ProCurve 5400zl Switches
Installation and Getting Started Guide
Reference Guide for HP ProCurve MSM7xx Controllers CLI
ProCurve MSM7xx Controllers CLI
Reference Guide

Advertising

   Also See for HP MSM7XX

   Related Manuals for HP MSM7XX

   Summary of Contents for HP MSM7XX

  • Page 1

    Reference Guide for HP ProCurve MSM7xx Controllers CLI ProCurve 5400zl Switches ProCurve MSM7xx Controllers CLI Installation and Getting Started Guide Reference Guide...

  • Page 3

    HP ProCurve MSM7xx Controllers CLI Reference Guide...

  • Page 4

    Hewlett-Packard. connection with the furnishing, performance, or use of this material. Publication Number The only warranties for HP products and services are set forth 5992-5933 in the express warranty statements accompanying such May 2009 products and services.

  • Page 5: Table Of Contents

    “*” and formatted in green like this: * new context * new command Introduction About this guide ......................1-2 Products covered....................1-2 HP ProCurve Product Naming ................1-2 Important terms .....................1-3 Typographical conventions ..................1-3 Command syntax ....................1-3 Management tool ....................1-4 HP ProCurve Networking support ................1-4 Before contacting support ................1-4...

  • Page 6: Table Of Contents

    ping ..........................2-2 ps ..........................2-3 quit...........................2-3 show license ......................2-3 show logging filtered.....................2-3 top..........................2-3 traceroute .......................2-3 Enable context......................2-4 reboot device......................2-4 show certificate .....................2-4 show certificate binding ..................2-4 iperf .........................2-4 ping ..........................2-4 arping ........................2-5 arp..........................2-5 end ...........................2-5 quit...........................2-5 rcapture........................2-5 show arp .........................2-5 show bridge ......................2-5 show bridge forwarding..................2-6 show dns cache......................2-6 show interfaces......................2-6...

  • Page 7: Table Of Contents

    Config context ......................2-9 * dhcp public ip default lease period..............2-9 * dhcp public ip subnet..................2-9 certificate........................2-9 certificate binding....................2-9 certificate revocation ....................2-9 end ...........................2-9 factory settings ....................2-10 interface ethernet ....................2-10 reboot device......................2-10 show certificate ....................2-10 show certificate binding ..................2-10 show config factory.....................2-10 username ......................2-10 interface ip......................2-11 interface pptp client-default................2-11...

  • Page 8: Table Of Contents

    web access interface gre ..................2-15 web access lan .....................2-15 web access vpn ....................2-15 dhcp mode ......................2-16 dhcp server ......................2-16 dhcp server default domain name ..............2-16 dhcp server default lease period ...............2-16 dhcp server default permanent lease period............2-16 dhcp server controller..................2-16 dhcp server controller discovery...............2-16 dhcp server logout html user ................2-17 dhcp server access centralized clients .............2-17...

  • Page 9: Table Of Contents

    snmp-server trap syslog-severity ...............2-23 snmp-server ......................2-23 snmp-server access port-1..................2-23 snmp-server allow ....................2-23 snmp-server chassis-id..................2-23 snmp-server contact....................2-24 snmp-server heartbeat period................2-24 snmp-server location...................2-24 snmp-server port....................2-24 snmp-server readonly..................2-24 snmp-server readwrite ..................2-25 snmp-server trap....................2-25 snmp-server trap community ................2-25 snmp-server trap destination ................2-25 snmp-server trap heartbeat ................2-25 snmp-server trap link-state.................2-26 snmp-server trap snmp-authentication.............2-26 * snmp-server version 1..................2-26...

  • Page 10: Table Of Contents

    soap-server ssl with client certificate ...............2-30 soap-server access interface gre................2-30 soap-server access lan ..................2-30 soap-server access vpn ..................2-31 snmp-server trap vpn-connection..............2-31 snmp-server trap syslog-matches ..............2-31 snmp-server trap syslog-matches regex ............2-31 snmp-server trap syslog-severity level..............2-31 snmp-server trap network-trace ................2-31 firmware-update automatic................2-32 firmware-update start ..................2-32 firmware-update time..................2-32 firmware-update uri ....................2-32...

  • Page 11: Table Of Contents

    service controller ap authentication refresh-rate..........2-37 service controller ap authentication source file..........2-38 service controller ap authentication source local...........2-38 service controller ap authentication source radius ........2-38 service controller discovery................2-38 service controller discovery interface internet-port ........2-38 service controller discovery interface lan-port ..........2-38 service controller primary..................2-39 service controller primary ip addr..............2-39 service controller priority...................2-39 service controller provisioning................2-39...

  • Page 12: Table Of Contents

    active-directory check attribute ................2-45 active-directory check user access ..............2-45 active-directory device name ................2-45 active-directory domain..................2-45 active-directory group..................2-46 active-directory group order ................2-46 active-directory join ....................2-46 show active-directory..................2-46 show active-directory group ................2-46 radius-server client....................2-46 user tracking ......................2-46 user tracking destination..................2-47 user tracking filter ....................2-47 user tracking port ....................2-47 persistent user information................2-47 persistent user information period..............2-47...

  • Page 13: Table Of Contents

    * authorize_net transaction key ................2-52 * ads presentation with frameset ..............2-52 authentication http ....................2-52 authentication https ....................2-52 noc access internet....................2-52 noc access vpn .....................2-53 noc allow ......................2-53 noc authentication....................2-53 secure login ......................2-53 * sslv2 authentication ..................2-53 noc access interface vlan..................2-54 noc access interface gre ..................2-54 ipass id ........................2-54 ipass name ......................2-54...

  • Page 14: Table Of Contents

    Default Session profile context ................2-61 accounting interim update .................2-61 idle timeout ......................2-61 maximum input octets ..................2-61 maximum input packets ..................2-61 maximum output octets..................2-62 maximum output packets...................2-62 maximum total octets ..................2-62 maximum total packets ..................2-62 nat one-to-one ......................2-62 session timeout ....................2-63 smtp redirection setup..................2-63 * public ip subnet ....................2-63 end .........................2-63...

  • Page 15: Table Of Contents

    access-controlled virtual ap ................2-71 active ........................2-71 chargeable user identity ..................2-72 control method ....................2-72 egress vlan ......................2-72 end time ........................2-72 idle timeout ......................2-72 max user sessions....................2-72 password.......................2-73 regular profile ......................2-73 regular virtual ap ....................2-73 session timeout ....................2-73 subscription plan ....................2-73 username ......................2-74 Internet interface context ..................2-75 end .........................2-75 duplex ........................2-75...

  • Page 16: Table Of Contents

    pppoe unnumbered .....................2-81 ip nat outside source static ................2-81 ip rip authentication key-chain ................2-82 ip rip authentication mode .................2-82 ip rip authentication string.................2-82 passive-interface ....................2-82 router rip.......................2-82 ip address alternate .....................2-83 LAN IP interface context...................2-84 end .........................2-84 ip address......................2-84 ip address management ..................2-84 passive-interface ....................2-84 router rip.......................2-84 RADIUS remote configuration context ..............2-86...

  • Page 17: Table Of Contents

    wpa-psk.........................2-91 authentication server request radius cui ............2-91 dot1x session page ....................2-91 wireless filters......................2-91 wireless filters mac .....................2-92 wireless filters rule input..................2-92 wireless filters rule output .................2-92 wireless filters type .....................2-93 mac authentication accounting .................2-94 mac authentication accounting radius profile ..........2-94 mandatory authentication ..................2-94 mac authentication radius profile ..............2-94 mac authentication remote ................2-94...

  • Page 18: Table Of Contents

    html redirection ....................2-100 local nas id......................2-100 bandwidth......................2-100 bandwidth default rates ..................2-100 bandwidth default rates maximum ..............2-100 radius accounting realms .................2-101 radius authentication realms ................2-101 identify stations by ip only ................2-101 location-aware group ..................2-101 location-aware called-station-id content ............2-101 dhcp relay ......................2-101 dhcp relay active....................2-102 dhcp relay circuit id ..................2-102 dhcp relay remote id ..................2-102...

  • Page 19: Table Of Contents

    radius-server key 2 ....................2-108 radius-server message-authenticator ..............2-108 radius-server name ....................2-108 radius-server nasid ....................2-109 radius-server timeout ..................2-109 radius-server timeout ..................2-109 radius-server force-nas-port-to-vlanid ............2-109 radius-server realm....................2-109 radius-server realm name .................2-109 DHCP server context ....................2-110 end ........................2-110 active ........................2-110 gateway .......................2-110 range........................2-110 permanent leases ....................2-110 GRE interface context .....................2-111 end force ......................2-111 gre name ......................2-111...

  • Page 20: Table Of Contents

    Syslog destination context ..................2-115 active ........................2-115 logging facility....................2-115 logging host ......................2-115 logging prefix .....................2-115 name ........................2-115 end ........................2-116 level ........................2-116 level ........................2-116 matches.......................2-116 message.......................2-116 message.......................2-117 process ........................2-117 process ........................2-117 PPTP client interface context.................2-118 active ........................2-118 pptp client credentials ..................2-118 pptp client domain name ..................2-118 pptp client server address ................2-118 end ........................2-118 ip nat........................2-118...

