HP ProCurve MSM317 Reference Manual Download Page 109

Page: 109 / 124

CLI commands

RADIUS profiles context

2-79

radius-server deadtime

Supported on: MSM422 MSM320 MSM410 MSM310 MSM335

radius-server deadtime

<seconds>

Sets the retry interval for access and accounting requests that time-out.

If no reply is received within this interval, the AP switches between the primary and secondary

RADIUS servers (if defined). If a reply is received after the interval expires, it is ignored.

Parameters

<seconds>

Retry interval. Range: 2 - 60 seconds.

radius-server host

Supported on: MSM422 MSM320 MSM410 MSM310 MSM335

radius-server host

<primary>

[

<secondary>

]

Sets the addresses of the primary and secondary RADIUS servers.

Parameters

<primary>

IP address of the primary RADIUS server.

<secondary>

IP address of the secondary RADIUS server.

radius-server key 2

Supported on: MSM422 MSM320 MSM410 MSM310 MSM335

radius-server key

<primary>

[

<secondary>

]

Sets the primary and secondary secrets used to connect with the RADIUS server.

Parameters

<primary>

Shared secret for the primary RADIUS server.

<secondary>

Shared secret for the secondary RADIUS server.

radius-server message-authenticator

Supported on: MSM422 MSM320 MSM410 MSM310 MSM335

radius-server message-authenticator

Include the message authenticator attribute in RADIUS packets.

no radius-server message-authenticator

Do not include the message authenticator attribute in RADIUS packets.

radius-server name

Supported on: MSM422 MSM320 MSM410 MSM310 MSM335

radius-server name

<name>

Changes the name of the RADIUS profile.

Summary of Contents for ProCurve MSM317

Page 1: ...ProCurve 5400zl Switches Installation and Getting Started Guide Reference Guide for HP ProCurve MSM3xx MSM4xx Access Points CLI HP ProCurve MSM3xx MSM4xx Access Points CLI Reference Guide ...

Page 2: ......

Page 3: ...HP ProCurve MSM3xx MSM4xx Access Points CLI Reference Guide ...

Page 4: ...damages in connection with the furnishing performance or use of this material The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP shall not be liable for technical or editorial errors or omissions contained herein Hewlett Packard assumes...

Page 5: ...pport 1 3 Before contacting support 1 4 Online documentation 1 4 CLI support in autonomous and controlled modes 1 4 Controlled mode 1 4 Autonomous mode 1 5 Configuring CLI support 1 5 Secure shell access 1 5 Authenticate CLI logins using 1 5 Entering strings 1 6 Context hierarchy 1 7 Sample CLI session 1 7 2 CLI commands View context 2 2 arping 2 2 enable 2 2 iperf 2 2 nslookup 2 2 ping 2 2 ps 2 3...

Page 6: ...ing 2 6 show dns cache 2 6 show interfaces 2 6 show ip 2 6 show ip route 2 6 show system info 2 6 New show wireless clients 2 6 New disassociate wireless client _ 2 7 factory reset 2 7 switch operational mode 2 7 show dot11 associations 2 7 show dot11 statistics client traffic dot11n 2 7 show local mesh 2 7 show wireless neighborhood 2 7 show wireless rogue ap 2 7 show client log 2 8 show discrete...

Page 7: ...tication 2 12 admin radius authentication 2 12 admin radius authentication server 2 12 ip http port 2 12 ip https port 2 12 snmp server trap certificate expired 2 12 snmp server trap certificate expires soon 2 13 snmp server trap web fail 2 13 snmp server trap web login 2 13 snmp server trap web logout 2 13 username 2 13 web admin kickout 2 14 web allow 2 14 world mode dot11 country code 2 14 web ...

Page 8: ...19 snmp server trap config change 2 19 snmp server trap config update 2 20 logging destination 2 20 snmp server trap syslog severity 2 20 snmp server 2 20 snmp server access port 1 2 20 snmp server allow 2 21 snmp server chassis id 2 21 snmp server contact 2 21 snmp server heartbeat period 2 21 snmp server location 2 21 snmp server port 2 22 snmp server readonly 2 22 snmp server readwrite 2 22 snm...

Page 9: ...e 2 27 soap server access wireless 2 28 soap server access local mesh 2 28 snmp server trap low snr 2 28 snmp server trap low snr interval 2 28 snmp server trap low snr level 2 28 snmp server trap new association 2 28 snmp server trap new association interval 2 29 snmp server trap vpn connection 2 29 snmp server trap wireless association fail 2 29 snmp server trap wireless association success 2 29...

Page 10: ...p name server dynamic 2 35 New ip name server interception 2 35 ip name server switch on servfail 2 35 ip name server switch over 2 35 snmp server trap unauthorized ap 2 35 snmp server trap unauthorized ap interval 2 36 wireless scan 2 36 wireless scan period 2 36 wireless scan url 2 36 access controller shared secret 2 36 radius server profile 2 37 ip qos profile 2 37 dot11 igmp snooping helper 2...

Page 11: ... 42 dot1x reauth period 2 42 dot1x reauth terminate 2 42 dot1x supplicant timeout 2 42 dynamic key 2 42 dynamic key interval 2 43 add wireless ip qos profile 2 43 delete wireless ip qos profile all 2 43 delete wireless ip qos profile 2 43 wireless link qos 2 43 sensor discovery mode 2 43 sensor network detector 2 44 sensor server id 2 44 sensor server name 2 44 config version 2 44 New sflow 2 45 N...

Page 12: ...ort 1 port interface context 2 49 end 2 49 duplex 2 49 speed 2 49 vlan 2 49 vlan compatibility mode 2 50 vlan management filter 2 50 interface vlan 2 50 WAN IP interface context 2 51 pppoe client user 2 51 ip address mode 2 51 ip address 2 51 ip default gateway 2 51 ip address dhcp client id 2 52 end 2 52 pppoe auto reconnect 2 52 pppoe mru 2 52 pppoe mtu 2 52 pppoe unnumbered 2 53 Wireless contex...

