manualshive.com logo in svg

HP E-MSM720, Reference Manual

Share
Download
HP E-MSM720 Reference Manual Download Page 155

CLI commands

Virtual AP context

2-105

Description

The controller features an intelligent bridge which can apply security filters to safeguard the flow 
of wireless traffic. The filters limit both incoming and outgoing traffic as defined below, and force 

the controller to exchange traffic with a specific upstream device. If the controller is configured to 

use the services of a HP access controller, then the default security filters are automatically 
enabled and all traffic is sent to the access controller.

Default filters for incoming wireless traffic

Applies to traffic sent from wireless client stations to the controller.

Accepted

„

Any IP traffic addressed to the access controller.

„

PPPoE traffic (The PPPoe server must be the upstream device.)

„

IP broadcast packets, except NetBIOS

„

Certain address management protocols (ARP, DHCP) regardless of their source address.

„

Any traffic addressed to the controller, including 802.1X.

Blocked

„

All other traffic is blocked. This includes NetBIOS traffic regardless of its source/destination 
address. TTPS traffic not addressed to the controller (or upstream device) is also blocked, 

which means wireless client stations cannot access the management tool on other HP 

products.

Default filters for outgoing wireless traffic

Applies to traffic sent from the controller to wireless client stations.

Accepted

„

Any IP traffic coming from the upstream device, except NetBIOS packets.

„

PPPoE traffic from the upstream device.

„

IP broadcast packets, except NetBIOS

„

ARP and DHCP Offer and ACK packets.

„

Any traffic coming from the controller itself, including 802.1X.

Blocked

„

All other traffic is blocked. This includes NetBIOS traffic regardless of its source/destination 

address.

mac-filters local 

Supported on:   MSM710 E-MSM720 MSM760 MSM765zl

 

mac-filters local 

Enables the MAC filter list. 

no mac-filters local 

Disables the MAC filter list. 

Summary of Contents for E-MSM720

Page 1: ...ProCurve 5400zl Switches Installation and Getting Started Guide HP MSM7xx Controllers CLI Reference Guide HP MSM7xx Controllers CLI Reference Guide ...

Page 2: ......

Page 3: ...HP MSM7xx Controllers CLI Reference Guide ...

Page 4: ...WITH REGARD TO THIS MATERIAL INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE Hewlett Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing performance or use of this material The only warranties for HP products and services are set forth in the express warranty...

Page 5: ... contacting support 1 4 Online documentation 1 5 Configuring CLI support 1 5 Secure shell access 1 6 Authentication 1 6 Serial port access 1 7 Starting a CLI session on the serial port 1 7 Entering strings 1 8 Context hierarchy 1 9 Sample CLI sessions 1 10 Example 1 1 10 Example 2 1 11 Example 3 1 11 File transfer 1 12 A The controller gets the file using a URL 1 12 B Send a file to the controller...

Page 6: ...ficate binding 2 5 iperf 2 5 ping 2 5 arping 2 6 arp 2 6 end 2 6 quit 2 6 rcapture 2 6 show arp 2 6 show bridge 2 7 show bridge forwarding 2 7 show dns cache 2 7 show interfaces 2 7 show ip 2 7 show ip route 2 7 show system info 2 7 show vsc overview 2 7 show controlled aps wireless clients 2 8 disassociate controlled ap wireless client _ 2 8 show ip dhcp database 2 8 show satellites 2 8 show web ...

Page 7: ...10 certificate revocation 2 11 end 2 11 factory settings 2 11 network profile 2 11 reboot device 2 11 show certificate 2 11 show certificate binding 2 11 show config factory 2 12 show network profiles 2 12 show tech 2 12 interface ethernet 2 12 interface ip 2 12 interface pptp client default 2 12 interface gre 2 12 New show lacp 2 13 New show mac address 2 13 New show mac address count 2 13 New sh...

Page 8: ...7 web access interface vlan 2 17 web access interface gre 2 18 web access vpn 2 18 web access lan 2 18 dhcp mode 2 18 enable console password reset 2 18 console authentication 2 18 dhcp server 2 19 dhcp server default domain name 2 19 dhcp server default lease period 2 19 dhcp server default permanent lease period 2 19 dhcp server controller 2 19 dhcp server controller discovery 2 19 dhcp server l...

Page 9: ...pdate start 2 25 config update time 2 25 config update uri 2 25 config update weekday 2 25 snmp server trap config change 2 26 snmp server trap config update 2 26 logging destination 2 26 snmp server trap syslog severity 2 26 snmp server 2 26 snmp server allow 2 27 snmp server chassis id 2 27 snmp server contact 2 27 snmp server heartbeat period 2 27 snmp server location 2 27 snmp server port 2 28...

Page 10: ...service controller state 2 32 snmp server access lan 2 33 snmp server user 2 33 snmp server notification receiver 2 33 soap server 2 33 soap server access interface vlan 2 33 soap server allow 2 34 soap server http authentication 2 34 soap server http authentication password 2 34 soap server http authentication username 2 34 soap server port 2 34 soap server ssl 2 34 soap server ssl with client ce...

Page 11: ... controller 2 40 certificate ipsec ca 2 40 certificate ipsec local 2 40 certificate ipsec revocation 2 41 certificate ssl 2 41 session profile default 2 41 session profile 2 41 show session profile 2 41 remote configuration 2 41 lldp config 2 42 lldp dynamic name 2 42 lldp dynamic name refresh time 2 42 lldp dynamic name user string 2 42 lldp fast start count 2 42 lldp holdtime multiplier 2 43 lld...

Page 12: ... service controller discovery interface lan port 2 46 New service controller discovery interface 2 47 service controller provisioning 2 47 bandwidth control internet port 2 47 bandwidth control internet port high 2 47 bandwidth control internet port low 2 47 bandwidth control internet port max rate 2 47 bandwidth control internet port normal 2 48 bandwidth control internet port very high 2 48 New ...

Page 13: ...ice name 2 55 active directory domain 2 55 active directory domain netbios name 2 55 active directory group 2 55 active directory group order 2 55 active directory join 2 56 show active directory 2 56 show active directory group 2 56 radius server client 2 56 user tracking 2 56 user tracking destination 2 56 user tracking filter 2 56 user tracking port 2 57 persistent user information 2 57 persist...

Page 14: ...tion vlan 2 61 team management interface 2 61 team management interface vlan 2 61 Access Controller context 2 62 end 2 62 ads presentation 2 62 ads presentation interval 2 62 station free access 2 62 station http proxy html authentication only support 2 62 station http proxy support 2 63 station idle detection 2 63 system accounting 2 63 remember delay 2 63 remember html users 2 64 worldpay instal...

Page 15: ...2 67 user agent filtering 2 67 noc access interface vlan 2 68 noc access interface gre 2 68 ipass id 2 68 ipass name 2 68 wispr abort login url 2 68 wispr login url 2 69 wispr logoff url 2 69 access list 2 69 use access list 2 70 use access list unauth 2 70 config file 2 70 http proxy upstream 2 71 https ssl certificate 2 71 mac address 2 71 fail page 2 71 goodbye url 2 71 ipass login url 2 72 log...

Page 16: ...nat one to one 2 76 session timeout 2 77 smtp redirection setup 2 77 public ip subnet 2 77 end 2 77 smtp redirection 2 78 Session profile context 2 79 end 2 79 access controlled 2 79 access list 2 79 accounting interim update 2 79 arp polling interval 2 80 arp polling max count 2 80 bandwidth level 2 80 egress vlan 2 80 idle timeout 2 81 intercept traffic 2 81 max input rate 2 81 max output rate 2...

Page 17: ... profile 2 87 regular virtual ap 2 87 session timeout 2 87 subscription plan 2 88 username 2 88 Internet port interface context 2 89 end 2 89 duplex 2 89 speed 2 89 interface vlan 2 89 ipsec vlan interface 2 90 LAN port interface context 2 91 end 2 91 duplex 2 91 speed 2 91 interface vlan 2 91 ipsec vlan interface 2 92 WAN IP interface context 2 93 pppoe client user 2 93 New tagged 2 93 New untagg...

Page 18: ...context 2 98 end 2 98 active 2 98 credentials 2 98 interval 2 98 radius server profile 2 98 Virtual AP context 2 99 virtual ap name 2 99 access control 2 99 force centralize data 2 99 ingress interface 2 100 egress unauthenticated 2 100 guest mode 2 100 max association 2 100 ssid name 2 101 encryption key 1 2 101 encryption key format 2 101 transmit key 2 101 authentication server access controlle...

Page 19: ...authentication request radius cui 2 107 mac authentication local 2 107 mac authentication 2 107 html authentication 2 107 html authentication accounting 2 108 html authentication accounting radius profile 2 108 html authentication active directory 2 108 html authentication local 2 108 html authentication radius 2 108 html authentication radius profile 2 108 html authentication request radius cui 2...

Page 20: ...tify stations by ip only 2 114 location aware group 2 114 location aware called station id content 2 115 dhcp relay 2 115 dhcp relay active 2 115 dhcp relay circuit id 2 115 dhcp relay remote id 2 115 dhcp relay subnet 2 115 dhcp server 2 116 dhcp server dns 2 116 dhcp server gateway 2 116 dhcp server range 2 116 dhcp server subnet 2 116 radius framed protocol attribute 2 116 end 2 117 security 2 ...

Page 21: ...2 122 radius server deadtime 2 123 radius server host 2 123 radius server key 2 2 123 radius server message authenticator 2 123 radius server name 2 123 radius server nasid 2 124 radius server timeout 2 124 radius server timeout 2 124 radius server force nas port to vlanid 2 124 radius server realm 2 124 radius server realm name 2 124 IP QOS context 2 125 end 2 125 end port 2 125 priority 2 125 pr...

Page 22: ...coming nat 2 130 incoming traffic network 2 130 interface 2 130 local id 2 130 mode 2 130 outgoing traffic network 2 130 peer id 2 130 peer ip address 2 131 perfect forward secrecy 2 131 preshared key 2 131 Syslog context 2 132 active 2 132 logging facility 2 132 logging host 2 132 logging prefix 2 132 name 2 132 logging source 2 133 end 2 133 level 2 133 level 2 133 matches 2 133 message 2 134 me...

Page 23: ...137 Keys context 2 138 end 2 138 key string 2 138 Subscription plan context 2 139 end 2 139 daily restriction 2 139 end time 2 139 initial login time allocation 2 139 online time limit 2 140 online time limit 2 140 start time 2 140 subscription plan name 2 140 public ip reservation 2 140 public ip subnet 2 140 SNMP user context 2 142 access level 2 142 end 2 142 password 2 142 security 2 142 user ...

Page 24: ...ap 2 145 Controlled APs context 2 147 end 2 147 execute action 2 147 execute system action 2 147 show config factory 2 147 ap group 2 147 ap name 2 147 config 2 147 contact 2 148 location 2 148 product type 2 148 product type 2 148 Controlled APs group context 2 149 execute action 2 149 show config factory 2 149 end 2 149 config 2 149 group name 2 149 virtual ap binding 2 149 Controlled APs base g...