  • Page 21: Table Of Contents

    online time limit....................2-123 online time limit....................2-123 start time......................2-123 subscription plan name..................2-123 * public ip reservation ..................2-123 * public ip subnet ....................2-123 * SNMP user context....................2-125 * access level .....................2-125 * end........................2-125 * password ......................2-125 * security ......................2-125 * user name ......................2-125 * SNMP notification receiver context..............2-126 * community ......................2-126 * end........................2-126...

  • Page 22: Table Of Contents

    contact ........................2-131 location .......................2-131 product type .......................2-131 Controlled Network AP Group context..............2-132 execute action....................2-132 show config factory...................2-132 end ........................2-132 config........................2-132 group name......................2-132 virtual ap binding....................2-132 Controlled Network Base Group context .............2-133 execute action....................2-133 show config factory...................2-133 config........................2-133 end ........................2-133 Controlled Network context...................2-134 end ........................2-134 * interface wireless ...................2-134 local mesh group ....................2-134...

  • Page 23: Table Of Contents

    inherit untagged stp...................2-138 bridge protocol ieee vlan ..................2-138 inherit vlan stp ....................2-138 inherit local mesh qos ..................2-138 local mesh ip qos profile...................2-138 local mesh qos mechanism................2-139 enable vsc services ....................2-139 inherit service availability ................2-139 inherit l3subnets ....................2-139 l3subnet.......................2-139 * inherit switch ports ..................2-139 Virtual AP Binding context ..................2-141 dual radio binding....................2-141 egress vlan ......................2-141...

  • Page 24: Table Of Contents

    provisioning local mesh port................2-145 provisioning local mesh security..............2-145 provisioning local mesh security..............2-145 provisioning local mesh type ................2-146 country code ......................2-146 Provisioning discovery context ................2-147 end ........................2-147 dns name......................2-147 dns provisioning ....................2-147 inherit ........................2-147 dns domain name....................2-147 dns server ......................2-148 discovery provisioning..................2-148 ip address......................2-148 ip provisioning ....................2-148 CN Wireless interface context ................2-149...

  • Page 25: Table Of Contents

    end ........................2-153 inherit ........................2-153 RADIUS Profile context ..................2-155 end ........................2-155 inherit ........................2-155 radius nas id .......................2-155 Local mesh profile context ..................2-156 security .......................2-156 security mode.....................2-156 security psk ......................2-156 security wep .......................2-156 dynamic mode....................2-156 mesh id........................2-157 allowed downtime .....................2-157 minimum snr ......................2-157 snr cost per hop ....................2-157 initial discovery time..................2-157 active ........................2-157...

  • Page 26: Table Of Contents

    * ingress traffic type..................2-161 * mac authentication..................2-162 * mac filter list ....................2-162 * port name ......................2-162 * port type ......................2-162 * power over ethernet..................2-162 * priority ......................2-162 * priority lookup....................2-163 * quarantine vlan ....................2-163 * vlan ........................2-163 * List of MAC addresses context ................2-164 * end........................2-164 * entry .........................2-164 * list name ......................2-164...

  • Page 27: Table Of Contents

    Alphabetical list of commands In this alphabetical list, new to 5.3.x commands are preceded * authentication server radius 2-160 by an asterisk “*” and formatted in green like this: authentication server radius 2-90 authentication server request radius cui 2-91 * command 2-xxx * authorize_net installation id 2-51 accept connection 2-159 * authorize_net payment url 2-52...

  • Page 28: Table Of Contents

    * dhcp public ip subnet 2-9 * dynamic vlan 2-161 dhcp relay 2-101 * egress rate 2-161 dhcp relay 2-17 egress unauthenticated 2-88 dhcp relay access centralized clients 2-18 egress vlan 2-128 dhcp relay access lan 2-18 egress vlan 2-141 dhcp relay active 2-102 egress vlan 2-141 dhcp relay circuit id 2-102...

  • Page 29: Table Of Contents

    inherit 2-159 layer3 mobility 2-98 inherit 8021x 2-137 level 2-116 inherit l3subnets 2-139 level 2-116 inherit local mesh qos 2-138 level 2-142 inherit sensor 2-136 level 2-143 inherit service availability 2-139 * list name 2-164 * inherit switch ports 2-139 local id 2-113 inherit untagged stp 2-138 local mesh group 2-134...

  • Page 30: Table Of Contents

    noc access interface vlan 2-54 qos 2-98 noc access internet 2-52 * quarantine vlan 2-163 noc access vpn 2-53 quit 2-3 noc allow 2-53 quit 2-5 noc authentication 2-53 radio active 2-152 noc ssl ca-certificate 2-59 radio active 2-158 noc ssl certificate 2-59 radius accounting realms 2-101 notify user location changes 2-60 radius authentication realms 2-101...

  • Page 31: Table Of Contents

    service controller ap authentication credentials 2-37 snmp-server access vpn 2-27 service controller ap authentication enable 2-37 snmp-server allow 2-23 service controller ap authentication file 2-37 snmp-server chassis-id 2-23 service controller ap authentication radius-server 2-37 snmp-server contact 2-24 service controller ap authentication refresh-rate 2-37 snmp-server heartbeat period 2-24 service controller ap authentication source file 2-38 snmp-server location 2-24...

  • Page 32: Table Of Contents

    subscription plan name 2-123 * switch port 2-135 syslog 2-135 system accounting 2-51 termination action 2-68 top 2-3 traceroute 2-3 transmit key 2-90 transmit power 2-150 transport page 2-59 upstream diffserv tagging 2-99 use access-list 2-56 use access-list unauth 2-56 * user 2-126 user defined attribute 2-69 * user name 2-125...

  • Page 33: Table Of Contents

    Chapter 1: Introduction Introduction Contents About this guide ......................1-2 Products covered....................1-2 HP ProCurve Product Naming ................1-2 Important terms .....................1-3 Typographical conventions ..................1-3 HP ProCurve Networking support ................1-4 Online documentation ....................1-5 Configuring CLI support....................1-5 SSH client support....................1-6 Entering strings ......................1-6 Context hierarchy ......................1-7 Sample CLI session ......................1-8...

  • Page 34: About This Guide, Products Covered, Hp Procurve Product Naming

    Introduction About this guide About this guide This guide explains how to work with the Command Line Interface (CLI) on HP ProCurve Networking MSM7xx Controllers. Products covered This guide covers the following products: Model Part MSM710 Access Controller J9328A MSM710 Mobility Controller...

  • Page 35: Important Terms, Typographical Conventions, Command Syntax

    Important terms The following terms are used in this guide. Term Description Refers to any HP ProCurve Networking MSM3xx or MSM4xx Access Point. service controller Refers to any HP ProCurve Networking MSM7xx Controller, including both Access Controller and Mobility Controller variants.

  • Page 36: Management Tool, Hp Procurve Networking Support, Before Contacting Support

    Service Controller >> Status. HP ProCurve Networking support HP ProCurve Networking offers support 24 hours a day, seven days a week through a number of automated electronic services. See the Customer Support/Warranty booklet included with your product.

  • Page 37: Online Documentation, Configuring Cli Support

    Introduction Online documentation Online documentation For the latest documentation, visit the HP ProCurve Networking manuals Web page at: www.procurve.com/manuals. Configuring CLI support Using the service controller management tool, open the CLI configuration page. Select Service controller >> Management > CLI.

  • Page 38: Ssh Client Support, Entering Strings

    Introduction Entering strings „ SSH connections to the CLI can be made on any active interface. Support for each interface must be explicitly enabled under Security. „ The login credentials for SSH connections are the same as those defined under Manager account.

  • Page 39: Context Hierarchy

    Introduction Context hierarchy Context hierarchy CLI commands are grouped into functional contexts. The following table show the context hierarchy and the command used to switch from the parent context: Context hierarchy Command to switch from parent context View context (This is the first context. No command is needed.) Enable context enable Config context...

  • Page 40: Sample Cli Session, File Transfer, A. The Service Controller Gets The File Using A Url

    Introduction Sample CLI session Sample CLI session This sample CLI session shows you how to set the WAN port to use a static IP address, disable NAT, and add an alternate IP address. (The CLI prompt is shown in bold.) CLI>...

  • Page 41: Cli Commands

    Chapter 2: CLI commands CLI commands...

  • Page 42: View Context, Arping, Enable, Iperf, Nslookup, Ping

    CLI commands View context Path: View This is the root of the command tree. arping Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl arping [ -AbDfhqUV] [ -c <count>] [ -w <deadline>] [ -s <source>] -I <interface> <destination> Pings a destination on a device interface using ARP packets. enable Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl enable...

  • Page 43: Quit, Show License, Show Logging Filtered, Traceroute

    CLI commands Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl Displays all running processes. quit Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl quit Quits the CLI. show license Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show license (eula | gpl | other) Displays license information.

  • Page 44: Enable Context, Reboot Device, Show Certificate, Show Certificate Binding, Iperf, Ping

    CLI commands Enable context Path: View > Enable This context provides access to various utilities. reboot device Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl reboot device Restarts the system. show certificate Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show certificate Display current certificates.

  • Page 45: Arping, Quit, Rcapture, Show Arp, Show Bridge

    CLI commands arping Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl arping [ -AbDfhqUV] [ -c <count>] [ -w <deadline>] [ -s <source>] -I <interface> <destination> Pings a destination on a device interface using ARP packets. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl arp [-evn] [-H <type>] [-i if] ?- [<hostname>] arp [-v] [-i if] -d <hostname>...