Page 13: ... extension 2 58 dot11n channel width 2 58 New dot11n guard interval 2 58 dot11n mimo 2 59 New dot11n multicast rate 2 59 bandwidth 2 59 bandwidth max 2 59 Virtual AP context 2 60 virtual ap name 2 60 ingress interface 2 60 guest mode 2 60 max association 2 60 ssid name 2 60 vlan 2 61 encryption key 1 2 61 encryption key format 2 61 transmit key 2 61 authentication server access controller 2 62 aut...

Page 14: ...le 2 66 mac authentication radius stationid case 2 66 mac authentication radius stationid delimiter 2 67 mac authentication 2 67 add ip filter 2 67 delete ip filter 2 67 delete ip filter all 2 67 ip filters 2 68 active 2 68 beacon dtim count 2 68 beacon transmit power 2 68 New data rate 2 68 add ip qos profile 2 69 delete ip qos profile all 2 69 delete ip qos profile 2 69 qos 2 69 upstream diffser...

Page 15: ... 2 76 promiscuous mode 2 76 promiscuous mode startup delay 2 77 snr cost per hop 2 77 RADIUS profiles context 2 78 end 2 78 radius server accounting port 2 78 radius server alternate hosts 2 78 radius server authentication method 2 78 radius server authentication port 2 78 radius server deadtime 2 79 radius server host 2 79 radius server key 2 2 79 radius server message authenticator 2 79 radius s...

Page 16: ...ntext 2 84 active 2 84 logging facility 2 84 logging host 2 84 logging prefix 2 84 name 2 84 end 2 85 level 2 85 level 2 85 matches 2 85 message 2 85 message 2 86 process 2 86 process 2 86 SNMP user context 2 87 access level 2 87 end 2 87 password 2 87 security 2 87 user name 2 87 SNMP notification receiver context 2 88 community 2 88 end 2 88 port 2 88 receiver 2 88 user 2 88 version 2 88 ...

Page 17: ...c tlv enable port_desc 2 90 New basic tlv enable system_cap 2 90 New basic tlv enable system_descr 2 90 New basic tlv enable system_name 2 91 New dot3 tlv enable 2 91 New end 2 91 New ip addr enable 2 91 New med application type 2 91 New medtlv enable capabilities 2 91 New medtlv enable location id 2 92 New medtlv enable network policy 2 92 New medtlv enable poe 2 92 ...

Page 18: ...xvi ...

Page 19: ...matic 2 18 config update operation 2 19 New config update start 2 19 config update time 2 19 config update uri 2 19 config update weekday 2 19 config version 2 44 New console authentication 2 15 New data rate 2 68 delete ip filter all 2 67 delete ip filter 2 67 delete ip qos profile all 2 69 delete ip qos profile 2 69 delete wireless ip qos profile all 2 43 delete wireless ip qos profile 2 43 New ...

Page 20: ...tlv enable network policy 2 92 New medtlv enable poe 2 92 mesh id 2 76 message 2 85 message 2 86 minimum snr 2 76 multicast rate 2 57 name 2 84 New name 2 89 New network profile 2 10 nslookup 2 2 ntp protocol 2 16 ntp server failure trap 2 18 ntp server 2 17 ntp server 2 18 password 2 87 peer ip address 2 83 ping 2 2 ping 2 4 port 2 88 pppoe auto reconnect 2 52 pppoe client user 2 51 pppoe mru 2 5...

Page 21: ...server trap new association interval 2 29 snmp server trap new association 2 28 snmp server trap snmp authentication 2 23 snmp server trap syslog matches regex 2 31 snmp server trap syslog matches 2 31 snmp server trap syslog severity level 2 31 snmp server trap syslog severity 2 20 snmp server trap unauthorized ap interval 2 36 snmp server trap unauthorized ap 2 35 snmp server trap vpn connection...

Page 22: ...port 1 2 14 web access port 2 2 14 web access wireless 2 15 web admin kickout 2 14 web allow 2 14 wireless filters mac 2 63 wireless filters rule input 2 63 wireless filters rule output 2 64 wireless filters type 2 64 wireless filters 2 63 wireless link qos 2 43 wireless scan period 2 36 wireless scan url 2 36 wireless scan 2 36 wmm advertising 2 70 world mode dot11 country code 2 14 wpa psk 2 62 ...

Page 23: ...aphical conventions 1 3 New in this release 1 3 HP ProCurve Networking support 1 3 Online documentation 1 4 CLI support in autonomous and controlled modes 1 4 Controlled mode 1 4 Autonomous mode 1 5 Configuring CLI support 1 5 Entering strings 1 6 Context hierarchy 1 7 Sample CLI session 1 7 Online documentation 1 4 ...

Page 24: ...3A J9423A MSM320 Access Point J9360A B J9527A B J9364A B MSM320 R Access Point J9365A B J9528A B J9368A B MSM325 Access Point with Sensor J9369A B J9373A B MSM335 Access Point with Sensor J9356A B J9357A B MSM410 Access Point J9426A B J9529A B J9427A B MSM422 Access Point J9358A B J9530A B J9359A B Term Description AP Refers to any HP ProCurve Networking MSM3xx or MSM4xx Access Point controller se...

Page 25: ...e www hp com go procurve support provide information on the support services offer by HP ProCurve Networking Additionally your HP authorized network reseller can provide you with assistance both with services that they offer and with services offered by HP Example Description web admin kickout Items in plain text must be entered as shown ip http port number Items in italics and enclosed in are par...

Page 26: ...he controller is automatic if default settings are used on all devices Note In controlled mode access to the CLI is possible only before the control channel to the controller is established which can occur in the following scenarios Network failures prevent a control channel from being created After an AP is restarted prior to establishment of the control channel during the brief controller discov...