Page 25: ...rit ipv6 ra conversion 2 153 New ipv6 ra conversion 2 153 New show ipv6 ra conversion 2 153 sensor server name 2 153 sensor server id 2 154 sensor discovery mode 2 154 sensor network detector 2 154 inherit sensor 2 154 dynamic key 2 155 dynamic key interval 2 155 dot1x reauth 2 155 dot1x reauth period 2 155 dot1x reauth terminate 2 155 dot1x supplicant timeout 2 156 inherit 8021x 2 156 bridge prot...

Page 26: ... count 2 160 lldp holdtime multiplier 2 160 lldp local mesh 2 160 lldp med location civic address element 2 160 lldp med location elin addr 2 160 lldp refresh interval 2 160 lldp run 2 161 Controlled APs VSC binding context 2 162 dual radio binding 2 162 egress vlan 2 162 egress vlan 2 162 end 2 162 location aware 2 162 Syslog context 2 163 message 2 163 message 2 163 process 2 163 process 2 163 l...

Page 27: ...167 ieee8021x provisioning 2 167 Provisioning discovery context 2 168 end 2 168 dns name 2 168 dns provisioning 2 168 inherit 2 168 dns domain name 2 168 dns server 2 169 discovery provisioning 2 169 ip address 2 169 ip provisioning 2 169 Wireless interface context 2 170 dot11 2 170 distance 2 170 transmit power 2 171 multicast rate 2 171 dot11 automatic frequency 2 171 dot11 automatic frequency p...

Page 28: ...n mac protection 2 175 end 2 175 inherit 2 175 RADIUS profile context 2 176 end 2 176 inherit 2 176 radius nas id 2 176 Local mesh profile context 2 177 security 2 177 security mode 2 177 security psk 2 177 security wep 2 177 dynamic mode 2 177 mesh id 2 178 allowed downtime 2 178 minimum snr 2 178 snr cost per hop 2 178 initial discovery time 2 178 active 2 179 end 2 179 inherit 2 179 name 2 179 ...

Page 29: ...low control 2 182 ingress rate 2 183 ingress traffic type 2 183 loop protection 2 183 mac authentication 2 183 mac filter list 2 183 poe class support 2 183 port name 2 184 port type 2 184 power over ethernet 2 184 priority 2 184 priority lookup 2 184 quarantine vlan 2 184 secondary vlan 2 185 vlan 2 185 MAC addresses list context 2 186 end 2 186 entry 2 186 list name 2 186 Network profile context...

Page 30: ...basic tlv enable system_cap 2 188 basic tlv enable system_descr 2 188 basic tlv enable system_name 2 189 dot3 tlv enable 2 189 end 2 189 ip addr enable 2 189 med application type 2 189 medtlv enable capabilities 2 189 medtlv enable location id 2 190 medtlv enable network policy 2 190 medtlv enable poe 2 190 ...

Page 31: ...accounting 2 102 authentication server radius 2 102 authentication server radius 2 182 authentication server request radius cui 2 103 authentication 2 129 authorize_net installation id 2 64 authorize_net payment url 2 64 authorize_net transaction key 2 64 autochannel skip 2 172 band steering 2 109 New bandwidth control high 2 49 bandwidth control internet port high 2 47 bandwidth control internet ...

Page 32: ...overy provisioning 2 169 distance 2 170 dns domain name 2 168 dns domain 2 129 dns name 2 168 dns provisioning 2 168 dns server 2 129 dns server 2 169 dot11 automatic frequency period 2 171 dot11 automatic frequency time 2 171 dot11 automatic frequency 2 171 dot11 automatic transmit power period 2 172 dot11 automatic transmit power 2 172 dot11 mode 2 173 dot11 2 170 dot11n channel extension 2 174 ...

Page 33: ...incoming traffic network 2 130 ingress interface 2 100 ingress rate 2 183 ingress traffic type 2 183 inherit 8021x 2 156 inherit country code 2 152 New inherit ipv6 ra conversion 2 153 inherit l3subnets 2 158 inherit lldp app profile 2 158 inherit lldp general 2 159 inherit local mesh qos 2 157 inherit sensor 2 154 inherit service availability 2 157 inherit switch port _ 2 158 inherit switch ports...

Page 34: ... error url 2 72 login page 2 72 login url 2 72 logo 2 72 loop protection 2 183 mac authentication accounting radius profile 2 106 mac authentication accounting 2 106 mac authentication local 2 107 mac authentication radius profile 2 106 mac authentication remote 2 107 mac authentication request radius cui 2 107 mac authentication 2 107 mac authentication 2 183 mac filter list 2 183 mac list 2 14 m...

Page 35: ...lternate hosts 2 122 radius server authentication method 2 122 radius server authentication port 2 122 radius server client 2 53 radius server client 2 56 radius server deadtime 2 123 radius server force nas port to vlanid 2 124 radius server host 2 123 radius server key 2 2 123 radius server local eap peap 2 53 radius server local eap tls 2 54 radius server local eap ttls 2 54 radius server local...

Page 36: ...iew 2 7 show web content 2 8 smtp redirection setup 2 77 smtp redirection setup 2 82 smtp redirection 2 78 snmp server access interface gre 2 30 snmp server access interface vlan 2 30 snmp server access lan 2 33 snmp server access port 1 2 30 snmp server access port 2 2 31 snmp server access vpn 2 31 snmp server allow 2 27 snmp server chassis id 2 27 snmp server contact 2 27 snmp server heartbeat ...

Page 37: ... 4 traceroute 2 4 transmit key 2 101 transmit power 2 171 transport page 2 73 New trunk group 2 118 New trunk type 2 119 New untagged 2 120 New untagged 2 93 New untagged 2 97 upstream diffserv tagging 2 113 use access list unauth 2 70 use access list 2 70 user defined attribute 2 83 user name 2 142 user profile 2 51 user tracking destination 2 56 user tracking filter 2 56 user tracking port 2 57 ...

Page 38: ...xxxvi ...

Page 39: ...portant terms 1 2 Typographical conventions 1 2 New in this release 1 4 HP support 1 4 Online documentation 1 5 Configuring CLI support 1 5 Secure shell access 1 6 Authentication 1 6 Serial port access 1 7 Entering strings 1 8 Context hierarchy 1 9 Sample CLI sessions 1 10 File transfer 1 12 ...

Page 40: ...Premium Mobility Controller J9694A MSM760 Access Controller J9421A MSM760 Premium Mobility Controller J9420A MSM765zl Premium Mobility Controller J9370A Term Description AP Refers to any HP MSM3xx or MSM4xx Access Point controller service controller Refers to any HP MSM7xx Controller including both Access Controller and Mobility Controller variants VSC Virtual ap VAP These terms are used interchan...

Page 41: ... this example you must specify high low or none Example Description Example directions in this guide What to do in the user interface Select Controller Security Firewall On a non teamed MSM7xx controller In the Network Tree select the Controller element then on the main menu select Security and then select Firewall on the sub menu All elements to the left of the double angle brackets are found in ...

Page 42: ...SCs VSC name Configuration On a non teamed MSM7xx controller Expand the Controller branch click its symbol expand the VSCs branch select a VSC name then select Configuration on the main menu On an MSM7xx controller team In the Network Tree on the team manager expand the Team team name branch click its symbol expand the VSCs branch select a VSC name then select Configuration on the main menu For Pa...

Page 43: ...ww hp com support manuals Search by product name or part number Configuring CLI support CLI support is configured using the management tool on the controller Select Controller Management CLI to open the Command Line Interface CLI configuration page Note A maximum of three concurrent CLI sessions are supported ...

Page 44: ...rk as well OpenSSH Tectia SecureCRT Putty Authentication The CLI validates login credentials username and password using the settings defined under Administrative user authentication on the Controller Management Management tool page shown here for reference Local manager account The login username and password are the same as those defined for the local manager account If this account is disabled ...

Page 45: ...he controller console port as follows For the MSM710 see Console ports in the MSM7xx Configuration Guide For the MSM760 see the MSM760 Controllers Installation Guide 3 Configure a communications terminal program such as Microsoft Hyperterminal for Windows or Minicom for Linux as follows Terminal VT 100 ANSI Speed Set speed according to Serial port speed option Management CLI Data bits 8 Stop bits ...

Page 46: ...tering strings When entering a value that contains spaces you must enclose it in quotation marks For example if the command syntax is ssid name You must specify one of the following ssid ANameWithNoSpaces ssid A name with spaces ...

Page 47: ...ce vlan id id2 PPTP client interface interface pptp client default GRE interface interface gre name Virtual AP virtual ap name Subscription plan subscription plan name MAC addresses list mac list name Network profile network profile name IPsec ipsec policy name DHCP server dhcp server lan Syslog logging destination name SNMP user snmp server user name SNMP notification receiver snmp server notific...

Page 48: ...e mac Controlled APs VSC binding virtual ap binding profile Controlled APs network configuration config Wireless interface interface wireless single dual triple number RADIUS profile radius profile profile Local mesh profile local mesh group group Local mesh provisioning local mesh provisioning group Provisioning connectivity provisioning connectivity Provisioning discovery provisioning discovery ...

Page 49: ... profile default CLI network profile end CLI config interface 1 CLI if trunk type trunk CLI if trunk group 1 CLI if end CLI config interface 2 CLI if trunk group 1 CLI if trunk type trunk CLI if end CLI config Example 3 This sample CLI session shows you how to create a dynamic trunk on the E MSM720 that is bound to a network profile called lacp trunk on ports 5 and 6 The trunk is created using a V...

Page 50: ...using a URL Transfer a certificate file using ftp For example certificate ipsec ca ftp ftp example com certificate my root certificate pem B Send a file to the controller Using SFTP available with OpenSSH or SSH authenticate with the CLI credentials Then send the file to the controller For example sftp msm710 mycompany com login admin password put my root certificate pem file transferred 1k quit I...

Page 51: ...79 User account context 2 85 Internet port interface context 2 89 LAN port interface context 2 91 WAN IP interface context 2 93 LAN IP interface context 2 97 Public access RADIUS attributes context 2 98 Virtual AP context 2 99 Interface context 2 118 VLAN interface context 2 120 RADIUS profiles context 2 122 IP QOS context 2 125 DHCP server context 2 127 GRE interface context 2 128 IPsec context 2...

Page 52: ...p context 2 149 Controlled APs base group context 2 150 Controlled APs network configuration context 2 151 Controlled APs VSC binding context 2 162 Syslog context 2 163 Provisioning connectivity context 2 165 Provisioning discovery context 2 168 Wireless interface context 2 170 RADIUS profile context 2 176 Local mesh profile context 2 177 Local mesh provisioning context 2 180 Switch port context 2...

Page 53: ...d on MSM710 E MSM720 MSM760 MSM765zl nslookup option authentication host to find server Queries DNS servers for information on hosts or domains ping Supported on MSM710 E MSM720 MSM760 MSM765zl ping host c count s length q Determines if the specified remote IP address is active Parameters c host The IP address or DNS name of the host to ping c count Number of pings s length Length of the ping data...

Page 54: ... on MSM710 E MSM720 MSM760 MSM765zl show logging filtered Displays the system log top Supported on MSM710 E MSM720 MSM760 MSM765zl top Displays all running processes traceroute Supported on MSM710 E MSM720 MSM760 MSM765zl traceroute n r v m max_ttl p port q nqueries s src_addr t tos w wait host data size Displays the hosts that are traversed to reach the specified IP address ...