  • Page 46: Show Bridge Forwarding, Show Dns Cache, Show Interfaces, Show Ip Route, Show System Info

    CLI commands show bridge forwarding Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show bridge forwarding Show bridge forwarding information. show dns cache Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show dns cache [<serial>] Show DNS cache entries. Specify a serial number to display detailed information. show interfaces Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show interfaces...

  • Page 47: Show Web Content, Show Client Log, Show Radius Statistics, Show Radius Users, Show Users

    CLI commands show web content Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show web content Show all files inside the access points detected nearby. show client log Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show client log [<macaddr>] Display client station log. Enter the MAC address to display more details for a specific client station.

  • Page 48: Controlled Network, Show Controlled Network Config

    CLI commands controlled network Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl controlled network (ap | group | base) [<name>] [<mac>] Create/use the controlled network entity. show controlled network config Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show controlled network config Print configuration for all Controlled Network entities.

  • Page 49: Config Context, Dhcp Public Ip Default Lease Period, Dhcp Public Ip Subnet, Certificate, Certificate Binding

    CLI commands Config context Path: View > Enable > Config This is the root context for all configuration commands. dhcp public ip default lease period Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dhcp public ip default lease period <number> Sets the default lease time for the DHCP public IP subnet pool. dhcp public ip subnet Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dhcp public ip subnet...

  • Page 50: Factory Settings, Interface Ethernet, Reboot Device, Show Certificate, Show Certificate Binding, Show Config Factory, Username

    CLI commands factory settings Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl factory settings Resets the system configuration to factory default settings. interface ethernet Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl interface ethernet (port-1|port-2) Switches to the specified Ethernet interface context. reboot device Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl reboot device...

  • Page 51: Interface Ip, Interface Pptp Client-default, Interface Gre, Virtual Ap, Show Subscription Plan, Subscription Plan

    CLI commands interface ip Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl interface ip (lan | wan) Switches to the specified IP interface context. interface pptp client-default Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl interface pptp client-default Switches to the PPTP client interface context. interface gre Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl interface gre <name>...

  • Page 52: Mac List, Show Mac List, Ipsec Policy, Admin Local Authentication, Admin Radius Authentication

    CLI commands mac list Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl mac list <name> Edit a MAC list. no mac list <name> Delete a MAC list by name. show mac list Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show mac list [<name>] Display current MAC list, or one list in detail.

  • Page 53: Ip Http Port, Ip Https Port, Snmp-server Trap Certificate-expired, Snmp-server Trap Certificate-expires-soon, Snmp-server Trap Web-fail

    CLI commands ip http port Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ip http port <number> Sets the port number to use for HTTP access to the service controller. Parameters Port number. Range: 1 - 65535. <number> Description HTTP connections made to this port are met with a warning and the browser is redirected to the secure web server port.

  • Page 54: Snmp-server Trap Web-login, Snmp-server Trap Web-logout, Web Admin Kickout, Web Allow, World-mode Dot11 Country Code

    CLI commands snmp-server trap web-login Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server trap web-login Send a trap each time an administrator login is accepted. no snmp-server trap web-login Do not send a trap each time an administrator login is accepted. snmp-server trap web-logout Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server trap web-logout...

  • Page 55: Web Access Internet-port, Web Access Lan-port, Web Access Interface Vlan, Web Access Interface Gre

    CLI commands web access internet-port Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl web access internet-port Enables access to the management tool via the Internet port. no web access internet-port Blocks access to the management tool via the Internet port. web access lan-port Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl web access lan-port Enables access to the management tool via the LAN port.

  • Page 56: Dhcp Mode, Dhcp Server, Dhcp Server Default Domain Name, Dhcp Server Default Lease Period

    CLI commands no web access vpn Blocks access to the management tool via a VPN connection. dhcp mode Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dhcp mode (server | relay | none) Sets whether the service controller operates as a DHCP server or DHCP relay agent. dhcp server Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dhcp server lan...

  • Page 57: Dhcp Server Logout Html User, Dhcp Server Access Centralized Clients, Dhcp Server Access Lan

    CLI commands no dhcp server controller discovery Do not send the list of controller IP addresses with DHCP answers. dhcp server logout html user Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dhcp server logout html user Logout HTML user upon discover request. no dhcp server logout html user Do not logout HTML user upon discover request.

  • Page 58: Dhcp Relay Remote Id, Dhcp Relay Access Centralized Clients, Dhcp Relay Access Lan

    CLI commands dhcp relay remote id Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dhcp relay remote id <string> Sets the Option 82 remote ID. no dhcp relay remote id Clears the Option 82 remote ID. dhcp relay access centralized clients Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dhcp relay access centralized clients Listen for DHCP requests from centralized access-controlled client stations.

  • Page 59: Clock Auto Adjust Dst, Clock Timezone, Clock Use Custom Dst Rules, Ntp Protocol, Ntp Server

    CLI commands clock auto adjust dst Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl clock auto adjust dst Automatically adjust clock for daylight savings changes. no clock auto adjust dst Do not automatically adjust clock for daylight savings changes. clock timezone Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl clock timezone <gmtdiff>...

  • Page 60: Clock Custom Dst Begins Format, Clock Custom Dst Ends, Clock Custom Dst Ends Format

    CLI commands Parameters Day of the month. Range 1 - 31. <day> Weekday. Valid values are: "sun", "mon", "tue", "wed", "thu", "fri", "sat". <weekday> Month. Valid values are: "jan", "feb", "mar", "apr", "may", "jun", "jul", "aug", <month> "sep", "oct", "nov", "dec". Time as hh:mm[:ss].

  • Page 61: Ntp Server, Ntp Server Failure Trap, Config-update Automatic, Config-update Operation, Config-update Time

    CLI commands Rule of the form: The first [Weekday] on or after the [Day]th of [Month] at <following-date> [Time]. Rule of the form: The first [Weekday] on or before the [Day]th of [Month] <preceding-date> at [Time]. ntp server Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ntp server <index><host>...

  • Page 62: Config-update Uri, Config-update Weekday, Snmp-server Trap Config-change, Snmp-server Trap Config-update, Logging Destination

    CLI commands Parameters Time as hh:mm:ss. For example: 15:44:00. <time> config-update uri Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl config-update uri <uri> Sets the URI where the service controller will download or upload the configuration file. no config-update uri Clears the configuration file URI. config-update weekday Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl config-update weekday (everyday | monday | tuesday | wednesday | thursday |...

  • Page 63: Snmp-server Trap Syslog-severity, Snmp-server, Snmp-server Access Port-1, Snmp-server Allow, Snmp-server Chassis-id

    CLI commands snmp-server trap syslog-severity Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server trap syslog-severity Set the severity level of syslog messages that will trigger a trap. no snmp-server trap syslog-severity Do not send this trap. snmp-server Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server Enables the SNMP agent.

  • Page 64: Snmp-server Contact, Snmp-server Heartbeat Period, Snmp-server Location, Snmp-server Port, Snmp-server Readonly

    CLI commands snmp-server contact Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server contact <email> Specifies contact information. no snmp-server contact Deletes contact information. Parameters Email address. <email> snmp-server heartbeat period Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server heartbeat period <seconds> Sets the interval between sending heartbeat traps.

  • Page 65: Snmp-server Readwrite, Snmp-server Trap, Snmp-server Trap Community, Snmp-server Trap Destination, Snmp-server Trap Heartbeat

    CLI commands snmp-server readwrite Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server readwrite <community> Sets the read-write community string. no snmp-server readwrite Deletes the read-write community string. snmp-server trap Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server trap Enables support for SNMP traps. no snmp-server trap Disables support for SNMP traps.

  • Page 66: Snmp-server Trap Link-state, Snmp-server Trap Snmp-authentication, Snmp-server Version 1, Snmp-server Version 2c, Snmp-server Version 3

    CLI commands snmp-server trap link-state Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server trap link-state Send a trap when the link state changes on any interface. no snmp-server trap link-state Do not send this trap. snmp-server trap snmp-authentication Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server trap snmp-authentication Send a trap each time an SNMP request fails to supply the correct community name.

  • Page 67: Snmp-server Access Interface Gre, Snmp-server Access Port-2, Snmp-server Access Lan, Snmp-server Access Vpn

    CLI commands Parameters Specifies the name of the VLAN. <name> snmp-server access interface gre Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server access interface gre <name> Enables access to SNMP via the specified GRE tunnel. no snmp-server access interface gre <name> Removes access to SNMP via the specified GRE tunnel.

  • Page 68: Snmp-server Trap Satellite-unreachable, Snmp-server User, Snmp-server Notification Receiver, Soap-server, Soap-server Access Interface Vlan

    CLI commands snmp-server trap satellite-unreachable Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server trap satellite-unreachable Send a trap when a satellite cannot be reached. no snmp-server trap satellite-unreachable Ignore unreachable satellites. snmp-server user Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server user <name>...

  • Page 69: Soap-server Access Port-1, Soap-server Access Port-2, Soap-server Allow, Soap-server Http Authentication, Soap-server Http Authentication Password

    CLI commands soap-server access port-1 Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl soap-server access port-1 Enables SOAP access on the downstream port. no soap-server access port-1 Blocks SOAP access on the downstream port. soap-server access port-2 Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl soap-server access port-2 Enables SOAP access on the upstream port.

