Page 1 HP MSM7xx Controllers CLI Reference Guide ProCurve 5400zl Switches HP MSM7xx Controllers CLI Installation and Getting Started Guide Reference Guide...
Page 3 HP MSM7xx Controllers CLI Reference Guide...
Page 4 Hewlett-Packard. connection with the furnishing, performance, or use of this material. Publication Number The only warranties for HP products and services are set forth 5998-1432 in the express warranty statements accompanying such December 2011 products and services.
Page 5: Table Of Contents
Products covered....................1-2 Important terms .....................1-2 Typographical conventions ..................1-2 Command syntax ....................1-2 Management tool ....................1-3 New in this release .......................1-4 HP support ........................1-4 Before contacting support ................1-4 Online documentation ....................1-5 Configuring CLI support....................1-5 Secure shell access....................1-6 Authentication .......................1-6 Serial port access....................1-7 Starting a CLI session on the serial port ............1-7...
Page 6 CLI commands View context .........................2-3 arping ........................2-3 enable........................2-3 nslookup .........................2-3 ping ..........................2-3 ps ..........................2-3 quit...........................2-3 show license ......................2-4 show logging filtered.....................2-4 top..........................2-4 traceroute .......................2-4 Enable context......................2-5 reboot device......................2-5 show certificate .....................2-5 show certificate binding ..................2-5 iperf .........................2-5 ping ..........................2-5 arping ........................2-6 arp..........................2-6 end ...........................2-6 quit...........................2-6...
Page 7 show radius statistics....................2-8 show radius users ....................2-8 show users......................2-9 show discrete pin....................2-9 config........................2-9 show all config .......................2-9 controlled network....................2-9 show controlled network config................2-9 Config context ......................2-10 vlan ........................2-10 interface ........................2-10 dhcp public ip default lease period ..............2-10 dhcp public ip subnet..................2-10 certificate......................2-10 certificate binding....................2-10 certificate revocation ..................2-11...
Page 8 show mac list .......................2-14 ipsec policy......................2-14 admin local authentication.................2-14 admin radius authentication ................2-15 admin radius authentication server ..............2-15 ip http port......................2-15 ip https port ......................2-15 snmp-server trap certificate-expired..............2-15 snmp-server trap certificate-expires-soon ............2-16 snmp-server trap web-fail...................2-16 snmp-server trap web-login................2-16 snmp-server trap web-logout ................2-16 username ......................2-16 web admin kickout ....................2-17 web allow......................2-17...
Page 9 dhcp relay extend internet port .................2-21 dhcp relay extend internet network..............2-22 clock ........................2-22 clock auto adjust dst ...................2-22 clock timezone .....................2-22 clock use custom dst rules .................2-22 ntp protocol......................2-23 ntp server......................2-23 clock custom dst begins ..................2-23 clock custom dst begins format.................2-23 clock custom dst ends ..................2-24 clock custom dst ends format................2-24 ntp server......................2-24...
Page 10 snmp-server version 1 ..................2-29 snmp-server version 2c ..................2-30 snmp-server version 3 ..................2-30 snmp-server access interface vlan ..............2-30 snmp-server access interface gre ..............2-30 snmp-server access port-1 ..................2-30 snmp-server access port-2 ..................2-31 snmp-server access vpn ..................2-31 snmp-server trap device-authorization-failure..........2-31 snmp-server trap device-configuration-failure ..........2-31 snmp-server trap device-firmware-failure ............2-31 snmp-server trap device-security-failure ............2-32 snmp-server trap device-state-change ..............2-32...
Page 11 firmware-update start ..................2-37 firmware-update time..................2-37 firmware-update uri ....................2-37 firmware-update weekday..................2-38 snmp-server trap firmware-update..............2-38 ip name-server......................2-38 ip name-server cache ..................2-38 ip name-server dynamic..................2-38 ip name-server interception ................2-39 ip name-server switch-on-servfail ..............2-39 ip name-server switch-over ................2-39 ip name-server logout-info .................2-39 access controller shared secret .................2-39 radius-server profile ....................2-40 ip-qos profile ......................2-40 access controller....................2-40...
Page 12 discovery protocol device-id................2-44 service controller ap authentication credentials..........2-44 service controller ap authentication enable.............2-44 service controller ap authentication file............2-45 service controller ap authentication radius-server .........2-45 service controller ap authentication refresh-rate..........2-45 service controller ap authentication source file..........2-45 service controller ap authentication source local...........2-45 service controller ap authentication source radius ........2-45 service controller discovery................2-46 service controller primary..................2-46...
Page 13 dot1x supplicant timeout..................2-52 dynamic key ......................2-52 dynamic key interval ...................2-53 key chain.......................2-53 config-version.......................2-53 radius-server accounting session ..............2-53 radius-server client....................2-53 radius-server local eap-peap ................2-53 radius-server local eap-tls...................2-54 radius-server local eap-ttls .................2-54 radius-server local pap..................2-54 radius-server ssid detection nas-id..............2-54 show radius-server ....................2-54 active-directory check attribute ................2-54 active-directory check user access ..............2-55 active-directory device name ................2-55...
Page 14 sflow destination 80211 ..................2-58 show sflow destination ..................2-58 show sflow sampling-polling................2-59 sflow sampling .....................2-59 sflow polling......................2-59 sflow interface .....................2-59 mac lockout entry....................2-59 show mac lockout ....................2-59 team communication ip address................2-59 team communication vlan ..................2-60 team management address.................2-60 team manager.......................2-60 team name ......................2-60 teaming .........................2-60 team communication interface ................2-60 team communication interface ................2-60...
Page 15 paypal password ....................2-65 paypal signature....................2-65 paypal user-id .......................2-65 ads presentation with frameset .................2-65 authentication http ....................2-66 authentication https ....................2-66 local welcome-page .....................2-66 noc access internet....................2-66 noc access vpn .....................2-66 noc allow ......................2-66 noc authentication....................2-67 secure login ......................2-67 sslv2 authentication ....................2-67 user-agent block....................2-67 user-agent filtering....................2-67 noc access interface vlan..................2-68...
Page 16 session page ......................2-73 transport page ......................2-73 welcome url......................2-74 notify user location changes ................2-74 Default user session profile context ................2-75 accounting interim update .................2-75 idle timeout ......................2-75 maximum input octets ..................2-75 maximum input packets ..................2-75 maximum output octets..................2-76 maximum output packets...................2-76 maximum total octets ..................2-76 maximum total packets ..................2-76 nat one-to-one ......................2-76...
Page 17 User account context....................2-85 end .........................2-85 access controlled ....................2-85 access-controlled profile ..................2-85 access-controlled virtual ap ................2-85 active ........................2-86 chargeable user identity ..................2-86 control method ....................2-86 egress vlan ......................2-86 end time ........................2-86 idle timeout ......................2-86 max user sessions....................2-87 password.......................2-87 regular profile ......................2-87 regular virtual ap ....................2-87 session timeout ....................2-87 subscription plan ....................2-88...
Page 18 nat limit port range size ..................2-94 ip address dhcp client-id..................2-94 end .........................2-95 pppoe auto-reconnect ..................2-95 pppoe mru ......................2-95 pppoe mtu......................2-95 pppoe unnumbered .....................2-95 ip nat outside source static ................2-96 ip address alternate .....................2-96 LAN IP interface context...................2-97 end .........................2-97 ip address......................2-97 ip address management ..................2-97 tagged ........................2-97 untagged .......................2-97...
Page 19 wpa-psk.......................2-102 authentication server request radius cui ............2-103 dot1x session page ....................2-103 wpa terminate controller ..................2-103 wireless filters....................2-103 wireless filters mac ...................2-103 wireless filters rule input..................2-104 wireless filters rule output ................2-104 wireless filters type ...................2-104 mac-filters local ....................2-105 mac-filters......................2-106 mac-filters mode ....................2-106 mac authentication accounting ...............2-106 mac authentication accounting radius profile ..........2-106 mac authentication radius profile ..............2-106...
Page 20 layer3 mobility hns method................2-111 add ip-qos profile ....................2-111 delete ip-qos profile all..................2-111 delete ip-qos profile...................2-111 qos ........................2-112 upstream diffserv tagging .................2-113 wmm advertising ....................2-113 html redirection ....................2-113 local nas id......................2-113 bandwidth......................2-113 bandwidth default rates ..................2-113 bandwidth default rates maximum ..............2-114 radius accounting realms .................2-114 radius authentication realms ................2-114 identify stations by ip only ................2-114...
Page 21 VLAN interface context ...................2-120 end ........................2-120 ip address......................2-120 ip address mode....................2-120 tagged ........................2-120 untagged ......................2-120 ip default-gateway .....................2-121 ip nat........................2-121 RADIUS profiles context..................2-122 end ........................2-122 radius-server accounting port ................2-122 radius-server alternate hosts................2-122 radius-server authentication method ..............2-122 radius-server authentication port ..............2-122 radius-server deadtime ..................2-123 radius-server host ....................2-123 radius-server key 2 ....................2-123...
Page 22 GRE interface context .....................2-128 end force ......................2-128 gre name ......................2-128 ip address......................2-128 peer ip address....................2-128 remote ip address ....................2-128 IPsec context ......................2-129 end ........................2-129 active ........................2-129 authentication ....................2-129 cipher ........................2-129 dns domain ......................2-129 dns server ......................2-129 incoming nat.......................2-130 incoming traffic network..................2-130 interface ......................2-130 local id.........................2-130 mode........................2-130...
Page 23 PPTP client interface ....................2-135 active ........................2-135 pptp client credentials ..................2-135 pptp client domain name ..................2-135 pptp client server address ................2-135 end ........................2-135 ip nat........................2-135 pptp client auto route discovery..............2-136 pptp client lcp echo ...................2-136 Keychain context......................2-137 end ........................2-137 key ........................2-137 key chain name ....................2-137 Keys context ......................2-138 end ........................2-138...