Page 55: ...zl show certificate binding Displays how the certificates are used iperf Supported on MSM710 E MSM720 MSM760 MSM765zl iperf c host t time Runs a performance throughput test Parameters c host The IP address or DNS name of the iperf server to connect to t length Length of the throughput test in seconds ping Supported on MSM710 E MSM720 MSM760 MSM765zl ping host c count s length q Determines if the s...

Page 56: ...ss translation tables used by the address resolution protocol end Supported on MSM710 E MSM720 MSM760 MSM765zl end Switches to parent context quit Supported on MSM710 E MSM720 MSM760 MSM765zl quit Exits the enable context rcapture Supported on MSM710 E MSM720 MSM760 MSM765zl rcapture u URI c count i interface Captures data on a port and sends it to a file on an FTP server Parameters URI Address of...

Page 57: ...y a serial number to display detailed information show interfaces Supported on MSM710 E MSM720 MSM760 MSM765zl show interfaces Displays networking interfaces show ip Supported on MSM710 E MSM720 MSM760 MSM765zl show ip Displays all IP addresses show ip route Supported on MSM710 E MSM720 MSM760 MSM765zl show ip route Displays all IP routes show system info Supported on MSM710 E MSM720 MSM760 MSM765...

Page 58: ...ase database show satellites Supported on MSM710 E MSM720 MSM760 MSM765zl show satellites deviceid Displays current satellites of this access point show web content Supported on MSM710 E MSM720 MSM760 MSM765zl show web content Displays all files inside the access points detected nearby show client log Supported on MSM710 E MSM720 MSM760 MSM765zl show client log macaddr Displays the client station ...

Page 59: ...0 MSM765zl config Switches to the config context show all config Supported on MSM710 E MSM720 MSM760 MSM765zl show all config Displays all configuration settings that apply to this device controlled network Supported on MSM710 E MSM720 MSM760 MSM765zl controlled network ap group base name mac Creates or switches to the specified AP or group show controlled network config Supported on MSM710 E MSM7...

Page 60: ...blic ip default lease period number Defines the amount of time a public IP address lease will be valid dhcp public ip subnet Supported on MSM710 E MSM720 MSM760 MSM765zl dhcp public ip subnet Enables the DHCP server IP address pool to support the public IP address feature no dhcp public ip subnet Disables DHCP server IP address pool support for the public IP address feature certificate Supported o...

Page 61: ... factory settings Resets the system configuration to factory default settings network profile Supported on MSM710 E MSM720 MSM760 MSM765zl network profile name Add Edits the specified network profile or creates a new profile with the specified name no network profile name Deletes the network profile with the specified name reboot device Supported on MSM710 E MSM720 MSM760 MSM765zl reboot device Re...

Page 62: ...ation interface ethernet Supported on MSM710 MSM760 MSM765zl interface ethernet port 1 port 2 Switches to the specified Ethernet interface context interface ip Supported on MSM710 MSM760 MSM765zl interface ip lan wan Switches to the specified IP interface context interface pptp client default Supported on MSM710 E MSM720 MSM760 MSM765zl interface pptp client default Switches to the PPTP client int...

Page 63: ...runks Supported on E MSM720 show trunks Displays trunking information New show vlans Supported on E MSM720 show vlans Displays VLAN information virtual ap Supported on MSM710 E MSM720 MSM760 MSM765zl virtual ap name Creates a new VSC VAP profile or switches to the existing VSC VAP context with the specified name no virtual ap name Deletes the specified VSC VAP profile Parameters name Name of an ex...

Page 64: ...orted on MSM710 E MSM720 MSM760 MSM765zl mac list name Edits the specified MAC list or create a new list with the specified name no mac list name Deletes the specified MAC list show mac list Supported on MSM710 E MSM720 MSM760 MSM765zl show mac list name Displays all current MAC lists or details for the specified list ipsec policy Supported on MSM710 E MSM720 MSM760 MSM765zl ipsec policy name Swit...

Page 65: ...rt number to use for HTTP access to the controller Parameters number Port number Range 1 65535 Description HTTP connections made to this port are met with a warning and the browser is redirected to the secure web server port By default this parameter is set to port 80 ip https port Supported on MSM710 E MSM720 MSM760 MSM765zl ip https port number Sets the port number used for HTTPS access to the c...

Page 66: ...SM710 E MSM720 MSM760 MSM765zl snmp server trap web login Send a trap each time an manager login is accepted no snmp server trap web login Do not send a trap each time an manager login is accepted snmp server trap web logout Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server trap web logout Send a trap each time an manager logs out no snmp server trap web logout Do not send a trap each time ...

Page 67: ...ess mask Subnet mask in CIDR format Specifies the number of bits in the mask web access internet port Supported on MSM710 MSM760 MSM765zl web access internet port Enables access to the management tool via the Internet port no web access internet port Blocks access to the management tool via the Internet port web access lan port Supported on MSM710 MSM760 MSM765zl web access lan port Enables access...

Page 68: ...tion web access lan Supported on MSM710 MSM760 MSM765zl web access lan Enables access to the management tool via the LAN port no web access lan Blocks access to the management tool via the LAN port dhcp mode Supported on MSM710 E MSM720 MSM760 MSM765zl dhcp mode server relay none Sets whether the controller operates as a DHCP server or DHCP relay agent enable console password reset Supported on MS...

Page 69: ...0 MSM765zl dhcp server controller ip address Add the specified IP address to the list of controllers no dhcp server controller ip address Remove the specified IP address from the list of controllers Use the address list to define the IP address for one or more controllers that are active on the network This list is sent to all devices that request an IP address encoded as DHCP option 43 Vendor spe...

Page 70: ...ted on MSM710 E MSM720 MSM760 MSM765zl dhcp server access centralized clients Listen for DHCP requests from access controlled client stations using the client data tunnel no dhcp server access centralized clients Do not listen for DHCP requests from access controlled client stations using the client data tunnel dhcp server access lan Supported on MSM710 E MSM720 MSM760 MSM765zl dhcp server access ...

Page 71: ...n the LAN port no dhcp relay access lan Do not listen for DHCP request on the LAN port New dhcp relay access access network Supported on E MSM720 dhcp relay access access network Listen for DHCP request on the Access network no dhcp relay access access network Do not listen for DHCP request on the Access network dhcp relay extend internet port Supported on MSM710 MSM760 MSM765zl dhcp relay extend ...

Page 72: ...20 MSM760 MSM765zl clock time date Sets the system time and date Parameters time Time as hh mm ss For example 15 44 00 date Date as dd mmm yyyy For example 17 Oct 2004 clock auto adjust dst Supported on MSM710 E MSM720 MSM760 MSM765zl clock auto adjust dst Automatically adjust clock for daylight savings changes no clock auto adjust dst Do not automatically adjust clock for daylight savings changes...

Page 73: ...month Range 1 31 weekday Weekday Valid values are sun mon tue wed thu fri sat month Month Valid values are jan feb mar apr may jun jul aug sep oct nov dec time Time as hh mm ss For example 15 44 00 If a parameter does not apply to the configured DST rule format simply set this parameter to any valid value clock custom dst begins format Supported on MSM710 E MSM720 MSM760 MSM765zl clock custom dst ...

Page 74: ...he format of the custom DST rule Parameters fixed Rule of the form The Day th of Month at Time last weekday Rule of the form The last Weekday of Month at Time following date Rule of the form The first Weekday on or after the Day th of Month at Time preceding date Rule of the form The first Weekday on or before the Day th of Month at Time ntp server Supported on MSM710 E MSM720 MSM760 MSM765zl ntp ...

Page 75: ...et time config update start Supported on MSM710 E MSM720 MSM760 MSM765zl config update start Start a config update now Will reboot on success config update time Supported on MSM710 E MSM720 MSM760 MSM765zl config update time time Sets the time of day when the scheduled configuration operation backup or restore will take place Parameters time Time as hh mm ss For example 15 44 00 config update uri ...

Page 76: ...M710 E MSM720 MSM760 MSM765zl logging destination name Creates a new remote destination for syslog no logging destination name Deletes the specified syslog destination Parameters name Name of syslog destination Use the name local to edit your local log file settings Any other name will edit create a remote log destination snmp server trap syslog severity Supported on MSM710 E MSM720 MSM760 MSM765z...

Page 77: ...er chassis id name Specifies a name to identify the controller By default this is set to the serial number of the controller no snmp server chassis id Deletes the system name snmp server contact Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server contact email Specifies contact information no snmp server contact Deletes contact information Parameters email Email address snmp server heartbeat ...

Page 78: ...server readonly Deletes the read only community string snmp server readwrite Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server readwrite community Sets the read write community string no snmp server readwrite Deletes the read write community string snmp server trap Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server trap Enables support for SNMP traps no snmp server trap Disables suppo...

Page 79: ...erver trap heartbeat Disables sending of heartbeat traps at regular intervals snmp server trap link state Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server trap link state Send a trap when the link state changes on any interface no snmp server trap link state Do not send this trap snmp server trap snmp authentication Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server trap snmp authent...

Page 80: ... snmp server access interface vlan name Enables access to SNMP via the specified VLAN no snmp server access interface vlan name Disables access to SNMP via the specified VLAN Parameters name Specifies the name of the VLAN snmp server access interface gre Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server access interface gre name Enables access to SNMP via the specified GRE tunnel no snmp se...

Page 81: ...orization failure Send a trap when the device is not authorized to connect to the service controller no snmp server trap device authorization failure Do not send a trap about device authorization failure snmp server trap device configuration failure Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server trap device configuration failure Send a trap when the device does not accept a new configura...

Page 82: ...nge snmp server trap new satellite detected Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server trap new satellite detected Send a trap when a new satellite is detected no snmp server trap new satellite detected Do not send a trap when a new satellite is detected snmp server trap satellite unreachable Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server trap satellite unreachable Send a t...

Page 83: ...er notification receiver Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server notification receiver host Creates a new SNMP notification receiver or switches to the SNMP notification receiver context with the specified IP address no snmp server notification receiver host Deletes the specified SNMP notification receiver soap server Supported on MSM710 E MSM720 MSM760 MSM765zl soap server Enable...

Page 84: ...e SOAP server HTTP authentication no soap server http authentication Disable the SOAP server HTTP authentication soap server http authentication password Supported on MSM710 E MSM720 MSM760 MSM765zl soap server http authentication password Set the SOAP server HTTP authentication password soap server http authentication username Supported on MSM710 E MSM720 MSM760 MSM765zl soap server http authenti...

Page 85: ...d GRE tunnel no soap server access interface gre name Removes access to SOAP via the specified GRE tunnel soap server access port 1 Supported on MSM710 MSM760 MSM765zl soap server access port 1 Enables SOAP access on the downstream port no soap server access port 1 Blocks SOAP access on the downstream port soap server access port 2 Supported on MSM710 MSM760 MSM765zl soap server access port 2 Enab...

Page 86: ...p syslog matches Send a trap when syslog messages matches a specified regular expression no snmp server trap syslog matches Do not send this trap snmp server trap syslog matches regex Supported on MSM710 E MSM720 MSM760 MSM765zl snmp server trap syslog matches regex regex Sets the regular expression used to match the syslog messages snmp server trap syslog severity level Supported on MSM710 E MSM7...

Page 87: ...his enables you to return to a previous firmware version if required Configuration settings are preserved during the update unless stated otherwise in the release notes for the firmware However all active connections will be terminated Customers will have to log in again after the controller restarts firmware update start Supported on MSM710 E MSM720 MSM760 MSM765zl firmware update start Upload th...