  • Page 70: Soap-server Http Authentication Username, Soap-server Port, Soap-server Ssl, Soap-server Ssl With Client Certificate

    CLI commands soap-server http authentication username Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl soap-server http authentication username Set the SOAP server HTTP authentication username. soap-server port Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl soap-server port <port number> Sets the port the service controller will use to respond to SOAP requests. Parameters SOAP port number.

  • Page 71: Soap-server Access Vpn, Snmp-server Trap Vpn-connection, Snmp-server Trap Syslog-matches, Snmp-server Trap Syslog-matches Regex

    CLI commands soap-server access vpn Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl soap-server access vpn Enables access to the management tool via a VPN connection. no soap-server access vpn Blocks access to the management tool via a VPN connection. snmp-server trap vpn-connection Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server trap vpn-connection Send a trap when a user establishes a VPN connection with the service controller.

  • Page 72: Firmware-update Automatic, Firmware-update Start, Firmware-update Time, Firmware-update Uri

    CLI commands firmware-update automatic Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl firmware-update automatic Enables scheduled firmware upgrades. no firmware-update automatic Disables scheduled firmware upgrade. The service controller can automatically retrieve and install firmware from a local or remote URL at preset times. By placing service controller firmware on a web or ftp server, you can automate the update process for multiple units.

  • Page 73: Firmware-update Weekday, Snmp-server Trap Firmware-update, Ip Name-server, Ip Name-server Cache, Ip Name-server Dynamic

    CLI commands firmware-update weekday Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl firmware-update weekday (everyday | monday | tuesday | wednesday | thursday | friday | saturday | sunday) Sets the day when the scheduled firmware upgrade will take place. snmp-server trap firmware-update Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl snmp-server trap firmware-update Send a trap on firmware update.

  • Page 74: Ip Name-server Interception, Ip Name-server Switch-on-servfail, Ip Name-server Switch-over, Ip Name-server Logout-info

    CLI commands no ip name-server dynamic Disables dynamic DNS assignment. ip name-server interception Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ip name-server interception Intercepts all DNS requests from users and relays them to configured servers. no ip name-server interception Process DNS requests addressed to this device only. ip name-server switch-on-servfail Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ip name-server switch-on-servfail...

  • Page 75: Radius-server Profile, Access Controller, Certificate Ipsec Ca, Certificate Ipsec Local, Certificate Ipsec Revocation

    CLI commands radius-server profile Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl radius-server profile <name> Creates a new RADIUS profile or switches to the RADIUS context with the specified profile name. no radius-server profile <name> Deletes the specified RADIUS profile. access controller Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl access controller Switches to the access controller context.

  • Page 76: Certificate Ssl, Session Profile Default, Session Profile, Show Session Profile, Remote Configuration, Discovery Protocol

    CLI commands „ ftp://host/path certificate ssl Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl certificate ssl <uri> <password> Loads a new SSL certificate using the URI. session profile default Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl session profile default Switches to the session profile context. session profile Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl...

  • Page 77: Discovery Protocol Device-id, Service Controller Ap Authentication Credentials, Service Controller Ap Authentication Enable

    CLI commands discovery protocol device-id Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl discovery protocol device-id <name> Overwrite the device-id field of information packets (the service controller serial number is not used). no discovery protocol device-id Do not overwrite the device-id field of information packets (use the service controller serial number).

  • Page 78: Service Controller Ap Authentication Source File, Service Controller Ap Authentication Source Local

    CLI commands service controller ap authentication source file Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl service controller ap authentication source file Enables the use of a file authentication source. no service controller ap authentication source file Disables the use of a file authentication source. service controller ap authentication source local Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl service controller ap authentication source local...

  • Page 79: Service Controller Primary, Service Controller Primary Ip Addr, Service Controller Priority, Service Controller Provisioning

    CLI commands no service controller discovery interface lan-port Allow discovery on the LAN interface. service controller primary Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl service controller primary Become the Primary service controller. no service controller primary Become a secondary service controller. service controller primary ip addr Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl service controller primary ip addr <ip address>...

  • Page 80: Bandwidth Control Internet-port Low, Bandwidth Control Internet-port Max-rate

    CLI commands bandwidth control internet-port low Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl bandwidth control internet-port low <min-tx-%> <min-rx-%> <max-tx-%> <max-rx-%> Sets the bandwidth rates (Tx minimum, Tx maximum, Rx minimum, and Rx maximum) for traffic classed as Low. bandwidth control internet-port max-rate Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl bandwidth control internet-port max-rate<transmit>)<receive>) Sets the maximum transmit and receive rates on the Internet port in kbps.

  • Page 81: Bandwidth Control Internet-port Normal, Bandwidth Control Internet-port Very-high, Ip Route Gateway, Firewall Mode

    CLI commands bandwidth control internet-port normal Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl bandwidth control internet-port normal <min-tx-%> <min-rx-%> <max-tx-%> <max­ rx-%> Sets the bandwidth rates (Tx minimum, Tx maximum, Rx minimum, and Rx maximum) for traffic classed as Normal. bandwidth control internet-port very-high Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl bandwidth control internet-port very-high <min-tx-%>...

  • Page 82: Show User Profiles, Show User Profiles Details, User Profile, Renew User Profile Subscription, Dot1x Reauth

    CLI commands show user profiles Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show user profiles [<pattern>] Display current local users. show user profiles details Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show user profiles details <name> Display detailed information about one user. user profile Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl user profile <name>...

  • Page 83: Dot1x Supplicant Timeout, Dynamic Key, Dynamic Key Interval, Key Chain, Config-version, Radius-server Accounting Session

    CLI commands no dot1x reauth terminate Disabled this option to block client traffic during re-authentication and only activate traffic again if authentication succeeds. dot1x supplicant timeout Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl 802.1x supplicant time-out <seconds> Sets the 802.1X supplicant time-out. Parameters time-out in seconds.

  • Page 84: Radius-server Client, Radius-server Local Eap-peap, Radius-server Local Eap-tls, Radius-server Local Eap-ttls, Radius-server Local Pap

    CLI commands radius-server client Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl radius-server client Enable radius clients list. no radius-server client Disable radius clients list. radius-server local eap-peap Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl radius-server local eap-peap Allow EAP-PEAP. no radius-server local eap-peap Disallow EAP-PEAP.

  • Page 85: Show Radius-server, Active-directory Check Attribute, Active-directory Check User Access, Active-directory Device Name, Active-directory Domain

    CLI commands no radius-server ssid detection nas-id Do not use NAS-ID for SSID detection. show radius-server Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl show radius-server Display current RADIUS server configuration. active-directory check attribute Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active-directory check attribute <ldapattr>...

  • Page 86: Active-directory Group, Active-directory Group Order, Active-directory Join, Show Active-directory, Show Active-directory Group, Radius-server Client

    CLI commands active-directory group Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active-directory group <name> Create or go to an Active Directory group. no active-directory group <name> Remove an Active Directory group. active-directory group order Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active-directory group order <number>...

  • Page 87: User Tracking Destination, User Tracking Filter, User Tracking Port, Persistent User Information

    CLI commands no user tracking Disable capture of usage data. user tracking destination Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl user tracking destination <host> Specify to where the detailed syslog packets should be sent. user tracking filter Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl user tracking filter <filter>...

  • Page 88: Igmp Proxy, Igmp Proxy Downstream Interface, Igmp Proxy Upstream Interface, Rf-id Aeroscout

    CLI commands igmp proxy Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl igmp proxy Enable IGMP proxy. no igmp proxy Disable IGMP proxy. igmp proxy downstream interface Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl igmp proxy downstream interface <interface> Set the downstream IGMP port. igmp proxy upstream interface Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl igmp proxy upstream interface <interface>...

  • Page 89: Access Controller Context, Ads Presentation, Ads Presentation Interval, Station Allocate Source Ip Address

    CLI commands Access Controller context Path: View > Enable > Config > Access Controller All global access controller configuration takes place here. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. ads presentation Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ads presentation Enable advertisement display at regular intervals for authenticated users.

  • Page 90: Station Free Access, Station Http Proxy Support, Station Idle Detection

    CLI commands This option enables users to access the wireless network without reconfiguring their networking settings. For example, by default the service controller creates the wireless network on the subnet 192.168.1.0. If a client station is pre-configured with the address 10.10.4.99, it will still be able to connect to the service controller without changing its address, or its settings for DNS server and default gateway.

  • Page 91: System Accounting, Remember Delay, Remember Html Users, Worldpay Installation Id, Worldpay Payment Response Password

    CLI commands system accounting Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl system accounting Enables RADIUS accounting support. no system accounting Disables RADIUS accounting support. remember delay Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl remember delay <number> Length of time to remember users. Users who return later than this delay interval, are presented with the login page instead of being re-authenticated.

  • Page 92: Authorize_net Payment Url, Authorize_net Transaction Key, Ads Presentation With Frameset, Authentication Http, Authentication Https

    CLI commands authorize_net payment url Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl authorize_net payment url <string> Set the payment URL for the Authorize.Net payment service. authorize_net transaction key Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl authorize_net transaction key <string> Set the transaction key for the Authorize.Net payment service. ads presentation with frameset Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ads presentation with frameset...

