specified interface as the ingress interface traffic will be accepted on. This command takes a selector as its input. A selector is used to differentiate traffic, and decide which parameters should be used to select the VAP (VSC) this user/traffic applies to.
CLI commands Virtual AP context ssid name Supported on: MSM710 E-MSM720 MSM760 MSM765zl ssid name <name> Specifies the WLAN name (SSID) for the profile. encryption key 1 Supported on: MSM710 E-MSM720 MSM760 MSM765zl encryption key <key> <value> Sets WEP key 1.
CLI commands Virtual AP context authentication server access controller Supported on: MSM710 E-MSM720 MSM760 MSM765zl authentication server access controller Use the access controller to authenticate 802.1X or WPA logins. authentication server accounting Supported on: MSM710 E-MSM720 MSM760 MSM765zl authentication server accounting Enables RADIUS accounting for this VSC (VAP).
Enables the wireless security filters which only allow traffic to flow between the controller and a specific upstream device (such as a HP service controller). no wireless filters Do not limit traffic flow between the controller and an upstream device.
Use this command to define custom security filters for incoming wireless traffic. Filters are specified using standard pcap syntax (http://www.tcpdump.org/tcpdump_man.html) with the addition of a few HP-specific placeholders. These placeholders can be used to refer to specific MAC addresses and are expanded by the controller when the filter is activated. Once expanded, the filter must respect the pcap syntax.
If the controller is configured to use the services of a HP access controller, then the default security filters are automatically enabled and all traffic is sent to the access controller.
CLI commands Virtual AP context mac-filters Supported on: MSM710 E-MSM720 MSM760 MSM765zl mac-filters <address> Adds an address to the MAC filter list. no mac-filters <address> Remove the specified address from the MAC filter list. Parameters MAC address. Specify 6 pairs of hexadecimal numbers separated by <address>...
Do not use a RADIUS profile. mac authentication remote Supported on: MSM710 E-MSM720 MSM760 MSM765zl mac authentication remote Sets MAC-based authentication to use a RADIUS profile. no mac authentication remote MAC-based authentication will not use a RADIUS profile.
CLI commands Virtual AP context html authentication accounting Supported on: MSM710 E-MSM720 MSM760 MSM765zl html authentication accounting Enables RADIUS accounting. no html authentication accounting Disables RADIUS accounting. html authentication accounting radius profile Supported on: MSM710 E-MSM720 MSM760 MSM765zl html authentication accounting radius profile <name>...
Do not validate HTML logins using the specified RADIUS profile. html authentication request radius cui Supported on: MSM710 E-MSM720 MSM760 MSM765zl html authentication request radius cui Include a request for a CUI in the authentication request. no html authentication request radius cui Do not include a request for a CUI in the authentication request.
CLI commands Virtual AP context beacon transmit power Supported on: MSM710 E-MSM720 MSM760 MSM765zl beacon transmit power Advertise the current transmit power setting in the beacon. no beacon transmit power Do not advertise the current transmit power setting in the beacon.
Disables default bandwidth rates for this VAP (VSC). bandwidth default rates maximum Supported on: MSM710 E-MSM720 MSM760 MSM765zl bandwidth default rates maximum <max-tx-rate> <max-rx-rate> Sets the default maximum transmit and receive rates. radius accounting realms Supported on:...
CLI commands Virtual AP context location-aware called-station-id content Supported on: MSM710 E-MSM720 MSM760 MSM765zl location-aware called-station-id content (ssid | group | mac) Sets the value returned in Called-Station-ID. dhcp relay Supported on: MSM710 E-MSM720 MSM760 MSM765zl dhcp relay <primary-ip-address> <[secondary-ip-address]>...
CLI commands Virtual AP context dhcp server Supported on: MSM710 E-MSM720 MSM760 MSM765zl dhcp server The dhcp server is enabled on the VAP (VSC). no dhcp server The dhcp server is not enabled on the VAP (VSC). dhcp server dns...
CLI commands Virtual AP context no radius-framed-protocol-attribute Do not include the RADIUS Framed-Protocol attribute in Access Request packets. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. security Supported on: MSM710 E-MSM720 MSM760 MSM765zl security (none | wep | 802.1X [wep | static-wep] | wpa (psk | radius) [ v1 | v2 Sets the current wireless security policy.
CLI commands Interface context Interface context Path: View > Enable > Config > Interface Use this context to configure an physical interface (port). duplex-mode Supported on: E-MSM720 duplex-mode (auto | half | full) Sets the duplex mode for the current port. Supported on: E-MSM720 Switches to parent context.
Page 169
CLI commands Interface context trunk type Supported on: E-MSM720 trunk type (none | lacp | trunk) Sets the trunk type for the current port. 2-119...
View > Enable > Config > Internet port interface > VLAN interface View > Enable > Config > LAN port interface > VLAN interface Use this context to configure VLANs. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. ip address Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip address <ip address>/<mask>...
<port> Removes the current VLAN from the specified port. ip default-gateway Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip default-gateway <ip address> Sets the default gateway for this VLAN. no ip default-gateway Removes the default gateway for this VLAN.
Path: View > Enable > Config > RADIUS profiles Use this context to define RADIUS profiles. These profiles are used to establish a connection with RADIUS servers. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. radius-server accounting port Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server accounting port <number>...
RADIUS profiles context radius-server deadtime Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server deadtime <seconds> Sets the retry interval for access and accounting requests that time-out. If no reply is received within this interval, the controller switches between the primary and secondary RADIUS servers (if defined).
RADIUS profiles context radius-server nasid Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server nasid <id> Sets the network access server ID you want to use for the controller. By default, the serial number of the controller is used. The controller includes the NAS-ID attribute in all packets that it sends to the RADIUS server.
IP QOS context IP QOS context Path: View > Enable > Config > IP QOS Use this context to configure IP QoS profiles. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Returns to a previous context. end-port Supported on: MSM710 E-MSM720 MSM760 MSM765zl end-port <number>...
Page 176
CLI commands IP QOS context Parameters Start port number. Range: 0 - 65535 <number> 2-126...
DHCP server context DHCP server context Path: View > Enable > Config > DHCP server Use this context to configure DHCP server settings. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active This range is enabled.
GRE interface context Path: View > Enable > Config > GRE interface Use this context to configure GRE tunnels. end force Supported on: MSM710 E-MSM720 MSM760 MSM765zl end [force] Quits the GRE context. gre name Supported on: MSM710 E-MSM720 MSM760 MSM765zl gre name <name>...
CLI commands IPsec context no dns server Resets the DNS server for this policy. incoming nat Supported on: MSM710 E-MSM720 MSM760 MSM765zl incoming nat Enables NAT for incoming traffic. no incoming nat Disables NAT for incoming traffic. incoming traffic network...
CLI commands IPsec context peer ip address Supported on: MSM710 E-MSM720 MSM760 MSM765zl peer ip address (<ip address>| any ) Sets the peer ip address for this policy. perfect forward secrecy Supported on: MSM710 E-MSM720 MSM760 MSM765zl perfect forward secrecy Enables PFS.
Syslog context Path: View > Enable > Config > Syslog Use this context to define syslog settings. active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Enables logging to the current destination. no active Disables logging to the current destination. logging facility...
Path: View > Enable > Config > PPTP client interface Use this context to configure the PPTP client. active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Sets PPTP client connection to ’up’. no active Sets PPTP client connection to ’down’.
CLI commands Keychain context Keychain context Path: View > Enable > Config > Keychain Use this context to manage a keychain. Supported on: MSM710 E-MSM720 MSM760 MSM765zl End current context. Supported on: MSM710 E-MSM720 MSM760 MSM765zl key <number> Enter new key.
Keys context Path: View > Enable > Config > Keychain > Keys Use this context to configure the keys that are part of a keychain. Supported on: MSM710 E-MSM720 MSM760 MSM765zl End current context. key-string Supported on: MSM710 E-MSM720 MSM760 MSM765zl key-string <name>...
Subscription plan context Subscription plan context Path: View > Enable > Config > Subscription plan Use this context to define settings for subscription plans. Supported on: MSM710 E-MSM720 MSM760 MSM765zl End current context. daily restriction Supported on: MSM710 E-MSM720 MSM760 MSM765zl daily restriction <from>...
CLI commands Subscription plan context online time limit Supported on: MSM710 E-MSM720 MSM760 MSM765zl online time limit Use the online time limit. no online time limit Do not use the online time limit. online time limit Supported on: MSM710 E-MSM720 MSM760 MSM765zl online time limit <number>...
Page 191
CLI commands Subscription plan context no public ip subnet Removes this attribute. use public ip subnet Use this attribute. no use public ip subnet Do not use this attribute. 2-141...
Path: View > Enable > Config > SNMP user Use this context to define settings for SNMP users. access level Supported on: MSM710 E-MSM720 MSM760 MSM765zl access level (read-only | read-write) Specifies the access level use for this SNMP user. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Returns to a previous context.
Path: View > Enable > Config > SNMP notification receiver Use this context to configure SNMP notification receivers. community Supported on: MSM710 E-MSM720 MSM760 MSM765zl community <community> Specifies the community for this SNMP notification receiver. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Returns to a previous context.
Path: View > Enable > Config > Active Directory Group Use this context to define the attributes to send when a user is related to an Active Directory group. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. access controlled Supported on:...
CLI commands Active Directory Group context active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Enable this user account. no active Disable this user account. active-directory group name Supported on: MSM710 E-MSM720 MSM760 MSM765zl active-directory group name <name> Change the name for this user.
Page 196
CLI commands Active Directory Group context use regular virtual ap Use only allowed Virtual APs (VSCs) for this profile. no use regular virtual ap Use any Virtual AP (VSC) for this profile. 2-146...
Path: View > Enable > Controlled APs group Use this context to configure controlled AP groups. execute action Supported on: MSM710 E-MSM720 MSM760 MSM765zl execute action (synchronize | accept-suspicious | accept-product | rediscover) Execute an action on the entity’s devices. show config factory...
Path: View > Enable > Controlled APs base group Use this context to configure the base controlled APs group. execute action Supported on: MSM710 E-MSM720 MSM760 MSM765zl execute action (synchronize | accept-suspicious | accept-product | rediscover) Execute an action on the entity’s devices. show config factory...
CLI commands Controlled APs network configuration context show tech Supported on: MSM710 E-MSM720 MSM760 MSM765zl show tech Displays technical information. switch port Supported on: MSM710 E-MSM720 MSM760 MSM765zl switch port <name> Switch to the ethernet port context. syslog Supported on:...
Do not inherit settings from parent. world-mode dot11 country code Supported on: MSM710 E-MSM720 MSM760 MSM765zl world-mode dot11 country code <code> Specifies the country in which the controller is operating. Parameters An ISO3166 three-letter country code.
Specify the Server ID of the RF Manager Server to connect to. Set the Server ID to 0 to have the controller send a discovery request to all active HP RF Manager Servers. The controller will connect to the first server that responds to the discovery request.
Controlled APs network configuration context no inherit sensor Do not inherit sensor settings from parent. dynamic key Supported on: MSM710 E-MSM720 MSM760 MSM765zl dynamic key Enables dynamic key support for 802.1X and WPA. no dynamic key Disables dynamic key support for 802.1X and WPA.
Controlled APs network configuration context no inherit service availability Do not inherit service availability from parent. inherit l3subnets Supported on: MSM710 E-MSM720 MSM760 MSM765zl inherit l3subnets Inherit subnets from parent. no inherit l3subnets Do not inherit L3 subnets from parent.
AP’s IP address. An IP address can require up to 15 characters (nnn.nnn.nnn.nnn). lldp fast-start-count Supported on: MSM710 E-MSM720 MSM760 MSM765zl lldp fast-start-count <count> After an MED LLDPDU is received, this timer is started and the agent sends one MED LLDPDU to the MED device each second as it counts down.
CLI commands Controlled APs network configuration context lldp run Supported on: MSM710 E-MSM720 MSM760 MSM765zl lldp run Enables the LLDP Agent on the AP. no lldp run Disables the LLDP Agent on the AP. 2-161...
Path: View > Enable > Controlled APs group > Controlled APs VSC binding Use this context to configure VSC bindings for controlled APs. dual radio binding Supported on: MSM710 E-MSM720 MSM760 MSM765zl dual radio binding (radio1 | radio2) Enables radio binding. no dual radio binding (radio1 | radio2) Disables radio binding.
Use this context to define logging options. message Supported on: MSM710 E-MSM720 MSM760 MSM765zl message (matches | notmatches) <regex> Use this filter to include log messages. Use a regular expression to define the match criteria for the log file message field.
Action must be taken immediately. alert System is unusable. emergency level Supported on: MSM710 E-MSM720 MSM760 MSM765zl level Enables filtering of the log file by severity level. no level Disables filtering of the log file by severity level. matches Supported on:...
View > Enable > Controlled APs base group > Controlled APs network configuration > Provisioning connectivity Use this context to provision connectivity settings for a controlled AP. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. inherit Supported on:...
CLI commands Provisioning connectivity context vlan Supported on: MSM710 E-MSM720 MSM760 MSM765zl vlan Enables use of the provisioning VLAN. no vlan Disables use of the provisioning VLAN. vlan Supported on: MSM710 E-MSM720 MSM760 MSM765zl vlan <id> Sets the provisioning VLAN.
Disables the use of local mesh security. provisioning local mesh security Supported on: MSM710 E-MSM720 MSM760 MSM765zl provisioning local mesh security (wep | tkip | ccmp) Sets the local mesh security mode. no provisioning local mesh security Disables the use of local mesh security.
View > Enable > Controlled APs base group > Controlled APs network configuration > Provisioning discovery Use this context to provision discovery settings for a controlled AP. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. dns name Supported on: MSM710 E-MSM720 MSM760 MSM765zl dns name <name>...
CLI commands Provisioning discovery context dns server Supported on: MSM710 E-MSM720 MSM760 MSM765zl dns server <ip> Adds a DNS server to the list. no dns server <ip> Deletes a DNS server from the list. discovery provisioning Supported on: MSM710 E-MSM720 MSM760 MSM765zl discovery provisioning Enables discovery provisioning.
Use this context to configure wireless settings. dot11 Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot11 <mode> <frequency> Sets the wireless mode and the frequency the controller will operate at. Parameters Sets the transmission speed and frequency band. The available options are <mode>...
By reducing the receiver sensitivity, client stations will be more likely to connect with the nearest access point. transmit power Supported on: MSM710 E-MSM720 MSM760 MSM765zl transmit power (DB | max) Sets the maximum transmission power of the wireless radio. Parameters Power is specified in steps of 1dBm.
(Essentially, it means that if a frame needs to be retransmitted it will take longer before the actual retransmit takes place.) beacon interval Supported on: MSM710 E-MSM720 MSM760 MSM765zl beacon interval <value> Sets the beacon interval. Parameters Beacon interval value in the range 20 and 500 time units (TU) (1 TU = <...
CLI commands Wireless interface context no radio active Disables the radio. spectralink view Supported on: MSM710 E-MSM720 MSM760 MSM765zl spectralink view Enables the use of spectralink view. no spectralink view Disables the use of spectralink view. client statistics Supported on:...
View > Enable > Controlled APs base group > Controlled APs network configuration > RADIUS profile Use this context to define basic settings for RADIUS profiles. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switch to parent context. inherit Supported on: MSM710 E-MSM720 MSM760 MSM765zl inherit Inherit settings from parent.
View > Enable > Controlled APs base group > Controlled APs network configuration > Local mesh profile Use this context to define settings for local mesh profiles. security Supported on: MSM710 E-MSM720 MSM760 MSM765zl security Enables wireless security. no security Disables wireless security.
Can only establish an upstream link with master or alternate master node. <slave> Slave nodes cannot establish downstream links with other nodes. mesh id Supported on: MSM710 E-MSM720 MSM760 MSM765zl mesh id <id> Sets the mesh ID. allowed downtime Supported on: MSM710 E-MSM720 MSM760 MSM765zl allowed downtime <number>...
CLI commands Local mesh profile context active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Activates the local mesh profile. no active Deactivates the local mesh profile. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switch to parent context. inherit Supported on: MSM710 E-MSM720 MSM760 MSM765zl inherit Inherit settings from parent.
Use this context to define configuration settings for the local mesh provisioning profile on a controlled AP. accept connection Supported on: MSM710 E-MSM720 MSM760 MSM765zl accept connection Sets the local mesh provisioning profile to act as an alternate master. no accept connection Prevents the local mesh provisioning profile from acting as an alternate master.
View > Enable > Controlled APs group > Controlled APs network configuration > Switch port View > Enable > Controlled APs base group > Controlled APs network configuration > Switch port Use this context to define settings for a switch port. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Back to parent context. active Supported on:...
Switch port context no use authentication profile vsc Ignore the VSC (Virtual AP) for authentication. authentication server radius Supported on: MSM710 E-MSM720 MSM760 MSM765zl authentication server radius <name> Selects the RADIUS profile to use. dot1x authentication Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot1x authentication Enables support for IEEE802.1X.
CLI commands Switch port context ingress rate Supported on: MSM710 E-MSM720 MSM760 MSM765zl ingress rate <(128k|256k|512k|1m|2m|4m|8m|16m|32m)> Set the maximum rate at which this port will accept ingress traffic. use ingress rate Limit the ingress data rate. no use ingress rate Do not limit the ingress data rate.
Provide power to devices conforming to 802.11af class 1 and class 2. class1-2 Provide power to devices conforming to 802.11af class 0, 1, 2 and 3. class0-3 port name Supported on: MSM710 E-MSM720 MSM760 MSM765zl port name <name> Changes the port name. port type Supported on: MSM710 E-MSM720 MSM760 MSM765zl port type (tagged | untagged) Configure the port type.
Enables the quarantine VLAN setting. no use quarantine vlan Disables the quarantine VLAN setting. secondary vlan Supported on: MSM710 E-MSM720 MSM760 MSM765zl secondary vlan <number> Sets the secondary VLAN ID. no secondary vlan Clears the secondary VLAN ID. use secondary vlan Enables the secondary VLAN setting.
The lists can be assigned to the MAC filter option on a switch port, permitting you to limit switch port access to a specific devices based on their MAC address. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Go to previous context. entry...
Network profile context Network profile context Path: View > Enable > Config > Network profile Use this context to configure network profiles. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Go to previous context. name Supported on: MSM710 E-MSM720 MSM760 MSM765zl name <string>...
CLI commands LLDP agent context basic-tlv-enable system_name Supported on: MSM710 E-MSM720 MSM760 MSM765zl basic-tlv-enable system_name Enables the system name TLV. no basic-tlv-enable system_name Disables the system name TLV. dot3-tlv-enable Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot3-tlv-enable Enables the 803.3 MAC/PHY TLV.
CLI commands LLDP agent context medtlv-enable location-id Supported on: MSM710 E-MSM720 MSM760 MSM765zl medtlv-enable location-id Enables the MED Location TLV. no medtlv-enable location-id Disables the MED Location TLV. medtlv-enable network-policy Supported on: MSM710 E-MSM720 MSM760 MSM765zl medtlv-enable network-policy Enables the MED Network Policy TLV.