Page 88: ...d ones Parameters primary IP address of the primary DNS server secondary IP address of the secondary DNS server third IP address of the third DNS server ip name server cache Supported on MSM710 E MSM720 MSM760 MSM765zl ip name server cache Enables the DNS cache no ip name server cache Disables the DNS cache Once a host name has been successfully resolved to an IP address by a remote DNS server it ...

Page 89: ...e is received ip name server switch over Supported on MSM710 E MSM720 MSM760 MSM765zl ip name server switch over Switch over to primary when active no ip name server switch over Do not switch over to primary when active ip name server logout info Supported on MSM710 E MSM720 MSM760 MSM765zl ip name server logout info host ip address Sets the logout host name and the logout IP address access contro...

Page 90: ...me no ip qos profile name Deletes the specified IP QoS profile access controller Supported on MSM710 E MSM720 MSM760 MSM765zl access controller Switches to the access controller context certificate ipsec ca Supported on MSM710 E MSM720 MSM760 MSM765zl certificate ipsec ca uri Loads a new CA certificate from the specified URI The URI can be local local FILENAME or remote ftp host path certificate i...

Page 91: ...session profile default Supported on MSM710 E MSM720 MSM760 MSM765zl session profile default Switches to the session profile context session profile Supported on MSM710 E MSM720 MSM760 MSM765zl session profile name Switches to the session profile context no session profile name Removes the specified session profile show session profile Supported on MSM710 E MSM720 MSM760 MSM765zl show session prof...

Page 92: ...mbination with placeholders to create the name Placeholders are automatically expanded each time the name is regenerated Placeholders RN System name of the neighboring device to which the port is connected obtained via the System Name TLV Since this is an optional TLV if it is not available the Chassis ID TLV is used instead RP Port description of the port on the neighboring device to which the lo...

Page 93: ...on elin addr Supported on MSM710 E MSM720 MSM760 MSM765zl lldp med location elin addr elin Sets the Emergency Call Services ELIN as described for example by NENA TID 07 501 lldp refresh interval Supported on MSM710 E MSM720 MSM760 MSM765zl lldp refresh interval time Sets the interval in seconds at which local LLDP information is updated and TLVs are sent to neighboring network devices lldp run Sup...

Page 94: ...e id name Overwrite the device id field of information packets the controller serial number is not used no discovery protocol device id Do not overwrite the device id field of information packets use the controller serial number service controller ap authentication credentials Supported on MSM710 E MSM720 MSM760 MSM765zl service controller ap authentication credentials username password When the R...

Page 95: ...oller retrieves authentication list entries from the selected authentication source s service controller ap authentication source file Supported on MSM710 E MSM720 MSM760 MSM765zl service controller ap authentication source file Enables the use of a file authentication source no service controller ap authentication source file Disables the use of a file authentication source service controller ap ...

Page 96: ...ip addr ip address Configure a static ip address for the primary controller service controller priority Supported on MSM710 E MSM720 MSM760 MSM765zl service controller priority number Sets this device s discovery priority service controller discovery interface internet port Supported on MSM710 MSM760 MSM765zl service controller discovery interface internet port Allow discovery on the LAN port no s...

Page 97: ...s bandwidth control on the Internet port no bandwidth control internet port Disables bandwidth control on the Internet port bandwidth control internet port high Supported on MSM710 MSM760 MSM765zl bandwidth control internet port high min tx min rx max tx max rx Sets the bandwidth rates Tx minimum Tx maximum Rx minimum and Rx maximum for traffic classed as High bandwidth control internet port low S...

Page 98: ...be assigned to a level as soon as incoming traffic is present on the level Receive rate maximum This is the maximum amount of incoming bandwidth that can be consumed by the level Traffic in excess will be buffered for short bursts and dropped for sustained overages Bandwidth levels are arranged in order of priority from Very High to Low Priority determines how free bandwidth is allocated once the ...

Page 99: ... on the Internet network If traffic exceeds the rate you set for short bursts it is buffered Long overages will result in data being dropped To utilize the full available bandwidth the transmit and receive limits should be set to match the incoming and outgoing data rates on the Internet network Parameters transmit Sets the maximum transmit rate in kbps receive Sets the maximum receive rate in kbp...

Page 100: ...al min tx min rx max tx max rx Sets the bandwidth rates Tx minimum Tx maximum Rx minimum and Rx maximum for traffic classed as Normal New bandwidth control very high Supported on E MSM720 bandwidth control very high min tx min rx max tx max rx Sets the bandwidth rates Tx minimum Tx maximum Rx minimum and Rx maximum for traffic classed as Very High ip route gateway Supported on MSM710 E MSM720 MSM7...

Page 101: ...ported on MSM710 E MSM720 MSM760 MSM765zl show user profiles details name Display detailed information about the specified user user profile Supported on MSM710 E MSM720 MSM760 MSM765zl user profile name Adds or edits the specified username in the local user list no user profile name Removes the specified username from the local user list renew user profile subscription Supported on MSM710 E MSM72...

Page 102: ...60 MSM765zl dot1x reauth terminate Enable this option to allow client stations to remain connected during re authentication Client traffic is blocked only when re authentication fails no dot1x reauth terminate Disabled this option to block client traffic during re authentication and only activate traffic again if authentication succeeds dot1x supplicant timeout Supported on MSM710 E MSM720 MSM760 ...

Page 103: ...fig version Supported on MSM710 E MSM720 MSM760 MSM765zl config version string Sets a string to identify the user configuration version radius server accounting session Supported on MSM710 E MSM720 MSM760 MSM765zl radius server accounting session number Set the maximum number of accounting sessions radius server client Supported on MSM710 E MSM720 MSM760 MSM765zl radius server client Enable radius...

Page 104: ...PAP no radius server local pap Disallow PAP radius server ssid detection nas id Supported on MSM710 E MSM720 MSM760 MSM765zl radius server ssid detection nas id Use NAS ID for SSID detection no radius server ssid detection nas id Do not use NAS ID for SSID detection show radius server Supported on MSM710 E MSM720 MSM760 MSM765zl show radius server Displays the current RADIUS server configuration a...

Page 105: ...60 MSM765zl active directory domain domain Sets the Active Directory Windows domain no active directory domain Resets the Active Directory Windows domain active directory domain netbios name Supported on MSM710 E MSM720 MSM760 MSM765zl active directory domain netbios name name Set the Domain NetBIOS name no active directory domain netbios name Unset the Domain NetBIOS name active directory group S...

Page 106: ...r client Supported on MSM710 E MSM720 MSM760 MSM765zl radius server client ip address mask secret Add a new radius client no radius server client ip address mask Deletes an existing RADIUS client user tracking Supported on MSM710 E MSM720 MSM760 MSM765zl user tracking Enables capture of usage data no user tracking Disables capture of usage data user tracking destination Supported on MSM710 E MSM72...

Page 107: ...ersistent user information period number Period in minutes at which to update user information client data tunnel security Supported on MSM710 E MSM720 MSM760 MSM765zl client data tunnel security hmac key Specifies the security strength of the client data tunnel igmp proxy Supported on MSM710 E MSM720 MSM760 MSM765zl igmp proxy Enables IGMP proxy no igmp proxy Disables IGMP proxy igmp proxy downst...

Page 108: ...how sflow controller stats Supported on MSM710 E MSM720 MSM760 MSM765zl show sflow controller stats Displays read only sFlow controller statistics show sflow device stats Supported on MSM710 E MSM720 MSM760 MSM765zl show sflow device stats macaddress Displays read only sFlow device statistics sflow destination 80211 Supported on MSM710 E MSM720 MSM760 MSM765zl sflow receiver destination ipaddress ...

Page 109: ...erval seconds between polling of counters 0 disables polling sflow interface Supported on MSM710 E MSM720 MSM760 MSM765zl sflow interface ifindex Makes the given sFlow interface visible to sFlow collectors no sflow interface ifindex Makes the given interface invisible to sFlow collectors mac lockout entry Supported on MSM710 E MSM720 MSM760 MSM765zl mac lockout entry mac Adds a new entry to the MA...

Page 110: ...zl team manager Sets this controller as the team manager Only one team manager can be defined per team no team manager Removes this controller as the team manager New team name Supported on E MSM720 MSM760 MSM765zl team name name Sets the team name teaming Supported on E MSM720 MSM760 MSM765zl teaming Enables controller teaming New team communication interface Supported on MSM760 MSM765zl team com...

Page 111: ...ication vlan Disables usage of a VLAN for team communication team management interface Supported on MSM760 MSM765zl team management interface internet lan vlan name Sets the interface on which the team IP address will be active team management interface vlan Supported on E MSM720 team management interface vlan name Sets the interface on which the team IP address will be active ...

Page 112: ...ontrols the advertisement display interval station free access Supported on MSM710 E MSM720 MSM760 MSM765zl station free access When enabled all users are automatically granted access when the RADIUS server is down or unreachable no station free access Customers cannot connect when the RADIUS server is unreachable Once the RADIUS server is available again free user sessions remain active until the...

Page 113: ...on can fail to reply to before it is disconnected Description This feature enables the controller to detect if two client stations are using the same IP address but have different MAC addresses If this occurs access is terminated for this IP address removing both stations from the network Changing these values may have security implications A large interval provides a greater opportunity for a ses...

Page 114: ...MSM720 MSM760 MSM765zl worldpay payment response password string Sets the payment response password for the WorldPay payment service worldpay payment url Supported on MSM710 E MSM720 MSM760 MSM765zl worldpay payment url string Sets the payment URL for the WorldPay payment service authorize_net installation id Supported on MSM710 E MSM720 MSM760 MSM765zl authorize_net installation id string Sets th...

Page 115: ...SM710 E MSM720 MSM760 MSM765zl paypal password string Set the password for the PayPal payment service paypal signature Supported on MSM710 E MSM720 MSM760 MSM765zl paypal signature string Set the signature for the PayPal payment service paypal user id Supported on MSM710 E MSM720 MSM760 MSM765zl paypal user id string Set the User ID for the PayPal payment service ads presentation with frameset Sup...

Page 116: ...M720 MSM760 MSM765zl local welcome page Enables the presentation of the local welcome page on successful authentication no local welcome page Disables the presentation of the local welcome page on successful authentication noc access internet Supported on MSM710 E MSM720 MSM760 MSM765zl noc access internet Accept authentication requests on the Internet port no noc access internet Do not accept aut...

Page 117: ...n Disables secure login sslv2 authentication Supported on MSM710 E MSM720 MSM760 MSM765zl sslv2 authentication Enables sslv2 authentication no sslv2 authentication Disables sslv2 authentication user agent block Supported on MSM710 E MSM720 MSM760 MSM765zl user agent block agent Adds a user agent that the controller will not redirect HTTP login requests coming from this agent when user agent filter...

Page 118: ...requests are accepted on no noc access interface gre name Removes the specified GRE tunnel from the list of interfaces that authentication requests are accepted on ipass id Supported on MSM710 E MSM720 MSM760 MSM765zl ipass id name Specifies the WISPr location ID assigned to the controller no ipass id Deletes the WISPr location ID assigned to the controller ipass name Supported on MSM710 E MSM720 ...

Page 119: ...ame up to 32 characters long to identify the access list this rule applies to If a list with this name does not exist a new list is created If a list with this name exists the rule is added to it OPTIONAL Allows the access list to be activated even if this rule fails to initialize For example if you specify a rule that contains an address which cannot be resolved for some reason the other rules th...

Page 120: ...l Specify time between interim accounting updates If you do not enable this option accounting information is only sent when a user connection is terminated Range 5 99999 seconds in 15 second increments use access list Supported on MSM710 E MSM720 MSM760 MSM765zl use access list listname Specifies the name of the access list to use no use access list Do not use an access list use access list unauth...

Page 121: ...10 E MSM720 MSM760 MSM765zl mac address macaddr username password Adds a MAC address to the local configuration list When the MAC authentication option is enabled in a VAP VSC profile you can define local configuration settings to validate MAC addresses Parameters macaddr MAC address of the device as 12 hexadecimal numbers with the values a to f in lowercase For example 0003520a0f01 username Usern...

Page 122: ...0 MSM760 MSM765zl login error url url Specifies the URL of a login error page no login error url No login error page login page Supported on MSM710 E MSM720 MSM760 MSM765zl login page url Specifies the URL of the new login page no login page No new login page Use default login url Supported on MSM710 E MSM720 MSM760 MSM765zl login url url Specifies the URL of a remote login page no login url No re...

Page 123: ...A certificate noc ssl certificate Supported on MSM710 E MSM720 MSM760 MSM765zl noc ssl certificate url Specifies the URL of the certificate issued to the application on the remote web server that will send user info to the controller for authentication no noc ssl certificate No certificate session page Supported on MSM710 E MSM720 MSM760 MSM765zl session page url Specifies the URL of a new session...

Page 124: ...65zl welcome url url Specifies the URL of a welcome page no welcome url No welcome page notify user location changes Supported on MSM710 E MSM720 MSM760 MSM765zl notify user location changes Notify RADIUS on location changes no notify user location changes Do not notify RADIUS on location changes ...

Page 125: ...users that do not have a specific interval set in their profile no accounting interim update Removes this attribute idle timeout Supported on MSM710 E MSM720 MSM760 MSM765zl idle timeout number Sets the default idle time out for all users that do not have a specific limit set in their profile no idle timeout Removes this attribute maximum input octets Supported on MSM710 E MSM720 MSM760 MSM765zl m...

Page 126: ...s Removes this attribute maximum total octets Supported on MSM710 E MSM720 MSM760 MSM765zl maximum total octets value Sets the maximum total limit in octets for all users that do not have a specific limit set in their profile no maximum total octets Removes this attribute maximum total packets Supported on MSM710 E MSM720 MSM760 MSM765zl maximum total packets number Sets the maximum total limit in...

Page 127: ...il server Maximum length is 253 characters port Specify the port on the e mail server to relay to Range 1 to 65535 Default 25 username Specify the username required to log on to the SMTP server Maximum 32 characters password Specify the password required to log on to the SMTP server Maximum 32 characters Description Sets the default SMTP server address for all user sessions This attribute is used ...

Page 128: ... commands Default user session profile context 2 78 smtp redirection Supported on MSM710 E MSM720 MSM760 MSM765zl smtp redirection Enables SMTP proxy support no smtp redirection Disables SMTP proxy support ...

Page 129: ...ccess controlled Set profile as non access controlled access list Supported on MSM710 E MSM720 MSM760 MSM765zl access list name Sets the access list use access list Use this access list no use access list Do not use this access list accounting interim update Supported on MSM710 E MSM720 MSM760 MSM765zl accounting interim update number Sets the default accounting interim update interval in seconds ...

Page 130: ...number Sets the polling ARP count use arp polling max count Use the polling ARP count no use arp polling max count Do not use the polling ARP count bandwidth level Supported on MSM710 E MSM720 MSM760 MSM765zl bandwidth level very high high normal low Sets Bandwidth level use bandwidth level Use Bandwidth level no use bandwidth level Don t use Bandwidth level egress vlan Supported on MSM710 E MSM72...

Page 131: ...eption no intercept traffic Turn off legal traffic interception use intercept traffic Use legal traffic interception no use intercept traffic Do not use legal traffic interception max input rate Supported on MSM710 E MSM720 MSM760 MSM765zl max input rate number Sets the maximum input rate use max input rate Use the maximum input rate no use max input rate Do not use the maximum input rate max outp...

Page 132: ...me password Sets basic SMTP redirection info hostname port username password no smtp redirection setup Clears basic SMTP redirection info use smtp redirection setup Use SMTP redirection no use smtp redirection setup Do not use SMTP redirection Parameters hostname Specify the IP address or domain name of the e mail server Maximum length is 253 characters port Specify the port on the e mail server t...

Page 133: ...IUS type 26 is Vendor Specific vendor id If RADIUS type is 26 contains the Vendor Id Put 0 if not vendor type If RADIUS type is 26 contains the Vendor Type Put 0 if not format Is one of integer address text string or time value Contains the actual value Format description and values integer value is a numerical string address value is a legal IP address or possibly a host name text value is any st...

Page 134: ...CLI commands Session profile context 2 84 no use public ip subnet Do not use this attribute ...

Page 135: ... MSM760 MSM765zl access controlled profile name Use this session profile for this account no access controlled profile name Do not use this session profile for this account use access controlled profile Use the Access Controlled profiles no use access controlled profile Use the Access Controlled profiles access controlled virtual ap Supported on MSM710 E MSM720 MSM760 MSM765zl access controlled vi...

Page 136: ...identity Do not use the CUI control method Supported on MSM710 E MSM720 MSM760 MSM765zl control method subscription endtime none egress vlan Supported on MSM710 E MSM720 MSM760 MSM765zl egress vlan number Sets the VLAN tunnel ID use egress vlan Use the VLAN tunnel ID no use egress vlan Do not use the VLAN tunnel ID end time Supported on MSM710 E MSM720 MSM760 MSM765zl end time time Sets expiration...

Page 137: ...60 MSM765zl regular profile name Apply a non access controlled profile no regular profile name Remove a non access controlled profile use regular profile Use the non access controlled profiles no use regular profile Do not use the non access controlled profiles regular virtual ap Supported on MSM710 E MSM720 MSM760 MSM765zl regular virtual ap name Add to the list of allowed virtual APs no regular ...

Page 138: ...ver times out subscription plan Supported on MSM710 E MSM720 MSM760 MSM765zl subscription plan name Sets the subscription plan to use no subscription plan Delete a subscription plan username Supported on MSM710 E MSM720 MSM760 MSM765zl username name Change the name for this user ...

Page 139: ...onnected to half Forces the port to operate in half duplex mode full Forces the port to operate in full duplex mode speed Supported on MSM710 E MSM720 MSM760 speed auto 10 100 Sets the speed of the Internet port Parameters auto Lets the controller automatically set port speed based on the type of equipment it is connected to 100 Forces the port to operate at 100 mbps 10 Forces the port to operate ...

Page 140: ...ternet port interface context 2 90 ipsec vlan interface Supported on MSM710 E MSM720 MSM760 MSM765zl ipsec vlan interface name Specifies which VLAN is used by IPsec no ipsec vlan interface Do not use a VLAN for IPsec ...

Page 141: ...lf duplex mode full Forces the port to operate in full duplex mode speed Supported on MSM710 E MSM720 MSM760 speed auto 10 100 Sets the speed of the LAN port Parameters auto Lets the controller automatically set port speed based on the type of equipment it is connected to 100 Forces the port to operate at 100 mbps 10 Forces the port to operate at 10 mbps interface vlan Supported on MSM710 E MSM720...

Page 142: ... LAN port interface context 2 92 ipsec vlan interface Supported on MSM710 E MSM720 MSM760 MSM765zl ipsec vlan interface name Specifies which VLAN is used by IPsec no ipsec vlan interface Do not use a VLAN for IPsec ...

Page 143: ...ur ISP when establishing a PPPoE connection New tagged Supported on E MSM720 tagged port Tags the current VLAN on the specified port no tagged port Removes the current VLAN from the specified port New untagged Supported on E MSM720 untagged port Untags the current VLAN on the specified port no untagged port Removes the current VLAN from the specified port ip address mode Supported on MSM710 E MSM7...

Page 144: ...user starting at port 5000 no nat limit port range Use any port for NAT All outgoing traffic for the user is mapped within the range Applications that set an incoming port Active FTP for example may choose a port that is outside of the allocated port range If you enable this feature you should not assign static NAT mappings in the range 5000 to 32768 nat limit port range size Supported on MSM710 E...

Page 145: ...ccording to the recommendations of your ISP Incorrectly setting this parameter can reduce the throughput of your Internet connection Parameters bytes Maximum size in bytes of a PPPoE packet when receiving Range 500 1500 bytes pppoe mtu Supported on MSM710 E MSM720 MSM760 MSM765zl pppoe mtu bytes Specifies the maximum transmit unit Changes to this parameter should only be made according to the reco...

Page 146: ...pecified IP address on the internal network Parameters tcp udp Selects the protocol that the mapping will operate on visible port The protocol port number that the incoming traffic uses internal addr IP address of the device on the internal network that traffic will be routed to internal port The protocol port number that the incoming traffic will be mapped to ip address alternate Supported on MSM...

Page 147: ... IP address mask Subnet mask in CIDR format Specifies the number of bits in the mask ip address management Supported on MSM710 E MSM720 MSM760 MSM765zl ip address management ip address mask Sets a management IP address for this device Parameters address IP address mask Subnet mask in CIDR format Specifies the number of bits in the mask New tagged Supported on E MSM720 tagged port Tags the current ...

Page 148: ...ccess network no active Do not use a RADIUS server for remote configuration credentials Supported on MSM710 E MSM720 MSM760 MSM765zl credentials username password Sets the username password to use for RADIUS configuration no credentials Resets the username password to use for RADIUS configuration interval Supported on MSM710 E MSM720 MSM760 MSM765zl interval number Sets the intervals at which the ...

Page 149: ...riety of methods for user authentication including MAC 802 1X and HTML via either the local user list or a RADIUS server Egress traffic can be routed based on the user state authenticated unauthenticated or intercepted When disabled The controller does not perform user authentication either via RADIUS or the local user list All authentication must be handled by a remote device All wireless traffic...

Page 150: ...ny traffic from client stations that have been authenticated by the controller and given access to the public access interface intercepted Traffic from specific users can be intercepted and redirected To enable traffic interception for a specific user you must specify the appropriate setting in their RADIUS account See the controller Administrator s Guide for details default Sends traffic without ...

Page 151: ...r 128 bit encryption specify 13 ASCII characters or 26 HEX digits encryption key format Supported on MSM710 E MSM720 MSM760 MSM765zl encryption key format hex ascii Specify the WEP key format Parameters hex Hex keys should only include the following digits 0 9 a f A F ascii ASCII keys are much weaker than carefully chosen hex keys You can include ASCII characters between 32 and 126 inclusive in th...

Page 152: ... Sets RADIUS accounting to use the specified RADIUS profile no authentication server accounting radius profile Removes accounting support for 802 1X authentication server radius Supported on MSM710 E MSM720 MSM760 MSM765zl authentication server radius name Sets the RADIUS profile to use for 802 1X or WPA authentication dot1x authentication Supported on MSM710 E MSM720 MSM760 MSM765zl dot1x authent...