  • Page 93: Noc Access Vpn, Noc Allow, Noc Authentication, Secure Login, Sslv2 Authentication

    CLI commands noc access vpn Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl noc access vpn Accept authentication requests on VPN connections. no noc access vpn Do not accept authentication requests on VPN connections. noc allow Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl noc allow <ip address>/<mask>...

  • Page 94: Noc Access Interface Vlan, Noc Access Interface Gre, Ipass Id, Ipass Name

    CLI commands noc access interface vlan Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl noc access interface vlan <name> Adds the specified VLAN to the list of interfaces that authentication requests are accepted on. no noc access interface vlan <name> Removes the specified VLAN from the list of interfaces that authentication requests are accepted noc access interface gre Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl noc access interface gre <name>...

  • Page 95: Wispr Login Url, Wispr Logoff Url, Access-list

    CLI commands wispr login url Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl wispr login url <url> Specifies the WISPr login url assigned to the service controller. no wispr login url Deletes the WISPr login url assigned to the service controller. wispr logoff url Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl wispr logoff url <url>...

  • Page 96: Use Access-list, Use Access-list Unauth, Config File

    CLI commands „ IP address or domain name (up to 107 characters in length) „ Subnet address. Include the network mask as follows: address/subnet mask For example: 192.168.30.0/24 „ Use the keyword all to match any address. „ Use the keyword none if the protocol does not take an address range (ICMP for example). Specify a specific port to check or a port range as follows: <port>...

  • Page 97: Http Proxy Upstream, Https Ssl Certificate, Mac-address, Fail Page, Goodbye Url

    CLI commands http proxy upstream Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl http proxy upstream <string> Specifies the host:port of the HTTP Proxy Upstream server. no http proxy upstream Do not use an HTTP Proxy Upstream server. https ssl certificate Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl https ssl certificate <url>...

  • Page 98: Ipass Login Url, Login Error Url, Login Page, Login Url, Logo

    CLI commands ipass login url Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ipass login url <url> Specifies the URL of the IPass login page. The service controller will automatically redirect users with IPass client software to this page. no ipass login url No IPass login URL.

  • Page 99: Messages, Noc Ssl Ca-certificate, Noc Ssl Certificate, Session Page, Transport Page

    CLI commands messages Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl messages <url> Specifies the URL of a new message file. no messages No new messages file. Use default. noc ssl ca-certificate Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl noc ssl ca-certificate <url> Specifies the URL of the certificate from the certificate authority (CA) that issued the NOC certificate.

  • Page 100: Welcome Url, Notify User Location Changes

    CLI commands welcome url Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl welcome url <url> Specifies the URL of a welcome page. no welcome url No welcome page. notify user location changes Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl notify user location changes Notify RADIUS on location changes.

  • Page 101: Default Session Profile Context, Accounting Interim Update, Idle Timeout, Maximum Input Octets, Maximum Input Packets

    CLI commands Default Session profile context Path: View > Enable > Config > Default Session profile This context provides attributes that define settings for user sessions. Most of these attributes can be overridden by adding settings to a user RADIUS account. In this context, all commands add an attribute to the list, in some cases (access-list &...

  • Page 102: Maximum Output Octets, Maximum Output Packets, Maximum Total Octets, Maximum Total Packets, Nat One-to-one

    CLI commands maximum output octets Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl maximum output octets <value> Sets the maximum output limit in octets for all users that do not have a specific limit set in their profile. no maximum output octets Removes this attribute.

  • Page 103: Session Timeout, Smtp Redirection Setup, Public Ip Subnet

    CLI commands session timeout Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl session timeout <number> Sets the default session timeout for all users that do not have a specific limit set in their profile. no session timeout Removes this attribute. smtp redirection setup Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl <hostname>[:<port>t][,<username>,<password>] Sets basic SMTP redirection info: hostname[:port][,username,password].

  • Page 104: Smtp Redirection

    CLI commands smtp redirection Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl smtp redirection Enables SMTP proxy support. no smtp redirection Disables SMTP proxy support. 2-64...

  • Page 105: Session Profile Context, Access Controlled, Access List, Accounting Interim Update, Arp Polling Interval

    CLI commands Session profile context Path: View > Enable > Config > Session profile Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. access controlled Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl access controlled Set profile as ’access controlled’. no access controlled Set profile as not ’access controlled’.

  • Page 106: Arp Polling Max Count, Bandwidth Level, Egress Vlan, Idle Timeout

    CLI commands use arp polling interval Use the ARP polling interval. no use arp polling interval Do not use the ARP polling interval. arp polling max count Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl arp polling max count <number> Set the polling ARP count. use arp polling max count Use the polling ARP count.

  • Page 107: Intercept Traffic, Max Input Rate, Max Output Rate, Nat One-to-one

    CLI commands no use idle timeout Removes this attribute. intercept traffic Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl intercept traffic Turn on legal traffic interception. no intercept traffic Turn off legal traffic interception. use intercept traffic Use legal traffic interception. no use intercept traffic Do not use legal traffic interception.

  • Page 108: Session Profile, Smtp Redirection Setup, Termination Action

    CLI commands use nat one-to-one Use this attribute. no use nat one-to-one Do not use this attribute. session profile Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl session profile <name> Change this profile’s name. smtp redirection setup Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl smtp redirection setup <hostname>[:<port>t][,<username>,<password>] Sets basic SMTP redirection info: hostname[:port][,username,password].

  • Page 109: User Defined Attribute, Public Ip Subnet

    CLI commands user defined attribute Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl user defined attribute <name>:<type>:<vendor-id>:<vendor-type>:<format>:<value> Add a new user defined attribute. no user defined attribute <description> Add a new user-defined attribute. Parameters Friendly name for this attribute. <name> Numerical RADIUS type, 26 is Vendor-Specific. <type>...

  • Page 110: User Profile Context

    CLI commands User Profile context View > Enable > Config > User Profile Use this context to modify settings for a specific user in the local user list. Example plan and profile configuration usig CLI commands: subscription plan "silver" use online time limit online time limit 60 minutes restrictions no use initial login time allocation...

  • Page 111: Access Controlled, Access-controlled Profile, Access-controlled Virtual Ap, Active

    CLI commands access controlled Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl access controlled Make this user access controlled. no access controlled Make this user not access controlled. access-controlled profile Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl access-controlled profile <name> Use this session profile for this account. no access-controlled profile <name>...

  • Page 112: Chargeable User Identity, Control Method, Egress Vlan, End Time, Idle Timeout, Max User Sessions

    CLI commands chargeable user identity Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl chargeable user identity <id> Set the CUI. use chargeable user identity Use the CUI. no use chargeable user identity Do not use the CUI. control method Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl control method (subscription | endtime | none) How is this account controlled? egress vlan...

  • Page 113: Password, Regular Profile, Regular Virtual Ap, Session Timeout, Subscription Plan

    CLI commands no max user sessions This user doesn’t have a maximum concurrent sessions limit. password Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl password <secret> Change the password for this user. regular profile Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl regular profile <name>...

  • Page 114: Username

    CLI commands no subscription plan Delete a subscription plan. username Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl username <name> Change the name for this user. 2-74...

  • Page 115: Internet Interface Context, Duplex, Speed, Interface Vlan

    CLI commands Internet interface context Path: View > Enable > Config > Internet interface This context provides commands for configuring Internet. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. duplex Supported on: MSM710 MSM730 MSM750 MSM760 duplex (auto | half | full) Sets the duplex mode on Internet.

  • Page 116: Ipsec Vlan Interface

    CLI commands ipsec vlan interface Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ipsec vlan interface <name> Specifies which VLAN is used by IPsec. no ipsec vlan interface Do not use a VLAN for IPsec. 2-76...

  • Page 117: Lan Interface Context, Duplex, Speed, Interface Vlan

    CLI commands LAN interface context Path: View > Enable > Config > LAN interface This context provides commands for configuring LAN. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. duplex Supported on: MSM710 MSM730 MSM750 MSM760 duplex (auto | half | full) Sets the duplex mode on LAN.

  • Page 118

    CLI commands ipsec vlan interface Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ipsec vlan interface <name> Specifies which VLAN is used by IPsec. no ipsec vlan interface Do not use a VLAN for IPsec. 2-78...

  • Page 119: Wan Ip Interface Context, Pppoe Client User, Ip Address Mode, Ip Address

    CLI commands WAN IP interface context Path: View > Enable > Config > WAN IP interface This context provides commands for configuring various IP-networking related settings. pppoe client user Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl pppoe client user <username> <password> Sets the PPPoE username and password.

  • Page 120: Nat Limit Port Range, Nat Limit Port Range Size, Ip Address Dhcp Client-id, Pppoe Auto-reconnect

    CLI commands ip nat Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ip nat Enables Network Address Translation. no ip nat Disables Network Address Translation. nat limit port range Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl nat limit port range Reserves a range of TCP and UDP ports for each user starting at port 5000. no nat limit port range Use any port for NAT.

  • Page 121: Pppoe Mru, Pppoe Mtu, Pppoe Unnumbered, Ip Nat Outside Source Static

    CLI commands no pppoe auto-reconnect The service controller will not automatically attempt to reconnect if the connection is lost. pppoe mru Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl pppoe mru <bytes> Specifies the maximum receive unit. Changes to this parameter should only be made according to the recommendations of your ISP. Incorrectly setting this parameter can reduce the throughput of your Internet connection.