Page 27: ...s Enable this option to allow access to the CLI via an SSH session The CLI supports SSH on the standard TCP port 22 Connectivity and login credentials for SSH connections use the same settings as defined for management tool on the Controller Management Management tool page SSH connections to the CLI can be made on any active interface Support for each interface must be explicitly enabled under Sec...

Page 28: ...re used Administrative user authentication settings The login username and password use the same settings Local and or RADIUS as defined for the manager account under Administrative user authentication Entering strings When entering a value that contains spaces you must enclose it in quotation marks For example if the command syntax is ssid name you must specify one of the following ssid ANameWith...

Page 29: ...context This is the root context No command is needed Enable context enable Config context config WAN IP interface context interface ip Port 2 interface context interface ethernet port 2 VLAN interface context interface vlan id id2 Port 1 interface context interface ethernet port 1 VLAN interface context interface vlan id id2 Wireless context interface wireless number Local mesh context local mesh...

Page 30: ...Introduction Sample CLI session 1 8 ...

Page 31: ...ace context 2 49 WAN IP interface context 2 51 Wireless context 2 54 Virtual AP context 2 60 VLAN interface context 2 72 Local mesh context 2 73 RADIUS profiles context 2 78 IP QOS context 2 81 GRE interface context 2 83 Syslog context 2 84 SNMP user context 2 87 SNMP notification receiver context 2 88 Network profile context 2 89 LLDP agent context 2 90 ...

Page 32: ...c host t time Runs a performance throughput test Parameters c host The IP address or DNS name of the iperf server to connect to t length Length of the throughput test in seconds nslookup Supported on MSM422 MSM320 MSM410 MSM310 MSM335 nslookup option authentication host to find server Queries DNS servers for information on hosts or domains ping Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ping ...

Page 33: ...se eula gpl other Displays license information show logging filtered Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show logging filtered Displays the system log top Supported on MSM422 MSM320 MSM410 MSM310 MSM335 top Displays all running processes traceroute Supported on MSM422 MSM320 MSM410 MSM310 MSM335 traceroute n r v m max_ttl p port q nqueries s src_addr t tos w wait host data size Show th...

Page 34: ...335 show certificate binding Displays how the certificates are used iperf Supported on MSM422 MSM320 MSM410 MSM310 MSM335 iperf c host t time Runs a performance throughput test Parameters c host The IP address or DNS name of the iperf server to connect to t length Length of the throughput test in seconds ping Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ping host c count s length q Determines i...

Page 35: ...s translation tables used by the address resolution protocol end Supported on MSM422 MSM320 MSM410 MSM310 MSM335 end Switches to parent context quit Supported on MSM422 MSM320 MSM410 MSM310 MSM335 quit Exits the enable context rcapture Supported on MSM422 MSM320 MSM410 MSM310 MSM335 rcapture u URI c count i interface Captures data on a port and sends it to a file on an FTP server Parameters URI Ad...

Page 36: ... a serial number to display detailed information show interfaces Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show interfaces Show networking interfaces show ip Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show ip Shows all IP addresses show ip route Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show ip route Shows all IP routes show system info Supported on MSM422 MSM320 MSM410 MSM310 MSM...

Page 37: ...ns Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show dot11 associations Shows all current wireless associations show dot11 statistics client traffic dot11n Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show dot11 statistics client traffic dot11n macaddress Shows current client matrix statistics show local mesh Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show local mesh Shows current local...

Page 38: ...details for a specific client station show discrete pin Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show discrete pin Displays the state of the discrete pin config Supported on MSM422 MSM320 MSM410 MSM310 MSM335 config Switches to the config context show all config Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show all config Shows all configuration settings that apply to this device ...

Page 39: ...vice no certificate binding web management html auth soap eap certname Unassigns a certificate from a service certificate revocation Supported on MSM422 MSM320 MSM410 MSM310 MSM335 certificate revocation uri certname Adds a Certificate Revocation List CRL to an existing authority certificate end Supported on MSM422 MSM320 MSM410 MSM310 MSM335 end Switches to parent context factory settings Support...

Page 40: ...0 MSM335 show certificate Displays current certificates show certificate binding Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show certificate binding Displays how the certificates are used show config factory Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show config factory Generates a list of CLI commands that can be used to define the currently loaded configuration New show network profile...

Page 41: ...r creates a new GRE interface with the specified name no interface gre name Deletes the specified GRE interface virtual ap Supported on MSM422 MSM320 MSM410 MSM310 MSM335 virtual ap name Creates a new VSC VAP profile or switches to the existing VSC VAP context with the specified name no virtual ap name Deletes the specified VSC VAP profile Parameters name Name of an existing or new VSC VAP profile...

Page 42: ... radius authentication server name Sets the authentication of manager logins to occur using RADIUS ip http port Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ip http port number Sets the port number to use for HTTP access to the AP Parameters number Port number Range 1 65535 Description HTTP connections made to this port are met with a warning and the browser is redirected to the secure web serv...

Page 43: ... trap web fail Send a trap each time an manager login is refused no snmp server trap web fail Do not send a trap each time an manager login is refused snmp server trap web login Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server trap web login Send a trap each time an manager login is accepted no snmp server trap web login Do not send a trap each time an manager login is accepted snmp ser...

Page 44: ...p address mask Adds an address to the list of hosts that can access the management tool no web allow ip address mask Removes the specified address from the list of hosts that can access the management tool Parameters address IP address mask Subnet mask in CIDR format Specifies the number of bits in the mask world mode dot11 country code Supported on MSM422 MSM320 MSM410 MSM310 MSM335 world mode do...

Page 45: ...SM310 MSM335 web access interface gre name Enables access to the management tool via the specified GRE tunnel no web access interface gre name Disables access to the management tool via the specified GRE tunnel web access local mesh Supported on MSM422 MSM320 MSM410 MSM310 MSM335 web access local mesh name Enables access to the management tool via the specified local mesh link no web access local ...

Page 46: ...clock for daylight savings changes no clock auto adjust dst Do not automatically adjust clock for daylight savings changes clock timezone Supported on MSM422 MSM320 MSM410 MSM310 MSM335 clock timezone gmtdiff Sets the time zone the AP is operating in Parameters gmtdiff Offset from GMT as follows HOUR MIN For example Eastern Standard time is 5 00 clock use custom dst rules Supported on MSM422 MSM32...

Page 47: ...ameter does not apply to the configured DST rule format simply set this parameter to any valid value clock custom dst begins format Supported on MSM422 MSM320 MSM410 MSM310 MSM335 clock custom dst begins format fixed last weekday following date preceding date Set the format of the custom DST rule Parameters fixed Rule of the form The Day th of Month at Time last weekday Rule of the form The last W...

Page 48: ...ng date Rule of the form The first Weekday on or before the Day th of Month at Time ntp server Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ntp server index host Adds the specified network time server Parameters index Index of the time server in the list Up to 20 time servers are supported Time servers are checked in the order that they appear in the list host DNS name or IP address of the time...

Page 49: ...date time time Sets the time of day when the scheduled configuration operation backup or restore will take place Parameters time Time as hh mm ss For example 15 44 00 config update uri Supported on MSM422 MSM320 MSM410 MSM310 MSM335 config update uri uri Sets the URI where the AP will download or upload the configuration file no config update uri Clears the configuration file URI config update wee...

Page 50: ...e the name local to edit your local log file settings Any other name will edit create a remote log destination snmp server trap syslog severity Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server trap syslog severity Set the severity level of syslog messages that will trigger a trap no snmp server trap syslog severity Do not send this trap snmp server Supported on MSM422 MSM320 MSM410 MSM3...

Page 51: ...me Specifies a name to identify the AP By default this is set to the serial number of the AP no snmp server chassis id Deletes the system name snmp server contact Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server contact email Specifies contact information no snmp server contact Deletes contact information Parameters email Email address snmp server heartbeat period Supported on MSM422 MS...

Page 52: ...y community string snmp server readwrite Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server readwrite community Sets the read write community string no snmp server readwrite Deletes the read write community string snmp server trap Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server trap Enables support for SNMP traps no snmp server trap Disables support for SNMP traps snmp server ...

Page 53: ...s sending of heartbeat traps at regular intervals no snmp server trap heartbeat Disables sending of heartbeat traps at regular intervals snmp server trap link state Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server trap link state Send a trap when the link state changes on any interface no snmp server trap link state Do not send this trap snmp server trap snmp authentication Supported on...

Page 54: ...ce vlan name Enables access to SNMP via the specified VLAN no snmp server access interface vlan name Disables access to SNMP via the specified VLAN Parameters name Specifies the name of the VLAN snmp server access local mesh Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server access local mesh profile Enables access to SNMP via the specified local mesh no snmp server access local mesh prof...

Page 55: ...422 MSM320 MSM410 MSM310 MSM335 snmp server user name Creates a new SNMP user or switches to the SNMP user context with the specified user name no snmp server user name Deletes the specified SNMP user snmp server notification receiver Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server notification receiver host Creates a new SNMP notification receiver or switches to the SNMP notification ...

Page 56: ...ort 2 Enables SOAP access on the upstream port no soap server access port 2 Blocks SOAP access on the upstream port soap server allow Supported on MSM422 MSM320 MSM410 MSM310 MSM335 soap server allow ip address mask Adds a host to the list of IP addresses from which access to the SOAP interface is permitted no soap server allow ip address mask Removes a host from the list of IP addresses from whic...

Page 57: ...ort number SOAP port number Range 1 65535 soap server ssl Supported on MSM422 MSM320 MSM410 MSM310 MSM335 soap server ssl SSL enabled for SOAP server no soap server ssl SSL disabled for SOAP server soap server ssl with client certificate Supported on MSM422 MSM320 MSM410 MSM310 MSM335 soap server ssl with client certificate Enable the use of client certificate with SSL for SOAP server no soap serv...

Page 58: ...M320 MSM410 MSM310 MSM335 snmp server trap low snr Send a trap when the average signal to noise ratio on a VAP VSC exceeds a specified level no snmp server trap low snr Do not send this trap snmp server trap low snr interval Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server trap low snr interval number Sets the interval at which the average SNR level is checked for each VAP VSC snmp serv...

Page 59: ...ciation fail Do not send this trap snmp server trap wireless association success Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server trap wireless association success Send a trap when a wireless client station successfully associates with the AP no snmp server trap wireless association success Do not send this trap snmp server trap wireless authentication fail Supported on MSM422 MSM320 MS...

Page 60: ...sassociation fail Send a trap when a wireless client station fails to disassociate from the AP no snmp server trap wireless disassociation fail Do not send this trap snmp server trap wireless disassociation success Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server trap wireless disassociation success Send a trap when a wireless client station disassociates from the AP no snmp server trap...

Page 61: ... emergency Set the severity level of syslog messages that will trigger a trap snmp server trap network trace Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snmp server trap network trace Send a trap when a network trace is started or stopped no snmp server trap network trace Do not send this trap firmware update automatic Supported on MSM422 MSM320 MSM410 MSM310 MSM335 firmware update automatic E...

Page 62: ...M410 MSM310 MSM335 firmware update time time Sets the time of day the scheduled firmware upgrade will take place Parameters time Time as hh mm ss For example 15 44 00 firmware update uri Supported on MSM422 MSM320 MSM410 MSM310 MSM335 firmware update uri uri Sets the URI where the AP will retrieve new firmware no firmware update uri Clears the firmware URI firmware update weekday Supported on MSM4...

Page 63: ...ervice sensor The service sensor polls a target device at present intervals If the device does not respond the radio is shut off no service sensor Disables the service sensor service sensor Supported on MSM422 MSM320 MSM410 MSM310 MSM335 service sensor gateway address ip address Sets the target device the service sensor will poll This can be the default gateway or a specific IP address no service ...

Page 64: ...10 MSM335 ip name server primary secondary third Sets the primary and secondary DNS servers overriding dynamically assigned ones Parameters primary IP address of the primary DNS server secondary IP address of the secondary DNS server third IP address of the third DNS server ip name server cache Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ip name server cache Enables the DNS cache no ip name se...

Page 65: ... name server switch on servfail Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ip name server switch on servfail Switch to next server when server failure is received no ip name server switch on servfail Do not switch to next server when server failure is received ip name server switch over Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ip name server switch over Switch over to primary when acti...

Page 66: ...hborhood scans Parameters seconds Scanning interval Range 10 600 seconds wireless scan url Supported on MSM422 MSM320 MSM410 MSM310 MSM335 wireless scan url location Sets the URL of the file that contains a list of all authorized access points no wireless scan url Deletes the URL of the file that contains a list of all authorized access points The format of this file is XML Each entry in the file ...

Page 67: ...witches to the IP QoS context with the specified profile name no ip qos profile name Deletes the specified IP QoS profile dot11 igmp snooping helper Supported on MSM422 MSM320 MSM410 MSM310 MSM335 dot11 igmp snooping helper Enables IGMP snooping helpers which ensure that the AP correctly delivers multicast packets to roaming client stations that are part of a multicast group no dot11 igmp snooping...

Page 68: ...s connected obtained via the Port Description TLV Since this is an optional TLV if it is not available the Port ID TLV is used instead SN Controller s serial number IP Controller s IP address An IP address can require up to 15 characters nnn nnn nnn nnn New lldp fast start count Supported on MSM422 MSM320 MSM410 MSM310 MSM335 lldp fast start count count After an MED LLDPDU is received this timer i...

Page 69: ...d on MSM422 MSM320 MSM410 MSM310 MSM335 lldp run Enables the LLDP Agent no lldp run Disables the LLDP Agent New show lldp config Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show lldp config port Shows LLDP configuration settings New show lldp info local device Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show lldp info local device port Shows LLDP configuration settings New show lldp info r...

Page 70: ...col device id name Overwrite the device id field of information packets the AP serial number is not used no discovery protocol device id Do not overwrite the device id field of information packets use the AP serial number New service controller discovery interface internet port Supported on MSM422 MSM320 MSM410 MSM310 MSM335 service controller discovery interface internet port Allow discovery on t...

Page 71: ...urring in the network that may result in decreased throughput no bridge protocol ieee Disable the bridge spanning tree protocol bridge protocol ieee vlan Supported on MSM422 MSM320 MSM410 MSM310 MSM335 bridge protocol ieee vlan Enable the bridge spanning tree protocol for VLANs no bridge protocol ieee vlan Disable the bridge spanning tree protocol for VLANs ip route gateway Supported on MSM422 MSM...

Page 72: ...SM310 MSM335 dot1x reauth terminate Enable this option to allow client stations to remain connected during re authentication Client traffic is blocked only when re authentication fails no dot1x reauth terminate Disabled this option to block client traffic during re authentication and only activate traffic again if authentication succeeds dot1x supplicant timeout Supported on MSM422 MSM320 MSM410 M...

Page 73: ...ffect for all local mesh links delete wireless ip qos profile Supported on MSM422 MSM320 MSM410 MSM310 MSM335 delete wireless ip qos profile name Removes the specified profile from the list of IP QoS profiles in effect for all local mesh links profile name Name of an existing IP QoS profile currently in the profile list for all local mesh links wireless link qos Supported on MSM422 MSM320 MSM410 M...

Page 74: ...ctor Disable the Network Detector sensor server id Supported on MSM320 MSM335 sensor server id id Sets the server ID of the RF Manager Server to connect to Parameters ID Specify the Server ID of the RF Manager Server to connect to Set the Server ID to 0 to have the AP send a discovery request to all active HP RF Manager Servers The AP will connect to the first server that responds to the discovery...

Page 75: ...s Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show sflow device stats macaddress Displays read only sFlow device statistics New sflow destination Supported on MSM422 MSM320 MSM410 MSM310 MSM335 sflow receiver destination ipaddress port 80211toethernet Sets the IP address of an sFlow collector management station New show sflow destination Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show sfl...

Page 76: ...ted on MSM422 MSM320 MSM410 MSM310 MSM335 mac lockout entry mac Adds a new entry to the MAC lockout list no mac lockout entry mac Removes the entry from the MAC lockout list New show mac lockout Supported on MSM422 MSM320 MSM410 MSM310 MSM335 show mac lockout Displays all entries in the MAC lockout list New supplicant 802dot1x Supported on MSM422 MSM320 MSM410 MSM310 MSM335 supplicant 802dot1x Ena...

Page 77: ...nt it is connected to half Forces the port to operate in half duplex mode full Forces the port to operate in full duplex mode speed Supported on MSM422 MSM320 MSM410 MSM310 MSM335 speed auto 10 100 Sets the speed of the Port 2 port Parameters auto Lets the AP automatically set port speed based on the type of equipment it is connected to 100 Forces the port to operate at 100 mbps 10 Forces the port...

Page 78: ... vlan management filter Restricts the default VLAN to carry management traffic only no vlan management filter Does not restrict the default VLAN to carry management traffic only Management traffic includes all traffic that is exchanged by the AP and the access controller all communications with RADIUS servers HTTPS sessions to the management tool SNMP traffic interface vlan Supported on MSM422 MSM...

Page 79: ...nt it is connected to half Forces the port to operate in half duplex mode full Forces the port to operate in full duplex mode speed Supported on MSM422 MSM320 MSM410 MSM310 MSM335 speed auto 10 100 Sets the speed of the Port 1 port Parameters auto Lets the AP automatically set port speed based on the type of equipment it is connected to 100 Forces the port to operate at 100 mbps 10 Forces the port...

Page 80: ...efault VLAN to carry management traffic only no vlan management filter Does not restrict the default VLAN to carry management traffic only Management traffic includes all traffic that is exchanged by the AP and the access controller all communications with RADIUS servers HTTPS sessions to the management tool SNMP traffic interface vlan Supported on MSM422 MSM320 MSM410 MSM310 MSM335 interface vlan...

Page 81: ...ode Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ip address mode dhcp pppoe static Sets the IP addressing mode for Port 2 Parameters dhcp Dynamic host configuration protocol The DHCP server will automatically assign an address to the AP which functions as a DHCP client pppoe Point to point protocol over Ethernet The PPPoE server will automatically assign an IP address to the AP You need to supp...

Page 82: ... reconnect if the connection is lost no pppoe auto reconnect The AP will not automatically attempt to reconnect if the connection is lost pppoe mru Supported on MSM422 MSM320 MSM410 MSM310 MSM335 pppoe mru bytes Specifies the maximum receive unit Changes to this parameter should only be made according to the recommendations of your ISP Incorrectly setting this parameter can reduce the throughput o...

Page 83: ...M335 pppoe unnumbered Enable unnumbered mode no pppoe unnumbered Disable unnumbered mode This feature is useful when the AP is connected to the Internet and NAT is not being used Instead of assigning two IP addresses to the AP one to the Internet port and one to the LAN port both ports can share a single IP address This is especially useful when a limited number of IP addresses are available to yo...

Page 84: ...lisions on the link that can reduce throughput If the Status Wireless page on the management tool shows increasing values for Tx multiple retry frames or Tx single retry frames you should adjust this value until the errors clear up Start with a value of 1024 and then decrease to 512 until errors are reduced or eliminated Using a small value for RTS threshold can affect throughput If a packet is la...

Page 85: ... band g Selects 802 11g providing 54 Mbps in the 2 4 GHz frequency band bg Selects 802 11b 802 11g providing 11 and 54 Mbps in the 2 4 GHz frequency band n Selects 802 11n an Selects 802 11n 802 11a on the 5Ghz frequency band gn Selects 802 11n 802 11g on the 2 4Ghz frequency band bgn Selects 802 11n 802 11g 802 11b on the 2 4Ghz frequency band frequency Sets the operating frequency by specifying ...

Page 86: ...stalled on device Does not affect output power autochannel skip Supported on MSM422 MSM320 MSM410 MSM310 MSM335 autochannel skip chan Adds the specified channel to the list of channels that are not allowed to be selected by the Auto Channel algorithm no autochannel skip chan Removes the specified channel to the list of channels that are not allowed to be selected by the Auto Channel algorithm beac...

Page 87: ...atic transmit power period Supported on MSM422 MSM320 MSM410 MSM310 MSM335 dot11 automatic transmit power period 1h 2h 4h 8h 12h 24h Sets the interval at which the transmit power setting is re evaluated when automatic power selection is enabled New maximum clients Supported on MSM422 MSM320 MSM410 MSM310 MSM335 maximum clients value Sets the maximum number of wireless client stations that can be a...

Page 88: ...ence is present Essentially it means that if a frame needs to be retransmitted it will take longer before the actual retransmit takes place dot11 mode Supported on MSM422 MSM320 MSM410 MSM310 MSM335 dot11 mode monitor ap wds ap only wds only sensor Sets the operating mode for the radio spectralink view Supported on MSM422 MSM320 MSM410 MSM310 MSM335 spectralink view Enables the use of spectralink ...

Page 89: ...icast rate rate Sets the multicast rate for use with 802 11n networks bandwidth Supported on MSM422 MSM320 MSM410 MSM310 MSM335 bandwidth Enables bandwidth control no bandwidth Disables bandwidth control bandwidth max Supported on MSM422 MSM320 MSM410 MSM310 MSM335 bandwidth max rate Sets the maximum data rate on the wireless port in kbps Parameters rate Maximum data rate Range 50 500000 kbps ...

Page 90: ...ed interface as the ingress interface traffic will be accepted on no ingress interface wireless wireless name Removes the specified interface as an ingress interface guest mode Supported on MSM422 MSM320 MSM410 MSM310 MSM335 guest mode Enables broadcast of the wireless network name SSID no guest mode Disables broadcast of the wireless network name SSID max association Supported on MSM422 MSM320 MS...

Page 91: ...aracters or 10 HEX digits For 128 bit encryption specify 13 ASCII characters or 26 HEX digits encryption key format Supported on MSM422 MSM320 MSM410 MSM310 MSM335 encryption key format hex ascii Specify the WEP key format Parameters hex Hex keys should only include the following digits 0 9 a f A F ascii ASCII keys are much weaker than carefully chosen hex keys You can include ASCII characters bet...

Page 92: ...Sets RADIUS accounting to use the specified RADIUS profile no authentication server accounting radius profile Removes accounting support for 802 1X authentication server radius Supported on MSM422 MSM320 MSM410 MSM310 MSM335 authentication server radius name Sets the RADIUS profile to use for 802 1X or WPA authentication dot1x authentication Supported on MSM422 MSM320 MSM410 MSM310 MSM335 dot1x au...

Page 93: ...affic to flow between the AP and a specific upstream device such as a HP service controller no wireless filters Do not limit traffic flow between the AP and an upstream device This prevents wireless users from accessing resources on the backbone LAN that interconnects the AP and the upstream device wireless filters mac Supported on MSM422 MSM320 MSM410 MSM310 MSM335 wireless filters mac mac Sets t...

Page 94: ... the AP w MAC address of wireless port wireless filters type Supported on MSM422 MSM320 MSM410 MSM310 MSM335 wireless filters type mac gateway rules Sets the type of wireless security filter to use Parameters mac Traffic is forwarded to an upstream device with a specific MAC address Wireless security filters use the default definitions gateway Traffic is forwarded to the default gateway assigned t...

Page 95: ...ny IP traffic coming from the upstream device except NetBIOS packets PPPoE traffic from the upstream device IP broadcast packets except NetBIOS ARP and DHCP Offer and ACK packets Any traffic coming from the AP itself including 802 1X Blocked All other traffic is blocked This includes NetBIOS traffic regardless of its source destination address mac filters local Supported on MSM422 MSM320 MSM410 MS...

Page 96: ... authentication accounting Enables RADIUS accounting for this VAP VSC no mac authentication accounting Disables RADIUS accounting for this VAP VSC mac authentication accounting radius profile Supported on MSM422 MSM320 MSM410 MSM310 MSM335 mac authentication accounting radius profile name Sets RADIUS accounting to use the specified RADIUS profile no mac authentication accounting radius profile Dis...

Page 97: ... MSM410 MSM310 MSM335 add ip filter ip address mask Adds an IP filter to the list of destination addresses that traffic will be accepted for All other traffic will be blocked If the list is empty then all wireless to wired LAN traffic is permitted Where address IP address mask Subnet mask in CIDR format Specifies the number of bits in the mask delete ip filter Supported on MSM422 MSM320 MSM410 MSM...

Page 98: ... DTIM to wake up from low power mode to receive multicast traffic The AP transmits a beacon every 100 ms The DTIM counts down with each beacon that is sent therefore if the DTIM is set to 5 then client stations in low power mode will wake up every 500 ms 5 second to receive multicast traffic beacon transmit power Supported on MSM422 MSM320 MSM410 MSM310 MSM335 beacon transmit power Advertise the c...

Page 99: ...an existing IP QoS profile currently in the profile list for this VSC VAP qos Supported on MSM422 MSM320 MSM410 MSM310 MSM335 qos 802 1p very high high normal low diffsrv tos default vap0 vap1 vap2 vap3 Sets the QoS level for this profile no qos Disables QoS for this profile Four traffic queues are provided based on the WME standard In order of priority these queues are 1 Voice traffic 2 Video tra...

Page 100: ...ing to the traffic queues is as follows vap0 or very high queue 1 vap1 or high queue 2 vap2 or normal queue 3 vap3 or low queue 4 diffsrv Differential services is a method for defining IP traffic priority on a per hop basis The Differential Service bits are defined in RFC2474 and are composed of the six most significant bits of the IP TOS field These bits define the class selector code points whic...

Page 101: ...X client software that uses EAP TLS EAP TTLS EAP SIM and PEAP wep Enables the use of dynamic WEP keys for all 802 1X sessions Dynamic key rotation occurs on key 1 which is the broadcast key Key 0 is the pairwise key It is automatically generated by the controller wpa This option enables support for wireless users with WPA client software psk Enables support for a preshared key radius The controlle...

Page 102: ...M310 MSM335 ip address ip address mask Sets a static IP address for the VLAN Parameters address IP address mask Subnet mask in CIDR format Specifies the number of bits in the mask ip address mode Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ip address mode dhcp static none Sets the IP addressing mode for this VLAN interface Parameters dhcp Dynamic host configuration protocol The DHCP server wil...

Page 103: ...o1 radio2 radio3 Selects the interface to which this local mesh link applies no interface radio1 radio2 radio3 Selects the interface to remove for this local mesh link local mesh name Supported on MSM422 MSM320 MSM410 MSM310 MSM335 local mesh name name Renames the current local mesh link remote mac Supported on MSM422 MSM320 MSM410 MSM310 MSM335 remote mac address Sets the MAC address of the remot...

Page 104: ...no security psk Clears the PSK secret security wep Supported on MSM422 MSM320 MSM410 MSM310 MSM335 security wep key Sets the WEP key no security wep Deletes the WEP key speed Supported on MSM422 MSM320 MSM410 MSM310 MSM335 speed auto 1 2 5 5 6 9 11 12 18 24 36 48 54 Sets the speed of the wireless link in Mbps interface vlan Supported on MSM422 MSM320 MSM410 MSM310 MSM335 interface vlan id Switches...

Page 105: ...SM335 dynamic mode master alt master slave Selects the mode of operation for dynamic mode Three different roles can be assigned to a local mesh node master alternate master or slave Each role governs how upstream and downstream links are established by the node Parameters master Root node that provides the upstream link to the root network that the other nodes want to reach The master never tries ...

Page 106: ...master link Alternate Master Slave only Do not preserve master link across reboots promiscuous mode Supported on MSM422 MSM320 MSM410 MSM310 MSM335 promiscuous mode Alternate Master Slave only Allows a node to connect to a different mesh when it cannot find a master or alternate master with its currently configured mesh ID within the specified amount of time no promiscuous mode Alternate Master Sl...

Page 107: ... entire network promiscuous mode startup delay Supported on MSM422 MSM320 MSM410 MSM310 MSM335 promiscuous mode startup delay number Set delay in seconds before promiscuous mode starts if enabled snr cost per hop Supported on MSM422 MSM320 MSM410 MSM310 MSM335 snr cost per hop number Alternate Master Slave only This value is an estimate of the cost of a hop in terms of SNR It indicates how much SN...

Page 108: ... hosts Try primary RADIUS host first radius server authentication method Supported on MSM422 MSM320 MSM410 MSM310 MSM335 radius server authentication method mschap chap mschapv2 pap eap md5 Sets the authentication method to use when communicating with the RADIUS server For 802 1X users the authentication method is always determined by the 802 1X client software and is not controlled by this settin...

Page 109: ...meters primary IP address of the primary RADIUS server secondary IP address of the secondary RADIUS server radius server key 2 Supported on MSM422 MSM320 MSM410 MSM310 MSM335 radius server key primary secondary Sets the primary and secondary secrets used to connect with the RADIUS server Parameters primary Shared secret for the primary RADIUS server secondary Shared secret for the secondary RADIUS...

Page 110: ...The AP includes the NAS ID attribute in all packets that it sends to the RADIUS server radius server timeout Supported on MSM422 MSM320 MSM410 MSM310 MSM335 radius server timeout Activates RADIUS timeout no radius server timeout Disables RADIUS timeout radius server timeout Supported on MSM422 MSM320 MSM410 MSM310 MSM335 radius server timeout number Sets the total timeout for RADIUS requests no ra...

Page 111: ...M422 MSM320 MSM410 MSM310 MSM335 priority low medium high very high Sets the priority for this IP QoS profile Parameters priority Available priorities are low medium high and very high profile name Supported on MSM422 MSM320 MSM410 MSM310 MSM335 profile name name Changes the name of the IP QoS profile protocol Supported on MSM422 MSM320 MSM410 MSM310 MSM335 protocol number Specifies the protocol I...

Page 112: ...CLI commands IP QOS context 2 82 Parameters number Start port number Range 0 65535 ...

Page 113: ...SM422 MSM320 MSM410 MSM310 MSM335 gre name name Renames the current GRE interface ip address Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ip address ip address mask Set the local tunnel IP address and mask peer ip address Supported on MSM422 MSM320 MSM410 MSM310 MSM335 peer ip address ip address Sets the GRE peer IP address remote ip address Supported on MSM422 MSM320 MSM410 MSM310 MSM335 remot...

Page 114: ...ility that is used when logging messages to a syslog server Parameters facility Available facilities are local0 local7 logging host Supported on MSM422 MSM320 MSM410 MSM310 MSM335 logging host tcp udp addr number Sets the remote address the connection protocol and port of current syslog remote destination logging prefix Supported on MSM422 MSM320 MSM410 MSM310 MSM335 logging prefix string Sets the...

Page 115: ...messages that will be logged no level Disables filtering of the log file by severity level Parameters debug Debug level messages info Informational messages notice Normal but significant condition warning Warning conditions error Error conditions critical Critical conditions alert Action must be taken immediately emergency System is unusable matches Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ...

Page 116: ...e log file message field no message Disables filtering of the log file message field process Supported on MSM422 MSM320 MSM410 MSM310 MSM335 process Enables filtering of the log file by process name no process Disables filtering of the log file by process name process Supported on MSM422 MSM320 MSM410 MSM310 MSM335 process matches notmatches string Use this filter to include log messages according...

Page 117: ...se for this SNMP user end Supported on MSM422 MSM320 MSM410 MSM310 MSM335 end Returns to a previous context password Supported on MSM422 MSM320 MSM410 MSM310 MSM335 password password Specifies the password use for this SNMP user security Supported on MSM422 MSM320 MSM410 MSM310 MSM335 security md5 des sha aes Specifies the security use for this SNMP user user name Supported on MSM422 MSM320 MSM410...

Page 118: ... MSM410 MSM310 MSM335 end Returns to a previous context port Supported on MSM422 MSM320 MSM410 MSM310 MSM335 port number Specifies the UDP port use for this SNMP notification receiver receiver Supported on MSM422 MSM320 MSM410 MSM310 MSM335 receiver host Changes the host name of the SNMP notification receiver user Supported on MSM422 MSM320 MSM410 MSM310 MSM335 user name Specifies the username for...

Page 119: ... New name Supported on MSM422 MSM320 MSM410 MSM310 MSM335 name string Change the name of current network profile New vlan Supported on MSM422 MSM320 MSM410 MSM310 MSM335 vlan Enables the VLAN definition for this profile no vlan Disables the VLAN definition for this profile New vlan Supported on MSM422 MSM320 MSM410 MSM310 MSM335 vlan number Set the VLAN ID for this network profile no vlan Disables...

Page 120: ...es support for basic TLVs New basic tlv enable port_desc Supported on MSM422 MSM320 MSM410 MSM310 MSM335 basic tlv enable port_desc Enables the port description TLV no basic tlv enable port_desc Disables the port description TLV New basic tlv enable system_cap Supported on MSM422 MSM320 MSM410 MSM310 MSM335 basic tlv enable system_cap Enables the system capabilities TLV no basic tlv enable system_...

Page 121: ...bles the 803 3 MAC PHY TLV New end Supported on MSM422 MSM320 MSM410 MSM310 MSM335 end Go to previous context New ip addr enable Supported on MSM422 MSM320 MSM410 MSM310 MSM335 ip addr enable ipaddress Sets the IP Address to be enabled New med application type Supported on MSM422 MSM320 MSM410 MSM310 MSM335 med application type type Sets MED Application Type for this port New medtlv enable capabil...

Page 122: ...he MED Location TLV New medtlv enable network policy Supported on MSM422 MSM320 MSM410 MSM310 MSM335 medtlv enable network policy Enables the MED Network Policy TLV no medtlv enable network policy Disables the MED Network Policy TLV New medtlv enable poe Supported on MSM422 MSM320 MSM410 MSM310 MSM335 medtlv enable poe Enables the MED Power via MDI TLV no medtlv enable poe Disables the MED Power v...

Page 123: ......

Page 124: ...lett Packard Development Company L P The information contained herein is subject to change without notice The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP will not be liable for technical or editorial errors or omissions contained her...

Search results

Summary of Contents for ProCurve MSM317

Reviews:

Related manuals for ProCurve MSM317

Brands by name

Popular brands

HP ProCurve MSM317, Reference Manual

Search results

Summary of Contents for ProCurve MSM317

Reviews:

Related manuals for ProCurve MSM317

Brands by name

Popular brands