Page 153: ...ter a successful authentication New wpa terminate controller Supported on MSM710 E MSM720 MSM760 MSM765zl wpa terminate controller Enable terminate WPA at the controller no wpa terminate controller Disable terminate WPA at the controller wireless filters Supported on MSM710 E MSM720 MSM760 MSM765zl wireless filters Enables the wireless security filters which only allow traffic to flow between the ...

Page 154: ...on for outgoing wireless traffic Use this command to define custom security filters for outgoing wireless traffic Filters are specified using standard pcap syntax http www tcpdump org tcpdump_man html with the addition of a few HP specific placeholders These placeholders can be used to refer to specific MAC addresses and are expanded by the controller when the filter is activated Once expanded the...

Page 155: ...HCP regardless of their source address Any traffic addressed to the controller including 802 1X Blocked All other traffic is blocked This includes NetBIOS traffic regardless of its source destination address TTPS traffic not addressed to the controller or upstream device is also blocked which means wireless client stations cannot access the management tool on other HP products Default filters for ...

Page 156: ...cation takes place for that user mac filters mode Supported on MSM710 E MSM720 MSM760 MSM765zl mac filters mode allow block Either allow or block access to the wireless network for client stations whose addresses appear in the MAC filter list mac authentication accounting Supported on MSM710 E MSM720 MSM760 MSM765zl mac authentication accounting Enables RADIUS accounting for this VAP VSC no mac au...

Page 157: ... a CUI in authentication requests mac authentication local Supported on MSM710 E MSM720 MSM760 MSM765zl mac authentication local Sets MAC based authentication to use the local user list to validate the MAC addresses of client stations no mac authentication local Do not use the local user list for MAC based authentication mac authentication Supported on MSM710 E MSM720 MSM760 MSM765zl mac authentic...

Page 158: ...765zl html authentication active directory Use Active Directory AD to authenticate users no html authentication active directory Do not use Active Directory AD to authenticate users html authentication local Supported on MSM710 E MSM720 MSM760 MSM765zl html authentication local Validate HTML logins using the local user list no html authentication local Do not validate HTML logins using the local u...

Page 159: ... timeout active Supported on MSM710 E MSM720 MSM760 MSM765zl active Enable this VAP VSC no active Disable this VAP VSC band steering Supported on MSM710 E MSM720 MSM760 MSM765zl band steering Enable band steering on this VSC between both radios no band steering Disable band steering on this VSC between both radios beacon dtim count Supported on MSM710 E MSM720 MSM760 MSM765zl beacon dtim count num...

Page 160: ... g bg n rate Enable the given data rate for a particular PHY type no data rate a b g bg n rate Disable the given data rate for a particular PHY type public forwarding Supported on MSM710 E MSM720 MSM760 MSM765zl public forwarding any 802 1x none ipv6 Enables support for traffic exchange between wireless client stations access lan stations Supported on MSM710 E MSM720 MSM760 MSM765zl access lan sta...

Page 161: ...upported on MSM710 E MSM720 MSM760 MSM765zl layer3 mobility hns subnet vlan Select the home network selection HNS method Parameters subnet Determine the home network based on subnet vlan Determine the home network using the received VLAN RADIUS attribute add ip qos profile Supported on MSM710 E MSM720 MSM760 MSM765zl add ip qos profile name Adds the specified profile to the list of IP QoS profiles...

Page 162: ...E clients to associate and take advantage of them This setting has no effect on legacy clients Note To support 802 1p the wireless profile must have a VLAN assigned to it which means that client station traffic is forwarded onto the LAN port only vap0 to vap3 Allows a specific priority level to be specified for all traffic on a VAP VSC profile This enables client stations without a QoS mechanism t...

Page 163: ...zl html redirection Enables support for HTML logins no html redirection Disables support for HTML logins local nas id Supported on MSM710 E MSM720 MSM760 MSM765zl local nas id nasid Set the NAS Id when only local authentication is configured use local nas id Enables the use of NAS Id when only local authentication is configured no use local nas id Disables the use of NAS Id when only local authent...

Page 164: ...ccounting realms radius authentication realms Supported on MSM710 E MSM720 MSM760 MSM765zl radius authentication realms Use RADIUS authentication realms no radius authentication realms Do not use RADIUS authentication realms identify stations by ip only Supported on MSM710 E MSM720 MSM760 MSM765zl identify stations by ip only Identify stations based on IP address only no identify stations by ip on...

Page 165: ...n MSM710 E MSM720 MSM760 MSM765zl dhcp relay active The dhcp relay is enabled on the VAP VSC no dhcp relay active The dhcp relay is not enabled on the VAP VSC dhcp relay circuit id Supported on MSM710 E MSM720 MSM760 MSM765zl dhcp relay circuit id string Sets the Option 82 circuit ID no dhcp relay circuit id Clears the Option 82 circuit ID dhcp relay remote id Supported on MSM710 E MSM720 MSM760 M...

Page 166: ...p server gateway ip address Sets the default gateway provided to DHCP clients no dhcp server gateway Reset the default gateway provided to DHCP clients dhcp server range Supported on MSM710 E MSM720 MSM760 MSM765zl dhcp server range start range end range Specify the DHCP server IP address range dhcp server subnet Supported on MSM710 E MSM720 MSM760 MSM765zl dhcp server subnet ip address mask Sets ...

Page 167: ...re The controller supports 802 1X client software that uses EAP TLS EAP TTLS EAP SIM and PEAP wep Enables the use of dynamic WEP keys for all 802 1X sessions Dynamic key rotation occurs on key 1 which is the broadcast key Key 0 is the pairwise key It is automatically generated by the controller static wep Support client stations using static WEP keys wpa This option enables support for wireless us...

Page 168: ...w control Enables flow control on the current port no flow control Disables flow control on the current port New flow control auto negotiation Supported on E MSM720 flow control auto negotiation Enables flow control auto negotiation on the current port no flow control auto negotiation Disables flow control auto negotiation on the current port New speed Supported on E MSM720 speed auto 10 100 1000 ...

Page 169: ...CLI commands Interface context 2 119 New trunk type Supported on E MSM720 trunk type none lacp trunk Sets the trunk type for the current port ...

Page 170: ... number of bits in the mask ip address mode Supported on MSM710 E MSM720 MSM760 MSM765zl ip address mode dhcp static none Sets the IP addressing mode for this VLAN interface Parameters dhcp Dynamic host configuration protocol The DHCP server will automatically assign an address to the controller which functions as a DHCP client static This option enables you to manually assign an IP address to the...

Page 171: ...SM710 E MSM720 MSM760 MSM765zl ip default gateway ip address Sets the default gateway for this VLAN no ip default gateway Removes the default gateway for this VLAN ip nat Supported on MSM710 E MSM720 MSM760 MSM765zl ip nat Enables Network Address translation for this interface no ip nat Disables Network Address translation for this interface ...

Page 172: ...s Try primary RADIUS host first radius server authentication method Supported on MSM710 E MSM720 MSM760 MSM765zl radius server authentication method mschap chap mschapv2 pap eap md5 Sets the authentication method to use when communicating with the RADIUS server For 802 1X users the authentication method is always determined by the 802 1X client software and is not controlled by this setting If tra...

Page 173: ...s Parameters primary IP address of the primary RADIUS server secondary IP address of the secondary RADIUS server radius server key 2 Supported on MSM710 E MSM720 MSM760 MSM765zl radius server key primary secondary Sets the primary and secondary secrets used to connect with the RADIUS server Parameters primary Shared secret for the primary RADIUS server secondary Shared secret for the secondary RAD...

Page 174: ...ius server timeout number Sets the total timeout for RADIUS requests no radius server timeout Disables RADIUS timeout radius server force nas port to vlanid Supported on MSM710 E MSM720 MSM760 MSM765zl radius server force nas port to vlanid Force the NAS Port attribute to ingress VLAN ID in RADIUS packets no radius server force nas port to vlanid Do not force the NAS Port attribute to ingress VLAN...

Page 175: ...n MSM710 E MSM720 MSM760 MSM765zl priority low medium high very high Sets the priority for this IP QoS profile Parameters priority Available priorities are low medium high and very high profile name Supported on MSM710 E MSM720 MSM760 MSM765zl profile name name Changes the name of the IP QoS profile protocol Supported on MSM710 E MSM720 MSM760 MSM765zl protocol number Specifies the protocol ID to ...

Page 176: ...CLI commands IP QOS context 2 126 Parameters number Start port number Range 0 65535 ...

Page 177: ...d gateway Supported on MSM710 E MSM720 MSM760 MSM765zl gateway ip address Sets the default gateway provided to DHCP clients no gateway Reset the default gateway provided to DHCP clients range Supported on MSM710 E MSM720 MSM760 MSM765zl range start range end range Specify the DHCP server IP address range permanent leases Supported on MSM710 E MSM720 MSM760 MSM765zl permanent leases ip address maca...

Page 178: ... on MSM710 E MSM720 MSM760 MSM765zl gre name name Renames the current GRE interface ip address Supported on MSM710 E MSM720 MSM760 MSM765zl ip address ip address mask Set the local tunnel IP address and mask peer ip address Supported on MSM710 E MSM720 MSM760 MSM765zl peer ip address ip address Sets the GRE peer IP address remote ip address Supported on MSM710 E MSM720 MSM760 MSM765zl remote ip ad...

Page 179: ...n MSM710 E MSM720 MSM760 MSM765zl authentication x509 psk Selects between x509 and psk authentication cipher Supported on MSM710 E MSM720 MSM760 MSM765zl cipher aes Sets the desired encryption algorithm no cipher aes Do not use this encryption algorithm dns domain Supported on MSM710 E MSM720 MSM760 MSM765zl dns domain names Sets the domain name for this policy no dns domain names Resets the domai...

Page 180: ...M760 MSM765zl interface lan internet Sets the interface this policy applies to local id Supported on MSM710 E MSM720 MSM760 MSM765zl local id ip address ip address host name email address dn dn Specify the local id type and value mode Supported on MSM710 E MSM720 MSM760 MSM765zl mode main aggressive tunnel transport Sets the IPSec mode outgoing traffic network Supported on MSM710 E MSM720 MSM760 M...

Page 181: ...ts the peer ip address for this policy perfect forward secrecy Supported on MSM710 E MSM720 MSM760 MSM765zl perfect forward secrecy Enables PFS no perfect forward secrecy Disables PFS preshared key Supported on MSM710 E MSM720 MSM760 MSM765zl preshared key secret Sets the preshared key no preshared key Removes the preshared key ...

Page 182: ...acility that is used when logging messages to a syslog server Parameters facility Available facilities are local0 local7 logging host Supported on MSM710 E MSM720 MSM760 MSM765zl logging host tcp udp addr number Sets the remote address the connection protocol and port of current syslog remote destination logging prefix Supported on MSM710 E MSM720 MSM760 MSM765zl logging prefix string Sets the pre...

Page 183: ...orted on MSM710 E MSM720 MSM760 MSM765zl level lower higher debug info notice warning error critical alert emergency Defines the severity of messages that will be logged no level Disables filtering of the log file by severity level Parameters debug Debug level messages info Informational messages notice Normal but significant condition warning Warning conditions error Error conditions critical Cri...

Page 184: ...a regular expression to define the match criteria for the log file message field no message Disables filtering of the log file message field process Supported on MSM710 E MSM720 MSM760 MSM765zl process Enables filtering of the log file by process name no process Disables filtering of the log file by process name process Supported on MSM710 E MSM720 MSM760 MSM765zl process matches notmatches string...

Page 185: ...p client credentials name password Sets the PPTP username and password pptp client domain name Supported on MSM710 E MSM720 MSM760 MSM765zl pptp client domain name name Sets the domain name used by the PPTP client pptp client server address Supported on MSM710 E MSM720 MSM760 MSM765zl pptp client server address address Sets the IP address to connect to end Supported on MSM710 E MSM720 MSM760 MSM76...

Page 186: ...20 MSM760 MSM765zl pptp client auto route discovery Enables auto route discovery no pptp client auto route discovery Disables auto route discovery pptp client lcp echo Supported on MSM710 E MSM720 MSM760 MSM765zl pptp client lcp echo Enables PPTP LCP echo no pptp client lcp echo Disables PPTP LCP echo ...

Page 187: ...anage a keychain end Supported on MSM710 E MSM720 MSM760 MSM765zl end End current context key Supported on MSM710 E MSM720 MSM760 MSM765zl key number Enter new key no key number Deletes key with given ID key chain name Supported on MSM710 E MSM720 MSM760 MSM765zl key chain name name Renames current keychain ...

Page 188: ...t to configure the keys that are part of a keychain end Supported on MSM710 E MSM720 MSM760 MSM765zl end End current context key string Supported on MSM710 E MSM720 MSM760 MSM765zl key string name Set the authentication string for this key no key string Remove the authentication string for this key ...

Page 189: ...tions no use daily restriction Disable daily restrictions end time Supported on MSM710 E MSM720 MSM760 MSM765zl end time datetime Set the account end date and time YYYY MM DD HH MM SS use end time Use account end time no use end time Do not use account end time initial login time allocation Supported on MSM710 E MSM720 MSM760 MSM765zl initial login time allocation number minutes hours days Sets th...

Page 190: ...760 MSM765zl start time datetime Set the account start date and time YYYY MM DD HH MM SS use start time Use account start time no use start time Do not use account start time subscription plan name Supported on MSM710 E MSM720 MSM760 MSM765zl subscription plan name newname Changes the subscription plan name public ip reservation Supported on MSM710 E MSM720 MSM760 MSM765zl public ip reservation En...

Page 191: ...CLI commands Subscription plan context 2 141 no public ip subnet Removes this attribute use public ip subnet Use this attribute no use public ip subnet Do not use this attribute ...

Page 192: ...vel use for this SNMP user end Supported on MSM710 E MSM720 MSM760 MSM765zl end Returns to a previous context password Supported on MSM710 E MSM720 MSM760 MSM765zl password password Specifies the password use for this SNMP user security Supported on MSM710 E MSM720 MSM760 MSM765zl security md5 des sha aes Specifies the security use for this SNMP user user name Supported on MSM710 E MSM720 MSM760 M...

Page 193: ... E MSM720 MSM760 MSM765zl end Returns to a previous context port Supported on MSM710 E MSM720 MSM760 MSM765zl port number Specifies the UDP port use for this SNMP notification receiver receiver Supported on MSM710 E MSM720 MSM760 MSM765zl receiver host Changes the host name of the SNMP notification receiver user Supported on MSM710 E MSM720 MSM760 MSM765zl user name Specifies the username for this...

Page 194: ...M710 E MSM720 MSM760 MSM765zl access controlled profile name Use this session profile for this account no access controlled profile name Do not use this session profile for this account use access controlled profile Use the Access Controlled profiles no use access controlled profile Do not use the Access Controlled profiles access controlled virtual ap Supported on MSM710 E MSM720 MSM760 MSM765zl ...

Page 195: ...use egress vlan Use the VLAN tunnel ID no use egress vlan Do not use the VLAN tunnel ID regular profile Supported on MSM710 E MSM720 MSM760 MSM765zl regular profile name Apply a non access controlled profile no regular profile name Remove a non access controlled profile use regular profile Use the non access controlled profiles no use regular profile Do not use the non access controlled profiles r...

Page 196: ...CLI commands Active Directory Group context 2 146 use regular virtual ap Use only allowed Virtual APs VSCs for this profile no use regular virtual ap Use any Virtual AP VSC for this profile ...

Page 197: ...ces execute system action Supported on MSM710 E MSM720 MSM760 MSM765zl execute system action restart reset switch mode Execute a system action on the AP show config factory Supported on MSM710 E MSM720 MSM760 MSM765zl show config factory Displays the current configuration as a list of CLI commands ap group Supported on MSM710 E MSM720 MSM760 MSM765zl ap group name Change the AP group must Synchron...

Page 198: ...n MSM710 E MSM720 MSM760 MSM765zl location name Modify the location product type Supported on MSM710 E MSM720 MSM760 MSM765zl product type map 320 map 330 map 625 map 630 msm410 e msm430 e msm460 e msm466 msm317 msm318 e msm466 r Modify the default product type product type Supported on MSM710 product type wi2 sr 1 Modify the default product type ...

Page 199: ... MSM710 E MSM720 MSM760 MSM765zl show config factory Displays the current configuration as a list of CLI commands end Supported on MSM710 E MSM720 MSM760 MSM765zl end Switch to parent context config Supported on MSM710 E MSM720 MSM760 MSM765zl config Switch to generic configuration context group name Supported on MSM710 E MSM720 MSM760 MSM765zl group name name Change the current group name virtual...

Page 200: ...SM765zl execute action synchronize accept suspicious accept product rediscover Execute an action on the entity s devices show config factory Supported on MSM710 E MSM720 MSM760 MSM765zl show config factory Displays the current configuration as a list of CLI commands config Supported on MSM710 E MSM720 MSM760 MSM765zl config Switch to generic configuration context end Supported on MSM710 E MSM720 M...

Page 201: ...ct Switch to the wireless interface context local mesh group Supported on MSM710 E MSM720 MSM760 MSM765zl local mesh group group Switch to local mesh group context local mesh provisioning group Supported on MSM710 E MSM720 MSM760 MSM765zl local mesh provisioning group Switch to the local mesh provisioning group context provisioning connectivity Supported on MSM710 E MSM720 MSM760 MSM765zl provisio...

Page 202: ...tch to the syslog context inherit vlan port2 Supported on MSM710 E MSM720 MSM760 MSM765zl inherit vlan port2 Inherit settings from parent no inherit vlan port2 Do not inherit settings from parent vlan port2 Supported on MSM710 E MSM720 MSM760 MSM765zl vlan port2 Enable VLAN on port 2 no vlan port2 Disable VLAN on port 2 vlan port2 id Supported on MSM710 E MSM720 MSM760 MSM765zl vlan port2 id vlani...

Page 203: ...60 MSM765zl ipv6 ra conversion Enables IPv6 Router Advertisement RA multicast conversion which ensures that the controller properly assigns IP addresses to IPv6 clients according to their VLAN no ipv6 ra conversion Disables IPv6 Router Advertisement RA multicast conversion New show ipv6 ra conversion Supported on MSM710 E MSM720 MSM760 MSM765zl show ipv6 ra conversion Displays the IPv6 RA conversi...

Page 204: ...er Description For these methods to work the following must be true The controller must be able to reach the RF Manager Server via a network connected to port 1 or port 2 For example you should be able to ping the RF Manager Server s IP address from the controller If there are any firewalls between the controller and the RF Manager Server then TCP and UDP ports 3851 must be open bi directionally I...

Page 205: ...M720 MSM760 MSM765zl dot1x reauth Enable this option to force 802 1X client stations to reauthenticate no dot1x reauth Disables 802 1X reauthentication dot1x reauth period Supported on MSM710 E MSM720 MSM760 MSM765zl dot1x reauth period 15m 30m 1h 2h 4h 8h 12h Sets the 802 1X reauthentication interval Client stations must reauthenticate when this interval expires dot1x reauth terminate Supported o...

Page 206: ...rotocol ieee Enable the bridge spanning tree protocol to prevent undesirable loops from occurring in the network that may result in decreased throughput no bridge protocol ieee Disable the bridge spanning tree protocol inherit untagged stp Supported on MSM710 E MSM720 MSM760 MSM765zl inherit untagged stp Inherit untagged spanning tree protocol settings from parent no inherit untagged stp Do not in...

Page 207: ...SM720 MSM760 MSM765zl local mesh ip qos profile profile Add an IP Qos profile to the profile s list no local mesh ip qos profile profile Delete an IP QoS profile from the profile s list local mesh qos mechanism Supported on MSM710 E MSM720 MSM760 MSM765zl local mesh qos mechanism disabled 802 1p very_high high normal low diffsrv tos ip_qos Set the QoS priority mechanism enable vsc services Support...

Page 208: ...ete an l3subnet from the list inherit switch port _ Supported on MSM710 E MSM720 MSM760 MSM765zl inherit switch port port_number Inherit settings from the switch ports no inherit switch port port_number Inherit settings from the switch ports inherit switch ports Supported on MSM710 E MSM720 MSM760 MSM765zl inherit switch ports Inherit settings from the switch ports no inherit switch ports Inherit ...

Page 209: ...ication Type profile inherit lldp general Supported on MSM710 E MSM720 MSM760 MSM765zl inherit lldp general Inherit settings from the LLDP dynamic name no inherit lldp general Inherit settings from the LLDP dynamic name lldp dynamic name Supported on MSM710 E MSM720 MSM760 MSM765zl lldp dynamic name name Specifies the text to use for the dynamic name You can use regular text in combination with pl...

Page 210: ...indicates the length of time that neighbors will consider LLDP information sent by this agent to be valid lldp local mesh Supported on MSM710 E MSM720 MSM760 MSM765zl lldp local mesh Enables LLDP support for local mesh links no lldp local mesh Disables LLDP support for local mesh links lldp med location civic address element Supported on MSM710 E MSM720 MSM760 MSM765zl lldp med location civic addr...

Page 211: ...I commands Controlled APs network configuration context 2 161 lldp run Supported on MSM710 E MSM720 MSM760 MSM765zl lldp run Enables the LLDP Agent on the AP no lldp run Disables the LLDP Agent on the AP ...

Page 212: ...binding no dual radio binding radio1 radio2 Disables radio binding egress vlan Supported on MSM710 E MSM720 MSM760 MSM765zl egress vlan Enable the egress VLAN no egress vlan Disable the egress VLAN egress vlan Supported on MSM710 E MSM720 MSM760 MSM765zl egress vlan networkname Set the egress vlan no egress vlan Disable the egress VLAN end Supported on MSM710 E MSM720 MSM760 MSM765zl end Switch to...

Page 213: ...f the log file message field message Supported on MSM710 E MSM720 MSM760 MSM765zl message Enables filtering of the log file message field no message Disables filtering of the log file message field process Supported on MSM710 E MSM720 MSM760 MSM765zl process matches notmatches string Use this filter to include log messages according to their process name no process Disables filtering of the log fi...

Page 214: ...orted on MSM710 E MSM720 MSM760 MSM765zl level Enables filtering of the log file by severity level no level Disables filtering of the log file by severity level matches Supported on MSM710 E MSM720 MSM760 MSM765zl matches any all filters All three log file filters message process and level are combined to filter the log according to this setting end Supported on MSM710 E MSM720 MSM760 MSM765zl end...

Page 215: ...10 E MSM720 MSM760 MSM765zl end Switches to parent context inherit Supported on MSM710 E MSM720 MSM760 MSM765zl inherit Inherit provisioning interface settings from parent no inherit Do not inherit provisioning interface settings from parent interface Supported on MSM710 E MSM720 MSM760 MSM765zl interface port1 local mesh port1 local mesh none Sets the provisioning interface interface provisioning...

Page 216: ...eway Sets the static IP address provisioning local mesh group Supported on MSM710 E MSM720 MSM760 MSM765zl provisioning local mesh group id Sets the local mesh ID provisioning local mesh key Supported on MSM710 E MSM720 MSM760 MSM765zl provisioning local mesh key key Sets the local mesh security key provisioning local mesh port Supported on MSM710 E MSM720 MSM760 MSM765zl provisioning local mesh p...

Page 217: ...SM760 MSM765zl provisioning local mesh type a b g bg Sets the wireless mode for local mesh country code Supported on MSM710 E MSM720 MSM760 MSM765zl country code code Sets the country code for local mesh anonymous identity Supported on MSM710 E MSM720 MSM760 MSM765zl anonymous identity identity Changes the anonymous identity eap Supported on MSM710 E MSM720 MSM760 MSM765zl eap peap0 peap1 ttls use...

Page 218: ...n MSM710 E MSM720 MSM760 MSM765zl end Switches to parent context dns name Supported on MSM710 E MSM720 MSM760 MSM765zl dns name name Adds a DNS name to the list no dns name name Deletes a DNS name from the list dns provisioning Supported on MSM710 E MSM720 MSM760 MSM765zl dns provisioning Enables DNS provisioning no dns provisioning Disables DNS provisioning inherit Supported on MSM710 E MSM720 MS...

Page 219: ...SM710 E MSM720 MSM760 MSM765zl discovery provisioning Enables discovery provisioning no discovery provisioning Disables discovery provisioning ip address Supported on MSM710 E MSM720 MSM760 MSM765zl ip address ip Adds an IP address to the list no ip address ip Deletes an IP address from the list ip provisioning Supported on MSM710 E MSM720 MSM760 MSM765zl ip provisioning Enables IP provisioning no...

Page 220: ...iding 11 and 54 Mbps in the 2 4 GHz frequency band n Selects 802 11n an Selects 802 11n 802 11a on the 5Ghz frequency band gn Selects 802 11n 802 11g on the 2 4Ghz frequency band bgn Selects 802 11n 802 11g 802 11b on the 2 4Ghz frequency band frequency Sets the operating frequency by specifying a number in GHz or by specifying a channel number The frequencies that are available are determined by ...

Page 221: ...ported on MSM710 E MSM720 MSM760 MSM765zl multicast rate 1 2 5 5 6 9 11 12 18 24 36 48 54 Sets the transmit rate for multicast traffic This is a fixed rate which means that if a station is too far away to receive traffic at this rate then the multicast will not be seen by the station By rasing the multicast rate you can increase overall throughput significantly dot11 automatic frequency Supported ...

Page 222: ...antennas Parameters diversity In this mode both antennas are used to transmit and receive The controller supports both transmit and receive diversity main Transmit and receive on the main antenna only aux Transmit and receive on the aux antenna only antenna gain Supported on MSM710 E MSM720 MSM760 MSM765zl antenna gain number Used only for Radar detection records gain in 5GHz band of external ante...

Page 223: ...eshold Deletes the RTS threshold value Parameters value Threshold value in the range 128 and 1540 Description Use this parameter to control collisions on the link that can reduce throughput If the Status Wireless page on the management tool shows increasing values for Tx multiple retry frames or Tx single retry frames you should adjust this value until the errors clear up Start with a value of 102...

Page 224: ...ct statistics for wireless clients dot11n guard interval Supported on MSM710 E MSM720 MSM760 MSM765zl dot11n guard interval short long Selects the 802 11n guard interval dot11n mimo Supported on MSM710 E MSM720 MSM760 MSM765zl dot11n mimo 3x3 2x2 2x3 Sets the MIMO mode for 802 11n dot11n channel width Supported on MSM710 E MSM720 MSM760 MSM765zl dot11n channel width 40 20 auto Select the 802 11n c...

Page 225: ...zl dot11n mac protection none cts to self rts cts Sets the RTS CTS protection mode for 802 11n end Supported on MSM710 E MSM720 MSM760 MSM765zl end Switches to parent context inherit Supported on MSM710 E MSM720 MSM760 MSM765zl inherit Inherit settings from parent no inherit Do not inherit settings from parent ...

Page 226: ...ed APs base group Controlled APs network configuration RADIUS profile Use this context to define basic settings for RADIUS profiles end Supported on MSM710 E MSM720 MSM760 MSM765zl end Switch to parent context inherit Supported on MSM710 E MSM720 MSM760 MSM765zl inherit Inherit settings from parent no inherit Do not inherit settings from parent radius nas id Supported on MSM710 E MSM720 MSM760 MSM...

Page 227: ...ables wireless security security mode Supported on MSM710 E MSM720 MSM760 MSM765zl security mode wep tkip ccmp Set the security mode security psk Supported on MSM710 E MSM720 MSM760 MSM765zl security psk secret Sets the PSK secret no security psk Clears the PSK secret security wep Supported on MSM710 E MSM720 MSM760 MSM765zl security wep key Sets the WEP key no security wep Deletes the WEP key dyn...

Page 228: ... its link to its master the discovery phase is re initiated minimum snr Supported on MSM710 E MSM720 MSM760 MSM765zl minimum snr number Alternate Master Slave only This node will only connect with other nodes whose SNR is above this setting in dB snr cost per hop Supported on MSM710 E MSM720 MSM760 MSM765zl snr cost per hop number Alternate Master Slave only This value is an estimate of the cost o...

Page 229: ... MSM765zl end Switch to parent context inherit Supported on MSM710 E MSM720 MSM760 MSM765zl inherit Inherit settings from parent no inherit Do not inherit settings from parent name Supported on MSM710 E MSM720 MSM760 MSM765zl name name Renames the current local mesh group radio active Supported on MSM710 E MSM720 MSM760 MSM765zl radio active radio1 radio2 Enables the radio no radio active radio1 r...

Page 230: ...AP accept connection Supported on MSM710 E MSM720 MSM760 MSM765zl accept connection Sets the local mesh provisioning profile to act as an alternate master no accept connection Prevents the local mesh provisioning profile from acting as an alternate master end Supported on MSM710 E MSM720 MSM760 MSM765zl end Switches to parent context inherit Supported on MSM710 E MSM720 MSM760 MSM765zl inherit Inh...

Page 231: ...l active Activates this port no active Deactivates this port app profile Supported on MSM710 E MSM720 MSM760 MSM765zl app profile Enables a LLDP MED application type profile on this port no app profile Disables an LLDP MED application type profile on this port app profile Supported on MSM710 E MSM720 MSM760 MSM765zl app profile voice Sets an LLDP MED application type profile on this port no app pr...

Page 232: ...isables support for IEEE802 1X dynamic vlan Supported on MSM710 E MSM720 MSM760 MSM765zl dynamic vlan Enables dynamic VLAN no dynamic vlan Disables dynamic VLAN egress rate Supported on MSM710 E MSM720 MSM760 MSM765zl egress rate 128k 256k 512k 1m 2m 4m 8m 16m 32m Sets the maximum rate at which this port will accept egress traffic use egress rate Limit the egress data rate no use egress rate Do no...

Page 233: ... loop protection Supported on MSM710 E MSM720 MSM760 MSM765zl loop protection Enables loop protection on this port no loop protection Disables loop protection on this port mac authentication Supported on MSM710 E MSM720 MSM760 MSM765zl mac authentication Enables support for MAC based authentication no mac authentication Disables support for MAC based authentication mac filter list Supported on MSM...

Page 234: ...ted on MSM710 E MSM720 MSM760 MSM765zl power over ethernet Enables PoE on this port no power over ethernet Disables PoE on this port priority Supported on MSM710 E MSM720 MSM760 MSM765zl priority low medium high very high Sets the default QoS priority for this port priority lookup Supported on MSM710 E MSM720 MSM760 MSM765zl priority lookup diffsrv 802 1p any Chooses the port priority lookup use p...

Page 235: ...ry vlan Supported on MSM710 E MSM720 MSM760 MSM765zl secondary vlan number Sets the secondary VLAN ID no secondary vlan Clears the secondary VLAN ID use secondary vlan Enables the secondary VLAN setting no use secondary vlan Disables the secondary VLAN setting vlan Supported on MSM710 E MSM720 MSM760 MSM765zl vlan number Sets the VLAN ID for this port use vlan Applies the VLAN no use vlan Disables...

Page 236: ...n a switch port permitting you to limit switch port access to a specific devices based on their MAC address end Supported on MSM710 E MSM720 MSM760 MSM765zl end Go to previous context entry Supported on MSM710 E MSM720 MSM760 MSM765zl entry mac Adds a new entry with the specified MAC address to the list no entry mac Removes the entry with the specified MAC address from the list list name Supported...

Page 237: ...760 MSM765zl name string Changes the name of current network profile vlan Supported on MSM710 E MSM720 MSM760 MSM765zl vlan Enables a VLAN ID for this network profile no vlan Disables the VLAN ID for this network profile vlan Supported on MSM710 E MSM720 MSM760 MSM765zl vlan number Sets the VLAN ID for this network profile no vlan Disables the VLAN ID for this network profile New default Supported...

Page 238: ...sables support for basic TLVs basic tlv enable port_desc Supported on MSM710 E MSM720 MSM760 MSM765zl basic tlv enable port_desc Enables the port description TLV no basic tlv enable port_desc Disables the port description TLV basic tlv enable system_cap Supported on MSM710 E MSM720 MSM760 MSM765zl basic tlv enable system_cap Enables the system capabilities TLV no basic tlv enable system_cap Disabl...

Page 239: ...e Disables the 803 3 MAC PHY TLV end Supported on MSM710 E MSM720 MSM760 MSM765zl end Go to previous context ip addr enable Supported on MSM710 E MSM720 MSM760 MSM765zl ip addr enable ipaddress Sets the IP address to be enabled med application type Supported on MSM710 E MSM720 MSM760 MSM765zl med application type type Sets MED Application Type for this port medtlv enable capabilities Supported on ...

Page 240: ...es the MED Location TLV medtlv enable network policy Supported on MSM710 E MSM720 MSM760 MSM765zl medtlv enable network policy Enables the MED Network Policy TLV no medtlv enable network policy Disables the MED Network Policy TLV medtlv enable poe Supported on MSM710 E MSM720 MSM760 MSM765zl medtlv enable poe Enables the MED Power via MDI TLV no medtlv enable poe Disables the MED Power via MDI TLV...

Page 241: ...CLI commands 2 191 ...

Page 242: ...CLI commands 2 192 ...

Page 243: ......

Page 244: ...information contained herein is subject to change without notice The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP will not be liable for technical or editorial errors or omissions contained herein December 2011 Manual Part Number 5998...

Reviews:

No comments

Brands by name

Popular brands

Load more brands