  • Page 122: Ip Rip Authentication Key-chain, Ip Rip Authentication Mode, Ip Rip Authentication String, Passive-interface, Router Rip

    CLI commands IP address of the device on the internal network that traffic will be routed <internal addr> The protocol port number that the incoming traffic will be mapped to. <internal-port> ip rip authentication key-chain Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ip rip authentication key-chain <name>...

  • Page 123: Ip Address Alternate

    CLI commands ip address alternate Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ip address alternate <ip address> [<ip address>] Assigns an alternate IP addresses to the Internet port. The address must be valid on the Internet. no ip address alternate <ip address> [<ip address>] Deletes the specified alternate IP address.

  • Page 124: Lan Ip Interface Context, Ip Address, Ip Address Management, Passive-interface, Router Rip

    CLI commands LAN IP interface context Path: View > Enable > Config > LAN IP interface This context provides commands for configuring various IP-networking related settings for the LAN interface. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. ip address Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ip address <ip address>/<mask>...

  • Page 125

    CLI commands no router rip Disable RIP. 2-85...

  • Page 126: Radius Remote Configuration Context, Active, Credentials, Interval, Radius Server Profile

    CLI commands RADIUS remote configuration context Path: View > Enable > Config > RADIUS remote configuration Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. active Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active Use a RADIUS server to fetch configuration information for the public access network. no active Do not use a RADIUS for remote configuration.

  • Page 127: Virtual Ap Context, Virtual Ap Name, Access Control

    CLI commands Virtual AP context Path: View > Enable > Config > Virtual AP This context provides commands for configuring Virtual AP profiles (VAP (VSC)s). By default one profile exists with the name "". This is the default profile and cannot be deleted. The following example shows how to add a new VAP (VSC) with egress mapped to an existing VLAN named "hongkong": CLI(config)# virtual ap newap...

  • Page 128: Force Centralize Data, Ingress Interface, Egress Unauthenticated, Guest-mode

    CLI commands force centralize data Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl force centralize data Force centralization of wireless client traffic when the AP is L2 connected to the LAN port of the service controller. no force centralize data Automatically determine if centralization of wireless client traffic is required. ingress interface Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ingress vlan <name>...

  • Page 129: Max-association, Ssid Name, Vlan, Encryption Key 1, Encryption Key Format

    CLI commands max-association Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl max-association <stations> Sets the maximum number of clients stations that can associate with this VAP (VSC). Number of client stations. Range: 1 - 255. <stations> ssid name Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ssid name <name>...

  • Page 130: Transmit Key, Authentication Server Access Controller, Authentication Server Accounting, Authentication Server Accounting Radius Profile

    CLI commands ASCII keys are much weaker than carefully chosen hex keys. You can ascii include ASCII characters between 32 and 126, inclusive, in the key. However, note that not all client stations support non-alphanumeric characters such as spaces, punctuation, or special symbols in the key. transmit key Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl transmit key <key number>...

  • Page 131: Wpa-psk, Authentication Server Request Radius Cui, Dot1x Session Page, Wireless Filters

    CLI commands wpa-psk Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl wpa-psk <key> Sets the WPA preshared key. no wpa-psk Deletes the WPA preshared key. Parameters Specify a key that is between 8 and 63 alphanumeric characters in length. It <key> is recommended that the preshared key be at least 20 characters long, and be a mix of letters and numbers.

  • Page 132: Wireless Filters Mac, Wireless Filters Rule Input, Wireless Filters Rule Output

    CLI commands wireless filters mac Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl wireless filters mac <mac> Sets the MAC address of the upstream device to send traffic to. no wireless filters mac <mac> Deletes the MAC address of the upstream device to send traffic to. wireless filters rule input Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl wireless filters rule input <rule>...

  • Page 133: Wireless Filters Type

    CLI commands wireless filters type Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl wireless filters type (mac | gateway | rules) Sets the type of wireless security filter to use. Parameters Traffic is forwarded to an upstream device with a specific MAC address. Wireless security filters use the default definitions.

  • Page 134: Mac Authentication Accounting, Mac Authentication Accounting Radius Profile, Mandatory Authentication, Mac Authentication Radius Profile

    CLI commands mac authentication accounting Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl mac authentication accounting Enables RADIUS accounting for this VAP (VSC). no mac authentication accounting Disables RADIUS accounting for this VAP (VSC). mac authentication accounting radius profile Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl mac authentication accounting radius profile <name>...

  • Page 135: Mac Authentication Local, Mac Authentication, Html Authentication, Html Authentication Accounting, Html Authentication Accounting Radius Profile

    CLI commands mac authentication local Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl mac authentication local Sets MAC-based authentication to use the local user list to validate the MAC addresses of client stations. no mac authentication local Do not use the local user list for MAC-based authentication. mac authentication Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl mac authentication...

  • Page 136: Html Authentication Active-directory, Html Authentication Local, Html Authentication Radius, Html Authentication Radius Profile

    CLI commands html authentication active-directory Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl html authentication active-directory Use Active Directory (AD) to authenticate users. no html authentication active-directory Do not use Active Directory (AD) to authenticate users. html authentication local Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl html authentication local Validate HTML logins using the local user list.

  • Page 137: Active, Beacon Dtim Count, Beacon Transmit Power, Data Rate, Public Forwarding, Access Lan Stations

    CLI commands active Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active Enable this VAP (VSC). no active Disable this VAP (VSC). beacon dtim count Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl beacon dtim count <number> Defines the DTIM period in the beacon. Client stations use the DTIM to wake up from low-power mode to receive multicast traffic.

  • Page 138: Fast Authentication, Layer3 Mobility, Add Ip-qos Profile, Delete Ip-qos Profile All, Delete Ip-qos Profile

    CLI commands no access lan stations Blocks traffic exchange between wireless and LAN stations. fast authentication Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl fast authentication Enables WPA2 opportunistic key caching. no fast authentication Disables WPA2 opportunistic key caching. layer3 mobility Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl layer3 mobility Enables Layer 3 mobility.

  • Page 139: Upstream Diffserv Tagging

    CLI commands no qos Disables QoS for this profile. Four traffic queues are provided based on the WME standard. In order of priority, these queues are: „ 1: Voice traffic „ 2: Video traffic „ 3: Best effort data traffic „...

  • Page 140: Wmm Advertising, Html Redirection, Local Nas Id, Bandwidth, Bandwidth Default Rates, Bandwidth Default Rates Maximum

    CLI commands wmm advertising Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl wmm advertising Enables WMM information element advertising. no wmm advertising Disables WMM information element advertising. html redirection Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl html redirection Enables support for HTML logins. no html redirection Disables support for HTML logins.

  • Page 141: Radius Accounting Realms, Radius Authentication Realms, Identify Stations By Ip Only, Location-aware Group

    CLI commands radius accounting realms Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl radius accounting realms Use RADIUS accounting realms. no radius accounting realms Do not use RADIUS accounting realms. radius authentication realms Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl radius authentication realms Use RADIUS authentication realms.

  • Page 142: Dhcp Relay Active, Dhcp Relay Circuit Id, Dhcp Relay Remote Id, Dhcp Relay Subnet

    CLI commands dhcp relay active Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dhcp relay active The dhcp relay is enabled on the VAP (VSC). no dhcp relay active The dhcp relay is not enabled on the VAP (VSC). dhcp relay circuit id Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dhcp relay circuit id <string>...

  • Page 143: Dhcp Server Gateway, Dhcp Server Range, Dhcp Server Subnet, Radius-framed-protocol-attribute, Security

    CLI commands no dhcp server dns Reset the domain name server provided to DHCP clients. dhcp server gateway Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dhcp server gateway <ip address> Sets the default gateway provided to DHCP clients. no dhcp server gateway Reset the default gateway provided to DHCP clients.

  • Page 144

    CLI commands Parameters No wireless security. none This option enables support for wireless users with WEP client software. wep This option enables support for wireless users with 802.1X client software. 802.1x The service controller supports 802.1x client software that uses EAP-TLS, EAP-TTLS, EAP-SIM, and PEAP.

  • Page 145: Vlan Interface Context, Ip Address, Ip Address Mode

    CLI commands VLAN interface context Path: View > Enable > Config > Internet interface > VLAN interface View > Enable > Config > LAN interface > VLAN interface This context provides commands for configuring Virtual LANs (VLANs). In this context, VLANs can be added or edited.

  • Page 146: Vlan Name, Ip Default-gateway

    CLI commands vlan name Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl vlan name <name> Change the name of this VLAN interface. ip default-gateway Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl ip default-gateway <ip address> Sets the default gateway for this VLAN. no ip default-gateway Removes the default gateway for this VLAN.

  • Page 147: Radius Context, Radius-server Accounting Port, Radius-server Alternate Hosts, Radius-server Authentication Method, Radius-server Authentication Port

    CLI commands RADIUS context Path: View > Enable > Config > RADIUS This context provides commands for configuring RADIUS profiles. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. radius-server accounting port Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl radius-server accounting port <number>...

  • Page 148: Radius-server Deadtime, Radius-server Host, Radius-server Key 2, Radius-server Message-authenticator, Radius-server Name

    CLI commands radius-server deadtime Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl radius-server deadtime <seconds> Sets the retry interval for access and accounting requests that time-out. If no reply is received within this interval, the service controller switches between the primary and secondary RADIUS servers (if defined).