Page 24 receiver .......................2-143 user ........................2-143 version.........................2-143 Active Directory Group context ................2-144 end ........................2-144 access controlled ....................2-144 access-controlled profile ..................2-144 access-controlled virtual ap ................2-144 active ........................2-145 active-directory group name ................2-145 egress vlan ......................2-145 regular profile ....................2-145 regular virtual ap ....................2-145 Controlled APs context ...................2-147 end ........................2-147 execute action....................2-147 execute system action..................2-147...
Page 25 Controlled APs network configuration context ...........2-151 end ........................2-151 interface wireless ....................2-151 local mesh group ....................2-151 local mesh provisioning group.................2-151 provisioning connectivity .................2-151 provisioning discovery..................2-151 radius profile ......................2-151 show tech......................2-152 switch port......................2-152 syslog........................2-152 inherit vlan port2 ....................2-152 vlan port2......................2-152 vlan port2 id .......................2-152 inherit country code ..................2-152 world-mode dot11 country code..............2-153 inherit ipv6 ra conversion.................2-153...
Page 26 inherit service availability ................2-157 inherit l3subnets ....................2-158 l3subnet.......................2-158 inherit switch port _ ..................2-158 inherit switch ports ...................2-158 inherit lldp-app-profile ..................2-158 lldp app-profile....................2-159 lldp app-profile....................2-159 lldp app-profile....................2-159 lldp app-profile....................2-159 inherit lldp-general ....................2-159 lldp dynamic-name ....................2-159 lldp fast-start-count ...................2-160 lldp holdtime-multiplier ..................2-160 lldp local-mesh ....................2-160 lldp med-location civic-address-element ............2-160 lldp med-location elin-addr ................2-160...
Page 27 interface ......................2-165 interface provisioning ..................2-165 ip assignation .....................2-165 vlan ........................2-166 vlan ........................2-166 static ip........................2-166 provisioning local mesh group.................2-166 provisioning local mesh key................2-166 provisioning local mesh port................2-166 provisioning local mesh security..............2-166 provisioning local mesh security..............2-167 provisioning local mesh type ................2-167 country code ......................2-167 anonymous identity ...................2-167 eap ........................2-167 ieee8021x provisioning ..................2-167...
Page 28 autochannel skip....................2-172 station distance....................2-172 beacon interval ....................2-173 rts threshold .......................2-173 dot11 mode ......................2-173 radio active ......................2-173 spectralink view....................2-174 client statistics ....................2-174 dot11n guard interval ..................2-174 dot11n mimo ......................2-174 dot11n channel width..................2-174 dot11n channel extension.................2-174 dot11n mac protection..................2-175 end ........................2-175 inherit ........................2-175 RADIUS profile context...................2-176 end ........................2-176 inherit ........................2-176...
Page 29 inherit ........................2-180 multiple radio .....................2-180 Switch port context ....................2-181 end ........................2-181 active ........................2-181 app-profile ......................2-181 app-profile ......................2-181 authentication profile vsc.................2-181 authentication server radius ................2-182 dot1x authentication ..................2-182 dynamic vlan ......................2-182 egress rate ......................2-182 force flow control ....................2-182 ingress rate ......................2-183 ingress traffic type.....................2-183 loop protection ....................2-183 mac authentication....................2-183...
Page 30 LLDP agent context ....................2-188 admin-status .......................2-188 basic-tlv-enable ....................2-188 basic-tlv-enable port_desc................2-188 basic-tlv-enable system_cap................2-188 basic-tlv-enable system_descr .................2-188 basic-tlv-enable system_name .................2-189 dot3-tlv-enable ....................2-189 end ........................2-189 ip-addr-enable.....................2-189 med-application-type..................2-189 medtlv-enable capabilities................2-189 medtlv-enable location-id .................2-190 medtlv-enable network-policy .................2-190 medtlv-enable poe .....................2-190 xxviii...
Page 31 Alphabetical list of commands accept connection ............. 2-180 authentication server radius........2-102 access control .............. 2-99 authentication server radius........2-182 access controlled............2-144 authentication server request radius cui....2-103 access controlled............2-79 authentication............. 2-129 access controlled............2-85 authorize_net installation id ........2-64 access controller shared secret .........
Page 32 config-update operation..........2-25 dot11n channel width ..........2-174 config-update start ............2-25 dot11n guard interval..........2-174 config-update time............2-25 dot11n mac protection ..........2-175 config-update uri............2-25 dot11n mimo ............... 2-174 config-update weekday..........2-25 dot1x authentication..........2-102 config-version............... 2-53 dot1x authentication..........2-182 console authentication..........
Page 33 end ................2-168 ingress rate..............2-183 end ................2-175 ingress traffic type ............. 2-183 end ................2-176 inherit 8021x ............... 2-156 end ................2-179 inherit country code ..........2-152 end ................2-180 inherit ipv6 ra conversion ......... 2-153 end ................2-181 inherit l3subnets............
Page 34 ipass id ................2-68 mac authentication accounting........ 2-106 ipass login url ............... 2-72 mac authentication local........... 2-107 ipass name ..............2-68 mac authentication radius profile......2-106 iperf ................. 2-5 mac authentication remote........2-107 ip-qos profile ..............2-40 mac authentication request radius cui ....2-107 ipsec policy..............
Page 35 password..............2-142 radius profile .............. 2-151 password............... 2-87 radius server profile............. 2-98 paypal api-url..............2-65 radius-framed-protocol-attribute ......2-116 paypal operation-mode ..........2-65 radius-server accounting port ........2-122 paypal password ............2-65 radius-server accounting session....... 2-53 paypal signature............2-65 radius-server alternate hosts ........2-122 paypal user-id ...............
Page 36 service controller discovery........2-46 show tech ..............2-152 service controller primary ip addr......2-46 show trunks ..............2-13 service controller primary .......... 2-46 show user profiles details ........... 2-51 service controller priority........... 2-46 show user profiles............2-51 service controller provisioning ........2-47 show users ..............
Page 37 soap-server allow............2-34 username............... 2-16 soap-server http authentication password ....2-34 username............... 2-88 soap-server http authentication username....2-34 version ................. 2-143 soap-server http authentication......... 2-34 virtual ap binding ............2-149 soap-server port ............2-34 virtual ap name............. 2-99 soap-server ssl with client certificate ....... 2-35 virtual ap ...............
Page 38 xxxvi...
Page 39 Introduction Contents About this guide ......................1-2 Products covered....................1-2 Important terms .....................1-2 Typographical conventions ..................1-2 New in this release .......................1-4 HP support ........................1-4 Online documentation ....................1-5 Configuring CLI support....................1-5 Secure shell access....................1-6 Authentication .......................1-6 Serial port access....................1-7 Entering strings ......................1-8 Context hierarchy ......................1-9 Sample CLI sessions ....................1-10...
Page 40: About This Guide
Introduction About this guide About this guide This guide explains how to work with the Command Line Interface (CLI) on HP MSM7xx Controllers. Products covered This guide covers the following products: Model Part MSM710 Access Controller J9328A MSM710 Mobility Controller...
Page 41: Management Tool
Example Description Items enclosed in square brackets are optional. You end [force] can either include them or not. Do not include the brackets. In this example you can either include “force” or omit it. Items enclosed in parenthesis and separated by a firewall mode (high|low|none) vertical line indicate a choice.
Page 42: New In This Release
ProCurve. Additionally, your HP-authorized networking products reseller can provide you with assistance. Before contacting support To make the support process most efficient, before calling your networking dealer or HP Support, you first should collect the following information: Collect this information Where to find it Product identification.
Page 43: Online Documentation
Online documentation Online documentation You can download documentation from the HP Support Website at: www.hp.com/support/manuals. Search by product name or part number. Configuring CLI support CLI support is configured using the management tool on the controller. Select Controller >> Management > CLI to open the Command Line Interface (CLI) configuration page.
Page 44: Secure Shell Access
Configuring CLI support Secure shell access Enable this option to allow access to the CLI via an SSH session. The CLI supports SSH on the standard TCP port (22). SSH connections to the CLI can be made on any active interface. Support for each interface must be explicitly enabled under Security on the Controller >>...
Page 45: Serial Port Access
Configuring CLI support Serial port access Access to the CLI via the console port is available on the MSM710 and MSM760. Enable the CLI on serial port When enabled, access to the command line interface is permitted via the serial port. Use hardware flow control Enables hardware flow control.
Page 46: Entering Strings
Entering strings CLI> Entering strings When entering a value that contains spaces, you must enclose it in quotation marks. For example, if the command syntax is: ssid <name> You must specify one of the following: ssid ANameWithNoSpaces ssid "A name with spaces"...
Page 47: Context Hierarchy
Context hierarchy Context hierarchy CLI commands are grouped into functional contexts. The following table shows the context hierarchy and the commands used to switch from the parent context: Context hierarchy To switch to this context from parent context View (This is the root context. No command is needed.) Enable enable Config...
Page 48: Sample Cli Sessions
Sample CLI sessions Context hierarchy To switch to this context from parent context Wireless interface interface wireless (single|dual|triple) <number> RADIUS profile radius profile <profile> Local mesh profile local mesh group <group> Local mesh provisioning local mesh provisioning group Provisioning connectivity provisioning connectivity Provisioning discovery provisioning discovery...
Page 49: Example 2
Sample CLI sessions CLI(config-if-ip)# no ip nat CLI(config-if-ip)# ip address alternate 192.168.23.56 CLI(config-if-ip)# end CLI(config)# end CLI# quit Example 2 This sample CLI session shows you how to create a static trunk on the E-MSM720 that is bound to a network profile called static trunk on port 2. The trunk is created on trunk group 1 using a VLAN ID of 900 (tagged).
Page 50: File Transfer
File transfer File transfer In some cases you may need to transfer files (certificates or configuration) to the controller. Commands that have this capability typically include <uri> or <url> in their parameter list. Note When you enter the commands discussed here, the files are transferred immediately. File transfer can be performed in two ways.
