Download  Print this page
   
1
2
3
4
Table of Contents
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765

Advertisement

ProCurve 5400zl Switches
HP ProCurve Switch Software
Installation and Getting Started Guide
Command Line Interface Reference Guide
3500yl switches
5400zl switches
6200yl switches
8200zl switches
Software version K.14.09
April 2009

Advertisement

Table of Contents

   Related Manuals for HP ProCurve 5400zl

   Summary of Contents for HP ProCurve 5400zl

  • Page 1 ProCurve 5400zl Switches HP ProCurve Switch Software Installation and Getting Started Guide Command Line Interface Reference Guide 3500yl switches 5400zl switches 6200yl switches 8200zl switches Software version K.14.09 April 2009...
  • Page 3 HP ProCurve 3500yl Switches 5400zl Switches 6200yl Switch 8200zl Switches April 2009 K.14.09 Command Line Interface Reference Guide...
  • Page 4 The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
  • Page 5: Table Of Contents

    Contents Introduction ........................... 14 Introduction ........................... 15 Conventions ........................15 Getting Documentation From the Web ................16 CLI Online Help ......................16 Related Publications ...................... 17 How to Navigate This Guide ..................18 Commands ............................ 20 aaa ............................21 Overview ........................21 Command Structure ......................
  • Page 6 Command Line Interface Reference Guide Command Line Interface Reference Guide chassislocate ......................... 77 Overview ........................77 Command Structure ...................... 77 Command Details ......................77 class ............................79 Overview ........................79 Command Structure ...................... 79 Examples ........................79 Command Details ......................79 clear ............................
  • Page 7 Command Line Interface Reference Guide Command Line Interface Reference Guide Command Structure ....................159 Command Details ......................160 dhcp-snooping ........................166 Overview ........................166 Command Structure ....................166 Command Details ......................166 dir ............................171 Overview ........................171 Command Structure ....................171 Command Details ......................
  • Page 8 Command Line Interface Reference Guide Command Line Interface Reference Guide hostname ..........................194 Overview ........................194 Command Structure ....................194 Examples ........................194 igmp ............................ 195 Overview ........................195 Command Structure ....................195 Command Details ......................195 igmp-proxy-domain ......................196 Overview ........................
  • Page 9 Command Line Interface Reference Guide Command Line Interface Reference Guide Command Details ......................349 link-test ..........................350 Overview ........................350 Command Structure ....................350 Examples ........................350 Command Details ......................351 lldp ............................352 Overview ........................352 Command Structure ....................352 Command Details ......................
  • Page 10 Command Line Interface Reference Guide Command Line Interface Reference Guide mirror ..........................377 Overview ........................377 Command Structure ....................377 Command Details ......................378 mirror-port .......................... 381 Overview ........................381 Command Structure ....................381 Examples ........................381 Command Details ......................381 module ..........................
  • Page 11 Command Line Interface Reference Guide Command Line Interface Reference Guide print ............................. 407 Overview ........................407 Command Structure ....................407 Command Details ......................407 p-wireless-services ......................408 Overview ........................408 Command Structure ....................408 Command Details ......................408 qinq ............................. 409 Overview ........................
  • Page 12 Command Line Interface Reference Guide Command Line Interface Reference Guide Examples ........................473 Command Details ......................474 r-wireless-services ....................... 493 Overview ........................493 Command Structure ....................493 Command Details ......................493 savepower ........................... 494 Overview ........................494 Command Structure ....................494 Command Details ......................
  • Page 13 Command Line Interface Reference Guide Command Line Interface Reference Guide Command Structure ....................638 Examples ........................640 Command Details ......................640 stack ............................ 655 Overview ........................655 Command Structure ....................655 Command Details ......................656 startup-default ........................657 Overview ........................657 Notes ...........................
  • Page 14 Command Line Interface Reference Guide Command Line Interface Reference Guide terminal ..........................684 Overview ........................684 Command Structure ....................684 Command Details ......................684 tftp ............................685 Overview ........................685 Command Structure ....................685 Command Details ......................685 time ............................. 686 Overview ........................
  • Page 15 Command Line Interface Reference Guide Command Line Interface Reference Guide wireless-services ......................... 757 Overview ........................757 Notes ........................... 757 Command Structure ....................757 Command Details ......................757 wireless-services ......................... 759 Overview ........................759 Notes ........................... 759 Command Structure ....................759 Command Details ......................
  • Page 16: Introduction

    Introduction © 2009 Hewlett-Packard Development Company, L.P.
  • Page 17: Introduction

    Introduction CONVENTIONS Abstract This guide uses the following conventions for command syntax and displayed information. Command Syntax Statements Syntax: aaa port-access authenticator PORT-LIST [ control < authorized | auto | unauthorized >] ■ Vertical bars ( | ) separate alternative, mutually exclusive elements. ■...
  • Page 18: Getting Documentation From The Web

    Command Line Interface Reference Guide Introduction Example Commands Example commands and their output appear in the Courier type face. For example: ProCurve(config)# clear public-key ProCurve(config)# show ip client-public-key show_client_public_key: cannot stat keyfile Port Numbering Conventions ProCurve chassis switches designate individual ports with a letter/number combination to show the slot in which the port is found and the sequential number the port has in that slot (A1, A2, B1, B2, etc.) GETTING DOCUMENTATION FROM THE WEB...
  • Page 19: Related Publications

    Command Line Interface Reference Guide Introduction This option displays help for any command available at the current context level. RELATED PUBLICATIONS The following documents (available on the ProCurve website) provide additional information on the CLI commands. Software Release Notes Release notes provide information on new software updates: ■...
  • Page 20: How To Navigate This Guide

    Command Line Interface Reference Guide Introduction ■ KMS (Key Management System) Advanced Traffic Management Guide Use the Advanced Traffic Management Guide for information on: ■ VLANs: Static port-based and protocol VLANs, and dynamic GVRP VLANs ■ Spanning-Tree: 802.1D (STP), 802.1w (RSTP), and 802.1s (MSTP) ■...
  • Page 21 Command Line Interface Reference Guide Introduction Structure provides a high-level view of all the command options and parameters for that command. Each of these is hyperlinked to take you to the details about that option or parameter. © 2009 Hewlett-Packard Development Company, L.P.
  • Page 22: Commands

    Commands © 2009 Hewlett-Packard Development Company, L.P.
  • Page 23: Aaa

    OVERVIEW Category: 802.1X, Accounting, Switch Security Primary context: config Related Commands show (page 511) show (page 511) show (page 511) show (page 511) show (page 511) radius-server (page 456) tacacs-server (page 678) Usage: aaa <...> Description: Configure the switch Authentication, Authorization, and Accounting features.
  • Page 24 Command Line Interface Reference Guide primary < local | tacacs | radius > -- Specify the primary authentication method for access ■ control. (p. 44) secondary < local | none | authorized > -- Specify the backup authentication method ■ for access control.
  • Page 25 Command Line Interface Reference Guide secondary < local | none | authorized > -- Specify the backup authentication method ■ for access control. (p. 48) web-based -- Configure authentication mechanism used to control web-based port access to ■ the switch (p.
  • Page 26 Command Line Interface Reference Guide mac-list1 -- Manage MAC address based network authentication on the device port(s). ■ ([ethernet] PORT-LIST) (p. 39) addr-limit < 1 to 32 > -- Set the port's maximum number of authenticated MAC addresses ■ (default 1). (NUMBER) (p.
  • Page 27: Command Details

    Command Line Interface Reference Guide ip-addr -- IP address of the enahced web auth server. (IP-ADDR) (p. 35) ■ page-path -- Sets the path of the login pages to be found on the ewa server. ■ (ASCII-STR) (p. 42) web-list1 -- Manage web authentication based network authentication on the device port(s).
  • Page 28 Command Line Interface Reference Guide control (p. 32) NUMBER-OF-CLIENTS (p. 42) unauth-vid (p. 53) controlled-direction (p. 32) page-path (p. 42) update (p. 54) dhcp-addr (p. 33) periodic (p. 42) VLAN-ID (p. 54) dhcp-lease (p. 33) port-access (p. 42) web (p. 54) enable (p.
  • Page 29 Command Line Interface Reference Guide active ■ [no] aaa port-access authenticator active Activate/deactivate 802.1X authenticator. addr-format ■ aaa port-access mac-based addr-format < no-delimiter | single-dash | multi-dash | ... > Set the MAC address format to be used in the RADIUS request message (default no-delimiter).
  • Page 30 Command Line Interface Reference Guide web-based -- Configure authentication mechanism used to control web-based port access to ■ switch(p. 55) mac-based -- Configure authentication mechanism used to control mac-based port access to ■ switch(p. 37) num-attempts < 1 to 10 > -- Specify the maximum number of login attempts allowed(p.
  • Page 31 Command Line Interface Reference Guide switch does not try to acquire a supplicant after a failed authentication attempt(default 60 seconds). o 'tx-period' sets the period of time the switch waits to retransmit the next EAPOL PDU during an authentication session (default 30 seconds). o 'server-timeout' sets the period of time after which the switch assumes that authentication has timed out (default 30 seconds).
  • Page 32 Command Line Interface Reference Guide no specific MAC address filter on the port. The default is no client limit. o 'initialize' re-initialize authentication on the specified ports. That is, 'initialize' blocks inbound and outbound traffic and restarts the authentication process on the specified ports that are configured with 'control auto' (see the 'control' parameter, described above) and actively operating as authenticators.
  • Page 33 Command Line Interface Reference Guide Next Available Option: VLAN-ID -- Configures VLAN where to move port after successful authentication (not configured ■ by default). (VLAN-ID) (p. 54) ■ [no] aaa port-access web-based [ETHERNET] PORT-LIST auth-vid Configures VLAN where to move port after successful authentication (not configured by default).
  • Page 34 Command Line Interface Reference Guide Next Available Option: mode < stop-only > -- Specify how to initiate and terminate an accounting session. (p. 40) ■ ■ [no] aaa authorization commands Configure exec (shell) commands authorization. Next Available Option: primary_method < radius | none > -- (p.
  • Page 35 Command Line Interface Reference Guide Configure how traffic is controlled on non-authenticated ports; in BOTH directions (ingress+egress) or IN only (ingress). Supported Values: ■ both -- Exert control in both directions. ■ in -- Exert control on incoming packets. dhcp-addr ■...
  • Page 36 Command Line Interface Reference Guide ewa-server ■ [no] aaa port-access web-based ewa-server IP address or hostname of the enhanced web authentication server on the device. Next Available Options: ip-addr -- IP address of the enahced web auth server. (IP-ADDR) (p. 35) ■...
  • Page 37 Command Line Interface Reference Guide -Disable the port from sending advertisements of existing GVRP-created VLANs on the switch. -Drop all GVRP advertisements received on the port. 3. If you disable the use of dynamic VLANs in an authentication session using the no aaa port-access gvrp-vlans command, client sessions that were authenticated with a dynamic VLAN continue and are not deauthenticated.
  • Page 38 Command Line Interface Reference Guide Next Available Option: page-path -- Sets the path of the login pages to be found on the ewa server. (ASCII-STR) ■ login ■ aaa authentication console login Configure login access to the switch. Next Available Option: primary <...
  • Page 39 Command Line Interface Reference Guide Set period of time after which a client will be considered removed from the port for a lack of activity. Range: < 1 to 999999999 > ■ aaa port-access mac-based [ETHERNET] PORT-LIST logoff-period < 1 to 9999999 > Set the period of time of inactivity that the switch considers an implicit logoff (default 300 seconds).
  • Page 40 Command Line Interface Reference Guide The first form of the command sets the MAC address format which is common to all ports The second form of the command enables, disables, or configures authentication on the device's individual ports. o 'addr-format' sets the MAC address format to be used in the RADIUS request message (default no-delimiter).
  • Page 41 Command Line Interface Reference Guide addr-format < no-delimiter | single-dash | multi-dash | ... > -- Set the MAC address format to ■ be used in the RADIUS request message (default no-delimiter).(p. 27) mac-list1 ■ [no] aaa port-access mac-based [ETHERNET] PORT-LIST Manage MAC address based network authentication on the device port(s).
  • Page 42 Command Line Interface Reference Guide Set number of times a client can enter their credentials before authentication is considered to have failed (default 3). Range: < 1 to 10 > max-start ■ aaa port-access supplicant [ETHERNET] PORT-LIST max-start < 1 to 10 > Define the maximum number of attempts taken to start authentication (default 3).
  • Page 43 Command Line Interface Reference Guide Next Available Option: method < radius > -- Specify which accounting method to use (radius) (p. 40) ■ ■ aaa accounting network < start-stop | stop-only > Specify how to initiate and terminate an accounting session. Supported Values: ■...
  • Page 44 Command Line Interface Reference Guide num-attempts ■ aaa authentication num-attempts < 1 to 10 > Usage: aaa authentication num-attempts <1-10> Description: Specify the maximum number of login attempts allowed. The default value is 3. Range: < 1 to 10 > NUMBER-OF-CLIENTS ■...
  • Page 45 Command Line Interface Reference Guide Usage: [no] aaa port-access <authenticator ... | supplicant ... web-based ... | mac-based ...> Description: Configure 802.1X (Port Based Network Access), MAC address based network access, or web authentication based network access on the device. You can configure authenticator, supplicant, MAC address based, or web authentication based network access on the device or device ports by specifying...
  • Page 46 Command Line Interface Reference Guide logoff-period < 1 to 999999999 > -- Set period of time after which a client will be considered ■ removed from the port for a lack of activity. (NUMBER) (p. 36) client-limit -- Set the maximum number of clients to allow on the port.(p.
  • Page 47 Command Line Interface Reference Guide Next Available Option: secondary < local | none | authorized > -- Specify the backup authentication method for access ■ control.(p. 48) ■ aaa authentication telnet login < local | tacacs | radius > Specify the primary authentication method for access control. Supported Values: ■...
  • Page 48 Command Line Interface Reference Guide Next Available Option: secondary < local | none | authorized > -- Specify the backup authentication method for access ■ control.(p. 48) ■ aaa authentication ssh login < local | tacacs | radius | ... > Specify the primary authentication method for access control.
  • Page 49 Command Line Interface Reference Guide Next Available Option: secondary < none | authorized > -- Specify the backup authentication method for access ■ control.(p. 48) primary_method ■ aaa authorization commands < radius | none > Supported Values: ■ radius -- Use RADIUS protocol as the authorization method. ■...
  • Page 50 Command Line Interface Reference Guide Range: < 0 to 9999999 > ■ aaa port-access mac-based [ETHERNET] PORT-LIST reauth-period < 0 to 9999999 > Set the re-authentication timeout in seconds; set to '0' to disable re-authentication (default 0). Range: < 0 to 9999999 > ■...
  • Page 51 Command Line Interface Reference Guide ■ none -- Do not use backup authentication methods. ■ authorized -- Allow access without authentication. ■ aaa authentication web enable < local | radius > < local | none | authorized > Specify the backup authentication method for access control. Supported Values: ■...
  • Page 52 Command Line Interface Reference Guide secret ■ aaa port-access supplicant [ETHERNET] PORT-LIST identity IDENTITY secret ■ aaa port-access supplicant [ETHERNET] PORT-LIST secret Trigger the command to ask user for a password for the supplicant to use. server-timeout ■ aaa port-access authenticator [ETHERNET] PORT-LIST server-timeout < 1 to 300 > Set the authentication server response timeout (default 30sec.).
  • Page 53 Command Line Interface Reference Guide start-period ■ aaa port-access supplicant [ETHERNET] PORT-LIST start-period < 1 to 300 > Set a period of time between EAPOL-Start packet retransmission (default 30sec.). Range: < 1 to 300 > supplicant ■ [no] aaa port-access supplicant [ETHERNET] PORT-LIST Usage: [no] aaa port-access supplicant [ethernet] PORT-LIST [auth-timeout <1-300>...
  • Page 54 Command Line Interface Reference Guide supplicant-timeout ■ aaa port-access authenticator [ETHERNET] PORT-LIST supplicant-timeout < 1 to 300 > Set the supplicant response timeout on an EAP request (default 30 sec.). Range: < 1 to 300 > suppress ■ [no] aaa accounting suppress Do not generate accounting records for a specific type of user.
  • Page 55 Command Line Interface Reference Guide o <backup-method> - Specifies an authentication method to use, if the primary authentication method is not able to check user's credentials. Use <TAB> or <?> after you specify the primary authentication method to get a list of all available backup methods.
  • Page 56 Command Line Interface Reference Guide Next Available Option: web-unauthvid -- Configures VLAN where to keep port while there is an unauthorized client ■ connected (not configured by default). (VLAN-ID) (p. 58) update ■ [no] aaa accounting update Usage: [no] aaa accounting update periodic <number> Description: Configure update accounting records mechanism.
  • Page 57 Command Line Interface Reference Guide to use, if the primary authentication method is not able to check user's credentials. Use <TAB> or <?> after you specify the primary authentication method to get a list of all available backup methods. Next Available Options: enable -- Configure access to the privileged mode commands.(p.
  • Page 58 Command Line Interface Reference Guide Description: Configure web authentication based network authentication on the device or the device's port(s). The first form of the command sets the dhcp address, dhcp lease, or ewa server parameters which are common to all ports The second form of the command enables, disables, or configures authentication on the device's individual ports.
  • Page 59 Command Line Interface Reference Guide the switch considers an implicit logoff (default 300) o 'reauth-period' sets the period of time after which connected clients must be re-authenticated. When the timeout is set to 0 the re-authentication is disabled (default 0). o 'auth-vid' configures the VLAN to which to move a port after successful authentication.
  • Page 60 Command Line Interface Reference Guide max-requests < 1 to 10 > -- Set maximum number of times the switch retransmits authentication ■ requests (default 3). (NUMBER) (p. 39) reauth-period < 0 to 9999999 > -- Set the re-authentication timeout in seconds; set to '0' to ■...
  • Page 61: Access-list

    access-list OVERVIEW FOR IPV4 ACLS Category: Primary context: config Related Commands Note: This information is preliminary; the final detailed command list is coming soon. Usage for commands: access-list <number> remark <remark> access-list <1-99> permit <ACL-IP-SPEC-SRC> access-list <1-99> deny <ACL-IP-SPEC-SRC> [log] access-list <100-199>...
  • Page 62: Overview For Ipv6 Acls

    Command Line Interface Reference Guide access-list o <ACL-IP-SPEC> - specify the source or destination IP addresses to match. The following formats may be used to specify IP addresses: * IP-ADDR MASK - match addresses defined by IP-ADDR using the bits set to zero in MASK.
  • Page 63 Command Line Interface Reference Guide access-list <any|host <DA>|DA/<prefix-length>> [comparison-operator <value>] [established] [ack][fin][rst][syn] <icmp> <any|host <SA>|SA/<prefix-length>> <any|host <DA>|DA/<prefix-length>> [0-255 [0-255]|icmp-message] [dscp <precedence|codepoint>] [log] Insert an ACE or a remark by assigning a sequence number: ProCurve(config)# ipv6 access-list <name-str> ProCurve(config-ipv6-acl)# <seq-#> <deny|permit|remark> Note: The deny and permit keywords use the options show above for "Create and IPv6 ACL".
  • Page 64: Command Structure

    Command Line Interface Reference Guide access-list Displaying ACL Data: ProCurve(config)# show access-list ProCurve(config)# show access-list <acl-name-str>[config] ProCurve(config)# show access-list config ProCurve(config)# show access-list ports <port-list> ProCurve(config)# show access-list vlan <vid> ProCurve(config)# show access-list radius <port-list|all> ProCurve(config)# show access-list resources COMMAND STRUCTURE ©...
  • Page 65: Alias

    alias OVERVIEW Category: Primary context: config Related Commands Usage: [no] alias <NAME> <COMMAND> [COMMAND-OPTIONS] Description: Configure/remove a NAME for the specified alias command and options. COMMAND STRUCTURE ■ [no] alias name -- Name of alias. (ASCII-STR) (p. 63) command -- Command to execute. (ASCII-STR) (p.
  • Page 66: Arp

    OVERVIEW Category: Primary context: config Related Commands Usage: no arp IP-ADDRESS Description: Remove the specified IP-ADDRESS entry from the ARP cache (note: the keyword 'no' must be specified). IP-ADDRESS - ip address of the ARP cache entry to be removed. COMMAND STRUCTURE ©...
  • Page 67: Arp-protect

    arp-protect OVERVIEW Category: Primary context: config Related Commands Usage: [no] arp-protect [trust [ethernet] PORT-LIST| validate <ip|destination-mac|src-mac>| vlan VLAN-ID-RANGE] Description: Configure Dynamic ARP Protection. To Enable/disable ARP Protection on the switch execute the [no] arp-protect command. Dynamic ARP Protection will not be enabled on any VLAN if it is not enabled on the switch.
  • Page 68: Command Details

    Command Line Interface Reference Guide arp-protect src-mac -- Drop any ARP request or response packet in which the source MAC in the ethernet ■ header does not match the sender MAC address in the body of the packet. (p. 66) ■...
  • Page 69 Command Line Interface Reference Guide arp-protect vlan ■ [no] arp-protect vlan Enable/disable Dynamic ARP Protection on a VLAN(s). Next Available Option: vlan-list -- (VLAN-ID-RANGE) (p. 67) ■ vlan-list ■ [no] arp-protect vlan VLAN-ID-RANGE © 2009 Hewlett-Packard Development Company, L.P.
  • Page 70: Autorun

    autorun OVERVIEW Category: Primary context: config Related Commands copy usb (page 133) Usage: [no] autorun ... Description: Enable/Disable/Configure Autorun. Use the 'secure-mode' keyword to enable/disable secure mode for autorun. Use the 'encryption-key' keyword to configure or remove an encryption key (a base-64 encoded string).
  • Page 71 Command Line Interface Reference Guide autorun AES 128 encryption key string for Autorun secure-mode ■ [no] autorun secure-mode Enable or disable secure mode for Autorun. © 2009 Hewlett-Packard Development Company, L.P.
  • Page 72: Auto-tftp

    auto-tftp OVERVIEW Category: File Transfer Primary context: config Related Commands the section called client” (page 685) Usage: [no] auto-tftp [<IPV4-ADDR | IPV6-ADDR> <FILENAME-STR>] Description: Enable/disable automatic software image download via TFTP during boot. The software image will be downloaded if it has a different version from the software running on the switch.
  • Page 73 Command Line Interface Reference Guide auto-tftp IPv4 address of the TFTP server to download a software image from. Next Available Option: filename -- The software image file-name. (ASCII-STR) (p. 70) ■ server-ipv6 ■ auto-tftp IPV6-ADDR IPv6 address of the TFTP server to download a software image from. Next Available Option: filename -- The software image file-name.
  • Page 74: Banner

    banner OVERVIEW Category: Switch Management Primary context: config Related Commands show (page 511) Usage: [no] banner motd ASCII-STR Description: Define a login banner. The banner will be displayed before login on the console, telnet, ssh, and Web-UI sessions. The banner can be a multi-line text up to 320 characters. The banner text can contain any printable character except the delimiting character and the ~ character.
  • Page 75: Boot

    boot OVERVIEW Category: Switch Management Primary context: manager Related Commands reload (page 467) Usage: boot [system [flash <primary|secondary>] [config FILENAME]] boot set-default flash <primary|secondary> boot active boot standby Description: Reboot the device. The primary or secondary software image can be specified to be used during the boot process. Optionally, a configuration file can be set for this boot.
  • Page 76 Command Line Interface Reference Guide boot module. If a second management module is not present in the switch, the system is rebooted. config ■ boot system flash < primary | secondary > config < config | config1 > Specify configuration file to use on boot. Supported Values: ■...
  • Page 77 Command Line Interface Reference Guide boot system ■ boot system Allows user to specify boot image to use after reboot. Next Available Option: flash < primary | secondary > -- Specify boot image to use after reboot.(p. 74) ■ © 2009 Hewlett-Packard Development Company, L.P.
  • Page 78: Cdp

    OVERVIEW Category: Routing Primary context: config Related Commands the section called cdp” (page 537) Usage: [no] cdp ... Description: Set various CDP (Cisco Discovery Protocol) parameters. Use 'cdp ?' to get a list of all possible options. COMMAND STRUCTURE ■ [no] cdp enable -- Enable/disable CDP on particular device ports ([ethernet] PORT-LIST) (p.
  • Page 79: Chassislocate

    chassislocate OVERVIEW Category: Primary context: operator Related Commands Usage: chassislocate <on|blink> [<1-1440>] chassislocate off Description: Control the chassis locate led. Parameters: o on - Turn the led on. o off - Turn the led off. o blink - Make the led blink. o [<1-1440>] - Number of minutes the led is to blink or be turned on (default is 30).
  • Page 80 Command Line Interface Reference Guide chassislocate ■ chassislocate off Turn the chassis locate led off. ■ chassislocate on Turn the chassis locate led on (default 30 minutes). Next Available Option: duration < 1 to 1440 > -- Number of minutes duration (default 30). (NUMBER) (p.
  • Page 81: Class

    class OVERVIEW Category: Primary context: config Related Commands policy (page 398) Usage: [no] class <address-family> <name> Description: Create a classifier class and enter the class context. Parameters are address family(ipv4 or ipv6) and class name. COMMAND STRUCTURE ■ [no] class ipv4 -- Enter ipv4 class name (ASCII-STR) (p.
  • Page 82 Command Line Interface Reference Guide class incr-num ■ class resequence ipv4 IPV4 < 1 to 2147483647 > < 1 to 2147483646 > Specify the increment. Range: < 1 to 2147483646 > ■ class resequence ipv6 IPV6 < 1 to 2147483647 > < 1 to 2147483646 > Specify the increment.
  • Page 83 Command Line Interface Reference Guide class Next Available Option: incr-num < 1 to 2147483646 > -- Specify the increment. (p. 80) ■ ■ class resequence ipv6 IPV6 < 1 to 2147483647 > Specify the starting sequence number. Range: < 1 to 2147483647 > Next Available Option: incr-num <...
  • Page 84: Clear

    clear OVERVIEW Category: Primary context: manager Related Commands Usage: clear <arp|intrusion-log|logging|public-key|statistics [ethernet] PORT-LIST |link-keepalive statistics> Description: Clear table/statistics or authorized client public keys. Parameters: o arp - Flushes all non-permanent entries in the ARP cache. o intrusion-log - Resets the Alert Flags and prepares the switch to detect and log the next security intrusion.
  • Page 85: Command Details

    Command Line Interface Reference Guide clear COMMAND DETAILS arp (p. 83) ip (p. 83) logging (p. 84) client-public-key (p. 83) ipv6 (p. 84) neighbors (p. 84) crypto (p. 83) keyfile (p. 84) ospf-statistics (p. 84) if-ip (p. 83) keylist (p. 84) statistics (p.
  • Page 86 Command Line Interface Reference Guide clear ipv6 ■ clear ipv6 Clear all IPv6 information. Next Available Option: neighbors -- Delete all the neighbour discovery cache entries, except static entries.(p. 84) ■ keyfile ■ clear crypto client-public-key < manager | operator > Remove client public keys from active configuration.
  • Page 87 Command Line Interface Reference Guide clear [<ip-address>] specified clears statistics for a given interface if the interface is OSPF enabled. Next Available Option: if-ip -- specify ip-address whose statistics is to be cleared. (IP-ADDR) (p. 83) ■ statistics ■ clear statistics [ETHERNET] PORT-LIST Reset all counters for the specified ports.
  • Page 88: Clock

    clock OVERVIEW Category: Switch Management Primary context: config Related Commands ip (page 290) sntp (page 634) time (page 686) Usage: [no] clock [...] Description: Display/set current time, date, and local time parameters. Called without any parameters displays the information mentioned above. Use 'clock ?' to see a list of all possible configuration options.
  • Page 89 Command Line Interface Reference Guide clock ■ +9:30 ■ +9:00 ■ +8:00 ■ +7:00 ■ +6:30 ■ +6:00 ■ +5:30 ■ +5:00 ■ +4:30 ■ +4:00 ■ +3:30 ■ +3:00 ■ +2:00 ■ +1:00 ■ +0:00 ■ -1:00 ■ -2:00 ■...
  • Page 90 Command Line Interface Reference Guide clock time ■ clock set [TIME] Current time to set. timezone ■ clock timezone Usage: clock timezone [gmt <-12:00 - +14:00>] | <none|alaska|aleutian|arizona|central| east-indiana|eastern|hawaii|michigan|mountain| pacific|samoa>] Description: Set the number of hours your location is to the West(-) or East(+) of GMT.
  • Page 91: Configure

    configure OVERVIEW Category: Switch Management Primary context: manager Related Commands end (page 173) exit (page 176) enable (page 172) Usage: configure [terminal] Description: Enter the Configuration context. COMMAND STRUCTURE ■ configure terminal -- Optional keyword of the configure command. Can be omitted. (p.
  • Page 92: Connection-rate-filter

    connection-rate-filter OVERVIEW Category: Troubleshooting Primary context: config Related Commands filter (page 185) ip (page 290) vlan (page 706) show (page 511) Usage: connection-rate-filter unblock < host SRC-IP-ADDR | SRC-IP-ADDRESS/MASK > [no] connection-rate-filter sensitivity <low|medium|high|aggressive> Description: Re-enables access to a host or set of hosts that has been previously blocked by the connection rate filter.
  • Page 93 Command Line Interface Reference Guide connection-rate-filter sensitivity ■ connection-rate-filter sensitivity Sets the level of filtering required Next Available Option: sensitive < low | medium | high | ... > -- (p. 90) ■ src-ip ■ connection-rate-filter unblock IP-ADDR/MASK-LENGTH Match packets from the specified subnet. unblock ■...
  • Page 94: Console

    console OVERVIEW Category: Switch Management Primary context: config Related Commands show (page 511) repeat (page 470) Usage: console ... Description: Set various console parameters. Use 'console ?' to get a list of all configurable parameters. The non-configurable parameters and their default values are: Data bits = 8;...
  • Page 95: Command Details

    Command Line Interface Reference Guide console ProCurve(config)# write memory ProCurve(config)# reload COMMAND DETAILS baud-rate (p. 93) inactivity-timer (p. 94) terminal (p. 95) events (p. 93) local-terminal (p. 94) flow-control (p. 93) screen-refresh (p. 94) baud-rate ■ console baud-rate < speed-sense | 1200 | 2400 | ... > Usage: console baud-rate <speed-sense|1200|2400|4800| 9600|19200|38400|57600|115200>...
  • Page 96 Command Line Interface Reference Guide console ■ XON/XOFF ■ None inactivity-timer ■ console inactivity-timer < 0 | 1 | 5 | ... > Usage: console inactivity-timer <0|1|5|10|15|20|30|60|120> Description: Set the number of minutes of no activity detected on the Console port before the switch terminates a communication session.
  • Page 97 Command Line Interface Reference Guide console ■ 3 ■ 5 ■ 10 ■ 20 ■ 30 ■ 45 ■ 60 terminal ■ console terminal < VT100 | NONE | ANSI > Usage: console terminal <vt100|ansi|none> Description: Set type of terminal being used for all console and telnet sessions (default is vt100).
  • Page 98: Copy

    copy OVERVIEW Category: Primary context: manager Related Commands Usage: copy <source> <destination> [options] Description: Copy datafiles to/from the switch. <source> - specify source of data. It can be 'tftp', 'xmodem', 'command', 'flash', 'usb' or any of the following switch data files: o config o running-config o startup-config...
  • Page 99 Command Line Interface Reference Guide copy tftp-ip -- Specify TFTP server IPv4 address. (IP-ADDR) (p. 126) ■ filename -- Specify filename for the TFTP transfer. (ASCII-STR) (p. 109) ■ -- Change CR/LF to PC style. (p. 120) ■ unix -- Change CR/LF to unix style. (p.
  • Page 100 Command Line Interface Reference Guide copy xmodem -- Use xmodem on the terminal as the data destination. (p. 135) ■ ■ copy crash-log -- Copy the switch log file. (p. 107) card -- Enter single slot identifier. (SLOT-ID-RANGE) (p. 105) ■...
  • Page 101 Command Line Interface Reference Guide copy filename -- Specify filename for the TFTP transfer. (ASCII-STR) (p. 109) ■ cv_out_flash < primary | secondary > -- Copy from primary/secondary flash. (p. 108) ■ xmodem -- Use xmodem on the terminal as the data destination. (p.
  • Page 102 Command Line Interface Reference Guide copy append -- Add the key(s) for access. (p. 102) ■ autorun-key-file -- Copy autorun key file to the switch. (p. 105) ■ tftp-ip -- Specify TFTP server IPv4 address. (IP-ADDR) (p. 126) ■ filename -- Specify filename for the TFTP transfer.
  • Page 103 Command Line Interface Reference Guide copy operator -- Replace the key(s) for operator access (default); follow with the 'append' ■ option to add the key(s). (p. 119) append -- Add the key(s) for access. (p. 102) ■ tftp-ipv6 -- Specify TFTP server IPv6 address. (IPV6-ADDR) (p.
  • Page 104: Command Details

    Command Line Interface Reference Guide copy flash -- Copy data to the switch system image file. (p. 116) ■ image-name -- Specify filename for the USB transfer. (ASCII-STR) (p. 117) ■ cv_flash < primary | secondary > -- Copy to primary/secondary flash. (p.
  • Page 105 Command Line Interface Reference Guide copy ■ copy tftp pub-key-file IPV6-ADDR FILENAME append Add the key(s) for operator access. ■ copy tftp pub-key-file IPV6-ADDR FILENAME operator append Add the key(s) for access. ■ copy tftp pub-key-file IPV6-ADDR FILENAME manager append Add the key(s) for access.
  • Page 106 Command Line Interface Reference Guide copy ■ copy tftp autorun-key-file IPV6-ADDR FILENAME append Add the key(s) for operator access. ■ copy tftp autorun-key-file IPV6-ADDR FILENAME operator append Add the key(s) for access. ■ copy tftp autorun-key-file IPV6-ADDR FILENAME manager append Add the key(s) for access.
  • Page 107 Command Line Interface Reference Guide copy autorun-cert-file ■ copy tftp autorun-cert-file Copy autorun trusted certificate to the switch. Next Available Options: tftp-ip -- Specify TFTP server IPv4 address. (IP-ADDR) (p. 126) ■ tftp-ipv6 -- Specify TFTP server IPv6 address. (IPV6-ADDR) (p.
  • Page 108 Command Line Interface Reference Guide copy xmodem -- Use xmodem on the terminal as the data destination.(p. 135) ■ -- Copy data to a USB flash drive.(p. 133) ■ command-file ■ copy tftp command-file Copy command script to switch and execute. Next Available Options: tftp-ip -- Specify TFTP server IPv4 address.
  • Page 109 Command Line Interface Reference Guide copy Copy data to specified configuration file. Next Available Options: unix -- Change CR/LF to unix style.(p. 131) ■ -- Change CR/LF to PC style.(p. 120) ■ ■ copy config < config1 | config2 | config3 > Copy named configuration file.
  • Page 110 Command Line Interface Reference Guide copy Copy to primary/secondary flash. Supported Values: ■ primary -- Copy to primary flash. ■ secondary -- Copy to secondary flash. ■ copy tftp flash IPV6-ADDR FILENAME < primary | secondary > Copy to primary/secondary flash. Supported Values: ■...
  • Page 111 Command Line Interface Reference Guide copy Supported Values: ■ primary -- Copy image primary flash. ■ secondary -- Copy image secondary flash. ■ copy flash usb FILENAME < primary | secondary > Copy from primary/secondary flash. Supported Values: ■ primary -- Copy image primary flash. ■...
  • Page 112 Command Line Interface Reference Guide copy Next Available Option: cv_flash < primary | secondary > -- Copy to primary/secondary flash.(p. 107) ■ ■ copy tftp pub-key-file IP-ADDR FILENAME Specify filename for the TFTP transfer. Next Available Options: append -- Add the key(s) for operator access.(p.
  • Page 113 Command Line Interface Reference Guide copy Specify filename for the TFTP transfer. Next Available Options: unix -- Change CR/LF to unix style.(p. 131) ■ -- Change CR/LF to PC style.(p. 120) ■ ■ copy tftp autorun-cert-file IP-ADDR FILENAME Specify filename for the TFTP transfer. Next Available Options: append -- Add the key(s) for operator...
  • Page 114 Command Line Interface Reference Guide copy Specify filename for the TFTP transfer. Next Available Options: unix -- Change CR/LF to unix style.(p. 131) ■ -- Change CR/LF to PC style.(p. 120) ■ ■ copy tftp show-tech IPV6-ADDR FILENAME Specify filename for the TFTP transfer. Next Available Options: unix -- Change CR/LF to unix...
  • Page 115 Command Line Interface Reference Guide copy Next Available Options: append -- Add the key(s) for operator access.(p. 102) ■ operator -- Replace the key(s) for operator access (default); follow with the 'append' option to ■ add the key(s).(p. 119) manager -- Replace the key(s) for manager access;...
  • Page 116 Command Line Interface Reference Guide copy ■ copy crash-data SLOT-ID-RANGE usb FILENAME Specify filename for the USB transfer. ■ copy crash-data mm tftp IP-ADDR FILENAME Specify filename for the TFTP transfer. ■ copy crash-data mm tftp IPV6-ADDR FILENAME Specify filename for the TFTP transfer. ■...
  • Page 117 Command Line Interface Reference Guide copy Specify filename for the TFTP transfer. ■ copy crash-log tftp IPV6-ADDR FILENAME Specify filename for the TFTP transfer. ■ copy crash-log usb FILENAME Specify filename for the USB transfer. ■ copy flash tftp IP-ADDR FILENAME Specify filename for the TFTP transfer.
  • Page 118 Command Line Interface Reference Guide copy Specify filename for the TFTP transfer. Next Available Options: unix -- Change CR/LF to unix style.(p. 131) ■ -- Change CR/LF to PC style.(p. 120) ■ ■ copy startup-config tftp IPV6-ADDR FILENAME Specify filename for the TFTP transfer. Next Available Options: unix -- Change CR/LF to unix...
  • Page 119 Command Line Interface Reference Guide copy Next Available Option: cv_flash < primary | secondary > -- Copy to primary/secondary flash.(p. 107) ■ ■ copy usb flash Copy data to the switch system image file. Next Available Option: image-name -- Specify filename for the USB transfer. (ASCII-STR) (p.
  • Page 120 Command Line Interface Reference Guide copy ■ copy tftp autorun-cert-file IP-ADDR FILENAME manager Replace the key(s) for manager access; follow with the 'append' option to add the key(s). Next Available Option: append -- Add the key(s) for access.(p. 102) ■ ■...
  • Page 121 Command Line Interface Reference Guide copy Next Available Option: append -- Add the key(s) for access.(p. 102) ■ ■ copy crash-data mm Copy from the management card. Next Available Options: tftp -- Copy data to a TFTP server.(p. 124) ■ xmodem -- Use xmodem on the terminal as the data destination.(p.
  • Page 122 Command Line Interface Reference Guide copy Replace the key(s) for operator access (default); follow with the 'append' option to add the key(s). Next Available Option: append -- Add the key(s) for access.(p. 102) ■ ■ copy tftp autorun-key-file IP-ADDR FILENAME operator Replace the key(s) for operator access (default);...
  • Page 123 Command Line Interface Reference Guide copy ■ copy tftp command-file IPV6-ADDR FILENAME pc Change CR/LF to PC style. ■ copy tftp startup-config IP-ADDR FILENAME pc Change CR/LF to PC style. ■ copy tftp startup-config IPV6-ADDR FILENAME pc Change CR/LF to PC style. ■...
  • Page 124 Command Line Interface Reference Guide copy ■ copy config < config1 | config2 | config3 > xmodem pc Change CR/LF to PC style. ■ copy running-config tftp IP-ADDR FILENAME pc Change CR/LF to PC style. ■ copy running-config tftp IPV6-ADDR FILENAME pc Change CR/LF to PC style.
  • Page 125 Command Line Interface Reference Guide copy running-config ■ copy running-config Copy running configuration file. Next Available Options: tftp -- Copy data to a TFTP server.(p. 124) ■ xmodem -- Use xmodem on the terminal as the data destination.(p. 135) ■ -- Copy data to a USB flash drive.(p.
  • Page 126 Command Line Interface Reference Guide copy -- Copy data to a USB flash drive.(p. 133) ■ tftp ■ copy tftp Copy data from a TFTP server. Next Available Options: command-file -- Copy command script to switch and execute.(p. 106) ■ flash -- Copy data to the switch system image file.(p.
  • Page 127 Command Line Interface Reference Guide copy Copy data to a TFTP server. Next Available Options: tftp-ip -- Specify TFTP server IPv4 address. (IP-ADDR) (p. 126) ■ tftp-ipv6 -- Specify TFTP server IPv6 address. (IPV6-ADDR) (p. 129) ■ ■ copy crash-log SLOT-ID-RANGE tftp Copy data to a TFTP server.
  • Page 128 Command Line Interface Reference Guide copy tftp-ipv6 -- Specify TFTP server IPv6 address. (IPV6-ADDR) (p. 129) ■ ■ copy event-log tftp Copy data to a TFTP server. Next Available Options: tftp-ip -- Specify TFTP server IPv4 address. (IP-ADDR) (p. 126) ■...
  • Page 129 Command Line Interface Reference Guide copy Next Available Option: filename -- Specify filename for the TFTP transfer. (ASCII-STR) (p. 109) ■ ■ copy tftp autorun-key-file IP-ADDR Specify TFTP server IPv4 address. Next Available Option: filename -- Specify filename for the TFTP transfer. (ASCII-STR) (p.
  • Page 130 Command Line Interface Reference Guide copy ■ copy crash-log SLOT-ID-RANGE tftp IP-ADDR Specify TFTP server IPv4 address. Next Available Option: filename -- Specify filename for the TFTP transfer. (ASCII-STR) (p. 109) ■ ■ copy crash-log mm tftp IP-ADDR Specify TFTP server IPv4 address. Next Available Option: filename -- Specify filename for the TFTP transfer.
  • Page 131 Command Line Interface Reference Guide copy tftp-ipv6 ■ copy tftp command-file IPV6-ADDR Specify TFTP server IPv6 address. Next Available Option: filename -- Specify filename for the TFTP transfer. (ASCII-STR) (p. 109) ■ ■ copy tftp flash IPV6-ADDR Specify TFTP server IPv6 address. Next Available Option: filename -- Specify filename for the TFTP transfer.
  • Page 132 Command Line Interface Reference Guide copy Specify TFTP server IPv6 address. Next Available Option: filename -- Specify filename for the TFTP transfer. (ASCII-STR) (p. 109) ■ ■ copy command-output COMMAND-OUTPUT tftp IPV6-ADDR Specify TFTP server IPv6 address. Next Available Option: filename -- Specify filename for the TFTP transfer.
  • Page 133 Command Line Interface Reference Guide copy Next Available Option: filename -- Specify filename for the TFTP transfer. (ASCII-STR) (p. 109) ■ ■ copy crash-log tftp IPV6-ADDR Specify TFTP server IPv6 address. Next Available Option: filename -- Specify filename for the TFTP transfer. (ASCII-STR) (p.
  • Page 134 Command Line Interface Reference Guide copy Change CR/LF to unix style. ■ copy tftp config CONFIG IP-ADDR FILENAME unix Change CR/LF to unix style. ■ copy tftp config CONFIG IPV6-ADDR FILENAME unix Change CR/LF to unix style. ■ copy tftp show-tech IP-ADDR FILENAME unix Change CR/LF to unix style.
  • Page 135 Command Line Interface Reference Guide copy Change CR/LF to unix style. ■ copy running-config xmodem unix Change CR/LF to unix style. ■ copy startup-config tftp IP-ADDR FILENAME unix Change CR/LF to unix style. ■ copy startup-config tftp IPV6-ADDR FILENAME unix Change CR/LF to unix style.
  • Page 136 Command Line Interface Reference Guide copy ■ copy crash-data mm usb Copy data to a USB flash drive. Next Available Option: filename -- Specify filename for the USB transfer. (ASCII-STR) (p. 109) ■ ■ copy crash-data usb Copy data to a USB flash drive. Next Available Option: filename -- Specify filename for the USB transfer.
  • Page 137 Command Line Interface Reference Guide copy Copy data to a USB flash drive. Next Available Option: filename -- Specify filename for the USB transfer. (ASCII-STR) (p. 109) ■ ■ copy event-log usb Copy data to a USB flash drive. Next Available Option: filename -- Specify filename for the USB transfer.
  • Page 138 Command Line Interface Reference Guide copy ■ copy crash-log SLOT-ID-RANGE xmodem Use xmodem on the terminal as the data destination. ■ copy crash-log mm xmodem Use xmodem on the terminal as the data destination. ■ copy crash-log xmodem Use xmodem on the terminal as the data destination. ■...
  • Page 139: Core-dump

    core-dump OVERVIEW Category: Primary context: config Related Commands Usage: [no] core-dump [management-module | interface-module] Description: Enable/disable core-dump on management-module or interface-module. COMMAND STRUCTURE ■ [no] core-dump interface-module -- Enable/disable core-dump on interface-module (p. 137) ■ [no] core-dump management-module -- Enable/disable core-dump on management-module 137) EXAMPLES Example: core-dump...
  • Page 140: Crypto

    crypto OVERVIEW Category: Primary context: config Related Commands the section called crypto” (page 544) autorun (page 68) Usage: crypto host-cert generate self-signed [START END CNAME OU ORG CITY STATE COUNTRY] crypto host-cert zeroize crypto key generate <ssh [rsa] | cert [rsa] KEYSIZE | autorun-key [rsa]> crypto key zeroize <ssh | cert | autorun>...
  • Page 141: Command Details

    Command Line Interface Reference Guide crypto cname -- Common name [e.g., IP address of device]. (ASCII-STR) (p. 140) ■ org-unit -- Organizational unit [Department]. (ASCII-STR) (p. 147) ■ organization -- Organization name. (ASCII-STR) (p. 147) ■ ■ additional options available... zeroize -- Delete an existing certificate.
  • Page 142 Command Line Interface Reference Guide crypto bits ■ crypto key generate ssh rsa bits Specify bitsize for key. Next Available Option: bits < 1024 | 2048 | 3072 > -- (p. 140) ■ ■ crypto key generate ssh rsa bits < 1024 | 2048 | 3072 > Supported Values: ■...
  • Page 143 Command Line Interface Reference Guide crypto Common name [e.g., IP address of device]. Next Available Option: org-unit -- Organizational unit [Department]. (ASCII-STR) (p. 147) ■ country ■ crypto host-cert generate self-signed [DATE: START-DATE] [DATE: END-DATE] CNAME ORG-UNIT ORGANIZATION CITY STATE < AD | AE | AF | ... > Country code (2 character ISO code).
  • Page 144 Command Line Interface Reference Guide crypto ■ CG -- Congo ■ CH -- Switzerland ■ CI -- Cote D'Ivoire (Ivory Coast) ■ CK -- Cook Islands ■ CL -- Chile ■ CM -- Cameroon ■ CN -- China ■ CO -- Colombia ■...
  • Page 145 Command Line Interface Reference Guide crypto ■ GW -- Guinea-Bissau ■ GY -- Guyanav ■ HK -- Hong Kong ■ HM -- Heard and McDonald Islands ■ HN -- Honduras ■ HR -- Croatia (Hrvatska) ■ HT -- Haiti ■ HU -- Hungary ■...
  • Page 146 Command Line Interface Reference Guide crypto ■ MM -- Myanmar ■ MN -- Mongolia ■ MO -- Macau ■ MP -- Northern Mariana Islands ■ MQ -- Martinique ■ MR -- Mauritania ■ MS -- Montserrat ■ MT -- Malta ■...
  • Page 147 Command Line Interface Reference Guide crypto ■ SE -- Sweden ■ SG -- Singapore ■ SH -- St. Helena ■ SI -- Slovenia ■ SJ -- Svalbard and Jan Mayen Islands ■ SK -- Slovak Republic ■ SL -- Sierra Leone ■...
  • Page 148 Command Line Interface Reference Guide crypto ■ ZM -- Zambia ■ ZR -- Zaire ■ ZW -- Zimbabwe ■ crypto key generate ssh dsa Install DSA host key. Next Available Option: bits -- Specify bitsize for key.(p. 140) ■ end-date ■...
  • Page 149 Command Line Interface Reference Guide crypto Install/remove RSA key file for ssh or https server. Next Available Options: generate -- Generate a new key.(p. 146) ■ zeroize -- Delete existing key.(p. 149) ■ key-size ■ crypto key generate cert rsa < 512 | 768 | 1024 > Supported Values: ■...
  • Page 150 Command Line Interface Reference Guide crypto Next Available Option: bits -- Specify bitsize for key.(p. 140) ■ ■ crypto key generate autorun-key rsa Install RSA host key. ■ crypto key zeroize autorun rsa Install RSA host key. self-signed ■ crypto host-cert generate self-signed Create a self-signed certificate for the https server.
  • Page 151 Command Line Interface Reference Guide crypto zeroize ■ crypto host-cert zeroize Delete an existing certificate. ■ crypto key zeroize Delete existing key. Next Available Options: cert -- Remove RSA key file for https certificate.(p. 140) ■ -- Remove host key file for ssh server.(p.
  • Page 152: Debug

    debug OVERVIEW Category: Primary context: manager Related Commands log (page 361) show logging (page 567) show debug (page 545) Usage: [no] debug destination <logging|session|buffer> [no] debug <all|DEBUG_TYPE> Description: Enable/disable debug logging. Parameters: o destination - Enable or disable a debug destination. (Multiple destinations can be configured) o logging - Send the debug messages to a remote device via the syslog facility.
  • Page 153: Command Details

    Command Line Interface Reference Guide debug -- Display DD packets sent/received. (p. 152) ■ Hello -- Display Hello packets sent/received. (p. 153) ■ -- Display LSA packets sent/received. (p. 154) ■ -- Display LSR packets sent/received. (p. 155) ■ -- Display LSU packets sent/received. (p.
  • Page 154 Command Line Interface Reference Guide debug agent ■ [no] debug dhcp-snooping agent Display DHCP Snooping agent messages. ■ [no] debug all Display all debug messages. arp-protect ■ [no] debug arp-protect Display Dynamic ARP Protection messages. database ■ [no] debug ip rip database Display database changes.
  • Page 155 Command Line Interface Reference Guide debug Next Available Options: events -- Display DHCPv6 client events.(p. 153) ■ packet -- Display DHCPv6 client packets.(p. 155) ■ dynamic-ip-lockdown ■ [no] debug dynamic-ip-lockdown Display Dynamic IP Lockdown messages. event ■ [no] debug dhcp-snooping event Display DHCP Snooping event messages.
  • Page 156 Command Line Interface Reference Guide debug Display Hello packets sent/received. ■ [no] debug ip Display debug messages for IPv4. Next Available Options: forwarding -- Display IPv4 forwarding messages.(p. 153) ■ packet -- Display IPv4 packet messages.(p. 155) ■ -- Display IP Forwarding Information Base debug messages.(p.
  • Page 157 Command Line Interface Reference Guide debug Display new LSAs added to database. ■ [no] debug ip ospf packet LSR Display LSR packets sent/received. ■ [no] debug ip ospf packet LSU Display LSU packets sent/received. ■ [no] debug ipv6 nd Display debug messages for IPv6 neighbor discovery. ospf ■...
  • Page 158 Command Line Interface Reference Guide debug ■ [no] debug ipv6 dhcpv6-client packet Display DHCPv6 client packets. ■ [no] debug ipv6 packet Display IPv6 packet messages. retransmission ■ [no] debug ip ospf retransmission Display retransmission timer messages. ■ [no] debug ip rip Display all RIP routing messages.
  • Page 159 Command Line Interface Reference Guide debug wireless-services ■ [no] debug wireless-services SLOT-ID-RANGE Display debug messages on wireless-services module. © 2009 Hewlett-Packard Development Company, L.P.
  • Page 160: Dhcp

    dhcp OVERVIEW Category: Primary context: config Related Commands Usage: [no] dhcp config-file-update Description: Argument(s) to Control DHCP Client COMMAND STRUCTURE ■ [no] dhcp config-file-update -- Argument to dhcp-client to specify whether to process option 66 & 67 (p. 158) COMMAND DETAILS config-file-update (p.
  • Page 161: Dhcp-relay

    dhcp-relay OVERVIEW Category: Primary context: config Related Commands Usage: [no] dhcp-relay [no] dhcp-relay [hop-count-increment] dhcp-relay [option 82 append[validate]|replace[validate] |drop[validate]|keep [mac|ip]] [no] dhcp-relay [option 82 [validate]] Description: Enable/disable DHCP relay agent on the device. hop-count-increment --- optional argument to 'dhcp-relay' command used to enable/disable increment of hop-count.
  • Page 162: Command Details

    Command Line Interface Reference Guide dhcp-relay -- Sets the remote id to be the IP address of the VLAN on which the client request was ■ received. (p. 162) -- Sets the remote id to be the MAC address of the switch. This is the default value. ■...
  • Page 163 Command Line Interface Reference Guide dhcp-relay ■ [no] dhcp-relay option 82 Optional argument to dhcp-agent used to specify the operational status for option 82. Next Available Options: append -- Specifies that the option 82 field should be appended to client DHCP packet.(p.
  • Page 164 Command Line Interface Reference Guide dhcp-relay mgmt-vlan -- Sets the remote id to be the IP address of the Management VLAN.(p. 163) ■ ■ dhcp-relay option 82 validate drop Specifies that the DHCP packet will be dropped unconditionally, if option 82 field(s) already exists in the client DHCP packet. Next Available Options: -- Sets the remote id to be the MAC address of the switch.
  • Page 165 Command Line Interface Reference Guide dhcp-relay keep ■ dhcp-relay option 82 keep Specifies that no option 82 field will be added or replaced, if option 82 field(s) already exists in the client DHCP packet. Next Available Options: -- Sets the remote id to be the MAC address of the switch. This is the default value.(p.
  • Page 166 Command Line Interface Reference Guide dhcp-relay ■ dhcp-relay option 82 keep mgmt-vlan Sets the remote id to be the IP address of the Management VLAN. ■ dhcp-relay option 82 drop mgmt-vlan Sets the remote id to be the IP address of the Management VLAN. ■...
  • Page 167 Command Line Interface Reference Guide dhcp-relay validate ■ dhcp-relay option 82 append validate Specifies the validation for server response. ■ dhcp-relay option 82 replace validate Specifies the validation for server response. ■ dhcp-relay option 82 drop validate Specifies the validation for server response. ■...
  • Page 168: Dhcp-snooping

    dhcp-snooping OVERVIEW Category: Primary context: config Related Commands Usage: [no] dhcp-snooping Description: Enable/Disable the global administrative status of DHCP snooping. No snooping will be performed on any VLAN if the global administrative status is disabled. The default state is disabled. COMMAND STRUCTURE ■...
  • Page 169 Command Line Interface Reference Guide dhcp-snooping remote-id < mac | subnet-ip | mgmt-ip > -- Set relay information option remote-id value to use. ■ (NUMBER) (p. 169) authorized-server ■ [no] dhcp-snooping authorized-server Usage: [no] dhcp-snooping authorized-server <IP-ADDR> Description: Configure valid DHCP Servers. For DHCP Snooping to allow a server to client packet to be forwarded, it must be received on a trusted port from a valid server.
  • Page 170 Command Line Interface Reference Guide dhcp-snooping delay ■ dhcp-snooping database delay < 15 to 86400 > Seconds to delay writing to the lease database file. Range: < 15 to 86400 > file ■ dhcp-snooping database file FILE URL Format: "tftp://<ip-address>/<filename>". ■...
  • Page 171 Command Line Interface Reference Guide dhcp-snooping Next Available Option: (p. 166) ■ port-list ■ [no] dhcp-snooping trust [ETHERNET] PORT-LIST remote-id ■ dhcp-snooping option 82 remote-id < mac | subnet-ip | mgmt-ip > Set relay information option remote-id value to use. Supported Values: ■...
  • Page 172 Command Line Interface Reference Guide dhcp-snooping Usage: [no] dhcp-snooping verify <mac> Description: Enable/Disable DHCP packet validation. Parameters: o <mac> - Verify DHCP header client hardware address field and the source mac address match for packets received on untrusted ports. If 'no' is specified this check is omitted.
  • Page 173: Dir

    OVERVIEW Category: Primary context: operator Related Commands Usage: dir [<pathname>] Description: Display a list of the files and subdirectories in a directory on a USB device. COMMAND STRUCTURE ■ dir pathname -- Display a list of the files and subdirectories in a directory on a USB device (ASCII-STR) (p.
  • Page 174: Enable

    enable OVERVIEW Category: Switch Management Primary context: operator Related Commands exit (page 176) end (page 173) Usage: enable Description: Enter the Manager Exec context. COMMAND STRUCTURE EXAMPLES Example: enable Enter the Manager user name and password to access the Manager Exec context of the CLI: ProCurve>...
  • Page 175: End

    OVERVIEW Category: Switch Management Primary context: manager Related Commands exit (page 176) enable (page 172) Usage: end Description: Return to the Manager Exec context. COMMAND STRUCTURE © 2009 Hewlett-Packard Development Company, L.P.
  • Page 176: Erase

    erase OVERVIEW Category: Switch Management Primary context: manager Related Commands the section called config” (page 540) the section called port-access” (page 577) Usage: erase <startup-config | flash <primary|secondary> | config FILENAME | core-dump FILENAME> Description: Erase stored files. Parameters: o startup-config - erase the configuration file loaded at the most recent boot.
  • Page 177 Command Line Interface Reference Guide erase core-dump (p. 175) startup-config (p. 175) config ■ erase config < config | config1 > Usage: erase config FILENAME Description: Erase the named configuration file. Supported Values: ■ config ■ config1 core-dump ■ erase core-dump CORE-DUMP Usage: erase core-dump FILENAME Description: Erase the named core file.
  • Page 178: Exit

    exit OVERVIEW Category: Switch Management Primary context: operator Related Commands end (page 173) enable (page 172) Usage: exit Description: Return to the previous context or terminate current console/telnet session if you are in the Operator context level. COMMAND STRUCTURE EXAMPLES Example: exit Exit from the interface configuration context to the global configuration context: ProCurve(eth-A4)# exit...
  • Page 179: Fastboot

    fastboot OVERVIEW Category: Primary context: config Related Commands Usage: [no] fastboot Description: Enable/disable fastboot on switch. COMMAND STRUCTURE © 2009 Hewlett-Packard Development Company, L.P.
  • Page 180: Fault-finder

    fault-finder OVERVIEW Category: Primary context: config Related Commands interface (page 204) the section called fault-finder” (page 551) Usage: [no] fault-finder <all|bad-driver|bad-transceiver|bad-cable| too-long-cable|over-bandwidth|broadcast-storm| loss-of-link> [sensitivity <low|medium|high>] Description: Enable/disable fault finder and set sensitivity. Default is 'sensitivity medium'. COMMAND STRUCTURE ■ [no] fault-finder fault-finder <...
  • Page 181 Command Line Interface Reference Guide fault-finder Supported Values: ■ low -- Low sensitivity. ■ medium -- Medium sensitivity. ■ high -- High sensitivity. © 2009 Hewlett-Packard Development Company, L.P.
  • Page 182: Feature-coordinator

    feature-coordinator OVERVIEW Category: Primary context: config Related Commands Usage: [no] feature-coordinator name <'name'> block policy interface <port-list>|vlan <vid-list> message <'msg-text'> [expires expiration-policy]. 'policy' can be 'ip-address','vlan_deletion' for vlans and 'port-security' for interfaces' A list of vlan(s) of the form 3-5,10 can be specified for vid-list A list of port(s) of the form A12,A15-A25 can be specified for port-list.
  • Page 183: Command Details

    Command Line Interface Reference Guide feature-coordinator message -- Friendly error message to be displayed when overriding a restriction ■ (ASCII-STR) (p. 182) expires -- Expiration policy for the features Press <tab> for options (p. 181) ■ app-down -- Expire on application failure Mention a valid application name ■...
  • Page 184 Command Line Interface Reference Guide feature-coordinator app-down -- Expire on application failure Mention a valid application name (ASCII-STR) (p. 181) ■ reboot -- Expire on reboot (p. 183) ■ ■ feature-coordinator name NAME block vlan-deletion vlan [VLAN]VLAN-ID-LIST message MESSAGE expires Expiration policy for the features Press <tab>...
  • Page 185 Command Line Interface Reference Guide feature-coordinator Next Available Option: expires -- Expiration policy for the features Press <tab> for options (p. 181) ■ ■ feature-coordinator name NAME block vlan-deletion vlan [VLAN]VLAN-ID-LIST message MESSAGE Friendly error message to be displayed when overriding a restriction Next Available Option: expires...
  • Page 186 Command Line Interface Reference Guide feature-coordinator Expire on reboot slot-down ■ feature-coordinator name NAME block ip-address vlan [VLAN]VLAN-ID-LIST message MESSAGE expires slot-down SLOT-ID Expire on slot-down.Mention slot. ■ feature-coordinator name NAME block vlan-deletion vlan [VLAN]VLAN-ID-LIST message MESSAGE expires slot-down SLOT-ID Expire on slot-down.Mention slot.
  • Page 187: Filter

    filter OVERVIEW Category: Troubleshooting Primary context: config Related Commands connection-rate-filter (page 90) ip (page 290) show (page 511) show (page 511) Usage: [no] filter ... Description: Set or edit traffic/security filters. The command allows you to set conditional filters and correspondent actions to apply to the incoming traffic satisfying to the specified conditions.
  • Page 188: Command Details

    Command Line Interface Reference Guide filter COMMAND DETAILS ascii (p. 186) filter-action (p. 187) port-list (p. 188) connection-rate (p. 186) forward (p. 187) protocol (p. 188) connection-rate-portlist (p. 186) multicast (p. 187) source-port (p. 189) drop (p. 186) named-filter (p. 188) ascii ■...
  • Page 189 Command Line Interface Reference Guide filter Next Available Option: forward -- Set a list of ports to which forwarding of filtered packets is permitted. ([ethernet] ■ PORT-LIST) (p. 187) ■ filter multicast MAC-ADDR drop [ETHERNET] PORT-LIST Set a list of ports to which forwarding of filtered packets is not permitted. ■...
  • Page 190 Command Line Interface Reference Guide filter packets satisfying to the filter condition can be set. The packets satisfying to the filter condition are all packets destined to the MAC-ADDR specified. Use 'filter source-port [ethernet] PORT-NUM ?' to get a list of all possible actions that could be applied to the packets.
  • Page 191 Command Line Interface Reference Guide filter ■ ip ■ ipx ■ arp ■ appletalk ■ sna ■ netbeui Next Available Options: forward -- Set a list of ports to which forwarding of filtered packets is permitted. ([ethernet] ■ PORT-LIST) (p. 187) drop -- Set a list of ports to which forwarding of filtered packets is not permitted.
  • Page 192: Front-panel-security

    With 'password-recovery' enabled (and the front panel buttons disabled), a lost password can be recovered by contacting HP customer support. With 'password- recovery' disabled, there is no way to access a device after losing a password with the front panel buttons disabled.
  • Page 193 Command Line Interface Reference Guide front-panel-security password-clear ■ [no] front-panel-security password-clear Enable/Disable password clear Next Available Option: reset-on-clear -- Reset switch on password clear (p. 191) ■ password-recovery ■ [no] front-panel-security password-recovery Usage: [no] front-panel-security password-recovery Description: Enable/Disable password recovery. To disable 'password-recovery' physical access to the front-pannel is required, and within 60 secs of pressing the clear button, execute the 'no' form of the command.
  • Page 194: Getmib

    getMIB OVERVIEW Category: manager Primary context: manager Related Commands walkMIB (page 754) setMIB (page 504) Usage: getmib OBJECT-STR [OBJECT-STR ...] Description: Retrieve and display the value of the MIB objects specified. COMMAND STRUCTURE ■ getMIB object -- Name and instance of the MIB variable to retrieve. (ASCII-STR) (p.
  • Page 195: Gvrp

    gvrp OVERVIEW Category: config Primary context: config Related Commands interface (page 204) show (page 511) Usage: [no] gvrp Description: Enable/disable GARP VLAN Registration Protocol (GVRP). COMMAND STRUCTURE © 2009 Hewlett-Packard Development Company, L.P.
  • Page 196: Hostname

    hostname OVERVIEW Category: config Primary context: config Related Commands snmp-server (page 612) Usage: hostname ASCII-STR Description: Specify the device name for administrative purposes. The ASCII-STR defines the device name. It can be up to 30 characters. Use quotes if your device name contains spaces.
  • Page 197: Igmp

    igmp OVERVIEW Category: IGMP Primary context: config Related Commands the section called igmp” (page 556) Usage: igmp ... Description: Configure various global IGMP parameters for the switch. The 'igmp' command must be followed by a feature-specific keyword. Use 'igmp ?' to get a list of all possible options. COMMAND STRUCTURE ■...
  • Page 198: Igmp-proxy-domain

    igmp-proxy-domain OVERVIEW Category: IGMP Primary context: config Related Commands show (page 511) vlan (page 706) Usage: [no] igmp-proxy-domain DOMAIN-NAME [BORDER-ROUTER-IP-ADDR <MCAST-LOW-IP-ADDR MCAST-HIGH-IP-ADDR|all>] Description: Configure an IGMP proxy domain. If the 'no' keyword is used: The DOMAIN-NAME must be specified, All other parameters are optional (they will be verified if they are specified).
  • Page 199 Command Line Interface Reference Guide igmp-proxy-domain border-ip ■ [no] igmp-proxy-domain DOMAIN-NAME IP-ADDR Specify the igmp proxy border ip address. Next Available Options: mcast-low-ip -- Specify the igmp proxy multicast low bound (inclusive) ip address. (IP-ADDR) ■ (p. 197) -- Specify ALL if the multicast range 224.0.1.0-239.255.255.255 is desired. (p.
  • Page 200: Include-credentials

    include-credentials OVERVIEW Category: Primary context: config Related Commands Usage: [no] include-credentials Description: Enable/disable including passwords and credentials in config. NOTES Benefits After making changes to security parameters in the running configuration, you can experiment with the new configuration and, if necessary, view the new security settings during the session. After verifying the configuration, you can then save it permanently by writing the settings to the startup-config file.
  • Page 201: Instrumentation

    instrumentation OVERVIEW Category: config Primary context: config Related Commands Usage: [no] instrumentation monitor [ [<all|arp-requests|ip-address-count| learn-discards|login-failures|mac-moves| mac-address-count|pkts-to-closed-ports| port-auth-failures|system-resource-usage| system-delay> [<low|med|high|limitValue>]] ] [no] instrumentation monitor [trap] [no] instrumentation monitor [log] Description: Enables/Disables instrumentation monitoring. The first version of the command enables/disables instrumentation monitoring and sets threshold value.
  • Page 202: Command Structure

    Command Line Interface Reference Guide instrumentation o high - Preconfigured high threshold value. o limitValue - User configured threshold value. COMMAND STRUCTURE ■ [no] instrumentation collection (p. 200) ■ instrumentation memory -- Sets the maximum size in MB which may be used by instrumentation (p.
  • Page 203 Command Line Interface Reference Guide instrumentation monitor ■ [no] instrumentation monitor Usage: [no] instrumentation monitor [ [<all|arp-requests|ip-address-count| learn-discards|login-failures|mac-moves| mac-address-count|pkts-to-closed-ports| port-auth-failures|system-resource-usage| system-delay> [<low|med|high|limitValue>]] ] [no] instrumentation monitor [trap] [no] instrumentation monitor [log] Description: Enables/Disables instrumentation monitoring. The first version of the command enables/disables instrumentation monitoring and sets threshold value.
  • Page 204 Command Line Interface Reference Guide instrumentation ■ [no] instrumentation monitor < all | arp-requests | ip-address-count | ... > Usage: [no] instrumentation monitor [ [<all|arp-requests|ip-address-count| learn-discards|login-failures|mac-moves| mac-address-count|pkts-to-closed-ports| port-auth-failures|system-resource-usage| system-delay> [<low|med|high|limitValue>]] ] [no] instrumentation monitor [trap] [no] instrumentation monitor [log] Description: Enables/Disables instrumentation monitoring. The first version of the command enables/disables instrumentation monitoring and sets threshold value.
  • Page 205 Command Line Interface Reference Guide instrumentation ■ mac-address-count -- Mac address count. ■ mac-moves -- MAC Moves. ■ pkts-to-closed-ports -- Packets to closed TCP/UDP ports. ■ port-auth-failures -- Port authentication failures. ■ system-resource-usage -- System resource usage. ■ system-delay -- System Delay. Next Available Options: threshold-value <...
  • Page 206: Interface

    interface OVERVIEW Category: Primary context: config Related Commands show interfaces (page 560) Usage: [no] interface < [ethernet] PORT-LIST [...] | loopback <num> > Description: Enter the Interface Configuration Level, or execute one command for that level. Without optional parameters specified, the 'interface' command changes the context to the Interface Configuration Context Level for execution of configuration changes to the port or ports in the PORT-LIST or with loopback keywork it will change context to loopback...
  • Page 207 Command Line Interface Reference Guide interface queue4 < 0 to 100 > -- Specify min. bandwidth percentage for queue four ■ outgoing traffic. (p. 270) queue5 < 0 to 100 > -- Specify min. bandwidth percentage for queue five ■ outgoing traffic.
  • Page 208 Command Line Interface Reference Guide interface provider-network -- Configure qinq port-type as provider-network (p. 267) ■ -- Set port-based priority (p. 268) ■ dscp -- Specify DSCP policy to use. (p. 231) ■ binary-range < 0 to 63 > -- Specify the DSCP code-point in binary. (BINARY) (p.
  • Page 209 Command Line Interface Reference Guide interface access-group -- Apply the specified access control list on this VLAN interface (ASCII-STR) ■ (p. 214) direction < in | out | connection-rate-filter | ... > -- (p. 231) ■ address -- Set IP parameters for communication within an IP network (p.
  • Page 210 Command Line Interface Reference Guide interface -- Resets all previously blocked by the connection rate filter (p. 219) ■ host -- Match packets from the specified IP address. (IP-ADDR) (p. 237) ■ src-ip -- Match packets from the specified subnet. (IP-ADDR/mask-LENGTH) (p.
  • Page 211 Command Line Interface Reference Guide interface no-default -- Indicates that the router should never be used as a default by its ■ neighbors. (p. 255) number < -2147483647 to 2147483647 > -- The router preferability number. Higher ■ values are more preferable. (p.
  • Page 212 Command Line Interface Reference Guide interface chain-name -- Specify key chain to use for MD5 authentication. (ASCII-STR) ■ 228) passive -- Configures an ospf interface as passive. (p. 258) ■ priority < 0 to 255 > -- Set priority of this router as a designated router. (p.
  • Page 213 Command Line Interface Reference Guide interface -- Enable/disable/configure Routing Internet Protocol (RIP) on the VLAN interface (p. 274) ■ -- Process the request for all IP addresses. (p. 219) ■ authentication-key -- Set RIP authentication key (maximum 16 characters). (p. 223) ■...
  • Page 214 Command Line Interface Reference Guide interface rapid-commit -- Obtain IPv6 address quickly from DHCPv6 server. (p. 271) ■ ipv6-addr -- Configure a link-local IPv6 address. (IPV6-ADDR) (p. 245) ■ link-local -- Configure a link-local IPv6 address. (p. 248) ■ ipv6-addr/mask -- Configure IPv6 address represented in CIDR notation.
  • Page 215: Command Details

    Command Line Interface Reference Guide interface binary-range < 0 to 63 > -- Specify the DSCP code-point in binary. (BINARY) (p. 227) ■ integer-range < 0 to 63 > -- Specify the DSCP code-point in decimal. (p. 239) ■ well-defined <...
  • Page 216 Command Line Interface Reference Guide interface authentication (p. 223) join-timer (p. 246) propagation-delay (p. 266) authentication-key (p. 223) jumbo (p. 246) protocol (p. 266) authentication-type (p. 224) kbps (p. 246) protocol-group (p. 267) auth-key-text (p. 225) lacp (p. 247) protocols (p. 267) auto (p.
  • Page 217 Command Line Interface Reference Guide interface Usage: [no] ip access-group <ACL-ID> in Description: Apply the specified access control list to inbound packets on this INTERFACE list. The access control list ACL-ID must be defined before it can be applied. Connection rate filter ACLs cannot be applied on this INTERFACE list.
  • Page 218 Command Line Interface Reference Guide interface Usage: [no] ip access-group <ACL-ID> <in|out> Match packets this device will route to another VLAN Match packets this device will route onto this VLAN vlan Match packets that originate within this VLAN connection-rate-filter Manage new conection rates originating in this VLAN Description: Apply the specified access control list on this VLAN interface.
  • Page 219 Command Line Interface Reference Guide interface DHCP/Bootp server. o IP-ADDR/mask-LENGTH - Assign an IP address to the switch or VLAN. The IP-ADDR/mask-LENGTH may be specified in two ways using the following syntax: ip address 192.32.36.87/24 ip address 192.32.36.87 255.255.255.0 Both of the statements above would have the same effect. Multiple addresses may be configured on a single VLAN.
  • Page 220 Command Line Interface Reference Guide interface configuration. The VLAN for which the configuration is applied can be specified implicitly by preceding the phrase 'ip address' with the 'vlan VLAN-ID' keyword and argument. It can also be called explicitly when called directly from a VLAN context.
  • Page 221 Command Line Interface Reference Guide interface ipv6-addr/mask -- Configure IPv6 address represented in CIDR notation. ■ (IPV6-ADDR/PREFIX-LEN) (p. 245) advert-address ■ interface vlan VLAN-ID ip irdp < multicast | broadcast > Usage: [no] ip irdp <multicast|broadcast> Description: Specify the destination address to be used for router advertisements.
  • Page 222 Command Line Interface Reference Guide interface Process the request for all IP addresses. Next Available Options: area -- Specify an OSPF area.(p. 221) ■ cost < 1 to 65535 > -- Set metric of this interface.(p. 229) ■ ■ [no] interface vlan VLAN-ID ip ospf all Process the request for all IP addresses.
  • Page 223 Command Line Interface Reference Guide interface ■ interface svlan VLAN-ID connection-rate-filter unblock all Resets all previously blocked by the connection rate filter ■ interface svlan VLAN-ID monitor all < In | Out | Both > Monitor all traffic. Supported Values: ■...
  • Page 224 Command Line Interface Reference Guide interface Specify an OSPF area. Next Available Options: area-id -- Single integer or IP address style dotted decimal. (OSPF-AREA-ID) (p. 222) ■ backbone -- The backbone area (the same as 0.0.0.0).(p. 226) ■ ■ interface loopback < 0 to 7 > ip ospf all area Specify an OSPF area.
  • Page 225 Command Line Interface Reference Guide interface Single integer or IP address style dotted decimal. ■ interface vlan VLAN-ID ip ospf all area OSPF-AREA-ID Single integer or IP address style dotted decimal. arp-protect ■ interface [ETHERNET] PORT-LIST arp-protect Usage: [no] arp-protect trust Description: Configure the port as trusted or untrusted.
  • Page 226 Command Line Interface Reference Guide interface OSPF authentication key (maximum 8 characters). ■ interface vlan VLAN-ID ip ospf all authentication-key Set simple authentication method and key. Next Available Option: authentication-key -- OSPF authentication key (maximum 8 characters). (OCTET-STR) (p. 223) ■...
  • Page 227 Command Line Interface Reference Guide interface ■ none -- Do not use authentication. ■ text -- Use simple password. auth-key-text ■ interface vlan VLAN-ID ip rip authentication-key OCTET-STR Set RIP authentication key (maximum 16 characters). ■ interface vlan VLAN-ID ip rip IP-ADDR authentication-key OCTET-STR Set RIP authentication key (maximum 16 characters).
  • Page 228 Command Line Interface Reference Guide interface Automatic address configuration. ■ [no] interface svlan VLAN-ID ipv6 address autoconfig Automatic address configuration. backbone ■ interface loopback < 0 to 7 > ip ospf IP-ADDR area backbone The backbone area (the same as 0.0.0.0). ■...
  • Page 229 Command Line Interface Reference Guide interface priority. If no guaranteed minimum bandwidth is configured (i.e., the settings for all queues are 0), the traffic is serviced strictly by priority. In practice, this may cause complete starvation of some or all lower-priority queues during any periods where the output port traffic is over-subscribed.
  • Page 230 Command Line Interface Reference Guide interface bootp-gateway ■ [no] interface vlan VLAN-ID ip bootp-gateway Usage: [no] ip bootp-gateway [IP-ADDR] Description: Add or remove the gateway address to be used for stamping incoming DHCP requests. This is a VLAN context command. It can be called directly from the VLAN context or follow the 'vlan VLAN-ID' command.
  • Page 231 Command Line Interface Reference Guide interface may have improved performance after rebooting the switch Next Available Option: unblock -- Resets a host previously blocked by the connection rate filter (p. 281) ■ ■ interface svlan VLAN-ID connection-rate-filter Usage: connection-rate-filter unblock < host SRC-IP-ADDR | SRC-IP-ADDRESS/mask >...
  • Page 232 Command Line Interface Reference Guide interface Set dead interval in seconds; the default is 40. Range: < 1 to 65535 > ■ interface vlan VLAN-ID ip ospf IP-ADDR dead-interval < 1 to 65535 > Set dead interval in seconds; the default is 40. Range: <...
  • Page 233 Command Line Interface Reference Guide interface direction ■ [no] interface [ETHERNET] PORT-LIST ip access-group ACCESS-GROUP < in > Supported Values: ■ in -- Match inbound packets ■ [no] interface vlan VLAN-ID ip access-group ACCESS-GROUP < in | out | connection-rate-filter | ...
  • Page 234 Command Line Interface Reference Guide interface Next Available Options: integer-range < 0 to 63 > -- Specify the DSCP code-point in decimal. (p. 239) ■ binary-range < 0 to 63 > -- Specify the DSCP code-point in binary. (BINARY) (p. 227) ■...
  • Page 235 Command Line Interface Reference Guide interface An IPv6 EUI-64 address that can be automatically configured on any interface ■ [no] interface svlan VLAN-ID ipv6 address IPV6-ADDR/PREFIX-LEN eui-64 An IPv6 EUI-64 address that can be automatically configured on any interface failback ■...
  • Page 236 Command Line Interface Reference Guide interface flow control is disabled. Flow Control is enabled on both transmit and receive or auto negotiated if port Mode is set to Auto. This is an Interface context command. It can be called directly from the interface context or follow the 'interface [ethernet] PORT-LIST' command.
  • Page 237 Command Line Interface Reference Guide interface Usage: vlan < vid > ipv6 mld forward < port-list > Description: Instruct the device to forward incoming multicast packets received on the specified ports. This feature is configured on a per-VLAN basis. forward-protocol ■...
  • Page 238 Command Line Interface Reference Guide interface The timers must follow the constraints 2 * join-timer <= leave-timer < leaveall-timer Next Available Options: join-timer < 20 to 75 > -- Set join timer value (centiseconds; default 20).(p. 246) ■ leave-timer < 40 to 300 > -- Set leave timer value (centiseconds; default 300).(p.
  • Page 239 Command Line Interface Reference Guide interface Range: < 5 to 300 > helper-address ■ [no] interface vlan VLAN-ID ip helper-address IP-ADDR Usage: [no] ip helper-address IP-ADDR Description: Add or remove a DHCP server IP address for the VLAN. The DHCP requests received by the switch on this VLAN are to be relayed to the specified DHCP server.
  • Page 240 Command Line Interface Reference Guide interface igmp ■ [no] interface vlan VLAN-ID ip igmp Usage: [no] ip igmp [...] Description: Enable/disable/configure IP Multicast Group Protocol (IGMP) feature on a VLAN. This command enables, disables or configures the IGMP feature for IGMP communication between Multicast Routers, Multicast Servers, and Multicast Clients connected to the device.
  • Page 241 Command Line Interface Reference Guide interface Set limits for all inbound traffic. Next Available Options: percent < 0 to 100 > -- Specify limit as percent of inbound or outbound traffic.(p. 258) ■ kbps < 0 to 10000000 > -- Specify limit of allowed inbound or outbound traffic in ■...
  • Page 242 Command Line Interface Reference Guide interface Usage: [no] vrrp vrid <VRID> track interface <LPORT-LIST> Description: Enable/disable tracking of logical ports for VR. Next Available Option: lport-list -- Enable/disable tracking of specified logical ports for VR ([ethernet] PORT-LIST) ■ 249) interval ■...
  • Page 243 Command Line Interface Reference Guide interface ■ interface vlan VLAN-ID ip Usage: [no] ip ... Description: Configure various IP parameters for the VLAN. The 'ip' command must be followed by a feature-specific keyword. Use 'ip ?' to get a list of all possible options. This is a VLAN context command.
  • Page 244 Command Line Interface Reference Guide interface Specify the IP address the request is for. Next Available Options: area -- Specify an OSPF area.(p. 221) ■ cost < 1 to 65535 > -- Set metric of this interface.(p. 229) ■ ■ [no] interface vlan VLAN-ID ip address IP-ADDR/mask-LENGTH Interface IP address/mask.
  • Page 245 Command Line Interface Reference Guide interface ■ interface vlan VLAN-ID ip pim-dense ip-addr Usage: ip pim-dense [ip-addr IP-ADDR|any] Description: Set the source IP address for the PIM-DM packets sent out on this interface. You can either explicitly specify one of the existing VLAN's IP addresses or use 'any' option to dynamically determine it from the VLAN's current IP configuration.
  • Page 246 Command Line Interface Reference Guide interface To associate L3-Mac-Address with a VLAN with default timeout interval of 60s. ip-recv-mac-address <mac-address> To disassociate L3-Mac_address with a VLAN. no ip-recv-mac-address Parameters: <mac-address> The L3-mac-address to be associated with a VLAN. interval Specify L3-Mac-Address timeout interval. <1-255>...
  • Page 247 Command Line Interface Reference Guide interface Usage: [no] ipv6 ... Description: Configure various IP parameters for the VLAN. The 'ipv6' command must be followed by a feature-specific keyword. Use 'ipv6 ?' to get a list of all possible options. This is a VLAN context command. It can be called directly from the VLAN context or follow the 'vlan VLAN-ID' command.
  • Page 248 Command Line Interface Reference Guide interface irdp ■ [no] interface vlan VLAN-ID ip irdp Usage: [no] ip irdp [...] Description: Configure ICMP Router Discovery Protocol (IRDP). This is a VLAN context command. It can be called directly from the VLAN context or may follow the 'vlan VLAN-ID' command prefix.
  • Page 249 Command Line Interface Reference Guide interface Specify kilobits-per-second limit of allowed ICMP traffic (values should be at least 13Kbps, or max-length ICMP packets will fail.) Range: < 0 to 10000000 > ■ interface [ETHERNET] PORT-LIST rate-limit all in kbps < 0 to 10000000 > Specify limit of allowed inbound or outbound traffic in kilobits-per-second on the specified port(s).
  • Page 250 Command Line Interface Reference Guide interface leaveall-timer ■ interface [ETHERNET] PORT-LIST gvrp leaveall-timer < 500 to 3000 > Set leaveall timer value (centiseconds; default 1000). Range: < 500 to 3000 > leave-timer ■ interface [ETHERNET] PORT-LIST gvrp leave-timer < 40 to 300 > Set leave timer value (centiseconds;...
  • Page 251 Command Line Interface Reference Guide interface Next Available Option: -- Configure various IP parameters for the Loopback(p. 240) ■ lowest ■ interface vlan VLAN-ID vrrp vrid < 1 to 255 > primary-ip-address lowest Dynamically determine lowest IP address. lport-list ■ [no] interface vlan VLAN-ID vrrp vrid < 1 to 255 > track interface [ETHERNET] PORT-LIST Usage: [no] vrrp vrid <VRID>...
  • Page 252 Command Line Interface Reference Guide interface md5-auth-key-chain ■ interface vlan VLAN-ID ip ospf md5-auth-key-chain Set MD5 authentication method and key chain. Next Available Option: chain-name -- Specify key chain to use for MD5 authentication. (ASCII-STR) (p. 228) ■ ■ interface vlan VLAN-ID ip ospf IP-ADDR md5-auth-key-chain Set MD5 authentication method and key chain.
  • Page 253 Command Line Interface Reference Guide interface Description: Set the minimum time (in seconds) allowed between sending unsolicited router advertisements. Must be no greater than the maximum time between sending unsolicited router advertisements. Range: < 3 to 1800 > mirror ■ interface [ETHERNET] PORT-LIST monitor all < In | Out | Both > mirror Mirror destination.
  • Page 254 Command Line Interface Reference Guide interface If not preceded by 'no', the command accepts a variety of configuration parameters. To get a list of all available parameters use 'ipv6 mld ?'. To get detailed help for a parameter follow it with 'help' keyword.
  • Page 255 Command Line Interface Reference Guide interface some frames may not be copied to the mirroring port. This is an Interface context command. It can be called directly from the interface context or follow the 'interface [ethernet] PORT-LIST' command. Parameters: o 1-4 - Mirror destination number o NAME-STR - Friendly name associated with the mirror destination number.
  • Page 256 Command Line Interface Reference Guide interface destination number. o ACL-NAME - Standard or Extended Access Control List number. o <in|out|both> direction of the traffic to be monitored. Next Available Option: < In | Out | Both > -- Monitor all traffic.(p.
  • Page 257 Command Line Interface Reference Guide interface Next Available Option: port-name -- Specify a port name up to 64 characters length. (ASCII-STR) (p. 263) ■ ■ interface vlan VLAN-ID name NAME Usage: name ASCII-STR Description: Set the VLAN's name. This is a VLAN context command. It can be called directly from the VLAN context or follow the 'vlan VLAN-ID' command.
  • Page 258 Command Line Interface Reference Guide interface Indicates that the router should never be used as a default by its neighbors. no-tag-added ■ [no] interface [ETHERNET] PORT-LIST monitor all < In | Out | Both > mirror < 1 to 4 > no-tag-added Don't add VLAN tag for this untagged-port ns-interval...
  • Page 259 Command Line Interface Reference Guide interface Usage: [no] ip ospf [...] Description: configure Open Shortest Path First (OSPF) protocol parameters on the interface. Called without 'no', the command configures OSPF parameter on interface. Otherwise ('no' is specified), the command remove specified ospf parameter on the interface.
  • Page 260 Command Line Interface Reference Guide interface output ■ [no] interface [ETHERNET] PORT-LIST bandwidth-min output Enable/disable and configure guaranteed minimum bandwidth for outgoing traffic. Next Available Option: queue1 < 0 to 100 > -- Specify min. bandwidth percentage for queue one outgoing traffic.(p.
  • Page 261 Command Line Interface Reference Guide interface Range: < 0 to 100 > ■ interface [ETHERNET] PORT-LIST rate-limit all in percent < 0 to 100 > Specify limit as percent of inbound or outbound traffic. Range: < 0 to 100 > ■...
  • Page 262 Command Line Interface Reference Guide interface PIM-SM on the interface. Use 'ip pim-sparse ?' to get the list of all configuration options. This command can be used in the VLAN context or in the global context with the 'vlan <VLAN-ID>' prefix.
  • Page 263 Command Line Interface Reference Guide interface ■ 8 ■ 9 ■ 10 ■ 11 ■ 12 ■ 13 ■ 14 ■ 15 ■ 16 ■ 17 poe-allocate-by ■ interface [ETHERNET] PORT-LIST poe-allocate-by Usage: poe-allocate-by [usage|class|value] Description: Control manual power over ethernet allocation. By default, power-over-ethernet allocation is automatic by usage of the powered device.
  • Page 264 Command Line Interface Reference Guide interface poison-reverse ■ [no] interface vlan VLAN-ID ip rip poison-reverse Enable/disable poison reverse on this interface. ■ [no] interface vlan VLAN-ID ip rip IP-ADDR poison-reverse Enable/disable poison reverse on this interface. ■ [no] interface vlan VLAN-ID ip rip all poison-reverse Enable/disable poison reverse on this interface.
  • Page 265 Command Line Interface Reference Guide interface bandwidth-min -- Enable/disable and configure guaranteed minimum bandwidth settings for ■ outgoing traffic on the port(s)(p. 226) rate-limit -- Enable/disable and configure rate-limiting for all traffic (or for incoming ICMP ■ traffic) on the port(s)(p.
  • Page 266 Command Line Interface Reference Guide interface the event of power over-subscription. Per-port power is enabled by default. The default priority is low. Note: Lower numbered ports have precedence over higher numbered ports of the same priority. Next Available Option: priority <...
  • Page 267 Command Line Interface Reference Guide interface '0.0.0.0') the virtual router uses numerically lowest IP address of the VLAN. The default value is 'lowest'. Next Available Options: ip-addr -- Specify IP address. (IP-ADDR) (p. 241) ■ lowest -- Dynamically determine lowest IP address.(p.
  • Page 268 Command Line Interface Reference Guide interface ■ 0 ■ 1 ■ 2 ■ 3 ■ 4 ■ 5 ■ 6 ■ 7 ■ interface vlan VLAN-ID vrrp vrid < 1 to 255 > priority < 1 to 255 > Usage: vrrp vrid <VRID> priority <1-255> Description: Configure priority for the virtual router instance.
  • Page 269 Command Line Interface Reference Guide interface protocol-group -- Enter a list of protocols for the current VLAN delimited by commas. ■ (ASCII-STR) (p. 267) ■ interface svlan VLAN-ID protocol Set a predefined protocol for the current VLAN. Next Available Options: protocols <...
  • Page 270 Command Line Interface Reference Guide interface proxy-arp ■ [no] interface vlan VLAN-ID ip proxy-arp Usage: [no] ip proxy-arp Description: Enable/disable proxy ARP. This is a VLAN context command. It can be called directly from the VLAN context or may follow the 'vlan VLAN-ID' command prefix.
  • Page 271 Command Line Interface Reference Guide interface This is a VLAN context command. It can be called directly from the VLAN context or follow the 'vlan VLAN-ID' command. Next Available Options: dscp -- Specify DSCP policy to use. (p. 231) ■ priority <...
  • Page 272 Command Line Interface Reference Guide interface queue1 ■ interface [ETHERNET] PORT-LIST bandwidth-min output < 0 to 100 > Specify min. bandwidth percentage for queue one outgoing traffic. Range: < 0 to 100 > Next Available Option: queue2 < 0 to 100 > -- Specify min. bandwidth percentage for queue two outgoing traffic.(p.
  • Page 273 Command Line Interface Reference Guide interface Range: < 0 to 100 > Next Available Option: queue6 < 0 to 100 > -- Specify min. bandwidth percentage for queue six outgoing traffic.(p. 271) ■ queue6 ■ interface [ETHERNET] PORT-LIST bandwidth-min output < 0 to 100 > < 0 to 100 > < 0 to 100 > <...
  • Page 274 Command Line Interface Reference Guide interface rate-limit ip access-group <acl-name> in kbps <0-10000000> no rate-limit <icmp | all <in|out> | ip <access-group>> rate-limit bcast in percent <0-100> no rate-limit bcast in rate-limit mcast in percent <0-100> no rate-limit mcast in Description: Enable/disable and configure rate-limiting for all traffic (or for incoming ICMP traffic) on the port(s).
  • Page 275 Command Line Interface Reference Guide interface reachable-time ■ [no] interface vlan VLAN-ID ipv6 nd reachable-time Usage: [no] ipv6 nd reachable-time <milliseconds> Description: Configures the length of time neighbors are considered reachable after being confirmed as reachable via the neighbor unreachability detection algorithm. This value appears in router advertisements sent on this interface and is also used to manage the neighbor table entries on this node.
  • Page 276 Command Line Interface Reference Guide interface ■ interface vlan VLAN-ID ip ospf all retransmit-interval < 1 to 3600 > Set retransmit interval in seconds; the default is 5. Range: < 1 to 3600 > ■ [no] interface vlan VLAN-ID ip rip Usage: [no] ip rip [...] Description: Enable/disable/configure Routing Internet Protocol (RIP) on the VLAN interface.
  • Page 277 Command Line Interface Reference Guide interface Supported Values: ■ V1-only -- Use RIP version 1 only. ■ V2-only -- Use RIP version 2 only. ■ V1-or-V2 -- Use RIP 2 in the RIP 1 compatible mode. send ■ interface vlan VLAN-ID ip rip send < disabled | V1-only | V1-compatible-V2 | ... > Define RIP version for outgoing packets.
  • Page 278 Command Line Interface Reference Guide interface o <name> - Policy name. o in - Apply the policy in inbound direction. Next Available Option: -- Apply policy on inbound packets. (p. 238) ■ source-lockdown ■ [no] interface [ETHERNET] PORT-LIST ip source-lockdown Usage: [no] ip source-lockdown [ethernet] <port-list>...
  • Page 279 Command Line Interface Reference Guide interface network speed (100 or 1000 Mbps)and the port wiring operation (MDI-X or MDI) between the switch and another IEEE 802.3ab-compliant device running the 'Auto Negotiation' protocol. - 100-full 100 Mbps, full duplex. - auto-100 Same as 'auto'.
  • Page 280 Command Line Interface Reference Guide interface Next Available Options: dhcp-snooping (p. 230) ■ -- Configure various IP parameters for the VLAN(p. 240) ■ ipv6 -- Configure various IP parameters for the VLAN(p. 244) ■ auto -- Cause each port identified in the port list to learn its VLAN membership using the GARP ■...
  • Page 281 Command Line Interface Reference Guide interface Next Available Options: interface -- Enable/disable tracking of logical ports for VR(p. 239) ■ vlan -- Enable/disable tracking of VLANs for VR(p. 282) ■ transit-delay ■ interface vlan VLAN-ID ip ospf transit-delay < 1 to 3600 > Set transit delay in seconds;...
  • Page 282 Command Line Interface Reference Guide interface type ■ interface [ETHERNET] PORT-LIST type < Trunk | | | ... > Supported Values: ■ Trunk ■ ■ ■ 10FL ■ 10T ■ 10/100TX ■ 100FX ■ 100FX-SFP ■ Vlan ■ Mesh ■ 1000SX ■...
  • Page 283 Command Line Interface Reference Guide interface Usage: [no] ip forward-protocol udp IP-ADDR PORT-NUM|PORT-NAME Description: Add or remove a UDP server address for the VLAN. The broadcast packets received by the switch on this VLAN are to be forwarded to the specified application server. This is a VLAN context command.
  • Page 284 Command Line Interface Reference Guide interface untagged ■ [no] interface vlan VLAN-ID untagged [ETHERNET] PORT-LIST Usage: [no] untagged [ethernet] PORT-LIST Description: Assign ports to current VLAN as untagged. This is a VLAN context command. It can be called directly from the VLAN context or follow the 'vlan VLAN-ID' command.
  • Page 285 Command Line Interface Reference Guide interface ipv6 -- Configure various IP parameters for the VLAN(p. 244) ■ connection-rate-filter -- Re-enables access to a host or set of hosts that has been previously ■ blocked by the connection rate filter(p. 228) monitor -- Define either the VLAN is to be monitored or not(p.
  • Page 286 Command Line Interface Reference Guide interface Usage: [no] voice Description: Labels this VLAN as a Voice VLAN, allowing you to separate, prioritize, and authenticate voice traffic moving through your network. This is a VLAN context command. It can be called directly from the VLAN context or follow the 'vlan VLAN-ID' command.
  • Page 287 Command Line Interface Reference Guide interface well-defined ■ interface [ETHERNET] PORT-LIST qos dscp < af11 | af12 | af13 | ... > Usage: [no] qos dscp-map <0|1...63|af11|af12|af13|af21|af22|af23|af31|af32| af33|af41|af42|af43|ef|cs0..cs7|000000|000001...111111>| [priority <<0-7>|no-override>] [name <str>] Description: Define mapping between a DSCP (Differentiated-Services Codepoint) value and an 802.1p priority. The mapping is used to assign priority for IPv4 packets if a QoS classifier uses this DSCP policy as the method of traffic prioritization.
  • Page 288 Command Line Interface Reference Guide interface ■ af12 ■ af13 ■ af21 ■ af22 ■ af23 ■ af31 ■ af32 ■ af33 ■ af41 ■ af42 ■ af43 ■ ef ■ cs0 ■ cs1 ■ cs2 ■ cs3 ■ cs4 ■...
  • Page 289 Command Line Interface Reference Guide interface 010010 Assured Forwarding AF21 010100 Assured Forwarding AF22 010110 Assured Forwarding AF23 011010 Assured Forwarding AF31 011100 Assured Forwarding AF32 011110 Assured Forwarding AF33 100010 Assured Forwarding AF41 100100 Assured Forwarding AF42 100110 Assured Forwarding AF43 101110 Expedited Forwarding EF...
  • Page 290 Command Line Interface Reference Guide interface 'no qos dscp-map <codepoint>' will remove the settings for the specified codepoint from the running configuration. priority is set to no-override and the name is deleted (the priority and name can only be removed if no QoS feature is configured to use this DSCP Policy).
  • Page 291 Command Line Interface Reference Guide interface ■ cs3 ■ cs4 ■ cs5 ■ cs6 ■ cs7 with-monitoring ■ interface vlan VLAN-ID vrrp vrid < 1 to 255 > failover with-monitoring Usage: vrrp vrid <VRID> failover with-monitoring Description: Trigger VR to failover and continue montior of master VR. ©...
  • Page 292: Overview

    OVERVIEW Category: Primary context: config Related Commands ipv6 (page 313) show ip (page 561) Usage: [no] ip ... Description: Configure various IP parameters for the switch. The 'ip' command must be followed by a feature-specific keyword. Use 'ip ?' to get a list of all possible options. COMMAND STRUCTURE ■...
  • Page 293 Command Line Interface Reference Guide server-address -- Configure DNS server IP address. (p. 308) ■ priority < 1 to 2 > -- Priority of Server Address. (NUMBER) (p. 305) ■ ip6addr -- DNS server IPv6 address. (IPV6-ADDR) (p. 302) ■ ipaddr -- DNS server IP address.
  • Page 294: Command Details

    Command Line Interface Reference Guide ■ [no] ip source-binding -- Add/remove a static IP-to-MAC binding in the DHCP snooping database (p. 308) trap -- Set traps for dynamic ip lockdown (p. 311) ■ OutOfResources -- Set out-of-resources trap. (p. 305) ■...
  • Page 295 Command Line Interface Reference Guide broadcast-request (p. 296) ip-addr (p. 302) server-address (p. 308) burst-normal (p. 296) IP-PORT (p. 303) serverV6 (p. 308) cipher (p. 296) IPV4-ADDR (p. 303) source-binding (p. 308) connection-rate-filter (p. 297) IPV4-MASK (p. 303) source-lockdown (p. 309) default (p.
  • Page 296 Command Line Interface Reference Guide access-method ■ [no] ip authorized-managers IP-ADDR access-method < all | ssh | telnet | ... > Define an access method desired. Supported Values: ■ all ■ ssh ■ telnet ■ web ■ snmp ■ tftp address ■...
  • Page 297 Command Line Interface Reference Guide infinite - sets the timeout to 0. A value of 0 indicates an infinite timeout to the switch. (Internally the ARP age timeout is set to 99,999,999 seconds (approximately 3.2 years) Next Available Options: timeout <...
  • Page 298 Command Line Interface Reference Guide auto ■ ip igmp auto [ETHERNET] PORT-LIST Usage: ip igmp auto [ethernet] PORT-LIST Description: Instruct the device to monitor incoming multicast traffic on the specified ports (this is the default behavior). This feature is configured on a per-VLAN basis. blackhole ■...
  • Page 299 Command Line Interface Reference Guide ■ 3des-cbc ■ aes192-cbc ■ aes256-cbc ■ rijndael-cbc@lysator.liu.se ■ aes128-ctr ■ aes192-ctr ■ aes256-ctr connection-rate-filter ■ [no] ip access-list connection-rate-filter Configure a connection-rate-filter Access Control List. Next Available Option: name -- Specify name of Access Control List to configure. (ASCII-STR) (p.
  • Page 300 Command Line Interface Reference Guide directed-broadcast ■ [no] ip directed-broadcast Usage: [no] ip directed-broadcast Description: Enable/disable directed broadcast forwarding. distance ■ ip route IP-ADDR/MASK-LENGTH IP-ADDR distance < 1 to 255 > Set the administrative distance to associate with this static route. Range: <...
  • Page 301 Command Line Interface Reference Guide Next Available Option: domain-name -- Default domain suffix. (ASCII-STR) (p. 298) ■ ■ ip dns domain-name DOMAIN-NAME Default domain suffix. echo ■ [no] ip icmp echo Usage: [no] ip icmp echo ... Description: Enable/disable echo replies to broadcast echo requests. Next Available Option: broadcast-request <...
  • Page 302 Command Line Interface Reference Guide Usage: [no] ip igmp forcedfastleave [ethernet] PORT-LIST Description: When enabled, this feature forces IGMP Fast Leaves to occur even when the port is cascaded. See 'ip igmp fastleave' for more information. The default behavior is for IGMP Forced FastLeaves to be disabled.
  • Page 303 Command Line Interface Reference Guide available parameters use 'ip igmp ?'. To get a detailed help for a parameter, follow it with 'help' keyword. Next Available Options: querier -- Specify querier/non-querier capability for the VLAN(p. 306) ■ high-priority-forward -- Enable/disable the high priority forwarding of traffic for subscribed IP ■...
  • Page 304 Command Line Interface Reference Guide Specify how often (in minutes) the switch tries to get the current time. Range: < 1 to 9999 > ■ ip source-binding VLAN-ID IP-ADDR Next Available Option: -- (MAC-ADDR) (p. 304) ■ ip6addr ■ [no] ip dns server-address priority < 1 to 2 > IPV6-ADDR DNS server IPv6 address.
  • Page 305 Command Line Interface Reference Guide IP-PORT ■ ip ssh port TCP/UDP-PORT Specify the TCP port number on which the daemon should listen. IPV4-ADDR ■ ip authorized-managers IP-ADDR Authorized manager IPv4 address. Next Available Options: IPV4-MASK -- IP mask defining a group of adjacent manager IP addresses. (IP-ADDR) (p.
  • Page 306 Command Line Interface Reference Guide Usage: ip load-sharing <2-4> no ip load-sharing Description: Specify the maximum number of equal cost IP load sharing paths. no ip load-sharing disables IP load sharing. Range: < 2 to 4 > ■ [no] ip ssh mac < hmac-md5 | hmac-sha1 | hmac-sha1-96 | ... > Specify a mac to enable/disable.
  • Page 307 Command Line Interface Reference Guide Next Available Option: start-seq-num < 1 to 2147483647 > -- Specify the starting sequence number. (p. 310) ■ ■ [no] ip access-list connection-rate-filter NAME Specify name of Access Control List to configure. number ■ [no] ip access-list extended < 100 to 199 > Specify Access Control List to configure by number.
  • Page 308 Command Line Interface Reference Guide public-key ■ ip ssh public-key < manager | operator > Configure a client public-key. Supported Values: ■ manager -- Select manager public keys. ■ operator -- Select operator public keys. Next Available Option: keystring -- ASCII formatted public-key. (ASCII-STR) (p.
  • Page 309 Command Line Interface Reference Guide Usage: ip icmp reply-limit Description: Enable/disable ICMP reply rate limiting. resequence ■ ip access-list resequence Renumber the entries in an Access Control List. Next Available Option: name -- Specify name of Access Control List to configure. (ASCII-STR) (p.
  • Page 310 Command Line Interface Reference Guide Description: Define the device router id. The no form of the command clears the router-id. Next Available Option: ipaddr -- Define the device router id (IP-ADDR) (p. 302) ■ routing ■ [no] ip routing Usage: [no] ip routing Description: Enable/disable IP routing support on the device.
  • Page 311 Command Line Interface Reference Guide o <VLAN-ID> -- VLAN ID number to bind with the specified IP and MAC address on the specified port in the DHCP snooping binding database. o <MAC-ADDR> -- MAC address to bind with the specified IP address and VLAN on the specified port.
  • Page 312 Command Line Interface Reference Guide function unless SSH is also enabled. o 'port <<1-65535>|default>' - Set the TCP port on which the daemon should listen for SSH connections. The default is 22. o 'public-key <operator|manager> KEYSTRING' - set a key for public-key authentication.
  • Page 313 Command Line Interface Reference Guide timeout ■ ip arp-age < 1 to 1440 > Usage: [no] ip arp-age <[0..1440]|infinite> Description: Modify Address Resolution Protocol (ARP) table entry timeout, specified in minutes. The default timeout is 20 minutes. <0..1440> - timeout specified in minutes. infinite - sets the timeout to 0.
  • Page 314 Command Line Interface Reference Guide Usage: [no] ip source-binding trap OutOfResources Description: Set traps for dynamic ip lockdown. Next Available Option: OutOfResources -- Set out-of-resources trap. (p. 305) ■ ■ ip ttl < 2 to 255 > Usage: ip ttl <2-255> Description: Specify TTL for outgoing IP packets.
  • Page 315: Ipv6

    ipv6 OVERVIEW Category: Primary context: config Related Commands show ipv6 (page 562) ip (page 290) Usage: [no] ipv6 ... Description: Configure various IP parameters for the VLAN. The 'ipv6' command must be followed by a feature-specific keyword. Use 'ipv6 ?' to get a list of all possible options. This is a VLAN context command.
  • Page 316 Command Line Interface Reference Guide ipv6 access ■ ipv6 authorized-managers IPV6-ADDR access < Manager | Operator > Define an access level desired. Supported Values: ■ Manager ■ Operator access-list ■ [no] ipv6 access-list Usage: [no] ipv6 access-list <ACL-ID> <resequence> <ACL-ID> <start-seq-no> <increment> Description: Enter the ipv6 acl context for the specified access control list.
  • Page 317 Command Line Interface Reference Guide ipv6 [access-method <all|ssh|telnet|web|snmp|tftp>] Description: Define the IPV6 addresses allowed to manage the switch. Clients using the specified IPV6 addresses are allowed to access the switch with the specified access method and access level. A maximum of 100 addresses may be configured. Parameters: o IPV6-ADDR - The IPV6 address of an authorized manager.
  • Page 318 Command Line Interface Reference Guide ipv6 This command is executed at the global config level. It configures the number of neighbor solicitations to send when performing duplicate address detection for a unicast address configured on a VLAN interface. Range: 0-600 (0 = disabled) Default: 3 (enabled) Next Available Option: number...
  • Page 319 Command Line Interface Reference Guide ipv6 ■ ipv6 icmp error-interval < 0 to 2147483647 > bucket-size < 1 to 200 > Specify bucket size. Range: < 1 to 200 > IPV6-ADDR ■ ipv6 authorized-managers IPV6-ADDR Authorized manager IPv6 address. Next Available Options: IPV6-MASK -- IP mask defining a group of adjacent manager IP addresses.
  • Page 320 Command Line Interface Reference Guide ipv6 Next Available Option: start-seq-num < 1 to 2147483647 > -- Specify the starting sequence number. (p. 318) ■ start-seq-num ■ ipv6 access-list resequence RESEQUENCE < 1 to 2147483647 > Specify the starting sequence number. Range: <...
  • Page 321: Jumbo

    jumbo OVERVIEW Category: Primary context: config Related Commands the section called jumbos” (page 564) Usage: jumbo ... Description: Configure Global Jumbos parameters for the switch. NOTES Restriction on Value of max-frame-size The value of max-frame-size must be greater than or equal to 18 bytes more than the value selected for ip-mtu.
  • Page 322: Key-chain

    key-chain OVERVIEW Category: Switch Security Primary context: config Related Commands show (page 511) Usage: key-chain ASCII-STR Usage: key-chain ASCII-STR key NUMBER [key-string ASCII-STR] [accept-lifetime <infinite|<<START-TIME|now> <END-TIME|duration SEC>>>] [send-lifetime <infinite|<<START-TIME|now> <END-TIME|duration SEC>>>] Usage: no key-chain ASCII-STR Usage: no key-chain ASCII-STR key KEY-ID Description: Configures authentication key chains and individual keys.
  • Page 323 Command Line Interface Reference Guide key-chain send-lifetime -- Set key send lifetime. (p. 336) ■ date -- Key send start date. (MM/DD[/[YY]YY]) (p. 323) ■ time -- Key send start time. (HH:MM[:SS]) (p. 338) ■ ■ additional options available... infinite -- Set infinite lifetime.
  • Page 324 Command Line Interface Reference Guide key-chain duration -- Use current day and time. (NUMBER) (p. 329) ■ send-lifetime -- Set key send lifetime. (p. 336) ■ date -- Key send start date. (MM/DD[/[YY]YY]) (p. 323) ■ ■ additional options available... infinite -- Set infinite lifetime.
  • Page 325: Command Details

    Command Line Interface Reference Guide key-chain time -- Key send stop time. (HH:MM[:SS]) (p. 338) ■ duration -- Use current day and time. (NUMBER) (p. 329) ■ infinite -- Set infinite lifetime. (p. 332) ■ -- Use current day and time. (p.
  • Page 326 Command Line Interface Reference Guide key-chain Key send start date. Next Available Option: time -- Key send start time. (HH:MM[:SS]) (p. 338) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime [DATE] [TIME] [DATE] [TIME] send-lifetime [DATE] [TIME] [DATE] Key send stop date.
  • Page 327 Command Line Interface Reference Guide key-chain ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime now [DATE] [TIME] send-lifetime [DATE] Key send start date. Next Available Option: time -- Key send start time. (HH:MM[:SS]) (p. 338) ■ ■...
  • Page 328 Command Line Interface Reference Guide key-chain Key send start date. Next Available Option: time -- Key send start time. (HH:MM[:SS]) (p. 338) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime infinite send-lifetime [DATE] [TIME] [DATE] Key send stop date.
  • Page 329 Command Line Interface Reference Guide key-chain Key accept stop date. Next Available Option: time -- Key send stop time. (HH:MM[:SS]) (p. 338) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime [DATE] [TIME] [DATE] [TIME] send-lifetime [DATE] Key send start date. Next Available Option: time -- Key send start time.
  • Page 330 Command Line Interface Reference Guide key-chain ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime now [DATE] Key accept stop date. Next Available Option: time -- Key send stop time. (HH:MM[:SS]) (p. 338) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime now [DATE] [TIME] send-lifetime [DATE] Key send start date.
  • Page 331 Command Line Interface Reference Guide key-chain Next Available Option: time -- Key send stop time. (HH:MM[:SS]) (p. 338) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime infinite send-lifetime [DATE] Key send start date. Next Available Option: time -- Key send start time.
  • Page 332 Command Line Interface Reference Guide key-chain Use current day and time. ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime [DATE] [TIME] [DATE] [TIME] send-lifetime now duration NUMBER Use current day and time. ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime [DATE] [TIME] duration NUMBER Use current day and time.
  • Page 333 Command Line Interface Reference Guide key-chain ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime infinite send-lifetime now duration NUMBER Use current day and time. ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING send-lifetime [DATE] [TIME] duration NUMBER Use current day and time.
  • Page 334 Command Line Interface Reference Guide key-chain ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime now duration NUMBER send-lifetime [DATE] [TIME] duration NUMBER Use current day and time. ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime now duration NUMBER send-lifetime now duration NUMBER Use current day and time.
  • Page 335 Command Line Interface Reference Guide key-chain ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING send-lifetime infinite Set infinite lifetime. ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime [DATE] [TIME] [DATE] [TIME] send-lifetime infinite Set infinite lifetime. ■...
  • Page 336 Command Line Interface Reference Guide key-chain Next Available Options: accept-lifetime -- Set key accept lifetime.(p. 323) ■ send-lifetime -- Set key send lifetime.(p. 336) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime [DATE] [TIME] [DATE] [TIME] send-lifetime now Use current day and time.
  • Page 337 Command Line Interface Reference Guide key-chain ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime infinite send-lifetime Use current day and time. Next Available Options: date -- Key send stop date. (MM/DD[/[YY]YY]) (p. 323) ■ duration -- Use current day and time. (NUMBER) (p.
  • Page 338 Command Line Interface Reference Guide key-chain ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime now duration NUMBER send-lifetime now Use current day and time. Next Available Options: date -- Key send stop date. (MM/DD[/[YY]YY]) (p. 323) ■ duration -- Use current day and time.
  • Page 339 Command Line Interface Reference Guide key-chain Next Available Options: date -- Key send start date. (MM/DD[/[YY]YY]) (p. 323) ■ -- Use current day and time.(p. 334) ■ infinite -- Set infinite lifetime.(p. 332) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime now duration NUMBER send-lifetime Set key send lifetime.
  • Page 340 Command Line Interface Reference Guide key-chain infinite -- Set infinite lifetime.(p. 332) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime now [DATE] [TIME] send-lifetime Set key send lifetime. Next Available Options: date -- Key send start date. (MM/DD[/[YY]YY]) (p.
  • Page 341 Command Line Interface Reference Guide key-chain Key send stop time. Next Available Option: send-lifetime -- Set key send lifetime.(p. 336) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime [DATE] [TIME] [DATE] [TIME] send-lifetime [DATE] [TIME] Key send start time.
  • Page 342 Command Line Interface Reference Guide key-chain Next Available Options: date -- Key send stop date. (MM/DD[/[YY]YY]) (p. 323) ■ duration -- Use current day and time. (NUMBER) (p. 329) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING accept-lifetime now [DATE] [TIME] send-lifetime [DATE] [TIME] [DATE] [TIME] Key send stop time.
  • Page 343 Command Line Interface Reference Guide key-chain Next Available Options: date -- Key send stop date. (MM/DD[/[YY]YY]) (p. 323) ■ duration -- Use current day and time. (NUMBER) (p. 329) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > key-string KEY-STRING send-lifetime [DATE] [TIME] [DATE] [TIME] Key send stop time.
  • Page 344 Command Line Interface Reference Guide key-chain duration -- Use current day and time. (NUMBER) (p. 329) ■ ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime [DATE] [TIME] duration NUMBER send-lifetime [DATE] [TIME] [DATE] [TIME] Key send stop time. ■...
  • Page 345 Command Line Interface Reference Guide key-chain Key send stop time. ■ key-chain KEY-CHAIN key < 0 to 255 > accept-lifetime infinite send-lifetime [DATE] [TIME] Key send start time. Next Available Options: date -- Key send stop date. (MM/DD[/[YY]YY]) (p. 323) ■...
  • Page 346: Kill

    kill OVERVIEW Category: Switch Management Primary context: manager Related Commands the section called ssh” (page 593) the section called telnet” (page 598) Usage: kill [SESSION_ID] Description: Kill other active console, telnet, or ssh sessions. If no session ID is specified, all other active sessions are terminated.
  • Page 347 Command Line Interface Reference Guide kill If no session ID is specified, all other active sessions are terminated. Range: < (Range unavailble) > © 2009 Hewlett-Packard Development Company, L.P.
  • Page 348: Licenses

    licenses OVERVIEW Category: Primary context: manager Related Commands show licenses (page 565) Usage: licenses <hardware-id PKG-ID | install PKG-ID PKG-KEY | uninstall PKG-ID> Description: Manage premium features. Parameters: o hardware-id - Display the hardware ID for installing the specified package on this chassis. o install - Install the specified package.
  • Page 349: Command Details

    Command Line Interface Reference Guide licenses COMMAND DETAILS hardware-id (p. 347) Network-Services (p. 347) uninstall (p. 348) install (p. 347) premium (p. 347) key (p. 347) Premium (p. 348) hardware-id ■ licenses hardware-id Display hardware ID for installation request. Next Available Options: Premium -- For Premium features(p.
  • Page 350 Command Line Interface Reference Guide licenses For Premium features Next Available Option: -- Enter key for this feature. (ASCII-STR) (p. 347) ■ Premium ■ licenses hardware-id Premium For Premium features ■ licenses uninstall Premium For Premium features uninstall ■ licenses uninstall Uninstall the specified package.
  • Page 351: Link-keepalive

    link-keepalive OVERVIEW Category: Primary context: config Related Commands Usage: link-keepalive interval <10-100> link-keepalive retries <3-10> Description: Configure UDLD on your switch. The first version of the command is used to configure keep-alive interval in seconds. Here 10 is 1 sec, 11 is 1.1 sec, and so on.
  • Page 352 [timeout <1-256>] - Seconds within which a response is required before the test is considered as failed; the default value is 5. Examples: (1) hp-switch# link-test 0800095F3AD6 COMMAND STRUCTURE ■ link-test -- MAC address of device to which to send link test. (MAC-ADDR) (p.
  • Page 353: Command Details

    Command Line Interface Reference Guide link-test COMMAND DETAILS mac (p. 351) timeout (p. 351) repetitions (p. 351) vlan (p. 351) ■ link-test MAC-ADDR MAC address of device to which to send link test. repetitions ■ link-test repetitions < 1 to 999 > Number of test packets to send <1-999>.
  • Page 354 lldp OVERVIEW Category: Device Discovery Primary context: config Related Commands show lldp (page 566) Usage:lldp ... Description: Configuration for LLDP parameter. Provides a standards-based method for enabling the switches to advertise themselves to adjacent devices and to learn about adjacent LLDP devices. You can also configure the Media Extension Discovery (MED) extension to LLDP for Voice over IP (VoIP) devices.
  • Page 355: Command Details

    Command Line Interface Reference Guide lldp ■ [no] lldp enable-notification -- Set the port for which notification should be enabled ([ethernet] PORT-LIST) (p. 356) ■ lldp fast-start-count < 1 to 10 > -- Set MED fast-start count in seconds (NUMBER) (p.
  • Page 356 Command Line Interface Reference Guide lldp Description: Configure various parameters related to lldp automatic provisioning. Next Available Option: radio-ports -- Configure various parameters related to automatic provisioning for the radio-port ■ application(p. 358) auto-vlan ■ [no] lldp auto-provision radio-ports auto-vlan Create a VLAN, with the specified VLAN id value, to be used as the radio-ports controller auto-generated VLAN.
  • Page 357 Command Line Interface Reference Guide lldp Specify the ca-value string. civic-addr ■ [no] lldp config [ETHERNET] PORT-LIST medPortLocation civic-addr Usage: lldp config <port-list> medPortLocation civic-str <COUNTRY-STR> <WHAT> <CA-TYPE> <CA-VALUE> Description: Specify the civic location-id information to be advertised. The total length of the TLV is 104. COUNTRY-STR : Set the Country Code of two characters.e.g.
  • Page 358 Command Line Interface Reference Guide lldp Next Available Options: basicTlvEnable < port_descr | system_name | system_descr | ... > -- Specify the Basic TLV List ■ to be advertised. (NUMBER) (p. 354) ipAddrEnable -- Set IP ADDR to be enabled.(p. 357) ■...
  • Page 359 Command Line Interface Reference Guide lldp fast-start-count ■ lldp fast-start-count < 1 to 10 > Usage: lldp fast-start-count <1-10> Description: Set MED fast-start count in seconds. Range: < 1 to 10 > holdtime-multiplier ■ lldp holdtime-multiplier < 2 to 10 > Usage: lldp holdtime-multiplier <2-10>...
  • Page 360 Command Line Interface Reference Guide lldp Specify the MED TLV List to be advertised. Supported Values: ■ capabilities -- Capability TLV ■ network_policy -- Network Policy TLV ■ location_id -- Location Id TLV ■ poe -- Poe TLV omodes ■ lldp admin-status [ETHERNET] PORT-LIST < TxOnly | RxOnly | Tx_Rx | ... > Set the operational mode: transmit | receive | transmit-receive | disable.
  • Page 361 Command Line Interface Reference Guide lldp Usage:[no] lldp run Description: Start or Stop LLDP on device. top-change-notify ■ [no] lldp top-change-notify [ETHERNET] PORT-LIST Usage:[no] lldp top-change-notify <port-list> Description: Set the port for which LLDP MED topology notification should be enabled. vlan-base ■...
  • Page 362 Usage: lockout-mac <MAC-ADDR> Description: Lock out a MAC address. Parameter: o MAC-ADDR - MAC address to lock down. Examples: (1) hp-switch# lockout-mac 0800095F3AD6 COMMAND STRUCTURE EXAMPLES Example: lockout-mac Drop all traffic to or from MAC address 0800095F3AD6: ProCurve# lockout-mac 0800095F3AD6...
  • Page 363: Overview

    OVERVIEW Category: Switch Management Primary context: manager Related Commands logging (page 363) the section called logging” (page 567) Usage: log [-a|-r|-m|-p|-w|-i|-d|substring ...] Description: Display log events. -a - Instructs the switch to display all recorded log events, which includes events from previous boot cycles. -r - Instructs the switch to display recorded log events in reverse order (most recent first).
  • Page 364 Command Line Interface Reference Guide Supported Values: ■ -M -- Major event class. ■ -P -- Performance event class. ■ -W -- Warning event class. ■ -I -- Information event class. ■ -D -- Debug event class. option ■ log OPTION Specify substring to match in log entry.
  • Page 365 logging OVERVIEW Category: Switch Management Primary context: config Related Commands log (page 361) the section called logging” (page 567) Usage: [no] logging <IP-ADDR> [control-descr <text string>] [no] logging priority-descr <text-string> [no] logging facility <facility> [no] logging severity <severity> [no] logging system-module <module> Description: Add an IP address to the list of receiving syslog servers.
  • Page 366: Command Details

    Command Line Interface Reference Guide logging COMMAND DETAILS control-descr (p. 364) ip-address (p. 365) severity (p. 366) facility (p. 364) priority-descr (p. 365) system-module (p. 366) control-descr ■ [no] logging IP-ADDR control-descr Usage: [no] logging <IP-ADDR> [control-descr <text string>] Description: A text string associated with the given IP-ADDr. 'no' replaces the string with a zero length string.
  • Page 367 Command Line Interface Reference Guide logging ■ local3 ■ local4 ■ local5 ■ local6 ■ local7 ip-address ■ [no] logging IP-ADDR Usage: [no] logging <IP-ADDR> [control-descr <text string>] [no] logging priority-descr <text-string> [no] logging facility <facility> [no] logging severity <severity> [no] logging system-module <module>...
  • Page 368 Command Line Interface Reference Guide logging severity ■ [no] logging severity < major | error | warning | ... > Usage: [no] logging severity <severity> Description: Event messages of the specified severity or higher will be sent to the syslog server. 'no' sends all severities. Supported Values: ■...
  • Page 369 Command Line Interface Reference Guide logging ■ lacp ■ dhcpr ■ stack ■ dma ■ SNTP ■ 802.1x ■ cdp ■ auth ■ tacacs ■ radius ■ ssh ■ NETINET ■ OSPF ■ XRRP ■ ssl ■ IpAddrMgr ■ MacAuth ■...
  • Page 370 log-numbers OVERVIEW Category: Primary context: config Related Commands Usage: [no] log-numbers Description: Enable the display of log event numbers when log is displayed via the CLI or via the menu. COMMAND STRUCTURE © 2009 Hewlett-Packard Development Company, L.P.
  • Page 371 logout OVERVIEW Category: Switch Management Primary context: operator Related Commands Usage: logout Description: Terminate this console/telnet session. COMMAND STRUCTURE © 2009 Hewlett-Packard Development Company, L.P.
  • Page 372 loop-protect OVERVIEW Category: Primary context: config Related Commands Usage: [no] loop-protect <...> [[ethernet] PORT-LIST [receiver-action <send-disable|no-disable>]| [transmit-interval <1-10>]| [disable-period <0-604800>]| [trap <loop-detected>] Description: Configure Loop protection on the switch. Parameters: o ethernet PORT-LIST - Port(s) to configure loop protection on. By default loop protection is disabled on a port o receiver-action - Sets the loop detected action per port.
  • Page 373 Command Line Interface Reference Guide loop-protect disable-timer ■ loop-protect disable-timer < 0 to 604800 > Set time in seconds to wait before attempting to reenable a port. Range: < 0 to 604800 > loop-detected ■ [no] loop-protect trap loop-detected generate trap when a loop is detected port-list ■...
  • Page 374 mac-age-time OVERVIEW Category: Device Discovery Primary context: config Related Commands Usage: mac-age-time <60-999960> Description: Set the MAC address table's age-out interval. A MAC address that is dynamically learned by the switch, stays in the switch's address table for a certain amount of time - the age-out interval, before being aged out.
  • Page 375 management-vlan OVERVIEW Category: config Primary context: config Related Commands the section called vlan” (page 603) Usage: [no] management-vlan VLAN-ID Description: Set the VLAN that is to be used as the management VLAN. COMMAND STRUCTURE EXAMPLES Example: management-vlan Set VLAN 100 as the management VLAN and add ports A1 and A2 to it: ProCurve(config)# management-vlan 100 ProCurve(config)# vlan 100 tagged a1 ProCurve(config)# vlan 100 tagged a2...
  • Page 376 max-vlans OVERVIEW Category: VLANs Primary context: config Related Commands Usage: max-vlans <1-2048> Description: Set the maximum number of VLANs on the switch. The default is 256. COMMAND STRUCTURE EXAMPLES Example: max-vlans NUMBER Reconfigure the switch to allow 10 VLANs: ProCurve(config)# max-vlans 10 Command will take effect after saving configuration and reboot.
  • Page 377: Menu

    Description: Change console user interface to menu system. COMMAND STRUCTURE EXAMPLES menu Enter the menu mode for switch configuration: ProCurve# menu HP ProCurve Switch 5400zl 1-Jan-2006 4:55:06 =======================- TELNET - MANAGER MODE -======================== Main Menu 1. Status and Counters... 2. Switch Configuration...
  • Page 378: Mesh

    mesh OVERVIEW Category: Redundant Paths Primary context: config Related Commands the section called mesh” (page 569) Usage: [no] mesh [ethernet] PORT-LIST Description: Configure the specified ports as being members of a mesh group. A mesh group can have up to 24 member ports. - VLAN support must be enabled before configuring a mesh group.
  • Page 379: Mirror

    mirror OVERVIEW Category: Primary context: config Related Commands Usage: 1) mirror <1-4> [ name NAME-STR ] port PORT-NUM 2) mirror <1-4> [ name NAME-STR ] remote ip SRC-IP-ADDR SRC-UDP-PORT DST-IP-ADDR 3) mirror <1-4> [ name NAME-STR ] remote ip SRC-IP-ADDR SRC-UDP-PORT DST-IP-ADDR 4) no mirror <1-4>...
  • Page 380: Command Details

    Command Line Interface Reference Guide mirror -- Remote mirroring destination configuration. (IP-ADDR) (p. 378) ■ mirror_session_src_udp < 1 to 65535 > -- Remote mirroring UDP encapsulation port. ■ (TCP/UDP-PORT) (p. 379) mirror_session_dest_ip -- Remote mirroring UDP encapsulation destination ip ■ addr.
  • Page 381 Command Line Interface Reference Guide mirror mirror_session_dest_ip ■ mirror < 1 to 4 > name NAME remote ip IP-ADDR < 1 to 65535 > IP-ADDR Remote mirroring UDP encapsulation destination ip addr. ■ mirror < 1 to 4 > remote ip IP-ADDR < 1 to 65535 > IP-ADDR Remote mirroring UDP encapsulation destination ip addr.
  • Page 382 Command Line Interface Reference Guide mirror ■ mirror < 1 to 4 > remote ip IP-ADDR < 1 to 65535 > Remote mirroring UDP encapsulation port. Range: < 1 to 65535 > Next Available Option: mirror_session_dest_ip -- Remote mirroring UDP encapsulation destination ip addr. (IP-ADDR) ■...
  • Page 383 mirror-port OVERVIEW Category: config Primary context: config Related Commands vlan (page 706) Usage: [no] mirror-port [[ethernet] PORT-NUM] Description: Define the mirror port for diagnostic purposes. The device ports or VLAN (if VLANs are enabled on the device) that will be monitored are defined through the 'monitor' command in either VLAN or interface context.
  • Page 384 Command Line Interface Reference Guide mirror-port cannot be a trunked port. The parameter must be specified, if the 'no' keyword is not used. Otherwise, it must not be present. © 2009 Hewlett-Packard Development Company, L.P.
  • Page 385 module OVERVIEW Category: config Primary context: config Related Commands the section called modules” (page 570) Usage: module <MODULE-NUM> type <MODULE-TYPE> Description: Configure type of the module. COMMAND STRUCTURE ■ module < 1 to 12 > type < J8701A | J8702A | J8705A | ... > -- The type of the module. (p.
  • Page 386 Command Line Interface Reference Guide module ■ J92yyA ■ J94wwa ■ JXXXXA ■ JXXXXB ■ JXXXXA © 2009 Hewlett-Packard Development Company, L.P.
  • Page 387 monitor OVERVIEW Category: Primary context: config Related Commands show monitor (page 570) Usage: [no] monitor mac MAC-ADDR <src | dst | both> mirror <1-4 | NAME-STR> Description: Set up traffic monitoring for a given MAC address. Network traffic with this MAC address as the source or destination is copied to the mirror port.
  • Page 388 Command Line Interface Reference Guide monitor number or (if configured) a name. Depending on how many sessions are configured on the switch, you can use the same command to configure a MAC address as mirroring criteria in up to four sessions. To identify session, you can enter either its name or number;...
  • Page 389: Overview

    page OVERVIEW Category: CLI Setup Primary context: manager Related Commands Usage: [no] page Description: Toggle paging mode. The printing is paused when a full page of text has been displayed, or continues until end of output. COMMAND STRUCTURE © 2009 Hewlett-Packard Development Company, L.P.
  • Page 390 password OVERVIEW Category: Switch Management Primary context: config Related Commands front-panel-security (page 190) show (page 511) Usage: [no] password <manager|operator|port-access|all> [user-name ASCII-STR] [<plaintext|sha1> ASCII-STR] Description: Set or clear local password/username for a given access level. Invoked without 'no', the command sets or changes existent password(s).
  • Page 391 Command Line Interface Reference Guide password Usage: [no] password <manager|operator|port-access|all> [user-name ASCII-STR] [<plaintext|sha1> ASCII-STR] Description: Set or clear local password/username for a given access level. Invoked without 'no', the command sets or changes existent password(s). If no password provided in the command, the user will be prompted to enter the new password twice.
  • Page 392 Command Line Interface Reference Guide password Set password ■ password < operator | manager > plaintext PASSWORD Set password ■ password < operator | manager > sha0 PASSWORD Set password ■ password < operator | manager > sha1 PASSWORD Set password plaintext ■...
  • Page 393 Command Line Interface Reference Guide password ■ password < operator | manager > sha1 Enter SHA-1 hash of password. Next Available Option: password -- Set password (ASCII-STR) (p. 389) ■ user-name ■ password < operator | manager > user-name USER-NAME Set username for the specified user category.
  • Page 394 A string upto 1024 characters in length can be specified. The default value is a 0 length string. o [source <IP_ADDR|VLAN-ID>] - The source IPv4 address or VLAN. Examples: (1) hp-switch# ping 1.1.1.1 COMMAND STRUCTURE ■ ping data-fill -- Ping data fill string (size <0-1024>).
  • Page 395: Examples

    Command Line Interface Reference Guide ping EXAMPLES Example: ping IP-ADDR Send an IP Ping request to the device that has IP address 10.10.10.1: ProCurve# ping 10.10.10.1 10.10.10.1 is alive, time = 50 ms COMMAND DETAILS data-fill (p. 393) ip-addr (p. 393) switch-num (p.
  • Page 396 Command Line Interface Reference Guide ping switch-num ■ ping NUMBER The stack number of the switch to ping. timeout ■ ping timeout < 1 to 60 > Ping timeout in seconds <1-60>. Range: < 1 to 60 > vlan ■ ping source VLAN-ID Source VLAN.
  • Page 397: Ping6

    ping6 OVERVIEW Category: Primary context: operator Related Commands ping (page 392) traceroute6 (page 695) Usage: ping6 <IPV6-ADDR|hostname> [repetitions <1-10000>] [timeout <1-60>] [data-size <0-65471>] [data-fill <0-1024>] [source <IPV6-ADDR|VLAN-ID>] Description: Send IPv6 ping request(s) to a device on the network. Parameters: o IPV6-ADDR - IPv6 address of device to ping. o hostname - Hostname of device to which to send IPv6 ping.
  • Page 398: Command Details

    Command Line Interface Reference Guide ping6 ProCurve# ping6 80fe::20b:cdff:fedd:9a62 ProCurve# ping6 fe80::5%vlan20 COMMAND DETAILS data-fill (p. 396) ip-addr (p. 396) source (p. 396) data-size (p. 396) ipv6-addr (p. 396) timeout (p. 397) host-name (p. 396) repetitions (p. 396) vlan (p. 397) data-fill ■...
  • Page 399 Command Line Interface Reference Guide ping6 Source address or VLAN. Next Available Options: vlan -- Source VLAN. (VLAN-ID) (p. 397) ■ ip-addr -- Source IPv6 address. (IPV6-ADDR) (p. 396) ■ timeout ■ ping6 timeout < 1 to 60 > Number of seconds within which a response is required from the destination host before the ping test times out.
  • Page 400: Policy

    policy OVERVIEW Category: Primary context: config Related Commands class (page 79) Usage: [no] policy <qos | pbr | mirror> <name> Description: Create a classifier policy and enter the policy context. Parameters are policy type and policy name. COMMAND STRUCTURE ■ [no] policy mirror -- Enter mirror type policy name (ASCII-STR) (p.
  • Page 401 Command Line Interface Reference Guide policy mirror ■ [no] policy mirror MIRROR Enter mirror type policy name name ■ policy resequence NAME Specify the policy name. Next Available Option: start-seq-num < 1 to 2147483646 > -- Specify the starting sequence number. (p.
  • Page 402: Port-security

    port-security OVERVIEW Category: Port Security Primary context: config Related Commands show (page 511) show (page 511) Usage: [no] port-security [ethernet] PORT-LIST [learn-mode <continuous|static|configured| limited-continuous|port-access>] [address-limit <1-32>] [mac-address MAC-ADDR [MAC-ADDR ...]] [action <none|send-alarm|send-disable>] [clear-intrusion-flag] Description: Set the port-security operation(s) for each port in port list. Parameters: o learn-mode <continuous|static|configured|limited-continuous|port-access>...
  • Page 403: Command Structure

    Command Line Interface Reference Guide port-security o action <none|send-alarm|send-disable> - Indicates the port security action the switch will take if an intruder is detected on the port. o clear-intrusion-flag - clears intrusion indicator for the ports specified in the command PORT-LIST. COMMAND STRUCTURE ■...
  • Page 404 Command Line Interface Reference Guide port-security ■ port-access -- Learn port-access authorized MAC address only. ■ limited-continuous -- Limited continuous MAC address learn mode. mac-addr ■ port-security [ETHERNET] PORT-LIST mac-address MAC-ADDR Authorized MAC address. mac-address ■ [no] port-security [ETHERNET] PORT-LIST mac-address Configure the address(es) authorized on the port(s).
  • Page 405: Power-over-ethernet

    power-over-ethernet OVERVIEW Category: Primary context: config Related Commands show power-over-ethernet (page 581) Usage: power [slot <SLOT-LIST>] [threshold <1-99>][optional-parameters] Description: Set Power Over Ethernet(poe) configuration parameters. threshold - set the power consumption percentage at which a trap should be sent. optional-parameters - Use <TAB> or <?> after entering power to see a list of all available options.
  • Page 406: Command Details

    Command Line Interface Reference Guide power-over-ethernet Example: power-over-ethernet threshold option Executing the following command sets the global notification threshold to 70% of available PoE power: ProCurve(config)# power-over-ethernet threshold 70 COMMAND DETAILS pre-std-detect (p. 404) redundancy_type (p. 404) threshold (p. 405) redundancy (p.
  • Page 407 Command Line Interface Reference Guide power-over-ethernet ■ full slot ■ power-over-ethernet slot SLOT-ID-RANGE Optional - Specify a valid powered-slot list for power threshold setting or omit to set all powered-slots. Next Available Option: threshold < 1 to 99 > -- Set the power consumption percentage at which a trap should be sent. ■...
  • Page 408: Primary-vlan

    primary-vlan OVERVIEW Category: config Primary context: config Related Commands the section called vlan” (page 603) Usage: primary-vlan VLAN-ID Description: Set the VLAN that is to be used as the primary VLAN. The primary VLAN comes into play for features such as stacking, DHCP, and TIMEP.
  • Page 409: Print

    print OVERVIEW Category: Primary context: manager Related Commands Usage: print COMMAND-STR Description: Execute a command and redirect its output to the device channel for current session. COMMAND STRUCTURE ■ print command -- Command to execute. Use quotes for multiword commands. (ASCII-STR) 407) COMMAND DETAILS command (p.
  • Page 410: P-wireless-services

    p-wireless-services OVERVIEW Category: Primary context: config Related Commands COMMAND STRUCTURE ■ p-wireless-services p-wireless-services -- (SLOT-ID) (p. 408) config -- (ASCII-STR) (p. 408) ■ COMMAND DETAILS config (p. 408) p-wireless-services (p. 408) config ■ p-wireless-services SLOT-ID config CONFIG p-wireless-services ■ p-wireless-services SLOT-ID Next Available Option: config -- (ASCII-STR)
  • Page 411: Qinq

    qinq OVERVIEW Category: Primary context: config Related Commands svlan (page 661) vlan (page 706) show qinq (page 582) Usage: [no] qinq [ <mixedvlan|svlan> [tag-type<tpid>] ] Description: Configure the device qinq mode. The command 'no qinq' disables qinq on the device (no tag-stacking). Changing qinq mode from one to another requires reboot to take effect and the device will boot up with a default configuration for the new qinq mode.
  • Page 412 Command Line Interface Reference Guide qinq svlan ■ qinq svlan Configure as svlan mode. Globally enables QinQ svlan mode, an S-VLAN only environment that supports port-based or s-tagged interfaces of the standard. Requires a reboot to take effect. Next Available Option: tag-type <...
  • Page 413: Overview

    OVERVIEW Category: Primary context: config Related Commands show (page 511) Usage: [no] qos ... Description: Configure Quality of Service (QoS) on the device. The command must be followed by a keyword defining a subdomain of the QoS parameters to configure. COMMAND STRUCTURE ■...
  • Page 414 Command Line Interface Reference Guide well-defined < af11 | af12 | af13 | ... > -- Define mapping between a DSCP ■ (Differentiated-Services Codepoint) value and an 802 (p. 434) priority < 0 | 1 | 2 | ... > -- Specify priority to use. (p.
  • Page 415 Command Line Interface Reference Guide well-defined < af11 | af12 | af13 | ... > -- Define mapping between a DSCP ■ (Differentiated-Services Codepoint) value and an 802 (p. 434) priority < 0 | 1 | 2 | ... > -- Specify priority to use. (p.
  • Page 416: Examples

    Command Line Interface Reference Guide well-defined < af11 | af12 | af13 | ... > -- Define Differentiated Services Codepoint to ■ which to map IP ToS. (p. 434) integer-codepoint < 0 to 63 > -- Specify the DSCP code-point in decimal. (p.
  • Page 417: Command Details

    Command Line Interface Reference Guide | Application Protocol | Port Apply rule | DSCP Priority -------- + ----------- ---------- + ------ ---------- | 23 DSCP | 000111 | 80 DSCP | 000101 | 914 DSCP | 000010 | 1001-2000 DSCP | 000010 COMMAND DETAILS 2-queues (p.
  • Page 418 Command Line Interface Reference Guide priority of the outgoing packets is defined by the Differentiated Services Codepoint mapping (see 'show qos dscp-map'). Using 'no' removes any priority assignment for this TCP/UDP service. If MAX-TCP/UDP-PORT is specified then the priority is applied to all TCP/UDP ports in the range from TCP/UDP-PORT to MAX-TCP/UDP-PORT.
  • Page 419 Command Line Interface Reference Guide name -- Specify DSCP->priority mapping name. (p. 426) ■ ■ qos < udp-port | tcp-port > TCP/UDP-PORT dscp < 0 to 63 > Specify the DSCP code-point in binary. Range: < 0 to 63 > ■...
  • Page 420 Command Line Interface Reference Guide Usage: [no] qos device-priority <IP-ADDR[/mask-or-prefix-length] | IPV6_ADDR[/CIDR mask length]> [dscp <0|1...63|af11|af12|af13|af21|af22|af23|af31|af32| af33|af41|af42|af43|ef|cs0..cs7|000000|000001...111111>| priority <0-7>] Description: Configure device-based priority. The priority can be set for IP packets from/to a particular IP Address. The specified priority value will be placed in the 802.1p priority field of outgoing tagged packets.
  • Page 421 Command Line Interface Reference Guide ■ qos device-priority IP-ADDR/mask-LENGTH dscp Specify DSCP policy to use. Next Available Options: integer-range < 0 to 63 > -- Specify the DSCP code-point in decimal. (p. 423) ■ binary-range < 0 to 63 > -- Specify the DSCP code-point in binary. (BINARY) (p.
  • Page 422 Command Line Interface Reference Guide Supported Values: Binary formatted value from 000000 to 111111 Next Available Options: integer-range < 0 to 63 > -- Specify the DSCP code-point in decimal. (p. 423) ■ binary-range < 0 to 63 > -- Specify the DSCP code-point in binary. (BINARY) (p.
  • Page 423 Command Line Interface Reference Guide Next Available Options: integer-range < 0 to 63 > -- Specify the DSCP code-point in decimal. (p. 423) ■ binary-range < 0 to 63 > -- Specify the DSCP code-point in binary. (BINARY) (p. 416) ■...
  • Page 424 Command Line Interface Reference Guide this DSCP policy as the method of traffic prioritization. The mapping also provides the profile for inbound classification and priority assignment based on an IPv4 packet's received IP ToS byte ONLY IF the user has also configured 'qos type-of-service diff-services' 'no qos dscp-map <codepoint>' will remove the settings for the specified codepoint from the running configuration.
  • Page 425 Command Line Interface Reference Guide Next Available Option: dscp -- Define Differentiated Services Codepoint to which to map IP ToS.(p. 418) ■ integer-range ■ qos device-priority IP-ADDR dscp < 0 to 63 > Specify the DSCP code-point in decimal. Range: < 0 to 63 > ■...
  • Page 426 Command Line Interface Reference Guide Specify the DSCP code-point in decimal. Range: < 0 to 63 > ■ qos < udp-port | tcp-port > ip-all TCP/UDP-PORT dscp < 0 to 63 > Specify the DSCP code-point in decimal. Range: < 0 to 63 > ■...
  • Page 427 Command Line Interface Reference Guide 0 (Normal) 2 (Low) 1 (Lowest) ipv4 ■ qos < udp-port | tcp-port > ipv4 Specify range of TCP/UDP ports from [to] which to prioritize traffic. Next Available Options: port-num -- TCP/UDP port from [to] which to prioritize traffic. (TCP/UDP-PORT) (p.
  • Page 428 Command Line Interface Reference Guide Next Available Options: dscp < 000000 | 000001 | 000010 | ... > -- Specify DSCP policy to use. (p. 418) ■ priority < 0 | 1 | 2 | ... > -- Specify priority to use. (p.
  • Page 429 Command Line Interface Reference Guide port-num ■ qos < udp-port | tcp-port > TCP/UDP-PORT TCP/UDP port from [to] which to prioritize traffic. Next Available Options: dscp < 000000 | 000001 | 000010 | ... > -- Specify DSCP policy to use. (p.
  • Page 430 Command Line Interface Reference Guide priority ■ qos device-priority IP-ADDR priority < 0 | 1 | 2 | ... > Specify priority to use. Supported Values: ■ 0 ■ 1 ■ 2 ■ 3 ■ 4 ■ 5 ■ 6 ■...
  • Page 431 Command Line Interface Reference Guide Specify priority to use. Supported Values: ■ 0 ■ 1 ■ 2 ■ 3 ■ 4 ■ 5 ■ 6 ■ 7 ■ qos dscp-map < 0 to 63 > priority < 0 | 1 | 2 | ... > Specify priority to use.
  • Page 432 Command Line Interface Reference Guide ■ 0 ■ 1 ■ 2 ■ 3 ■ 4 ■ 5 ■ 6 ■ 7 ■ qos < udp-port | tcp-port > range TCP/UDP-PORT TCP/UDP-PORT priority < 0 | 1 | 2 | ... > Specify priority to use.
  • Pa