  • Page 149: Radius-server Nasid, Radius-server Timeout, Radius-server Force-nas-port-to-vlanid, Radius-server Realm, Radius-server Realm Name

    CLI commands radius-server nasid Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl radius-server nasid <id> Sets the network access server ID you want to use for the service controller. By default, the serial number of the service controller is used. The service controller includes the NAS-ID attribute in all packets that it sends to the RADIUS server.

  • Page 150: Dhcp Server Context, Active, Gateway, Range, Permanent Leases

    CLI commands DHCP server context Path: View > Enable > Config > DHCP server This context lets you configure DHCP server settings. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. active Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active This range is enabled.

  • Page 151: Gre Interface Context, End Force, Gre Name, Ip Address, Peer Ip Address, Remote Ip Address

    CLI commands GRE interface context Path: View > Enable > Config > GRE interface Details of the GRE interface. end force Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end [force] Quits the GRE context. gre name Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl gre name <name>...

  • Page 152: Ipsec Policy Context, Active, Authentication, Cipher, Dns Domain, Dns Server

    CLI commands IPsec policy context Path: View > Enable > Config > IPsec policy This context allows editing of IPSec configuration settings. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. active Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active Enables policy.

  • Page 153: Incoming Nat, Incoming Traffic Network, Interface, Local Id, Mode, Outgoing Traffic Network

    CLI commands no dns server Resets the DNS server for this policy. incoming nat Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl incoming nat Enables NAT for incoming traffic. no incoming nat Disables NAT for incoming traffic. incoming traffic network Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl incoming traffic network <ip address>/<mask>...

  • Page 154: Peer Ip Address, Perfect Forward Secrecy, Preshared Key

    CLI commands peer ip address Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl peer ip address (<ip address>| any ) Set the peer ip address for this policy. perfect forward secrecy Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl perfect forward secrecy Enable PFS.

  • Page 155: Syslog Destination Context, Active, Logging Facility, Logging Host, Logging Prefix, Name

    CLI commands Syslog destination context Path: View > Enable > Config > Syslog destination This context provides commands for configuring Syslog destinations. active Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active Enables logging to the current destination. no active Disables logging to the current destination. logging facility Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl logging facility (local0 | local1 | local2 | local3 | local4 | local5 | local6 |...

  • Page 156: Level, Matches, Message

    CLI commands Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. level Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl level Enables filtering of the log file by severity level. no level Disables filtering of the log file by severity level. level Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl level (lower | higher) (debug | info | notice | warning | error | critical |...

  • Page 157: Message, Process

    CLI commands no message Disables filtering of the log file message field. message Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl message (matches | notmatches) <regex> Use this filter to include log messages. Use a regular expression to define the match criteria for the log file message field.

  • Page 158: Pptp Client Interface Context, Active, Pptp Client Credentials, Pptp Client Domain Name

    CLI commands PPTP client interface context Path: View > Enable > Config > PPTP client interface This is the PPTP client context. active Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active Sets PPTP client connection to ’up’. no active Sets PPTP client connection to ’down’. pptp client credentials Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl pptp client credentials <name>...

  • Page 159: Pptp Client Auto Route Discovery, Pptp Client Lcp Echo, Passive-interface, Router Rip

    CLI commands pptp client auto route discovery Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl pptp client auto route discovery Enables auto-route discovery. no pptp client auto route discovery Disables auto-route discovery. pptp client lcp echo Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl pptp client lcp echo Enables PPTP LCP echo.

  • Page 160: Keychain Context, Key Chain Name

    CLI commands Keychain context Path: View > Enable > Config > Keychain Manage a keychain: a collection of keys. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end End current context. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl key <number> Enter new key. no key <number>...

  • Page 161: Keys Context, Key-string

    CLI commands Keys context Path: View > Enable > Config > Keychain > Keys Edit a key, as part of a keychain. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end End current context. key-string Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl key-string <name>...

  • Page 162: Subscription Plan Context, Daily Restriction, End Time, Initial Login Time Allocation

    CLI commands Subscription plan context Path: View > Enable > Config > Subscription plan Details about a subscription plan. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end End current context. daily restriction Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl daily restriction <from> <to> Sets the daily restrictions hours.

  • Page 163: Online Time Limit, Start Time, Subscription Plan Name, Public Ip Reservation, Public Ip Subnet

    CLI commands online time limit Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl online time limit Use the online time limit. no online time limit Do not use the online time limit. online time limit Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl online time limit <number>...

  • Page 164

    CLI commands no public ip subnet Removes this attribute. use public ip subnet Use this attribute. no use public ip subnet Do not use this attribute. 2-124...

  • Page 165: Snmp User Context, Access Level, Password, Security, User Name

    CLI commands SNMP user context Path: View > Enable > Config > SNMP user This context provides commands for configuring SNMP user. access level Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl access level (read-only | read-write) Specifies the access level for this SNMP user. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Returns to a previous context.

  • Page 166: Snmp Notification Receiver Context, Community, Port, Receiver, User, Version

    CLI commands SNMP notification receiver context Path: View > Enable > Config > SNMP notification receiver This context provides commands for configuring SNMP notification receiver. community Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl community <community> Specifies the community for this SNMP notification receiver. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Returns to a previous context.

  • Page 167: Active Directory Group Context, Access Controlled, Access-controlled Profile, Access-controlled Virtual Ap

    CLI commands Active Directory Group context Path: View > Enable > Config > Active Directory Group Contains information about attributes to send when a user is related to an Active Directory group. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context.

  • Page 168: Active-directory Group Name, Active, Egress Vlan, Regular Profile, Regular Virtual Ap

    CLI commands active Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active Enable this user account. no active Disable this user account. active-directory group name Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl active-directory group name <name> Change the name for this user. egress vlan Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl...

  • Page 169

    CLI commands use regular virtual ap Use only allowed Virtual APs (VSCs) for this profile. no use regular virtual ap Use any Virtual AP (VSC) for this profile. 2-129...

  • Page 170: Controlled Network Ap Context, Execute Action, Execute System Action, Show Config Factory, Ap Group, Config

    CLI commands Controlled Network AP context Path: View > Enable > Controlled Network AP Contains commands for controlled network AP configuration. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Switches to parent context. execute action Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl execute action (synchronize | accept-suspicious | accept-product | rediscover) Execute an action on the entity’s devices.

  • Page 171: Contact, Location, Product Type

    (map-320 | map-330 | map-625 | map-630 | msm410 | msm317 ) Set the product type of the AP that you are about to pre-configure. Some legacy product names are still used. They correspond to HP ProCurve Networking product names as follows: Name in syntax...

  • Page 172: Controlled Network Ap Group Context, Execute Action, Show Config Factory, Config, Group Name

    CLI commands Controlled Network AP Group context Path: View > Enable > Controlled Network AP Group Contains commands for controlled network AP Group configuration. execute action Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl execute action (synchronize | accept-suspicious | accept-product | rediscover) Execute an action on the entity’s devices.

  • Page 173: Controlled Network Base Group Context, Execute Action, Show Config Factory, Config

    CLI commands Controlled Network Base Group context Path: View > Enable > Controlled Network Base Group Contains commands for controlled network Base Group configuration. execute action Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl execute action (synchronize | accept-suspicious | accept-product | rediscover) Execute an action on the entity’s devices.

  • Page 174: Controlled Network Context, Interface Wireless, Local Mesh Group, Local Mesh Provisioning Group, Provisioning Connectivity

    CLI commands Controlled Network context Path: View > Enable > Controlled Network AP > Controlled Network View > Enable > Controlled Network AP Group > Controlled Network View > Enable > Controlled Network Base Group > Controlled Network Contains commands for controlled network configuration. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end interface wireless...

  • Page 175: Switch Port, Syslog, Sensor Server Name, Sensor Server Id, Sensor Discovery Mode

    CLI commands switch port Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl switch port <name> Switch to the ethernet port context. syslog Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl syslog Switch to syslog context. sensor server name Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl sensor server name <name>...

  • Page 176: Sensor Network Detector, Inherit Sensor, Dynamic Key, Dynamic Key Interval, Dot1x Reauth

    CLI commands „ If there are any firewalls between the service controller and the RF Manager Server, then TCP and UDP ports 3851 must be open bidirectionally. „ If using the hostname option, an entry must be created on the network DNS server that points to the IP address of the RF Manager Server.

  • Page 177: Dot1x Reauth Period, Dot1x Reauth Terminate, Dot1x Supplicant Timeout, Inherit 8021x, Bridge Protocol Ieee

    CLI commands dot1x reauth period Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dot1x reauth period (15m | 30m | 1h | 2h | 4h | 8h | 12h) Sets the 802.1X reauthentication interval. Client stations must reauthenticate when this interval expires.

  • Page 178: Inherit Untagged Stp, Bridge Protocol Ieee Vlan, Inherit Vlan Stp, Inherit Local Mesh Qos

    CLI commands inherit untagged stp Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl inherit untagged stp Inherit untagged spanning tree protocol settings from parent. no inherit untagged stp Do not inherit untagged spanning tree protocol settings from parent. bridge protocol ieee vlan Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl bridge protocol ieee vlan Enable the bridge spanning tree protocol for VLANs.

  • Page 179: Local Mesh Qos Mechanism, Enable Vsc Services, Inherit Service Availability, Inherit L3subnets, L3subnet

    CLI commands local mesh qos mechanism Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl local mesh qos mechanism (disabled | 802.1p | very_high | high | normal | low | diffsrv | tos | ip_qos) Set the QoS priority mechanism. enable vsc services Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl enable vsc services Enable wireless services when the service controller is unreachable.