Page 51 Chapter 2: CLI commands CLI commands Contents View context .........................2-3 Enable context......................2-5 Config context ......................2-10 Access Controller context..................2-62 Default user session profile context ................2-75 Session profile context ....................2-79 User account context....................2-85 Internet port interface context .................2-89 LAN port interface context ..................2-91 WAN IP interface context..................2-93 LAN IP interface context...................2-97 Public access RADIUS attributes context...............2-98...
Page 52 CLI commands Syslog context ......................2-132 PPTP client interface ....................2-135 Keychain context......................2-137 Keys context ......................2-138 Subscription plan context ..................2-139 SNMP user context ....................2-142 SNMP notification receiver context ..............2-143 Active Directory Group context ................2-144 Controlled APs context ...................2-147 Controlled APs group context ................2-149 Controlled APs base group context ...............2-150 Controlled APs network configuration context ...........2-151 Controlled APs VSC binding context..............2-162...
Page 53: View Context
This is the root of the command tree. arping Supported on: MSM710 E-MSM720 MSM760 MSM765zl arping [ -AbDfhqUV] [ -c <count>] [ -w <deadline>] [ -s <source>] -I <interface> <destination> Pings a destination on a device interface using ARP packets.
Page 54: Show License
CLI commands View context show license Supported on: MSM710 E-MSM720 MSM760 MSM765zl show license (eula | gpl | other) Displays license information. show logging filtered Supported on: MSM710 E-MSM720 MSM760 MSM765zl show logging [filtered] Displays the system log. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Displays all running processes.
Page 55: Enable Context
CLI commands Enable context Enable context Path: View > Enable This context provides access to various utilities. reboot device Supported on: MSM710 E-MSM720 MSM760 MSM765zl reboot device Restarts the system. show certificate Supported on: MSM710 E-MSM720 MSM760 MSM765zl show certificate Displays current certificates.
Page 56: Arping
CLI commands Enable context arping Supported on: MSM710 E-MSM720 MSM760 MSM765zl arping [ -AbDfhqUV] [ -c <count>] [ -w <deadline>] [ -s <source>] -I <interface> <destination> Pings a destination on a device interface using ARP packets. Supported on: MSM710 E-MSM720 MSM760 MSM765zl arp [-evn] [-H <type>] [-i if] ?- [<hostname>] arp [-v] [-i if] -d <hostname>...
Page 57: Show Bridge
CLI commands Enable context show bridge Supported on: MSM710 E-MSM720 MSM760 MSM765zl show bridge Displays bridge information. show bridge forwarding Supported on: MSM710 E-MSM720 MSM760 MSM765zl show bridge forwarding Displays bridge forwarding information. show dns cache Supported on: MSM710 E-MSM720 MSM760 MSM765zl show dns cache [<serial>]...
Page 58: Show Controlled-Aps Wireless Clients
CLI commands Enable context show controlled-aps wireless clients Supported on: MSM710 E-MSM720 MSM760 MSM765zl show controlled-aps wireless clients Displays all wireless clients associated with controlled APs. disassociate controlled-ap wireless client _ Supported on: MSM710 E-MSM720 MSM760 MSM765zl disassociate controlled-ap wireless client [<client_macaddress>] Terminates the connection for the specified wireless client.
Page 59: Show Users
CLI commands Enable context show users Supported on: MSM710 E-MSM720 MSM760 MSM765zl show users [<filter>] Displays all users on this controller. show discrete pin Supported on: MSM710 E-MSM720 MSM760 MSM765zl show discrete pin Displays the state of the discrete pin.
Page 60: Config Context
Switches to the specified physical interface (port). dhcp public ip default lease period Supported on: MSM710 E-MSM720 MSM760 MSM765zl dhcp public ip default lease period <number> Defines the amount of time a public IP address lease will be valid. dhcp public ip subnet...
Page 61: Certificate Revocation
(web-management | html-auth | soap | eap) <certname> Unassigns a certificate from a service. certificate revocation Supported on: MSM710 E-MSM720 MSM760 MSM765zl certificate revocation <uri> <certname> Adds a Certificate Revocation List (CRL) to an existing authority certificate. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context.
Page 62: Show Config Factory
CLI commands Config context show config factory Supported on: MSM710 E-MSM720 MSM760 MSM765zl show config [factory] Generates a list of CLI commands that can be used to define the currently loaded configuration. show network-profiles Supported on: MSM710 E-MSM720 MSM760 MSM765zl show network-profiles Displays all currently defined network profiles.
Page 63: Virtual Ap
Supported on: E-MSM720 show vlans Displays VLAN information. virtual ap Supported on: MSM710 E-MSM720 MSM760 MSM765zl virtual ap <name> Creates a new VSC (VAP) profile or switches to the existing VSC (VAP) context with the specified name. no virtual ap <name>...
Page 64: Show Subscription Plan
Switches operational mode to CAP MultiService Access Point. Switches operational mode to CAP MultiService Controller. Switches operational mode to WAB Wireless Station. show subscription plan Supported on: MSM710 E-MSM720 MSM760 MSM765zl show subscription plan [<name>] Displays one or more subscription plans. subscription plan Supported on: MSM710 E-MSM720 MSM760 MSM765zl subscription plan <name>...
Page 65: Admin Radius Authentication
CLI commands Config context admin radius authentication Supported on: MSM710 E-MSM720 MSM760 MSM765zl admin radius authentication Sets the authentication of manager logins to occur using RADIUS. no admin radius authentication Disables manager authentication via RADIUS. admin radius authentication server Supported on: MSM710 E-MSM720 MSM760 MSM765zl admin radius authentication server <name>...
Page 66: Snmp-Server Trap Certificate-Expires-Soon
CLI commands Config context snmp-server trap certificate-expires-soon Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server trap certificate-expires-soon Send a trap when the SSL certificate is about to expire. A trap is sent every 12 hours starting 15 days before the certificate expires.
Page 67: Web Admin Kickout
CLI commands Config context web admin kickout Supported on: MSM710 E-MSM720 MSM760 MSM765zl web admin kickout Enables a new manager login to terminate an existing manager session. no web admin kickout Stops a new manager from logging in until an existing manager logs out.
Page 68: Web Access Interface Gre
CLI commands Config context web access interface gre Supported on: MSM710 E-MSM720 MSM760 MSM765zl web access interface gre <name> Enables access to the management tool via the specified GRE tunnel. no web access interface gre <name> Disables access to the management tool via the specified GRE tunnel.
Page 69: Dhcp Server
This list is sent to all devices that request an IP address, encoded as DHCP option 43 (Vendor-specific information). This option is only interpreted by HP APs that are operating in controlled mode. Controlled mode APs use these addresses to connect with the controllers in the order that they appear in the list.
Page 70: Dhcp Server Logout Html User
CLI commands Config context dhcp server logout html user Supported on: MSM710 E-MSM720 MSM760 MSM765zl dhcp server logout html user Logout HTML users upon discovery request. no dhcp server logout html user Do not logout HTML user upon discovery request.
Page 71: Dhcp Relay Remote Id
CLI commands Config context dhcp relay remote id Supported on: MSM710 E-MSM720 MSM760 MSM765zl dhcp relay remote id <string> Sets the DHCP relay Option 82 remote ID. no dhcp relay remote id Clears the DHCP relay Option 82 remote ID.
Page 72: Clock
DHCP server to assign IP addresses on this network to all client stations. The controller handles all mapping between the two subnets internally. clock Supported on: MSM710 E-MSM720 MSM760 MSM765zl clock <time> <date> Sets the system time and date. Parameters Time as hh:mm:ss.
Page 73: Ntp Protocol
CLI commands Config context ntp protocol Supported on: MSM710 E-MSM720 MSM760 MSM765zl ntp protocol (ntp | sntp) Sets the network time protocol to use. ntp server Supported on: MSM710 E-MSM720 MSM760 MSM765zl ntp server Enable this option to have the controller periodically contact a network time server to update its internal clock.
Page 74: Clock Custom Dst Ends
CLI commands Config context clock custom dst ends Supported on: MSM710 E-MSM720 MSM760 MSM765zl clock custom dst ends <day> <weekday> <month> <time> Set parameters of the rule defining the end of daylight savings time. Parameters Day of the month. Range 1 - 31.
Page 75: Config-Update Automatic
CLI commands Config context config-update automatic Supported on: MSM710 E-MSM720 MSM760 MSM765zl config-update automatic Enables scheduled configuration restore or backup. no config-update automatic Disables scheduled configuration restore or backup. The controller can automatically download the configuration file from a local or remote URL (restore).
Page 76: Snmp-Server Trap Config-Change
CLI commands Config context snmp-server trap config-change Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server trap config-change Send a trap whenever the configuration is changed. no snmp-server trap config-change Do not send this trap. snmp-server trap config-update Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server trap config-update Send a trap whenever the firmware is updated.
Page 77: Snmp-Server Allow
CLI commands Config context snmp-server allow Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server allow <ip address>/<mask> Adds a host to the list of IP address from which access to the SNMP interface is permitted. no snmp-server allow <ip address>/<mask> Removes a host from the list of IP address from which access to the SNMP interface is permitted.
Page 78: Snmp-Server Port
Parameters Location where the controller is installed. <name> snmp-server port Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server port <port number> Sets the port the controller will use to respond to SNMP requests. Parameters SNMP port number. Range 1 - 65535.
Page 79: Snmp-Server Trap Destination
CLI commands Config context snmp-server trap destination Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server trap destination <host> <[port number]> Add a new trap destination. no snmp-server trap destination <host> [<port>] Deletes the specified trap destination. Parameters Sets the IP address or domain name of the host that the controller will send <host>...
Page 80: Snmp-Server Version 2C
CLI commands Config context snmp-server version 2c Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server version 2c Enable support for SNMP version 2c. no snmp-server version 2c Disable support for SNMP version 2c. snmp-server version 3 Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server version 3 Enable support for SNMP version 3.
Page 81: Snmp-Server Access Port-2
Blocks SNMP access on the upstream port. snmp-server access vpn Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server access vpn Enables access to the management tool via a VPN connection. no snmp-server access vpn Blocks access to the management tool via a VPN connection.
Page 82: Snmp-Server Trap Device-Security-Failure
CLI commands Config context snmp-server trap device-security-failure Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server trap device-security-failure Send a trap when the device is not able to establish a secure connection with the service controller. no snmp-server trap device-security-failure Do not send a trap about device security failure.
Page 83: Snmp-Server Access Lan
Blocks access to the management tool via the LAN port. snmp-server user Supported on: MSM710 E-MSM720 MSM760 MSM765zl snmp-server user <name> Creates a new SNMP user or switches to the SNMP user context with the specified user name. no snmp-server user <name>...
Page 84: Soap-Server Allow
CLI commands Config context soap-server allow Supported on: MSM710 E-MSM720 MSM760 MSM765zl soap-server allow <ip address>/<mask> Adds a host to the list of IP addresses from which access to the SOAP interface is permitted. no soap-server allow <ip address>/<mask> Removes a host from the list of IP addresses from which access to the SOAP interface is permitted.
Page 85: Soap-Server Ssl With Client Certificate
SSL disabled for SOAP server. soap-server ssl with client certificate Supported on: MSM710 E-MSM720 MSM760 MSM765zl soap-server ssl with client certificate Enable the use of client certificate with SSL for SOAP server. no soap-server ssl with client certificate Disable the use of client certificate with SSL for SOAP server.
Page 86: Soap-Server Access Vpn
CLI commands Config context soap-server access vpn Supported on: MSM710 E-MSM720 MSM760 MSM765zl soap-server access vpn Enables access to the management tool via a VPN connection. no soap-server access vpn Blocks access to the management tool via a VPN connection.
Page 87: Firmware-Update Automatic
CLI commands Config context firmware-update automatic Supported on: MSM710 E-MSM720 MSM760 MSM765zl firmware-update automatic Enables scheduled firmware upgrades. no firmware-update automatic Disables scheduled firmware upgrade. The controller can automatically retrieve and install firmware from a local or remote URL at preset times.
Page 88: Firmware-Update Weekday
CLI commands Config context firmware-update weekday Supported on: MSM710 E-MSM720 MSM760 MSM765zl firmware-update weekday (everyday | monday | tuesday | wednesday | thursday | friday | saturday | sunday) Sets the day when the scheduled firmware upgrade will take place.
Page 89: Ip Name-Server Interception
Sets the shared secret used to communicate with the controller. no access controller shared secret Sets the shared secret used to communicate with the access controller. The controller will only accept authentication/location-aware information from HP APs that have a matching shared secret to its own. 2-39...
Page 90: Radius-Server Profile
CLI commands Config context radius-server profile Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server profile <name> Creates a new RADIUS profile or switches to the RADIUS context with the specified profile name. no radius-server profile <name> Deletes the specified RADIUS profile.
Page 91: Certificate Ipsec Revocation
CLI commands Config context certificate ipsec revocation Supported on: MSM710 E-MSM720 MSM760 MSM765zl certificate ipsec revocation <uri> Loads a new CRL file from the specified URI. The URI can be local: local://FILENAME or remote ftp://host/path certificate ssl Supported on: MSM710 E-MSM720 MSM760 MSM765zl certificate ssl <uri>...
Page 92: Lldp Config
CLI commands Config context lldp config Supported on: MSM710 E-MSM720 MSM760 MSM765zl lldp config <port> Edit LLPD port specific options. lldp dynamic-name Supported on: MSM710 E-MSM720 MSM760 MSM765zl lldp dynamic-name Enables the LLDP dynamic naming feature. no lldp dynamic-name Disables the LLDP dynamic naming feature.
Page 93: Lldp Holdtime-Multiplier
CLI commands Config context lldp holdtime-multiplier Supported on: MSM710 E-MSM720 MSM760 MSM765zl lldp holdtime-multiplier <hold> Sets the hold time multiplier for LLDPDU transmissions. The value of Multiplier is multiplied by the refresh-interval to define Time to live. Time to live indicates the length of time that neighbors will consider LLDP information sent by this agent to be valid.
Page 94: Show Lldp Info Remote-Device
Displays LLDP statistics for all ports or a specific port . discovery protocol Supported on: MSM710 E-MSM720 MSM760 MSM765zl discovery protocol Enables broadcast of HP device information for interoperability with CDP-enabled networking hardware. no discovery protocol Disables broadcast of HP device information. discovery protocol device-id...
Page 95: Service Controller Ap Authentication File
Config context service controller ap authentication file Supported on: MSM710 E-MSM720 MSM760 MSM765zl service controller ap authentication file <name> Sets the file to use for authentication of controlled access points. This must be an ASCII file with one or more MAC addresses in it. Each address must appear on a separate line.
Page 96: Service Controller Discovery
CLI commands Config context service controller discovery Supported on: MSM710 E-MSM720 MSM760 MSM765zl service controller discovery Enable controller discovery. no service controller discovery Disable service controller discovery. service controller primary Supported on: MSM710 E-MSM720 MSM760 MSM765zl service controller primary Become the Primary controller.
Page 97: Service Controller Provisioning
Allow discovery on the specified interface. no service controller discovery interface <interface> Denies discovery on the specified interface. service controller provisioning Supported on: MSM710 E-MSM720 MSM760 MSM765zl service controller provisioning Enable the AP provisioning system. no service controller provisioning Disable the AP provisioning system.
Page 98: Bandwidth Control Internet-Port Normal
All traffic assigned to a particular bandwidth level shares the allocated bandwidth for that level. bandwidth control internet-port normal Supported on: MSM710 MSM760 MSM765zl bandwidth control internet-port normal <min-tx-%> <min-rx-%> <max-tx-%> <max- rx-%> Sets the bandwidth rates (Tx minimum, Tx maximum, Rx minimum, and Rx maximum) for traffic classed as Normal.
Page 99: Bandwidth Control High
CLI commands Config context bandwidth control Supported on: E-MSM720 bandwidth control Enables bandwidth control for traffic going between the Access and the Internet network. no bandwidth control Disables bandwidth control for traffic going between the Access and the Internet network. bandwidth control high Supported on: E-MSM720 bandwidth control high <min-tx-%>...
Page 100: Ip Route Gateway
Sets the bandwidth rates (Tx minimum, Tx maximum, Rx minimum, and Rx maximum) for traffic classed as Very High. ip route gateway Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip route gateway<destination>/<mask> <gateway> <[metric]> Adds a static route. no ip route gateway <destination>/<mask> <gateway> <[metric]>...
Page 101: Firewall Mode
CLI commands Config context firewall mode Supported on: MSM710 E-MSM720 MSM760 MSM765zl firewall mode (high|low|none) Sets the firewall mode. Parameters Permits all outgoing traffic. Blocks all externally initiated connections. high Permits all incoming and outgoing traffic, except for NetBIOS traffic. Use this option if you require active FTP sessions.
Page 102: Dot1X Reauth
CLI commands Config context dot1x reauth Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot1x reauth Enable this option to force 802.1X client stations to reauthenticate. no dot1x reauth Disables 802.1X reauthentication. dot1x reauth period Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot1x reauth period (15m | 30m | 1h | 2h | 4h | 8h | 12h) Sets the 802.1X reauthentication interval.
Page 103: Dynamic Key Interval
Supported on: MSM710 E-MSM720 MSM760 MSM765zl dynamic key interval (5m | 10m | 15m | 30m | 1h | 2h | 4h | 8h | 12h) Specifies how often (in minutes or hours) that the group (broadcast) key is changed for 802.1X and WPA.
Page 104: Radius-Server Local Eap-Tls
CLI commands Config context radius-server local eap-tls Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server local eap-tls Allow EAP-TLS. no radius-server local eap-tls Disallow EAP-TLS. radius-server local eap-ttls Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server local eap-ttls Allow EAP-TTLS. no radius-server local eap-ttls Disallow EAP-TTLS.
Page 105: Active-Directory Check User Access
CLI commands Config context active-directory check user access Supported on: MSM710 E-MSM720 MSM760 MSM765zl active-directory check user access Check Active Directory for user access. no active-directory check user access Do not check Active Directory for user access. active-directory device name...
Page 106: Active-Directory Join
CLI commands Config context active-directory join Supported on: MSM710 E-MSM720 MSM760 MSM765zl active-directory join <username> <password> Joins with Active Directory. show active-directory Supported on: MSM710 E-MSM720 MSM760 MSM765zl show active-directory Displays Active Directory settings. show active-directory group Supported on: MSM710 E-MSM720 MSM760 MSM765zl show active-directory group <name>...
Page 107: User Tracking Port
CLI commands Config context user tracking port Supported on: MSM710 E-MSM720 MSM760 MSM765zl user tracking port <number> Specifies where UDP port capture data should be sent. persistent user information Supported on: MSM710 E-MSM720 MSM760 MSM765zl persistent user information Save user account information locally.
Page 108: Rf-Id Aeroscout
CLI commands Config context rf-id aeroscout Supported on: MSM710 E-MSM720 MSM760 MSM765zl rf-id aeroscout Enables AeroScout tag processing. no rf-id aeroscout Disables AeroScout tag processing. sflow Supported on: MSM710 E-MSM720 MSM760 MSM765zl sflow Enables sFlow. no sflow Disables sFlow. show sflow agent...
Page 109: Show Sflow Sampling-Polling
Supported on: MSM710 E-MSM720 MSM760 MSM765zl show mac lockout Displays all entries in the MAC lockout list. team communication ip address Supported on: E-MSM720 MSM760 MSM765zl team communication ip address <ip address>/<mask> Sets the team communcation VLAN IP Address. 2-59...
Page 110: Team Management Address
CLI commands Config context team communication vlan Supported on: E-MSM720 MSM760 MSM765zl team communication vlan <id> Sets the team communcation VLAN ID. no team communication vlan Disables usage of a VLAN for team communication. team management address Supported on: E-MSM720 MSM760 MSM765zl team management address <ip address>/<mask>...
Page 111: Team Management Interface
CLI commands Config context team communication vlan Supported on: MSM760 MSM765zl team communication vlan Enables the use of a VLAN for team communication. no team communication vlan Disables usage of a VLAN for team communication. team management interface Supported on: MSM760 MSM765zl team management interface (internet | lan | vlan) [<name>]...
Page 112: Access Controller Context
Access Controller context Path: View > Enable > Config > Access Controller Use this context to define all global controller configuration settings. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. ads presentation Supported on: MSM710 E-MSM720 MSM760 MSM765zl ads presentation Enables advertisement display at regular intervals for authenticated users.
Page 113: Station Http Proxy Support
Access Controller context station http proxy support Supported on: MSM710 E-MSM720 MSM760 MSM765zl station http proxy support Enables support for client stations that are configured to use a proxy server for HTTP and HTTPS, without requiring users to reconfigure their systems.
Page 114: Remember Html Users
CLI commands Access Controller context remember html users Supported on: MSM710 E-MSM720 MSM760 MSM765zl remember html users Enables support for remembering (automatically re-authenticating) HTML-authenticated users who leave the network but return within the remember delay interval. no remember html users Disables support for remembering HTML-authenticated users.
Page 115: Show Paypal
CLI commands Access Controller context show paypal Supported on: MSM710 E-MSM720 MSM760 MSM765zl show paypal Shows LLDP statistics for all ports or a specific port . paypal api-url Supported on: MSM710 E-MSM720 MSM760 MSM765zl paypal api-url (default | url) [<url>] Set or unset a custom PayPal API URL.
Page 116: Authentication Http
CLI commands Access Controller context authentication http Supported on: MSM710 E-MSM720 MSM760 MSM765zl authentication http <number> Sets the port number the controller will be used to provide standard HTTP access to the management tool. HTTP connections made to this port are met with a warning and the browser is redirected to the secure web server port.
Page 117: Noc Authentication
NOC authentication is active. When the list is empty, authentication requests are accepted from any address. noc authentication Supported on: MSM710 E-MSM720 MSM760 MSM765zl noc authentication Enables support for NOC authentication. no noc authentication Disables support for NOC authentication.
Page 118: Noc Access Interface Vlan
Disables user agent filtering. noc access interface vlan Supported on: MSM710 E-MSM720 MSM760 MSM765zl noc access interface vlan <name> Adds the specified VLAN to the list of interfaces that authentication requests are accepted on. no noc access interface vlan <name>...
Page 119: Wispr Login Url
CLI commands Access Controller context wispr login url Supported on: MSM710 E-MSM720 MSM760 MSM765zl wispr login url <url> Specifies the WISPr login url assigned to the controller. no wispr login url Deletes the WISPr login url assigned to the controller.
Page 120: Use Access-List
Range: 5-99999 seconds in 15 second increments. use access-list Supported on: MSM710 E-MSM720 MSM760 MSM765zl use access-list <listname> Specifies the name of the access list to use. no use access-list Do not use an access list.
Page 121: Http Proxy Upstream
CLI commands Access Controller context http proxy upstream Supported on: MSM710 E-MSM720 MSM760 MSM765zl http proxy upstream <string> Specifies the host:port of the HTTP Proxy Upstream server. no http proxy upstream Do not use an HTTP Proxy Upstream server. https ssl certificate...
Page 122: Ipass Login Url
CLI commands Access Controller context ipass login url Supported on: MSM710 E-MSM720 MSM760 MSM765zl ipass login url <url> Specifies the URL of the IPass login page. The controller will automatically redirect users with IPass client software to this page. no ipass login url No IPass login URL.
Page 123: Messages
CLI commands Access Controller context messages Supported on: MSM710 E-MSM720 MSM760 MSM765zl messages <url> Specifies the URL of a new message file. no messages No new messages file. Use default. noc ssl ca-certificate Supported on: MSM710 E-MSM720 MSM760 MSM765zl noc ssl ca-certificate <url>...
Page 124: Welcome Url
CLI commands Access Controller context welcome url Supported on: MSM710 E-MSM720 MSM760 MSM765zl welcome url <url> Specifies the URL of a welcome page. no welcome url No welcome page. notify user location changes Supported on: MSM710 E-MSM720 MSM760 MSM765zl notify user location changes Notify RADIUS on location changes.
Page 125: Default User Session Profile Context
The "no" form will remove the attributes. accounting interim update Supported on: MSM710 E-MSM720 MSM760 MSM765zl accounting interim update <number> Sets the default accounting interim update interval (in seconds) for all users that do not have a specific interval set in their profile.
Page 126: Maximum Output Octets
CLI commands Default user session profile context maximum output octets Supported on: MSM710 E-MSM720 MSM760 MSM765zl maximum output octets <value> Sets the maximum output limit in octets for all users that do not have a specific limit set in their profile.
Page 127: Session Timeout
CLI commands Default user session profile context session timeout Supported on: MSM710 E-MSM720 MSM760 MSM765zl session timeout <number> Sets the default session timeout for all users that do not have a specific limit set in their profile. no session timeout Removes this attribute.
Page 128: Smtp Redirection
CLI commands Default user session profile context smtp redirection Supported on: MSM710 E-MSM720 MSM760 MSM765zl smtp redirection Enables SMTP proxy support. no smtp redirection Disables SMTP proxy support. 2-78...
Page 129: Session Profile Context
Session profile context Path: View > Enable > Config > Session profile Use this context to define settings for a user’s session profile. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. access controlled Supported on: MSM710 E-MSM720 MSM760 MSM765zl access controlled Set profile as access-controlled.
Page 130: Arp Polling Interval
CLI commands Session profile context arp polling interval Supported on: MSM710 E-MSM720 MSM760 MSM765zl arp polling interval <number> Sets the ARP polling interval. use arp polling interval Use the ARP polling interval. no use arp polling interval Do not use the ARP polling interval.
Page 131: Idle Timeout
CLI commands Session profile context idle timeout Supported on: MSM710 E-MSM720 MSM760 MSM765zl idle timeout <number> Sets the default idle time out for all users that do not have a specific limit set in their profile. use idle timeout Use this attribute.
Page 132: Nat One-To-One
CLI commands Session profile context nat one-to-one Supported on: MSM710 E-MSM720 MSM760 MSM765zl nat one-to-one Enables one-to-one NAT support for all users that do not have a specific value set in their profile. no nat one-to-one Removes this attribute. use nat one-to-one Use this attribute.
Page 133: Termination Action
CLI commands Session profile context termination action Supported on: MSM710 E-MSM720 MSM760 MSM765zl termination action (logout | reauthenticate) Sets the termination action. use termination action Use the termination action. no use termination action Do not use the termination action. user defined attribute...
Page 134 CLI commands Session profile context no use public ip subnet Do not use this attribute. 2-84...
Page 135: User Account Context
User account context Path: View > Enable > Config > User account Use this context to modify settings for a specific user account in the local user list. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. access controlled Supported on:...
Page 136: Active
CLI commands User account context active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Enables this user account. no active Disables this user account. chargeable user identity Supported on: MSM710 E-MSM720 MSM760 MSM765zl chargeable user identity <id> Sets the CUI. use chargeable user identity Uses the CUI.
Page 137: Max User Sessions
This user never times out. max user sessions Supported on: MSM710 E-MSM720 MSM760 MSM765zl max user sessions <number> Sets the maximum concurrent sessions for this user. no max user sessions This user doesn’t have a maximum concurrent sessions limit.
Page 138: Subscription Plan
CLI commands User account context no session timeout This user session never times out. subscription plan Supported on: MSM710 E-MSM720 MSM760 MSM765zl subscription plan <name> Sets the subscription plan to use. no subscription plan Delete a subscription plan. username Supported on: MSM710 E-MSM720 MSM760 MSM765zl username <name>...
Page 139: Internet Port Interface Context
Internet port interface context Internet port interface context Path: View > Enable > Config > Internet port interface Use this context to configure the Internet port. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. duplex Supported on: MSM710 E-MSM720 MSM760 duplex (auto | half | full) Sets the duplex mode on Internet.
Page 140: Ipsec Vlan Interface
CLI commands Internet port interface context ipsec vlan interface Supported on: MSM710 E-MSM720 MSM760 MSM765zl ipsec vlan interface <name> Specifies which VLAN is used by IPsec. no ipsec vlan interface Do not use a VLAN for IPsec. 2-90...
Page 141: Lan Port Interface Context
LAN port interface context LAN port interface context Path: View > Enable > Config > LAN port interface Use this context to configure the LAN port. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. duplex Supported on: MSM710 E-MSM720 MSM760 duplex (auto | half | full) Sets the duplex mode on LAN.
Page 142: Ipsec Vlan Interface
CLI commands LAN port interface context ipsec vlan interface Supported on: MSM710 E-MSM720 MSM760 MSM765zl ipsec vlan interface <name> Specifies which VLAN is used by IPsec. no ipsec vlan interface Do not use a VLAN for IPsec. 2-92...
Page 143: Wan Ip Interface Context
Path: View > Enable > Config > WAN IP interface Use this context to configure various IP-networking related settings on the Internet port. pppoe client user Supported on: MSM710 E-MSM720 MSM760 MSM765zl pppoe client user <username> <password> Sets the PPPoE username and password. no pppoe client user Deletes the PPPoE username.
Page 144: Ip Address
This option enables you to manually assign an IP address to the controller. static No IP address. none ip address Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip address <ip address>/<mask> Sets a static IP address for the port. Parameters IP address. <address>...
Page 145: Pppoe Auto-Reconnect
CLI commands WAN IP interface context Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. pppoe auto-reconnect Supported on: MSM710 E-MSM720 MSM760 MSM765zl pppoe auto-reconnect The controller will automatically attempt to reconnect if the connection is lost. no pppoe auto-reconnect The controller will not automatically attempt to reconnect if the connection is lost.
Page 146: Ip Nat Outside Source Static
IP addresses are available to you. ip nat outside source static Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip nat outside source static (tcp|udp) <visible-port> <internal-addr> <internal-port> Adds a static NAT mapping which routes the specified incoming traffic to the specified IP address on the internal network.
Page 147: Lan Ip Interface Context
Path: View > Enable > Config > LAN IP interface View > Enable > Config > LAN IP interface Use this context to configure various IP-networking related settings on the LAN port. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. ip address Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip address <ip address>/<mask>...
Page 148: Public Access Radius Attributes Context
Public access RADIUS attributes context Path: View > Enable > Config > Public access RADIUS attributes Use this context to setup retrieval of public access attributes from a RADIUS server. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. active Supported on:...
Page 149: Virtual Ap Context
Path: View > Enable > Config > Virtual AP Use this context to configure VSC profiles (formerly called VAPs). By default, one VSC profile exists with the name "HP". This is the default profile and cannot be deleted. virtual ap name...
Page 150: Ingress Interface
Virtual AP context ingress interface Supported on: MSM710 E-MSM720 MSM760 MSM765zl ingress vlan <name> Sets the specified interface as the ingress interface traffic will be accepted on. This command takes a selector as its input. A selector is used to differentiate traffic, and decide which parameters should be used to select the VAP (VSC) this user/traffic applies to.
Page 151: Ssid Name
CLI commands Virtual AP context ssid name Supported on: MSM710 E-MSM720 MSM760 MSM765zl ssid name <name> Specifies the WLAN name (SSID) for the profile. encryption key 1 Supported on: MSM710 E-MSM720 MSM760 MSM765zl encryption key <key> <value> Sets WEP key 1.
Page 152: Authentication Server Access Controller
CLI commands Virtual AP context authentication server access controller Supported on: MSM710 E-MSM720 MSM760 MSM765zl authentication server access controller Use the access controller to authenticate 802.1X or WPA logins. authentication server accounting Supported on: MSM710 E-MSM720 MSM760 MSM765zl authentication server accounting Enables RADIUS accounting for this VSC (VAP).
Page 153: Authentication Server Request Radius Cui
Enables the wireless security filters which only allow traffic to flow between the controller and a specific upstream device (such as a HP service controller). no wireless filters Do not limit traffic flow between the controller and an upstream device.
Page 154: Wireless Filters Rule Input
Use this command to define custom security filters for incoming wireless traffic. Filters are specified using standard pcap syntax (http://www.tcpdump.org/tcpdump_man.html) with the addition of a few HP-specific placeholders. These placeholders can be used to refer to specific MAC addresses and are expanded by the controller when the filter is activated. Once expanded, the filter must respect the pcap syntax.
Page 155: Mac-Filters Local
If the controller is configured to use the services of a HP access controller, then the default security filters are automatically enabled and all traffic is sent to the access controller.
Page 156: Mac-Filters
CLI commands Virtual AP context mac-filters Supported on: MSM710 E-MSM720 MSM760 MSM765zl mac-filters <address> Adds an address to the MAC filter list. no mac-filters <address> Remove the specified address from the MAC filter list. Parameters MAC address. Specify 6 pairs of hexadecimal numbers separated by <address>...
Page 157: Mac Authentication Remote
Do not use a RADIUS profile. mac authentication remote Supported on: MSM710 E-MSM720 MSM760 MSM765zl mac authentication remote Sets MAC-based authentication to use a RADIUS profile. no mac authentication remote MAC-based authentication will not use a RADIUS profile.
Page 158: Html Authentication Accounting
CLI commands Virtual AP context html authentication accounting Supported on: MSM710 E-MSM720 MSM760 MSM765zl html authentication accounting Enables RADIUS accounting. no html authentication accounting Disables RADIUS accounting. html authentication accounting radius profile Supported on: MSM710 E-MSM720 MSM760 MSM765zl html authentication accounting radius profile <name>...
Page 159: Html Authentication Request Radius Cui
Do not validate HTML logins using the specified RADIUS profile. html authentication request radius cui Supported on: MSM710 E-MSM720 MSM760 MSM765zl html authentication request radius cui Include a request for a CUI in the authentication request. no html authentication request radius cui Do not include a request for a CUI in the authentication request.
Page 160: Beacon Transmit Power
CLI commands Virtual AP context beacon transmit power Supported on: MSM710 E-MSM720 MSM760 MSM765zl beacon transmit power Advertise the current transmit power setting in the beacon. no beacon transmit power Do not advertise the current transmit power setting in the beacon.
Page 161: Layer3 Mobility
CLI commands Virtual AP context layer3 mobility Supported on: MSM710 E-MSM720 MSM760 MSM765zl layer3 mobility Enables Layer 3 mobility. no layer3 mobility Disables Layer 3 mobility. layer3 mobility hns fallback method Supported on: MSM710 E-MSM720 MSM760 MSM765zl layer3 mobility hns (subnet | vlan | home) Select the home network selection (HNS) fallback method.
Page 162 <profile-name> (VAP). Supported on: MSM710 E-MSM720 MSM760 MSM765zl qos ( 802.1p | very-high | high | normal | low | diffsrv | tos | default | vap0 | vap1 | vap2 | vap3) Sets the QoS level for this profile.
Page 163: Upstream Diffserv Tagging
CLI commands Virtual AP context upstream diffserv tagging Supported on: MSM710 E-MSM720 MSM760 MSM765zl upstream diffserv tagging Enables upstream diffserv tagging. no upstream diffserv tagging Disables upstream diffserv tagging. wmm advertising Supported on: MSM710 E-MSM720 MSM760 MSM765zl wmm advertising Enables WMM information element advertising.
Page 164: Bandwidth Default Rates Maximum
Disables default bandwidth rates for this VAP (VSC). bandwidth default rates maximum Supported on: MSM710 E-MSM720 MSM760 MSM765zl bandwidth default rates maximum <max-tx-rate> <max-rx-rate> Sets the default maximum transmit and receive rates. radius accounting realms Supported on:...
Page 165: Location-Aware Called-Station-Id Content
CLI commands Virtual AP context location-aware called-station-id content Supported on: MSM710 E-MSM720 MSM760 MSM765zl location-aware called-station-id content (ssid | group | mac) Sets the value returned in Called-Station-ID. dhcp relay Supported on: MSM710 E-MSM720 MSM760 MSM765zl dhcp relay <primary-ip-address> <[secondary-ip-address]>...
Page 166: Dhcp Server
CLI commands Virtual AP context dhcp server Supported on: MSM710 E-MSM720 MSM760 MSM765zl dhcp server The dhcp server is enabled on the VAP (VSC). no dhcp server The dhcp server is not enabled on the VAP (VSC). dhcp server dns...
Page 167: Security
CLI commands Virtual AP context no radius-framed-protocol-attribute Do not include the RADIUS Framed-Protocol attribute in Access Request packets. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. security Supported on: MSM710 E-MSM720 MSM760 MSM765zl security (none | wep | 802.1X [wep | static-wep] | wpa (psk | radius) [ v1 | v2 Sets the current wireless security policy.
Page 168: Interface Context
CLI commands Interface context Interface context Path: View > Enable > Config > Interface Use this context to configure an physical interface (port). duplex-mode Supported on: E-MSM720 duplex-mode (auto | half | full) Sets the duplex mode for the current port. Supported on: E-MSM720 Switches to parent context.
Page 169 CLI commands Interface context trunk type Supported on: E-MSM720 trunk type (none | lacp | trunk) Sets the trunk type for the current port. 2-119...
Page 170: Vlan Interface Context
View > Enable > Config > Internet port interface > VLAN interface View > Enable > Config > LAN port interface > VLAN interface Use this context to configure VLANs. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. ip address Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip address <ip address>/<mask>...
Page 171: Ip Default-Gateway
<port> Removes the current VLAN from the specified port. ip default-gateway Supported on: MSM710 E-MSM720 MSM760 MSM765zl ip default-gateway <ip address> Sets the default gateway for this VLAN. no ip default-gateway Removes the default gateway for this VLAN.
Page 172: Radius Profiles Context
Path: View > Enable > Config > RADIUS profiles Use this context to define RADIUS profiles. These profiles are used to establish a connection with RADIUS servers. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. radius-server accounting port Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server accounting port <number>...
Page 173: Radius-Server Deadtime
RADIUS profiles context radius-server deadtime Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server deadtime <seconds> Sets the retry interval for access and accounting requests that time-out. If no reply is received within this interval, the controller switches between the primary and secondary RADIUS servers (if defined).
Page 174: Radius-Server Nasid
RADIUS profiles context radius-server nasid Supported on: MSM710 E-MSM720 MSM760 MSM765zl radius-server nasid <id> Sets the network access server ID you want to use for the controller. By default, the serial number of the controller is used. The controller includes the NAS-ID attribute in all packets that it sends to the RADIUS server.
Page 175: Ip Qos Context
IP QOS context IP QOS context Path: View > Enable > Config > IP QOS Use this context to configure IP QoS profiles. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Returns to a previous context. end-port Supported on: MSM710 E-MSM720 MSM760 MSM765zl end-port <number>...
Page 176 CLI commands IP QOS context Parameters Start port number. Range: 0 - 65535 <number> 2-126...
Page 177: Dhcp Server Context
DHCP server context DHCP server context Path: View > Enable > Config > DHCP server Use this context to configure DHCP server settings. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active This range is enabled.
Page 178: Gre Interface Context
GRE interface context Path: View > Enable > Config > GRE interface Use this context to configure GRE tunnels. end force Supported on: MSM710 E-MSM720 MSM760 MSM765zl end [force] Quits the GRE context. gre name Supported on: MSM710 E-MSM720 MSM760 MSM765zl gre name <name>...
Page 179: Ipsec Context
CLI commands IPsec context IPsec context Path: View > Enable > Config > IPsec Use this context to define IPSec configuration settings. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Enables policy.
Page 180: Incoming Nat
CLI commands IPsec context no dns server Resets the DNS server for this policy. incoming nat Supported on: MSM710 E-MSM720 MSM760 MSM765zl incoming nat Enables NAT for incoming traffic. no incoming nat Disables NAT for incoming traffic. incoming traffic network...
Page 181: Peer Ip Address
CLI commands IPsec context peer ip address Supported on: MSM710 E-MSM720 MSM760 MSM765zl peer ip address (<ip address>| any ) Sets the peer ip address for this policy. perfect forward secrecy Supported on: MSM710 E-MSM720 MSM760 MSM765zl perfect forward secrecy Enables PFS.
Page 182: Syslog Context
Syslog context Path: View > Enable > Config > Syslog Use this context to define syslog settings. active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Enables logging to the current destination. no active Disables logging to the current destination. logging facility...
Page 183: Logging Source
CLI commands Syslog context logging source Supported on: MSM710 E-MSM720 MSM760 MSM765zl logging source (local | controlled_aps | controllers | all) Sets the source used when logging messages to a syslog server. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context.
Page 184: Message
CLI commands Syslog context message Supported on: MSM710 E-MSM720 MSM760 MSM765zl message Enables filtering of the log file message field. no message Disables filtering of the log file message field. message Supported on: MSM710 E-MSM720 MSM760 MSM765zl message (matches | notmatches) <regex>...
Page 185: Pptp Client Interface
Path: View > Enable > Config > PPTP client interface Use this context to configure the PPTP client. active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Sets PPTP client connection to ’up’. no active Sets PPTP client connection to ’down’.
Page 186: Pptp Client Auto Route Discovery
CLI commands PPTP client interface pptp client auto route discovery Supported on: MSM710 E-MSM720 MSM760 MSM765zl pptp client auto route discovery Enables auto-route discovery. no pptp client auto route discovery Disables auto-route discovery. pptp client lcp echo Supported on: MSM710 E-MSM720 MSM760 MSM765zl pptp client lcp echo Enables PPTP LCP echo.
Page 187: Keychain Context
CLI commands Keychain context Keychain context Path: View > Enable > Config > Keychain Use this context to manage a keychain. Supported on: MSM710 E-MSM720 MSM760 MSM765zl End current context. Supported on: MSM710 E-MSM720 MSM760 MSM765zl key <number> Enter new key.
Page 188: Keys Context
Keys context Path: View > Enable > Config > Keychain > Keys Use this context to configure the keys that are part of a keychain. Supported on: MSM710 E-MSM720 MSM760 MSM765zl End current context. key-string Supported on: MSM710 E-MSM720 MSM760 MSM765zl key-string <name>...
Page 189: Subscription Plan Context
Subscription plan context Subscription plan context Path: View > Enable > Config > Subscription plan Use this context to define settings for subscription plans. Supported on: MSM710 E-MSM720 MSM760 MSM765zl End current context. daily restriction Supported on: MSM710 E-MSM720 MSM760 MSM765zl daily restriction <from>...
Page 190: Online Time Limit
CLI commands Subscription plan context online time limit Supported on: MSM710 E-MSM720 MSM760 MSM765zl online time limit Use the online time limit. no online time limit Do not use the online time limit. online time limit Supported on: MSM710 E-MSM720 MSM760 MSM765zl online time limit <number>...
Page 191 CLI commands Subscription plan context no public ip subnet Removes this attribute. use public ip subnet Use this attribute. no use public ip subnet Do not use this attribute. 2-141...
Page 192: Snmp User Context
Path: View > Enable > Config > SNMP user Use this context to define settings for SNMP users. access level Supported on: MSM710 E-MSM720 MSM760 MSM765zl access level (read-only | read-write) Specifies the access level use for this SNMP user. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Returns to a previous context.
Page 193: Snmp Notification Receiver Context
Path: View > Enable > Config > SNMP notification receiver Use this context to configure SNMP notification receivers. community Supported on: MSM710 E-MSM720 MSM760 MSM765zl community <community> Specifies the community for this SNMP notification receiver. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Returns to a previous context.
Page 194: Active Directory Group Context
Path: View > Enable > Config > Active Directory Group Use this context to define the attributes to send when a user is related to an Active Directory group. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. access controlled Supported on:...
Page 195: Active
CLI commands Active Directory Group context active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Enable this user account. no active Disable this user account. active-directory group name Supported on: MSM710 E-MSM720 MSM760 MSM765zl active-directory group name <name> Change the name for this user.
Page 196 CLI commands Active Directory Group context use regular virtual ap Use only allowed Virtual APs (VSCs) for this profile. no use regular virtual ap Use any Virtual AP (VSC) for this profile. 2-146...
Page 197: Controlled Aps Context
Controlled APs context Controlled APs context Path: View > Enable > Controlled APs Use these commands to configure controlled APs. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. execute action Supported on: MSM710 E-MSM720 MSM760 MSM765zl execute action (synchronize | accept-suspicious | accept-product | rediscover) Execute an action on the entity’s devices.
Page 198: Contact
CLI commands Controlled APs context contact Supported on: MSM710 E-MSM720 MSM760 MSM765zl contact <name> Modify the contact. location Supported on: MSM710 E-MSM720 MSM760 MSM765zl location <name> Modify the location. product type Supported on: MSM710 E-MSM720 MSM760 MSM765zl product type (map-320 | map-330 | map-625 | map-630 | msm410 | e-msm430 | e- msm460 | e-msm466 | msm317 | msm318 | e-msm466-r) Modify the default product type.
Page 199: Controlled Aps Group Context
Path: View > Enable > Controlled APs group Use this context to configure controlled AP groups. execute action Supported on: MSM710 E-MSM720 MSM760 MSM765zl execute action (synchronize | accept-suspicious | accept-product | rediscover) Execute an action on the entity’s devices. show config factory...
Page 200: Controlled Aps Base Group Context
Path: View > Enable > Controlled APs base group Use this context to configure the base controlled APs group. execute action Supported on: MSM710 E-MSM720 MSM760 MSM765zl execute action (synchronize | accept-suspicious | accept-product | rediscover) Execute an action on the entity’s devices. show config factory...
Page 201: Controlled Aps Network Configuration Context
View > Enable > Controlled APs group > Controlled APs network configuration View > Enable > Controlled APs base group > Controlled APs network configuration Use this context to define network settings for controlled APs. Supported on: MSM710 E-MSM720 MSM760 MSM765zl interface wireless Supported on: MSM710 E-MSM720 MSM760 MSM765zl interface wireless <number>...
Page 202: Show Tech
CLI commands Controlled APs network configuration context show tech Supported on: MSM710 E-MSM720 MSM760 MSM765zl show tech Displays technical information. switch port Supported on: MSM710 E-MSM720 MSM760 MSM765zl switch port <name> Switch to the ethernet port context. syslog Supported on:...
Page 203: World-Mode Dot11 Country Code
Do not inherit settings from parent. world-mode dot11 country code Supported on: MSM710 E-MSM720 MSM760 MSM765zl world-mode dot11 country code <code> Specifies the country in which the controller is operating. Parameters An ISO3166 three-letter country code.
Page 204: Sensor Server Id
Specify the Server ID of the RF Manager Server to connect to. Set the Server ID to 0 to have the controller send a discovery request to all active HP RF Manager Servers. The controller will connect to the first server that responds to the discovery request.
Page 205: Dynamic Key
Controlled APs network configuration context no inherit sensor Do not inherit sensor settings from parent. dynamic key Supported on: MSM710 E-MSM720 MSM760 MSM765zl dynamic key Enables dynamic key support for 802.1X and WPA. no dynamic key Disables dynamic key support for 802.1X and WPA.
Page 206: Dot1X Supplicant Timeout
CLI commands Controlled APs network configuration context dot1x supplicant timeout Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot1x supplicant timeout <number> Sets the 802.1X supplicant time-out. Parameters time-out in seconds. <seconds> inherit 8021x Supported on: MSM710 E-MSM720 MSM760 MSM765zl inherit 802.1x Inherit 802.1X settings from parent.
Page 207: Inherit Vlan Stp
CLI commands Controlled APs network configuration context inherit vlan stp Supported on: MSM710 E-MSM720 MSM760 MSM765zl inherit vlan stp Inherit vlan spanning tree protocol settings from parent. no inherit vlan stp Do not inherit vlan spanning tree protocol settings from parent.
Page 208: Inherit L3Subnets
Controlled APs network configuration context no inherit service availability Do not inherit service availability from parent. inherit l3subnets Supported on: MSM710 E-MSM720 MSM760 MSM765zl inherit l3subnets Inherit subnets from parent. no inherit l3subnets Do not inherit L3 subnets from parent.
Page 209: Lldp App-Profile
CLI commands Controlled APs network configuration context lldp app-profile Supported on: MSM710 E-MSM720 MSM760 MSM765zl lldp app-profile <(voice)> diffserv <diffserv> Sets the Diffserv value for an LLDP Application Type profile. lldp app-profile Supported on: MSM710 E-MSM720 MSM760 MSM765zl lldp app-profile <(voice)> priority (low1 | low2 | normal0 | normal3 | high4 | high5 | very-high6 | very-high7) Sets the VLAN ID of an LLDP Application Type profile.
Page 210: Lldp Fast-Start-Count
AP’s IP address. An IP address can require up to 15 characters (nnn.nnn.nnn.nnn). lldp fast-start-count Supported on: MSM710 E-MSM720 MSM760 MSM765zl lldp fast-start-count <count> After an MED LLDPDU is received, this timer is started and the agent sends one MED LLDPDU to the MED device each second as it counts down.
Page 211: Lldp Run
CLI commands Controlled APs network configuration context lldp run Supported on: MSM710 E-MSM720 MSM760 MSM765zl lldp run Enables the LLDP Agent on the AP. no lldp run Disables the LLDP Agent on the AP. 2-161...
Page 212: Controlled Aps Vsc Binding Context
Path: View > Enable > Controlled APs group > Controlled APs VSC binding Use this context to configure VSC bindings for controlled APs. dual radio binding Supported on: MSM710 E-MSM720 MSM760 MSM765zl dual radio binding (radio1 | radio2) Enables radio binding. no dual radio binding (radio1 | radio2) Disables radio binding.
Page 213: Syslog Context
Use this context to define logging options. message Supported on: MSM710 E-MSM720 MSM760 MSM765zl message (matches | notmatches) <regex> Use this filter to include log messages. Use a regular expression to define the match criteria for the log file message field.
Page 214: Level
Action must be taken immediately. alert System is unusable. emergency level Supported on: MSM710 E-MSM720 MSM760 MSM765zl level Enables filtering of the log file by severity level. no level Disables filtering of the log file by severity level. matches Supported on:...
Page 215: Provisioning Connectivity Context
View > Enable > Controlled APs base group > Controlled APs network configuration > Provisioning connectivity Use this context to provision connectivity settings for a controlled AP. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. inherit Supported on:...
Page 216: Vlan
CLI commands Provisioning connectivity context vlan Supported on: MSM710 E-MSM720 MSM760 MSM765zl vlan Enables use of the provisioning VLAN. no vlan Disables use of the provisioning VLAN. vlan Supported on: MSM710 E-MSM720 MSM760 MSM765zl vlan <id> Sets the provisioning VLAN.
Page 217: Provisioning Local Mesh Security
Disables the use of local mesh security. provisioning local mesh security Supported on: MSM710 E-MSM720 MSM760 MSM765zl provisioning local mesh security (wep | tkip | ccmp) Sets the local mesh security mode. no provisioning local mesh security Disables the use of local mesh security.
Page 218: Provisioning Discovery Context
View > Enable > Controlled APs base group > Controlled APs network configuration > Provisioning discovery Use this context to provision discovery settings for a controlled AP. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. dns name Supported on: MSM710 E-MSM720 MSM760 MSM765zl dns name <name>...
Page 219: Dns Server
CLI commands Provisioning discovery context dns server Supported on: MSM710 E-MSM720 MSM760 MSM765zl dns server <ip> Adds a DNS server to the list. no dns server <ip> Deletes a DNS server from the list. discovery provisioning Supported on: MSM710 E-MSM720 MSM760 MSM765zl discovery provisioning Enables discovery provisioning.
Page 220: Wireless Interface Context
Use this context to configure wireless settings. dot11 Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot11 <mode> <frequency> Sets the wireless mode and the frequency the controller will operate at. Parameters Sets the transmission speed and frequency band. The available options are <mode>...
Page 221: Transmit Power
By reducing the receiver sensitivity, client stations will be more likely to connect with the nearest access point. transmit power Supported on: MSM710 E-MSM720 MSM760 MSM765zl transmit power (DB | max) Sets the maximum transmission power of the wireless radio. Parameters Power is specified in steps of 1dBm.
Page 222: Dot11 Automatic Transmit-Power
CLI commands Wireless interface context dot11 automatic transmit-power Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot11 automatic transmit-power Enables automatic transmit power selection. no dot11 automatic transmit-power Disables automatic transmit power selection. dot11 automatic transmit-power period Supported on: MSM710 E-MSM720 MSM760 MSM765zl...
Page 223: Beacon Interval
(Essentially, it means that if a frame needs to be retransmitted it will take longer before the actual retransmit takes place.) beacon interval Supported on: MSM710 E-MSM720 MSM760 MSM765zl beacon interval <value> Sets the beacon interval. Parameters Beacon interval value in the range 20 and 500 time units (TU) (1 TU = <...
Page 224: Spectralink View
CLI commands Wireless interface context no radio active Disables the radio. spectralink view Supported on: MSM710 E-MSM720 MSM760 MSM765zl spectralink view Enables the use of spectralink view. no spectralink view Disables the use of spectralink view. client statistics Supported on:...
Page 225: Dot11N Mac Protection
CLI commands Wireless interface context dot11n mac protection Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot11n mac protection (none | cts-to-self | rts-cts) Sets the RTS/CTS protection mode for 802.11n. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switches to parent context. inherit...
Page 226: Radius Profile Context
View > Enable > Controlled APs base group > Controlled APs network configuration > RADIUS profile Use this context to define basic settings for RADIUS profiles. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switch to parent context. inherit Supported on: MSM710 E-MSM720 MSM760 MSM765zl inherit Inherit settings from parent.
Page 227: Local Mesh Profile Context
View > Enable > Controlled APs base group > Controlled APs network configuration > Local mesh profile Use this context to define settings for local mesh profiles. security Supported on: MSM710 E-MSM720 MSM760 MSM765zl security Enables wireless security. no security Disables wireless security.
Page 228: Allowed Downtime
Can only establish an upstream link with master or alternate master node. <slave> Slave nodes cannot establish downstream links with other nodes. mesh id Supported on: MSM710 E-MSM720 MSM760 MSM765zl mesh id <id> Sets the mesh ID. allowed downtime Supported on: MSM710 E-MSM720 MSM760 MSM765zl allowed downtime <number>...
Page 229: Active
CLI commands Local mesh profile context active Supported on: MSM710 E-MSM720 MSM760 MSM765zl active Activates the local mesh profile. no active Deactivates the local mesh profile. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Switch to parent context. inherit Supported on: MSM710 E-MSM720 MSM760 MSM765zl inherit Inherit settings from parent.
Page 230: Local Mesh Provisioning Context
Use this context to define configuration settings for the local mesh provisioning profile on a controlled AP. accept connection Supported on: MSM710 E-MSM720 MSM760 MSM765zl accept connection Sets the local mesh provisioning profile to act as an alternate master. no accept connection Prevents the local mesh provisioning profile from acting as an alternate master.
Page 231: Switch Port Context
View > Enable > Controlled APs group > Controlled APs network configuration > Switch port View > Enable > Controlled APs base group > Controlled APs network configuration > Switch port Use this context to define settings for a switch port. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Back to parent context. active Supported on:...
Page 232: Authentication Server Radius
Switch port context no use authentication profile vsc Ignore the VSC (Virtual AP) for authentication. authentication server radius Supported on: MSM710 E-MSM720 MSM760 MSM765zl authentication server radius <name> Selects the RADIUS profile to use. dot1x authentication Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot1x authentication Enables support for IEEE802.1X.
Page 233: Ingress Rate
CLI commands Switch port context ingress rate Supported on: MSM710 E-MSM720 MSM760 MSM765zl ingress rate <(128k|256k|512k|1m|2m|4m|8m|16m|32m)> Set the maximum rate at which this port will accept ingress traffic. use ingress rate Limit the ingress data rate. no use ingress rate Do not limit the ingress data rate.
Page 234: Port Name
Provide power to devices conforming to 802.11af class 1 and class 2. class1-2 Provide power to devices conforming to 802.11af class 0, 1, 2 and 3. class0-3 port name Supported on: MSM710 E-MSM720 MSM760 MSM765zl port name <name> Changes the port name. port type Supported on: MSM710 E-MSM720 MSM760 MSM765zl port type (tagged | untagged) Configure the port type.
Page 235: Secondary Vlan
Enables the quarantine VLAN setting. no use quarantine vlan Disables the quarantine VLAN setting. secondary vlan Supported on: MSM710 E-MSM720 MSM760 MSM765zl secondary vlan <number> Sets the secondary VLAN ID. no secondary vlan Clears the secondary VLAN ID. use secondary vlan Enables the secondary VLAN setting.
Page 236: Mac Addresses List Context
The lists can be assigned to the MAC filter option on a switch port, permitting you to limit switch port access to a specific devices based on their MAC address. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Go to previous context. entry...
Page 237: Network Profile Context
Network profile context Network profile context Path: View > Enable > Config > Network profile Use this context to configure network profiles. Supported on: MSM710 E-MSM720 MSM760 MSM765zl Go to previous context. name Supported on: MSM710 E-MSM720 MSM760 MSM765zl name <string>...
Page 238: Lldp Agent Context
Path: View > Enable > Config > LLDP agent Use this context to configure LLDP settings for controllers and APs. admin-status Supported on: MSM710 E-MSM720 MSM760 MSM765zl admin-status (tx_rx | txonly | rxonly | disable) Enables LLDP agent functionality on this port. basic-tlv-enable...
Page 239: Basic-Tlv-Enable System_Name
CLI commands LLDP agent context basic-tlv-enable system_name Supported on: MSM710 E-MSM720 MSM760 MSM765zl basic-tlv-enable system_name Enables the system name TLV. no basic-tlv-enable system_name Disables the system name TLV. dot3-tlv-enable Supported on: MSM710 E-MSM720 MSM760 MSM765zl dot3-tlv-enable Enables the 803.3 MAC/PHY TLV.
Page 240: Medtlv-Enable Location-Id
CLI commands LLDP agent context medtlv-enable location-id Supported on: MSM710 E-MSM720 MSM760 MSM765zl medtlv-enable location-id Enables the MED Location TLV. no medtlv-enable location-id Disables the MED Location TLV. medtlv-enable network-policy Supported on: MSM710 E-MSM720 MSM760 MSM765zl medtlv-enable network-policy Enables the MED Network Policy TLV.
Page 241 CLI commands 2-191...
Page 242 CLI commands 2-192...
Page 244 To learn more, visit www.hp.com/networking/ © Copyright 2011 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services.

This manual is also suitable for:

Msm710 Msm760 E-msm720

HP MSM765zl Reference Manual

Table of Contents

Table of Contents

Table of Contents

Alphabetical List of Commands

Quick Links

Chapters

Related Manuals for HP MSM765zl

Summary of Contents for HP MSM765zl