  • Page 180

    CLI commands no inherit switch ports Inherit settings from the switch ports. 2-140...

  • Page 181: Virtual Ap Binding Context, Dual Radio Binding, Egress Vlan, Location Aware

    CLI commands Virtual AP Binding context Path: View > Enable > Controlled Network AP Group > Virtual AP Binding Configuration for VAP Bindings dual radio binding Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dual radio binding (radio1 | radio2) Enables radio binding. no dual radio binding (radio1 | radio2) Disables radio binding.

  • Page 182: Syslog Context, Message, Process, Level

    CLI commands Syslog context Path: View > Enable > Controlled Network AP > Controlled Network > Syslog View > Enable > Controlled Network AP Group > Controlled Network > Syslog View > Enable > Controlled Network Base Group > Controlled Network > Syslog Set basic configuration for entity’s logging.

  • Page 183: Matches, Level, Inherit

    CLI commands no level Disables filtering of the log file by severity level. Parameters Debug-level messages. debug Informational messages. info Normal, but significant condition. notice Warning conditions. warning Error conditions. error Critical conditions. critical Action must be taken immediately. alert System is unusable.

  • Page 184: Provisioning Connectivity Context, Inherit, Interface, Interface Provisioninig, Ip Assignation, Vlan

    CLI commands Provisioning connectivity context Path: View > Enable > Controlled Network AP > Controlled Network > Provisioning connectivity View > Enable > Controlled Network AP Group > Controlled Network > Provisioning connectivity View > Enable > Controlled Network Base Group > Controlled Network > Provisioning connectivity Set basic configuration for entity’s provisioning connectivity.

  • Page 185: Vlan, Static Ip, Provisioning Local Mesh Group, Provisioning Local Mesh Key, Provisioning Local Mesh Port

    CLI commands vlan Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl vlan <id> Set the provisioning vlan id. no vlan Disable use of the provisioning vlan. static ip Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl static ip <ip> <netmask> <gateway> Set the static IP address. provisioning local mesh group Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl...

  • Page 186: Provisioning Local Mesh Type, Country Code

    CLI commands no provisioning local mesh security Disable the use of local mesh security. provisioning local mesh type Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl provisioning local mesh type (a | b | g | bg) Set the wireless mode for local mesh . country code Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl country code <code>...

  • Page 187: Provisioning Discovery Context, Dns Name, Dns Provisioning, Inherit, Dns Domain Name

    CLI commands Provisioning discovery context Path: View > Enable > Controlled Network AP > Controlled Network > Provisioning discovery View > Enable > Controlled Network AP Group > Controlled Network > Provisioning discovery View > Enable > Controlled Network Base Group > Controlled Network > Provisioning discovery Set basic configuration for entity’s provisioning discovery.

  • Page 188: Dns Server, Discovery Provisioning, Ip Address, Ip Provisioning

    CLI commands dns server Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dns server <ip> Add a DNS server to the list. no dns server <ip> Delete a DNS server from the list. discovery provisioning Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl discovery provisioning Enable discovery provisioning.

  • Page 189: Cn Wireless Interface Context, Dot11, Distance

    CLI commands CN Wireless interface context Path: View > Enable > Controlled Network AP > Controlled Network > CN Wireless interface View > Enable > Controlled Network AP Group > Controlled Network > CN Wireless interface View > Enable > Controlled Network Base Group > Controlled Network > CN Wireless interface Configuration for controlled-mode wireless interfaces.

  • Page 190: Transmit Power, Multicast Rate, Dot11 Automatic Frequency, Dot11 Automatic Frequency Period, Dot11 Automatic Frequency Time

    CLI commands If you have installed multiple service controllers, reducing the receiver sensitivity of the service controller from its maximum will help to reduce the amount of crosstalk between the wireless stations to better support roaming clients. By reducing the receiver sensitivity, client stations will be more likely to connect with the nearest access point.

  • Page 191: Dot11 Automatic Transmit-power, Dot11 Automatic Transmit-power Period, Antenna Bidirectionnal, Antenna Gain, Autochannel Skip, Station Distance

    CLI commands dot11 automatic transmit-power Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dot11 automatic transmit-power Enables automatic transmit power selection. no dot11 automatic transmit-power Disables automatic transmit power selection. dot11 automatic transmit-power period Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dot11 automatic transmit-power period (1h | 2h | 4h | 8h | 12h | 24h) Sets the interval at which the transmit power setting is re-evaluated when automatic power selection is enabled.

  • Page 192: Beacon Interval, Rts Threshold, Dot11 Mode, Radio Active

    CLI commands This is a global setting that is useful when creating wireless links to remote sites. However, it also applies to all wireless connection made with the radio, not just for wireless links. Therefore, if you are also using the radio to serve local wireless client stations, adjusting this setting may lower the performance for clients with marginal signal strength or when interference is present.

  • Page 193: Spectralink View, Dot11n Guard Interval, Dot11n Channel Width, Dot11n Channel Extension, Dot11n Multicast Rate, Inherit

    CLI commands no radio active Disables the radio. spectralink view Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl spectralink view Enable the use of spectralink view. no spectralink view Disable the use of spectralink view. dot11n guard interval Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dot11n guard interval (short | long) Select the 802.11n guard interval.

  • Page 194

    CLI commands no inherit Do not inherit settings from parent. 2-154...

  • Page 195: Radius Profile Context, Inherit, Radius Nas Id

    CLI commands RADIUS Profile context Path: View > Enable > Controlled Network AP > Controlled Network > RADIUS Profile View > Enable > Controlled Network AP Group > Controlled Network > RADIUS Profile View > Enable > Controlled Network Base Group > Controlled Network > RADIUS Profile Basic per entity RADIUS Profile configuration.

  • Page 196: Local Mesh Profile Context, Security, Security Mode, Security Psk, Security Wep, Dynamic Mode

    CLI commands Local mesh profile context Path: View > Enable > Controlled Network AP > Controlled Network > Local mesh profile View > Enable > Controlled Network AP Group > Controlled Network > Local mesh profile View > Enable > Controlled Network Base Group > Controlled Network > Local mesh profile Configuration for local mesh profiles.

  • Page 197: Allowed Downtime, Minimum Snr, Snr Cost Per Hop, Initial Discovery Time, Active

    CLI commands mesh id Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl mesh id <id> Set the local mesh group id. allowed downtime Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl allowed downtime <number> Set the allowed downtime for a connection (or a link) to a peer. minimum snr Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl minimum snr <number>...

  • Page 198: Inherit, Name, Radio Active

    CLI commands inherit Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl inherit Inherit settings from parent. no inherit Do not inherit settings from parent. name Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl name <name> Renames the current local mesh group. radio active Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl radio active (radio1 | radio2) Enables the radio.

  • Page 199: Local Mesh Provisioning Profile Context, Accept Connection, Inherit, Multiple Radio

    CLI commands Local mesh provisioning profile context Path: View > Enable > Controlled Network AP > Controlled Network > Local mesh provisioning profile View > Enable > Controlled Network AP Group > Controlled Network > Local mesh provisioning profile View > Enable > Controlled Network Base Group > Controlled Network > Local mesh provisioning profile Configuration for local mesh provisioning profile.

  • Page 200: Switch Port Context, Active, Authentication Profile Vsc, Authentication Server Radius, Dot1x Authentication

    CLI commands Switch port context Path: View > Enable > Controlled Network AP > Controlled Network > Switch port View > Enable > Controlled Network AP Group > Controlled Network > Switch port View > Enable > Controlled Network Base Group > Controlled Network > Switch port Switch port configuration.

  • Page 201: Dynamic Vlan, Egress Rate, Force Flow Control, Ingress Rate, Ingress Traffic Type

    CLI commands no dot1x authentication Disable support for IEEE802.1X. dynamic vlan Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl dynamic vlan Enable dynamic VLAN. no dynamic vlan Disable dynamic VLAN. egress rate Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl egress rate <(128k|256k|512k|1m|2m|4m|8m|16m|32m)> Set the maximum rate at which this port will accept egress traffic.

  • Page 202: Mac Authentication, Mac Filter List, Port Name, Port Type, Power Over Ethernet, Priority

    CLI commands mac authentication Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl mac authentication Enable support for MAC-based authentication. no mac authentication Disable support for MAC-based authentication. mac filter list Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl mac filter list <name> Accept MAC addresses set in these lists.

  • Page 203: Priority Lookup, Quarantine Vlan, Vlan

    CLI commands priority lookup Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl priority lookup (diffsrv | 802.1p | any) Choose the port priority lookup. use priority lookup Turn on priority lookup for this port. no use priority lookup Turn on priority lookup for this port. quarantine vlan Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl quarantine vlan <number>...

  • Page 204: List Of Mac Addresses Context, Entry, List Name

    CLI commands List of MAC addresses context Path: View > Enable > Config > List of MAC addresses Use to modify a list of MAC addresses. Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl end Go to previous context. entry Supported on: MSM710 MSM730 MSM750 MSM760 MSM765zl entry <mac>...

  • Page 206

    To learn more, visit www.hp.com/go/procurve/ © Copyright 2009 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services.

Comments to this Manuals

Symbols: 0
Latest comments: