Home

HP MSM3XX User's Manual

1. eese rennen 2 27 snmp server trap Deuw AssOClaton eene eene nennen nnns 2 27 snmp server trap new association interval 00 0 0 ceeeeeeesseecececesesseteeeceeeeeeeeeees 2 28 snmp server trap VPN CONMECHON 5 sisssoscccossvesseseatessessncevevensersssurecrnseorerdencivecdonsts 2 28 snmp server trap wireless assocliatom fail essen 2 28 snmp server trap wireless ass0ocClation sucCCegg 2 28 snmp server trap wireless authentication fail esses 2 28 snmp server trap wireless autbhentication success 2 28 snmp server trap wireless deautbhentceation fail 2 29 snmp server trap wireless deautbhentication succese 2 29 snmp server trap wireless daassociatonm fail esses 2 29 snmp server trap wireless daassoclation sucCCegsg esee 2 29 snmp server trap wireless reassociation fail ccesssecececeseesssseeeeeceeeeeeeees 2 29 snmp server trap wireless reassociation success sese 2 29 snmp server trap syslog matches esses eene 2 90 snmp server trap syslog matches regex eese enne 2 90 snmp server trap syslog severity Jevel eese 2 90 snmp server trap network trace e eeseseseeeeeeeeeeenennn nnne ee nennnnnn nnne 2 90 viii firmware update automatic viz soci sstecsset cascade saissseguatseseutiesssa agseeceeiesssedcstenwecsetenes 2 30 Etat GE 2 31 fhirr ware update Dime iiie ederet eege ee 2 31 firmware update uri KE
2. Management tool When referring to the management tool interface the Main menu name is presented first followed by a right angle bracket and then the sub menu name as in Network gt Ports HP ProCurve Networking support HP ProCurve Networking offers support 24 hours a day seven days a week through a number of automated electronic services See the Customer Support Warranty booklet included with your product The HP ProCurve Networking Web site www procurve com customercare provides up to date support information Additionally your HP authorized network reseller can provide you with assistance both with services that they offer and with services offered by HP Before contacting support To make the support process most efficient before calling your networking dealer or HP Support you first should collect the following information Collect this information Where to find it Product identification On the rear of the product Software version The service controller management tool Login page Network topology map including the Your network administrator addresses assigned to all relevant devices Note Introduction Online documentation Online documentation For the latest documentation visit the HP ProCurve Networking manuals Web page at www procurve com manuals CLI support in autonomous and controlled modes An AP operates in either controlled mode or auto
3. 2 46 PPPOE auto FecoDPfecb tege b atre xke ee n ener petii aen 2 46 TOPOS TUT eer OE 2 46 EES 2 46 Dppoeunnimbeted ho rere eto tle toe Cet ENEE 2 47 ix En EE 2 48 rAdio ACTIVE EE 2 48 rts threshold EE 2 48 CUISUATAG EE 2 48 eer DEE 2 49 transmit DOWER EE 2 49 antenna DIGIC CULOTIN EE 2 50 antenna Salh Siero du ven toties EEE cent ru fca e abono t i Ea estat Obat 2 50 autochannel SEID EE 2 50 beacon interval 00 0 eee eeceeeecececececeessenscesecececeesessaeaeecececseseasaesecececeeseseeaeaeseceesenees 2 50 dott automatic E Te 2 50 dot11 automatic frequency period sese 2 51 dot11 automatic frequency time esses eene 2 51 dot11 automatic transmit pOower esses nennen enne nine nnns 2 51 dot11 automatic transmit power Deriod sese 2 51 multicast rale s nen Seek Sede AES nie ide 2 51 SEET eege eene 2 51 COE TT mode EE 2 52 GN E TE 2 52 dotl1n channel extension esee bester hr ahorita ee e eet 2 52 doti cante SC IE us degt dE EE 2 52 dobtbIn guard mtervale eet tet tetto the o t eoa Cette tlg ite 2 52 dotlln multicast Tate ou ooo e 2 52 bandhwidth een e ee Ee Ea E Na e a Eees a aeaa aaea 2 53 ase WGC 8 ele OK 2 53 Virta AP CONTER eiee eoin e eal mak marae nas 2 54 al e ET MEME TETTE 2 54 EES a easa ee aa aa a iae i 2 54 g est Modes ran sisare isn el panh Eai abei TSEAN E KAERT EA IASS pE EATE Ei EA iia 2 54 THAX ASSOCTAUION E 2 54 SSid EE 2 55 VLAD EE 2 55 encr
4. radius server authentication port Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server authentication port number Specifies the port to use for RADIUS authentication By default RADIUS servers use port 1812 Parameters number Authentication port number Range 1 65535 2 73 CLI commands 2 74 radius server deadtime Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server deadtime seconds Sets the retry interval for access and accounting requests that time out If no reply is received within this interval the AP switches between the primary and secondary RADIUS servers if defined If a reply is received after the interval expires it is ignored Parameters seconds Retry interval Range 2 60 seconds radius server host Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server host lt primary gt lt secondary gt Sets the addresses of the primary and secondary RADIUS servers Parameters primary IP address of the primary RADIUS server secondary IP address of the secondary RADIUS server radius server key 2 Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server key lt primary gt lt secondary gt Enter primary and secondary secrets Parameters primary Shared secret for the primary RADIUS server secondary Shared secret for the secondary RADIUS server radius server message authenticator Supported on MSM310 MSM320 MSM335 MSM410 MSM422
5. web access port 1 Supported on MSM310 MSM320 MSM335 MSM410 MSM422 web access port 1 Enables access to the management tool via Port 2 no web access port 1 Blocks access to the management tool via Port 2 web access port 2 Supported on MSM310 MSM320 web access port 2 Enables access to the management tool via Port 1 no web access port 2 Blocks access to the management tool via Port 1 web access wireless Supported on MSM310 MSM320 MSM335 MSM410 MSM422 web access wireless Enables access to the management tool via the wireless port no web access wireless Blocks access to the management tool via the wireless port web access interface vlan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 web access interface vlan name Enables access to the management tool via the specified VLAN no web access interface vlan lt name gt Removes access to the management tool for the specified VLAN web access interface gre Supported on MSM310 MSM320 MSM335 MSM410 MSM422 web access interface gre name Enables access to the management tool via the specified GRE tunnel CLI commands no web access interface gre lt name gt Disables access to the management tool via the specified GRE tunnel web access local mesh Supported on MSM310 MSM320 MSM335 MSM410 MSM422 web access local mesh lt name gt Enables access to the management tool via the specified local mesh no web access local mesh lt name gt Disables ac
6. sensor server name 2 40 service sensor 2 32 service sensor 2 32 service sensor poll 2 32 service sensor retry 2 33 service sensor timeout 2 33 show all config 2 8 show arp 2 5 show bridge 2 5 show bridge forwarding 2 6 show certificate 2 10 show certificate 2 4 show certificate binding 2 10 show certificate binding 2 4 show client log 2 7 show config factory 2 10 show discrete pin 2 7 show dns cache 2 6 show dot11 associations 2 7 show dot11 statistics client traffic 2 7 show interfaces 2 6 show ip 2 6 show ip route 2 6 show license 2 3 show local mesh 2 7 show logging filtered 2 3 show system info 2 6 show wireless neighborhood 2 7 show wireless rogue ap 2 7 snmp server 2 19 snmp server access interface gre 2 23 snmp server access interface vlan 2 23 snmp server access local mesh 2 23 snmp server access port 1 2 19 snmp server access port 2 2 24 snmp server access wireless 2 24 snmp server allow 2 20 snmp server chassis id 2 20 snmp server contact 2 20 snmp server heartbeat period 2 20 snmp server location 2 20 snmp server notification receiver 2 24 snmp server port 2 21 snmp server readonly 2 21 snmp server readwrite 2 21 snmp server trap 2 21 snmp server trap certificate expired 2 12 snmp server trap certificate expires soon 2 12 snmp server trap community 2 21 snmp server trap config change 2 18 snmp server trap config update 2 19 snmp server trap destination 2 22 snmp serv
7. E 2 81 POC OSS M P TT dees 2 81 DIOPDSS scole dau ine len es ciscus I cau noes leaned ME MEDI EE 2 81 SNMP user CTT EE 2 82 E a S E E A TAT 2 82 e EE 2 82 eT CLG E 2 82 kd v n M TTE RUN 2 82 xiii SNMP notification receiver Contest 2 83 E EE 2 83 ki EE 2 83 uico DEE 2 83 A EE 2 83 PSO o cca sc EE 2 83 Alphabetical list of commands In this alphabetical list new to 5 3 x commands are preceded by an asterisk and formatted in green like this command 2 xxx accept forced links 2 71 access controller shared secret 2 35 access level 2 82 access controller restrict location 2 32 active 2 62 active 2 69 active 2 79 add ip filter 2 61 add ip qos profile 2 63 add wireless ip qos profile 2 39 admin local authentication 2 11 admin radius authentication 2 11 admin radius authentication server 2 12 allowed downtime 2 71 antenna bidirectionnal 2 50 antenna gain 2 50 arp 2 5 arping 2 2 arping 2 5 authentication server access controller 2 56 authentication server accounting 2 56 authentication server accounting radius profile 2 56 authentication server accounting radius stationid case 2 57 authentication server accounting radius stationid delimiter 2 57 authentication server radius 2 56 autochannel skip 2 50 bandwidth 2 53 bandwidth max 2 53 beacon dtim count 2 62 beacon interval 2 50 beacon transmit power 2 63 bridge priority 2 37 bridge protocol ieee
8. Parameters lt number gt End port number Range 0 65535 priority Supported on MSM310 MSM320 MSM335 MSM410 MSM422 priority low medium high very high gt Sets the priority for this IP QoS profile Parameters lt priority gt Available priorities are low medium high and very high profile name Supported on MSM310 MSM320 MSM335 MSM410 MSM422 profile name lt name gt Changes the name of the IP QoS profile protocol Supported on MSM310 MSM320 MSM335 MSM410 MSM422 protocol number Specifies the protocol ID use for this IP QoS profile Parameters number Protocol number Range 0 255 start port Supported on MSM310 MSM320 MSM335 MSM410 MSM422 start port number Specifies the start port to use for this IP QoS profile CLI commands Parameters lt number gt Start port number Range 0 65535 2 77 CLI commands 2 78 GRE interface context Path View gt Enable gt Config gt GRE interface Details of the GRE interface end force Supported on MSM310 MSM320 MSM335 MSM410 end force Quits the GRE context gre name Supported on MSM310 MSM320 MSM335 MSM410 gre name lt name gt Renames the current GRE interface ip address Supported on MSM310 MSM320 MSM335 MSM410 ip address lt ip address gt lt mask gt Set the local tunnel IP address and mask peer ip address Supported on MSM310 MSM320 MSM335 MSM410 peer ip address lt ip address gt Sets the G
9. radius server message authenticator Include the message authenticator attribute in RADIUS packets no radius server message authenticator Do not include the message authenticator attribute in RADIUS packets radius server name Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server name name Changes the name of the RADIUS profile CLI commands radius server nasid Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server nasid lt id gt Sets the network access server ID you want to use for the AP By default the serial number of the AP is used The AP includes the NAS ID attribute in all packets that it sends to the RADIUS server radius server timeout Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server timeout Activates RADIUS timeout no radius server timeout Disables RADIUS timeout radius server timeout Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server timeout lt number gt Sets the total timeout for RADIUS requests no radius server timeout Disables RADIUS timeout 2 75 CLI commands 2 76 IP_QOS context Path View gt Enable gt Config gt IP QOS This context provides commands for configuring IP QoS profiles end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Returns to a previous context end port Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end port lt number gt Specifies the end port to use for this IP QoS profile
10. show chent l g ETT 2 7 show diScrebe EE 2 7 ET 2 7 Show al Config EN 2 8 Config ee E 2 9 ee Te 2 9 certificate Ferdinand 2 9 Certificate POV O CATION is ccssssiveserna covexsxsiesepxsvleasivavacsenxeth isinsi iaiia 2 9 TUL E 2 9 factory DM EE 2 9 interface NENT EE 2 9 VED OOU CEVICC em 2 10 show certificate err eR EHE EE RE OE Enna 2 10 show cer ficate DIndIng ise conor e EXE vu EHE SPESE EEERe S EEVeTepE ine taureau eia 2 10 EES d 2 10 UICE A ee Ee 2 10 Wal ONT E dil ME T e S 2 10 interface wireless EEN stes ease tasas sa stes sas ranas 2 10 local MESA EE 2 11 terface SVE seniorii e EE E EEA E EE E EEES 2 11 tere E E 2 11 admin local authentication cccssccssssecsssecssssecssnsecssenecssnsecssnsecsensecsseseees 2 11 admin radius authent ATION EE 2 11 admin radius authentication BOEVOE uisi oM P HAEERETG ES RO Ead id cA DUE Ra MSS 2 12 ser VOT Rc c Upurea aesuusatn 2 12 ip Dips EE 2 12 snmp server trap Cer ficate evpired eene nnne 2 12 snmp server trap certificate expires soon cccsessececesssececseseeeeceseeeeeessaeees 2 12 snmp server trap Wel apa xii cscsssnsvssuns oe vecsustivssunscusnueyalecsusex se veciusvessenwesderouvwevesdens 2 13 snmp server trap WED LOGIMN sccsecossscancessucencessensnvensesentonsebandevestenndeseevendossewandossoss 2 13 sninpsserver trap web logout gees higoen Facta aeri erre etre Eden Eegen 2 13 web admin ic
11. 1 port 2 Switches to the specified Ethernet interface context 2 9 CLI commands 2 10 reboot device Supported on MSM310 MSM320 MSM335 MSM410 MSM422 reboot device Restarts the system show certificate Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show certificate Display current certificates show certificate binding Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show certificate binding Display how the certificates are used show config factory Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show config factory Generates a list of CLI commands that can be used to define the currently loaded configuration username Supported on MSM310 MSM320 MSM335 MSM410 MSM422 username lt user gt lt password gt Changes the current administrator username and password Parameters lt user gt New administrator username lt password gt New administrator password interface ip Supported on MSM310 MSM320 MSM335 MSM410 MSM422 interface ip Switches to the specified IP interface context interface wireless Supported on MSM310 MSM320 MSM335 MSM410 MSM422 interface wireless lt interface number gt Switches to the specified wireless interface context CLI commands local mesh profile Supported on MSM310 MSM320 MSM335 MSM410 MSM422 local mesh link lt name gt Switches to the specified local mesh link context Parameters lt name gt Number of the local mesh link to configure int
12. IP address of the default gateway 2 45 CLI commands 2 46 no ip default gateway Deletes the default gateway IP address Parameters lt address gt IP address ip address dhcp client id Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip address dhcp client id lt id gt Specifies an ID to identify the AP to a DHCP server This parameter is not required by all ISPs no ip address dhcp client id Deletes the specified DHCP client id end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context pppoe auto reconnect Supported on MSM310 MSM320 MSM335 MSM410 MSM422 pppoe auto reconnect The AP will automatically attempt to reconnect if the connection is lost no pppoe auto reconnect The AP will not automatically attempt to reconnect if the connection is lost pppoe mru Supported on MSM310 MSM320 MSM335 MSM410 MSM422 pppoe mru bytes Specifies the maximum receive unit Changes to this parameter should only be made according to the recommendations of your ISP Incorrectly setting this parameter can reduce the throughput of your Internet connection Parameters bytes Maximum size in bytes of a PPPoE packet when receiving Range 500 1500 bytes pppoe mtu Supported on MSM310 MSM320 MSM335 MSM410 MSM422 pppoe mtu bytes Specifies the maximum transmit unit Changes to this parameter should only be made according to the recommendations of your ISP Incorrectly setting thi
13. MSM410 MSM422 encryption key key value Sets WEP key 1 no encryption key key Deletes WEP key 1 Parameters key WEP key number Range 1 4 Keys 2 to 4 are only supported on the first WLAN profile value Key value The number of characters you specify for a key determines the level of encryption the AP will provide For 40 bit encryption specify 5 ASCII characters or 10 HEX digits For 128 bit encryption specify 13 ASCII characters or 26 HEX digits encryption key format Supported on MSM310 MSM320 MSM335 MSM410 MSM422 encryption key format hex ascii Specify the WEP key format Parameters hex Hex keys should only include the following digits 0 9 a f A F ascii ASCII keys are much weaker than carefully chosen hex keys You can include ASCII characters between 32 and 126 inclusive in the key However note that not all client stations support non alphanumeric characters such as spaces punctuation or special symbols in the key CLI commands 2 56 transmit key Supported on MSM310 MSM320 MSM335 MSM410 MSM422 transmit key lt key number gt Sets the key the AP will use to encrypt transmitted data All four keys are used to decrypt received data Parameters lt key number gt Transmit key number Range 1 4 authentication server access controller Supported on MSM310 MSM320 MSM335 MSM410 MSM422 authentication server access controller Use the access controller to authenticate
14. Placeholders m 96a MAC address of the access controller m b MAC address of the bridge m g Mac address of the default gateway assigned to the AP m w MAC address of wireless port wireless filters type Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wireless filters type mac gateway rules Sets the type of wireless security filter to use Parameters mac Traffic is forwarded to an upstream device with a specific MAC address Wireless security filters use the default definitions gateway Traffic is forwarded to the default gateway assigned to the AP Wireless security filters use the default definitions CLI commands custom Lets you define custom security filters and address for the upstream device Description The AP features an intelligent bridge which can apply security filters to safeguard the flow of wireless traffic The filters limit both incoming and outgoing traffic as defined below and force the AP to exchange traffic with a specific upstream device If the AP is configured to use the services of a access controller then the default security filters are automatically enabled and all traffic is sent to the access controller Default filters for incoming wireless traffic Applies to traffic sent from wireless client stations to the AP Accepted m Any IP traffic addressed to the access controller m PPPoE traffic The PPPoe server must be the upstream device m IP broadcast packets except NetBIOS
15. a VLAN already assigned to it is sent on this VLAN no vlan Deletes the default VLAN ID 2 43 CLI commands 2 44 vlan compatibility mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 vlan compatibility mode When this option is enabled the AP sends all management traffic AND all untagged traffic on both the default VLAN and untagged no vlan compatibility mode Disable VLAN and untagged compatibility mode vlan management filter Supported on MSM310 MSM320 MSM335 MSM410 MSM422 vlan management filter Restricts the default VLAN to carry management traffic only no vlan management filter Does not restrict the default VLAN to carry management traffic only Management traffic includes m all traffic that is exchanged by the AP and the access controller m all communications with RADIUS servers m HTTPS sessions to the management tool m SNMP traffic interface vlan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 interface vlan lt id gt lt id2 gt Switches to the specified VLAN interface or create a new VLAN interface with the specified ID no interface vlan lt id gt lt id2 gt Deletes the specified VLAN interface Parameters lt id gt VLAN ID Range 1 4094 lt id2 gt VLAN ID When specified is the last value in a range CLI commands WAN IP interface context Path View gt Enable gt Config gt WAN IP interface This context provides commands for configuring various IP networking relat
16. block client traffic during re authentication and only activate traffic again if authentication succeeds dotlx supplicant timeout Supported on MSM310 MSM320 MSM335 MSM410 MSM422 802 1x supplicant time out seconds Sets the 802 1X supplicant time out Parameters seconds time out in seconds dynamic key Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dynamic key Enables dynamic key support for 802 1X and WPA no dynamic key Disables dynamic key support for 802 1X and WPA CLI commands dynamic key interval Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dynamic key interval 5m 10m 15m 30m 1h 2h 4h 8h 12h Specifies how often in minutes or hours that the group broadcast key is changed for 802 1X and WPA add wireless ip qos profile Supported on MSM310 MSM320 MSM335 MSM410 MSM422 add wireless ip qos profile name Adds the specified profile to the list of IP QoS profiles in effect for the wireless links profile name Name of an existing IP QoS profile delete wireless ip qos profile all Supported on MSM310 MSM320 MSM335 MSM410 MSM422 delete wireless ip qos profile all Clears the list of IP QoS profiles currently in effect for the wireless links delete wireless ip qos profile Supported on MSM310 MSM320 MSM335 MSM410 MSM422 delete wireless ip qos profile name Removes the specified profile from the list of IP QoS profiles in effect for the wireless links lt profile
17. for SOAP server no soap server ssl SSL disabled for SOAP server soap server ssl with client certificate Supported on MSM310 MSM320 MSM335 MSM410 MSM422 Soap server ssl with client certificate Enable the use of client certificate with SSL for SOAP server no soap server ssl with client certificate Disable the use of client certificate with SSL for SOAP server soap server access interface gre Supported on MSM310 MSM320 MSM335 MSM410 MSM422 Soap server access interface gre lt name gt Enables access to SOAP via the specified GRE tunnel no soap server access interface gre lt name gt Removes access to SOAP via the specified GRE tunnel CLI commands soap server access wireless Supported on MSM310 MSM320 MSM335 MSM410 MSM422 Soap server access wireless Enables SOAP access on the wireless port no soap server access wireless Blocks SOAP access on the wireless port soap server access local mesh Supported on MSM310 MSM320 MSM335 MSM410 MSM422 Soap server access local mesh profile Enables access to the management tool via the specified local mesh no soap server access local mesh profile Disables access to the management tool via the specified local mesh snmp server trap low snr Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap low snr Send a trap when the average signal to noise ratio on a VAP VSC exceeds a specified level no snmp server trap low snr Do not send this trap s
18. name gt Name of an existing IP QoS profile currently in the profile list for the wireless links wireless link qos Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wireless link qos disabled 802 1p wme very high high normal 1ow tos diffsrv Sets the wireless link QoS policy sensor discovery mode Supported on MSM320 MSM335 sensor discovery mode id ip Sets the method the AP will use to communicate with the RF Manager Server Parameters id Connect using the Server ID of the RF Manager Server ip Connect using the IP address or hostname of the RF Manager Server Description For these methods to work the following must be true CLI commands 2 40 m The AP must be able to reach the RF Manager Server via a network connected to port 1 or port 2 For example you should be able to ping the RF Manager Server IP address from the AP m Ifthere are any firewalls between the AP and the RF Manager Server then TCP and UDP ports 3851 must be open bidirectionally m Ifusing the hostname option an entry must be created on the network DNS server that points to the IP address of the RF Manager Server m If using the Server ID option support for multicast traffic must be enabled on all routers and switches connected between the AP and the RF Manager Server sensor network detector Supported on MSM320 MSM335 sensor network detector Enable the Network Detector no sensor network detector Disable the Netw
19. on legacy clients Note To support 802 1p the wireless profile must have a VLAN assigned to it which means that client station traffic is forwarded onto the LAN port only CLI commands vap to vap3 Allows a specific priority level to be specified for all traffic on a VAP VSC profile This enables client stations without a QoS mechanism to set traffic priority by connecting to the appropriate SSID If you enable this priority mechanism it takes precedence regardless of the priority mechanism supported by associated client stations For example if you set SSID based low priority for a profile all devices that connect to the profile have their traffic set at this priority Mapping to the traffic queues is as follows vap0 or very high queue 1 vapl or high queue 2 vap2 or normal queue 3 vap3 or low queue 4 diffsrv Differential services is a method for defining IP traffic priority on a per hop basis The Differential Service bits are defined in RFC2474 and are composed of the six most significant bits of the IP TOS field These bits define the class selector code points which the CN320 maps to the appropriate traffic queue default setting tos The IP TOS type of service field can be used to mark prioritization or special handling for IP packets upstream diffserv tagging Supported on MSM310 MSM320 MSM335 MSM410 MSM422 upstream diffserv tagging Enables upstream diffserv tagging no upstream diffserv tagging Disables upstr
20. the month Range 1 31 lt weekday gt Weekday Valid values are sun mon tue wed thu fri sat lt month gt Month Valid values are jan feb mar apr may jun jul aug sep oct nov dec time Time as hh mm ss For example 15 44 00 If a parameter does not apply to the configured DST rule format simply set this parameter to any valid value clock custom dst ends format Supported on MSM310 MSM320 MSM335 MSM410 MSM422 clock custom dst ends format fixed last weekday following date preceding date Set the format of the custom DST rule Parameters fixed Rule of the form The Day th of Month at Time lt last weekday gt Rule of the form The last Weekday of Month at Time lt following date gt Rule of the form The first Weekday on or after the Day th of Month at Time lt preceding date gt Rule of the form The first Weekday on or before the Day th of Month at Time ntp server Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ntp server lt index gt lt host gt Adds a network time server Parameters lt index gt Index of the time server in the list Up to 20 time servers are supported Time servers are checked in the order that they appear in the list lt host gt DNS name or IP address of the time server ntp server failure trap Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ntp server failure trap Send a trap each t
21. 0 MSM320 MSM335 MSM410 MSM422 snmp server trap wireless association success Send a trap when a wireless client station successfully associates with the AP no snmp server trap wireless association success Do not send this trap snmp server trap wireless authentication fail Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap wireless authentication fail Send a trap when a wireless client station fails to authenticate no snmp server trap wireless authentication fail Do not send this trap snmp server trap wireless authentication success Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap wireless authentication success Send a trap when a wireless client station is successfully associated no snmp server trap wireless authentication success Do not send this trap CLI commands snmp server trap wireless deauthentication fail Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap wireless deauthentication fail Send a trap when a wireless client station fails to deauthenticate from the AP no snmp server trap wireless deauthentication fail Do not send this trap snmp server trap wireless deauthentication success Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap wireless deauthentication success Send a trap when a wireless client station deauthenticates from the AP no snmp server trap wireless deauthentication success Do not send this trap snmp server trap wireless
22. 2 31 firmware update weekday aiios uis coner dee ne suada ra tagen be oed de ta eei der been Pe aiU aede 2 31 snmp server trap Drware update cesses essen eene nennen nnne 2 31 access controller restrict loCaLtiori 215 SNE NOESEN eebe 2 32 Te E E 2 32 SOEIVICE SONSOR ee EE 2 32 Service sensor E 2 32 SEENEN dEr 2 33 service sensor ue E 2 33 ERSTEN 2 33 ip niame server E 2 33 ip Tiame server Ly MAIC ee gedet eode Eso rude See E 2 34 IP name server mtercepLlon E 2 34 ip name server switch on servfail esses esses eene 2 34 ip name server SWITCHOVER e eeesmuse aviar e seu nitor aera sue keena bre e ean sace segre Fee hup 2 94 snmp server trap unauthorized ap eese essere eene enne 2 34 snmp server trap unauthorized ap mternval 2 35 WIT CIE SSS CANN oes iod Odd ta otto ete Lcd esos Uu ratu er ara 2 35 vireless scan ve e e DEE 2 35 wirel ss scan UE E 2 35 access controller shared Secret 2 2 dti e aea ee pereas Ree ds deegete e 2 35 radius server e 2 36 1O01 0 K0 A i EE 2 36 dot11 igmp snooOping helper cscccsssccssssecssssecssncecsscecssesecssesecseseeesssecsenees 2 36 discovery DEOUOCOL EE 2 36 discovery protocol devIce I siz aee eco ta ornato tuae o tuer o ata reae aee cus 2 36 biridee ee E 2 37 bridge protocol eee iiis nera leere reo bae en tbe deed 2 37 bridge protocol ieee vlan aise sdcoasssssavressesvnossosss coded tona eed oe soobsassaunasansovosswsds soded
23. 2 37 bridge protocol ieee vlan 2 37 certificate 2 9 certificate binding 2 9 certificate revocation 2 9 clock 2 15 clock auto adjust dst 2 15 clock custom dst begins 2 16 clock custom dst begins format 2 16 clock custom dst ends 2 17 clock custom dst ends format 2 17 clock timezone 2 15 clock use custom dst rules 2 15 community 2 83 config 2 7 config update automatic 2 18 config update operation 2 18 config update time 2 18 config update uri 2 18 config update weekday 2 18 config version 2 40 data rate 2 63 delete ip filter 2 62 delete ip filter all 2 62 delete ip qos profile 2 64 delete ip qos profile all 2 64 delete wireless ip qos profile 2 39 delete wireless ip qos profile all 2 39 discovery protocol 2 36 discovery protocol device id 2 36 distance 2 48 dot11 2 49 dot11 automatic frequency 2 50 dot11 automatic frequency period 2 51 dot11 automatic frequency time 2 51 dot11 automatic transmit power 2 51 dot11 automatic transmit power period 2 51 dot11 igmp snooping helper 2 36 dot11 mode 2 52 dotlln channel extension 2 52 dotl1n channel width 2 52 dot11n guard interval 2 52 dot11n multicast rate 2 52 dot1x authentication 2 56 dot1x reauth 2 38 dot1x reauth period 2 38 dotlx reauth terminate 2 38 dot1x supplicant timeout 2 38 duplex 2 41 duplex 2 43 dynamic key 2 38 dynamic key interval 2 39 dynamic local mesh 2 71 dynamic mode 2 71 enable 2 2 encryption key 1 2 55 encryptio
24. 2 5947
25. 2 63 fast aub enu ATION EE 2 63 layero TO DULY ion ede na a e edet Mete MM 2 63 ada dp 90s profile uio ebat es aa pereant toa aa docebo oet oc ta ae Ft ee npo n Ends ad pied edes 2 63 delete Ip qos profile seed ee 2 64 delete 155068 DEOTIG etant de rio a eeh ageet 2 64 io uM E RA TA EE SAU RR t E CAU NC PECES 2 64 upstream diffsery Cagg E 2 65 wmm E SE 2 65 lOCGATON AWALE STOUP esiseina esiet rerea iaraa en aair iiie 2 65 i LE 2 65 xii VLAN interface context 5s sduccisisccccunsivnncnassveccbasatwensssyndzenusen ee seb YU E QUEE EYE SUE EN NER RE AG EA 2 67 QING RE 2 67 IP Eesen ee ee ebe hese ae ieee eae ities 2 67 ipaddress TE 2 67 VIAN BE EE 2 68 LOCAL MeSH COMER E 2 69 OTN EEN 2 69 Te VE 2 69 Al EN CT 2 69 local mesh namie E 2 69 remote TAG acs coos ee EE 2 69 EE Ae RIO RR NOR ete Rae ARE RSEN eat a Mere Doren Met erie Someta three 2 70 Security THO nior btt n sa odi So ania ae ste a Goud ATE An ETA AEA ie 2 70 security PSK eegene 2 70 EEN Eege 2 70 SPCC GC PC oe 2 70 al gege EE 2 70 accept forced Ins iode ged erona a aa aea aaae TEE Seals cepa eia 2 71 allowed downtime e essesssseeseseeeeee eese nnne nne en nete nn nnns sese nenas 2 71 RE TE en EE 2 71 E enee 2 71 initial disc very TE 2 71 niim C 2 71 TOi um SINT getest eet Eeer eege de EE a 2 71 preserve master Imk EE 2 72 promiscuous mode i556 ohedyscdentteds een ect 2 72 promiscuous mode startup d
26. 335 MSM410 MSM422 snmp server version 3 Enable version 3 no snmp server version 3 Disable version 3 snmp server access interface vlan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server access interface vlan name Enables access to SNMP via the specified VLAN no snmp server access interface vlan name Disables access to SNMP via the specified VLAN Parameters name Specifies the name of the VLAN snmp server access local mesh Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server access local mesh profile Enables access to SNMP via the specified local mesh no snmp server access local mesh profile Enables access to SNMP via the specified local mesh snmp server access interface gre Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server access interface gre lt name gt Enables access to SNMP via the specified GRE tunnel no snmp server access interface gre lt name gt Removes access to SNMP via the specified GRE tunnel 2 23 CLI commands 2 24 snmp server access wireless Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server access wireless Enables SNMP access on the wireless port no snmp server access wireless Blocks SNMP access on the wireless port snmp server access port 2 Supported on MSM310 MSM320 snmp server access port 2 Enables SNMP access on the upstream port no snmp server access port 2 Blocks SNMP access on the upstream port snmp serv
27. 6 soap server access interface vlan 2 25 soap server access local mesh 2 27 soap server access port 1 2 25 Soap server access port 2 2 25 soap server access wireless 2 27 soap server allow 2 25 soap server http authentication 2 25 soap server http authentication password 2 26 soap server http authentication username 2 26 soap server port 2 26 soap server ssl 2 26 Soap server ssl with client certificate 2 26 spectralink view 2 52 speed 2 41 speed 2 43 speed 2 70 Ssid name 2 55 start port 2 76 station distance 2 51 Switch operational mode 2 6 top 2 3 traceroute 2 3 transmit key 2 56 transmit power 2 49 upstream diffserv tagging 2 65 user 2 83 user name 2 82 username 2 10 version 2 83 virtual ap 2 11 virtual ap name 2 54 vlan 2 41 vlan 2 43 vlan 2 55 vlan compatibility mode 2 42 vlan compatibility mode 2 44 vlan name 2 68 vlan management filter 2 42 vlan management filter 2 44 web access interface gre 2 14 web access interface vlan 2 14 web access local mesh 2 15 web access port 1 2 14 web access port 2 2 14 web access wireless 2 14 web admin kickout 2 13 web allow 2 13 wireless filters 2 57 wireless filters mac 2 57 wireless filters rule input 2 58 wireless filters rule output 2 58 wireless filters type 2 58 wireless link qos 2 39 wireless scan 2 35 wireless scan period 2 35 wireless scan url 2 35 wmm advertising 2 65 world mode dot11 country code 2 14 wpa psk 2 57 xvii x
28. 802 1X or WPA logins authentication server accounting Supported on MSM310 MSM320 MSM335 MSM410 MSM422 authentication server accounting Enables RADIUS accounting for this VAP VSC no authentication server accounting Disables RADIUS accounting for this VAP VSC authentication server accounting radius profile Supported on MSM310 MSM320 MSM335 MSM410 MSM422 authentication server accounting radius profile name Sets RADIUS accounting to use the specified RADIUS profile no authentication server accounting radius profile Removes accounting support for 802 1x authentication server radius Supported on MSM310 MSM320 MSM335 MSM410 MSM422 authentication server radius name Sets the RADIUS profile to use for 802 1X or WPA authentication dotlx authentication Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dotix authentication local radius active directory Sets the authentication for 802 1X and WPA CLI commands wpa psk Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wpa psk key Sets the WPA preshared key no wpa psk Deletes the WPA preshared key Parameters key Specify a key that is between 8 and 63 alphanumeric characters in length It is recommended that the preshared key be at least 20 characters long and be a mix of letters and numbers The double quote character should not be used Description The AP uses the key you specify to generate the TKIP keys that encrypt the wireless data
29. ESS EES eegene Hooded Hia ea Ra Pe od idea 2 19 SNIP Ser Ver ALLOW Mc 2 20 Sninmp server EE 2 20 SNM PSOE VEL CONTAC E 2 20 snmp server heartbeat period sivecsssssseveedsoscocesgetauesiensanccencsadiedensbondeacsavaatepiaassenets 2 20 aninp server DEER eege secossentesspxa ENE IS EEEE NENEN ENESA 2 20 SAADAN OES VOL 10 AN E A 2 21 snmp server readonly 26 c bee cendi ER Festes Fas cisn diner bun ci PIPER uen EES EEEa 2 21 simp s rver read Wte 2 21 SNMP SErVET TEOEL Lucca noite NEE a adea 2 21 snmp server trap COMMING ysis ces sccsncesscvsosiscevsecessersecsensevsnstasausetenserpacessteecsvaens 2 21 snmp server trap destination sccccccsssicierssstecasiessesensaasancesacvadeasestaescsetecdensacevennes 2 22 snmp server trap heartbeat EE 2 22 snmp server trap Dnk atate esee ener enne nnne nnne 2 22 snmp server trap snmp authentication eese eese eene nennen 2 22 Bui server UPESIOD T ai eoo disc Ha bei EE SEE Iu ERA FO PORTA 2 22 snmp server version Dep rH debt IP HEPR RU EH Eege 2 23 K SEPVOE EE EE 2 23 snmp server access interface vlan 44 e eeeeee eese eite ee eaten ee nnne to nana aaa nu 2 23 snmp server access local mesh eiue eeiee ciae nene cae enema reat anna aaa pan ds 2 23 snmp server access interface gre acest ERR eret ERE Dm pA SEE MEHR REA 2 23 snmp server access Wireless 5 ccssccssacsecessecsverssersensnsonseceessncdesdodeavertasenseversetoecensens 2 24 snmp ser
30. Enterprise RF Manager 100 IDS IPS system RF Manager 1300 Basic RF Manager 50 IDS IPS system RF Planner RF Planner Important terms The following terms are used in this guide Term Description AP Refers to any HP ProCurve Networking MSM3xx or MSM4xx Access Point service controller variants Refers to any HP ProCurve Networking MSM7xx Controller including both Access Controller and Mobility Controller VSC Virtual ap VAP Service Community These terms are used interchangeably to refer to VSC Virtual Typographical conventions Command syntax Command syntax is formatted in a monospaced font as follows Example Description web admin kickout Items in plain text must be entered as shown ip http port lt number gt Items in italics and enclosed in lt gt are parameters for which you must supply a value In this example you must supply a value for lt number gt Introduction HP ProCurve Networking support Example Description end force Items enclosed in square brackets are optional You can either include them or not Do not include the brackets In this example you can either include force or omit it firewall mode high low none Items enclosed in parenthesis and separated by a vertical line indicate a choice Specify only one of the items In this example you must specify high low or none
31. MAC address Specify 6 pairs of hexadecimal numbers separated by colons with the values a to f in lowercase For example 00 00 00 0a 0f 01 2 69 CLI commands 2 70 security Supported on MSM310 MSM320 MSM335 MSM410 MSM422 security Enables wireless security no security Disables wireless security security mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 security mode wep tkip ccmp Set the security mode security psk Supported on MSM310 MSM320 MSM335 MSM410 MSM422 security psk lt secret gt Sets the PSK secret no security psk Clears the PSK secret security wep Supported on MSM310 MSM320 MSM335 MSM410 MSM422 security wep lt key gt Sets the WEP key no security wep Deletes the WEP key speed Supported on MSM310 MSM320 MSM335 MSM410 MSM422 speed auto 1 2 5 5 6 9 11 12 18 24 36 48 54 Sets the speed of the wireless link in Mbps interface vlan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 interface vlan lt id gt Switches to the specified VLAN interface or create a new VLAN interface with the specified Id no interface vlan lt number gt Removes the specified VLAN interface Parameters lt id gt VLAN ID Range 1 4094 CLI commands accept forced links Supported on MSM310 MSM320 MSM335 MSM410 MSM422 accept forced links May accept master orders for selection no accept forced links ignore master orders for selection allowed dow
32. P traffic interface vlan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 interface vlan lt id gt lt id2 gt Switches to the specified VLAN interface or create a new VLAN interface with the specified ID no interface vlan lt id gt lt id2 gt Deletes the specified VLAN Parameters lt id gt VLAN ID Range 1 4094 lt id2 gt VLAN ID When specified this is the last value in a range CLI commands Port 1 interface context Path View gt Enable gt Config gt Port 1 interface This context provides commands for configuring Port 1 end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context duplex Supported on MSM310 MSM320 MSM335 MSM410 MSM422 duplex auto half full Sets the duplex mode on Port 1 Parameters auto Lets the AP automatically set duplex mode based on the type of equipment it is connected to half Forces the port to operate in half duplex mode full Forces the port to operate in full duplex mode speed Supported on MSM310 MSM320 MSM335 MSM410 MSM422 speed auto 10 100 Sets the speed of Port 1 Parameters auto Lets the AP automatically set port speed based on the type of equipment it is connected to 100 Forces the port to operate at 100 mbps 10 Forces the port to operate at 10 mbps vlan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 vlan id Sets the default VLAN ID Range 1 4094 All outgoing traffic that does not have
33. ProCurve MSM3xx MSM4xx Access Points CLI Reference Guide HP ProCurve MSM3xx MSM4xx Access Points CLI Reference Guide Copyright 2009 Hewlett Packard Development Company L P The information contained herein is subject to change without notice This document contains proprietary information which is protected by copyright No part of this document may be photocopied reproduced or translated into another language without the prior written consent of Hewlett Packard Publication Number 5992 5947 May 2009 Applicable Products USA part WW part MSM310 Access Point J9374A J9379A MSM310 R Access Point J9380A J9383A MSM320 Access Point J9360A J9364A MSM320 R Access Point J9365A J9368A MSM325 Access Point with Sensor J9369A J93 73A MSM335 Access Point with Sensor J9356A J9357A MSM410 Access Point J9426A J9427A MSM422 Access Point J9358A J9359A Trademark Credits Windows NT Windows and MS Windows are US registered trademarks of Microsoft Corporation Hewlett Packard Company 8000 Foothills Boulevard Roseville California 95747 5552 WWW procurve com Disclaimer HEWLETT PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE Hewlett Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing performance or us
34. RE peer IP address remote ip address Supported on MSM310 MSM320 MSM335 MSM410 remote ip address ip address Sets the remote tunnel IP address MSM422 MSM422 MSM422 MSM422 MSM422 CLI commands Syslog destination context Path View gt Enable gt Config gt Syslog destination This context provides commands for configuring Syslog destinations active Supported on MSM310 MSM320 MSM335 MSM410 MSM422 active Enables logging to the current destination no active Disables logging to the current destination logging facility Supported on MSM310 MSM320 MSM335 MSM410 MSM422 logging facility localO locall local2 local3 1ocal4 local5 1ocal6 local 7 Sets the facility that is used when logging messages to a syslog server Parameters facility Available facilities are localO local logging host Supported on MSM310 MSM320 MSM335 MSM410 MSM422 logging host tcp udp addr lt number gt Sets the remote address the connection protocol and port of current syslog remote destination logging prefix Supported on MSM310 MSM320 MSM335 MSM410 MSM422 logging prefix string Sets the prefix that will be prepended to all syslog messages no logging prefix Removes the prefix that is prepended to all syslog messages name Supported on MSM310 MSM320 MSM335 MSM410 MSM422 name lt name gt Renames the current syslog destination 2 79 CLI commands 2 80 end Suppo
35. SM422 ping host c count s length q Determines if the specified remote IP address is active Parameters c host The IP address or DNS name of the host to ping c count Number of pings s length Length of the ping datagram lt q gt Quiet mode No output CLI commands ps Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ps Displays all running processes quit Supported on MSM310 MSM320 MSM335 MSM410 MSM422 quit Quits the CLI show license Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show license eula gpl other Displays license information show logging filtered Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show logging filtered Displays the system log top Supported on MSM310 MSM320 MSM335 MSM410 MSM422 top Displays all running processes traceroute Supported on MSM310 MSM320 MSM335 MSM410 MSM422 traceroute n r v m lt max_ttl gt p lt port gt q lt nqueries gt s lt src_addr gt t lt tos gt w lt wait gt lt host gt lt data size gt Show the hosts that are traversed to reach the specified IP address 2 3 CLI commands 2 4 Enable context Path View gt Enable This context provides access to various utilities reboot device Supported on MSM310 MSM320 MSM335 MSM410 MSM422 reboot device Restarts the system show certificate Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show c
36. SNMP notification receiver community Supported on MSM310 MSM320 MSM335 MSM410 MSM422 community lt community gt Specifies the community for this SNMP notification receiver end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Returns to a previous context port Supported on MSM310 MSM320 MSM335 MSM410 MSM422 port lt number gt Specifies the UDP port for this SNMP notification receiver receiver Supported on MSM310 MSM320 MSM335 MSM410 MSM422 receiver lt host gt Changes the host name of the SNMP notification receiver user Supported on MSM310 MSM320 MSM335 MSM410 MSM422 user lt name gt Specifies the user for this SNMP notification receiver version Supported on MSM310 MSM320 MSM335 MSM410 MSM422 version 1 2c 3 Specifies the SNMP version for this SNMP notification receiver 2 83 CLI commands 2 84 Technology for better business outcomes To learn more visit www hp com go procurve Copyright 2009 Hewlett Packard Development Company L P The information contained herein is subject to change without notice The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP will not be liable for technical or editorial errors or omissions contained herein ProCurve UJ Networking January 2009 Manual Part Number 599
37. age Disables filtering of the log file message field process Supported on MSM310 MSM320 MSM335 MSM410 MSM422 process Enables filtering of the log file by process name no process Disables filtering of the log file by process name process Supported on MSM310 MSM320 MSM335 MSM410 MSM422 process matches notmatches lt string gt Use this filter to include log messages according to their process name no process Disables filtering of the log file by process name 2 81 CLI commands SNMP user context Path View gt Enable gt Config gt SNMP user This context provides commands for configuring SNMP user access level Supported on MSM310 MSM320 MSM335 MSM410 MSM422 access level read only read write Specifies the access level for this SNMP user end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Returns to a previous context password Supported on MSM310 MSM320 MSM335 MSM410 MSM422 password lt password gt Specifies the password for this SNMP user security Supported on MSM310 MSM320 MSM335 MSM410 MSM422 security md5 des sha aes Specifies the security for this SNMP user user name Supported on MSM310 MSM320 MSM335 MSM410 MSM422 user name lt name gt Changes the name of this SNMP user 2 82 CLI commands SNMP notification receiver context Path View gt Enable gt Config gt SNMP notification receiver This context provides commands for configuring
38. ation Secure Shell access V Enable the CLI on SSH The CLI supports SSH on the standard TCP port 22 Connectivity and login credentials for SSH connections use the same settings as defined for the management tool manager on the Management gt Management tool page Administrative user authentication Security policies Local O Follow FIPS 140 2 guidelines L1 RADIUs HAD Oo Follow PCI DSS 1 2 guidelines Manager account Security Access to the management tool is enabled for the Username admin addresses and interfaces that are specified below Current password Allowed addresses p IP address Mask New password I M Add Confirm new password If a manager is logged in then a new manager login Terminates the current manager session Remove Selected Entry CH Is blocked until the current manager logs out Active interfaces SSH connections to the CLI can be made on any active interface Support for each interface must be explicitly enabled under Security m The login credentials for SSH connections are the same as those defined under Manager account By default both username and password are set to admin Note SSH logins always use the local manager username and password even if Administrative user authentication is set to use a RADIUS server Introduction Entering strings SSH client support The following SSH clients have been te
39. ber of bits in the mask 2 61 CLI commands 2 62 delete ip filter Supported on MSM310 MSM320 MSM335 MSM410 MSM422 delete ip filter lt ip address gt lt mask gt Deletes the specified address from the IP filter list If the list is empty then all wireless to wired LAN traffic is permitted Where lt address gt IP address lt mask gt Subnet mask in CIDR format Specifies the number of bits in the mask delete ip filter all Supported on MSM310 MSM320 MSM335 MSM410 MSM422 delete ip filter all Deletes all addresses from the IP filter list ip filters Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip filters Activates the IP filter which enables you to block wireless to wired LAN traffic on this profile based on its destination address no ip filters Disables the IP filter for this profile active Supported on MSM310 MSM320 MSM335 MSM410 MSM422 active Enable this VAP VSC no active Disable this VAP VSC beacon dtim count Supported on MSM310 MSM320 MSM335 MSM410 MSM422 beacon dtim count number Defines the DTIM period in the beacon Client stations use the DTIM to wake up from low power mode to receive multicast traffic The AP transmits a beacon every 100 ms The DTIM counts down with each beacon that is sent therefore if the DTIM is set to 5 then client stations in low power mode will wake up every 500 ms 5 second to receive multicast traffic CLI commands beacon transmit p
40. ccess port 1 Enables SNMP access on the downstream port no snmp server access port 1 Blocks SNMP access on the downstream port 2 19 CLI commands 2 20 snmp server allow Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server allow lt ip address gt lt mask gt Adds a host to the list of IP address from which access to the SNMP interface is permitted no snmp server allow lt ip address gt lt mask gt Removes a host from the list of IP address from which access to the SNMP interface is permitted Parameters lt address gt IP address lt mask gt Subnet mask in CIDR format Specifies the number of bits in the mask snmp server chassis id Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server chassis id lt name gt Specifies a name to identify the AP By default this is set to the serial number of the AP no snmp server chassis id Deletes the system name snmp server contact Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server contact lt email gt Specifies contact information no snmp server contact Deletes contact information Parameters lt email gt Email address snmp server heartbeat period Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server heartbeat period lt seconds gt Sets the interval between sending heartbeat traps Parameters lt seconds gt Heartbeat interval in seconds snmp server location Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp serv
41. cess to the management tool via the specified local mesh clock Supported on MSM310 MSM320 MSM335 MSM410 MSM422 clock time date Sets the system time and date Parameters time Time as hh mm ss For example 15 44 00 date Date as dd Month yyyy For example 17 Oct 2004 clock auto adjust dst Supported on MSM310 MSM320 MSM335 MSM410 MSM422 clock auto adjust dst Automatically adjust clock for daylight savings changes no clock auto adjust dst Do not automatically adjust clock for daylight savings changes clock timezone Supported on MSM310 MSM320 MSM335 MSM410 MSM422 clock timezone lt gmtdiff gt Sets the time zone the AP is operating in Parameters gmtdiff Offset from GMT as follows HOUR MIN For example Eastern Standard time is 5 00 clock use custom dst rules Supported on MSM310 MSM320 MSM335 MSM410 MSM422 clock use custom dst rules Use custom DST rules instead of default ones no clock use custom dst rules Do not use custom DST rules use default ones 2 15 CLI commands ntp protocol Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ntp protocol ntp sntp Sets the network time protocol to use ntp server Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ntp server Enable this option to have the AP periodically contact a network time server to update its internal clock no ntp server Disables the use of a network time server clock custom dst begins Support
42. commands 2 50 Note The actual transmit power used may less than the value specified The AP determines the power to used based on the settings you made for regulatory domain wireless mode and operating frequency antenna bidirectionnal Supported on MSM310 MSM320 MSM335 MSM410 MSM422 antenna bidirectionnal diversity main auxiliary Sets the antenna to transmit and receive on Select diversity to transmit and receive on both antennas Parameters diversity In this mode both antennas are used to transmit and receive The AP supports both transmit and receive diversity main Transmit and receive on the main antenna only aux Transmit and receive on the aux antenna only antenna gain Supported on MSM310 MSM320 MSM335 MSM410 MSM422 antenna gain lt number gt Used only for Radar detection records gain in 5GHz band of external antenna installed on device Does not affect output power autochannel skip Supported on MSM310 MSM320 MSM335 MSM410 MSM422 autochannel skip lt chan gt Adds the specified channel to the list of channels that are not allowed to be selected by the Auto Channel algorithm no autochannel skip lt chan gt Removes the specified channel to the list of channels that are not allowed to be selected by the Auto Channel algorithm beacon interval Supported on MSM310 MSM320 MSM335 MSM410 MSM422 beacon interval lt value gt Sets the beacon interval Parameters lt value gt Beacon int
43. cy the AP will operate at Parameters mode Sets the transmission speed and frequency band The available options are determined by the wireless card installed in the AP and may include m a Selects 802 11a providing 54 Mbps in the 5 GHz frequency band m b Selects 802 11b providing 11 Mbps in the 2 4 GHz frequency band m g Selects 802 11g providing 54 Mbps in the 2 4 GHz frequency band m bg Selects 802 11b 802 11g providing 11 and 54 Mbps in the 2 4 GHz frequency band m n Selects 802 11n m an Selects 802 11n 802 11a on the 5Ghz frequency band m gn Selects 802 11n 802 11g on the 2 4Ghz frequency band m ban Selects 802 11n 802 11g 802 11b on the 2 4Ghz frequency band lt frequency gt Sets the operating frequency by specifying a number in GHz or by specifying a channel number The frequencies that are available are determined by the radio installed in the AP and the regulations that apply in your country For optimum performance when operating in 802 11b or 802 11g modes choose a frequency that differs from other wireless access points operating in neighboring cells by at least 25 MHz If operating in 802 11a mode all channels are non overlapping transmit power Supported on MSM310 MSM320 MSM335 MSM410 MSM422 transmit power DB max Sets the maximum transmission power of the wireless radio Parameters lt db gt Power is specified in steps of IdBm The maximum setting is 18 dBm 2 49 CLI
44. disassociation fail Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap wireless disassociation fail Send a trap when a wireless client station fails to disassociate from the AP no snmp server trap wireless disassociation fail Do not send this trap snmp server trap wireless disassociation success Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap wireless disassociation success Send a trap when a wireless client station disassociates from the AP no snmp server trap wireless disassociation success Do not send this trap snmp server trap wireless reassociation fail Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap wireless reassociation fail Send a trap when a wireless client station fails to reassociate with the AP no snmp server trap wireless reassociation fail Do not send this trap snmp server trap wireless reassociation success Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap wireless reassociation success Send a trap when a wireless client station reassociates with the AP 2 29 CLI commands 2 30 no snmp server trap wireless reassociation success Do not send this trap snmp server trap syslog matches Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap syslog matches Send a trap when syslog messages matches a specified regular expression no snmp server trap syslog matches Do not send this trap snmp server trap syslog matc
45. e MPPE key from the RADIUS server This is a dynamic key that changes each time the user logs in and is authenticated The MPPE key is used to generate the TKIP keys that encrypt the wireless data stream v1 v2 Specify which version of WPA to use None will use both versions mixed mode CLI commands VLAN interface context Path View gt Enable gt Config gt Port 2 interface gt VLAN interface View gt Enable gt Config gt Port 1 interface gt VLAN interface View gt Enable gt Config gt Local mesh gt VLAN interface This context provides commands for configuring Virtual LANs VLANs In this context VLANs can be added or edited For example to create anew VLAN interface named hongkong on the LAN port with VLAN id 88 do the following CLI config interface lan CLI if lan interface vlan 88 CLI if vlan vlan name hongkong CLI if vlan ip address mode dhcp CLI if vlan no nat CLI if vlan end CLI if lan end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context ip address Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip address lt ip address gt lt mask gt Sets a static IP address for the VLAN Parameters lt address gt IP address lt mask gt Subnet mask in CIDR format Specifies the number of bits in the mask ip address mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip address mode dhcp static none Sets the IP addressing mode f
46. e for multicast traffic This is a fixed rate which means that if a station is too far away to receive traffic at this rate then the multicast will not be seen by the station By rasing the multicast rate you can increase overall throughput significantly station distance Supported on MSM310 MSM320 MSM335 MSM410 MSM422 station distance 0km 5km 10km 15km 20km 25km 30km 35km Fine tunes internal timeout settings to account for the distance that wireless links span For normal operation the AP is optimized for links of less than 1 km 2 51 CLI commands 2 52 This is a global setting that is useful when creating wireless links to remote sites However it also applies to all wireless connection made with the radio not just for wireless links Therefore if you are also using the radio to serve local wireless client stations adjusting this setting may lower the performance for clients with marginal signal strength or when interference is present Essentially it means that if a frame needs to be retransmitted it will take longer before the actual retransmit takes place dot IT mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dot11 mode monitor ap wds ap only wds only sensor Sets the operating mode for the radio spectralink view Supported on MSM310 MSM320 MSM335 MSM410 MSM422 spectralink view Enable the use of spectralink view no spectralink view Disable the use of spectralink view do
47. e of this material The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP shall not be liable for technical or editorial errors or omissions contained herein Hewlett Packard assumes no responsibility for the use or reliability of its software on equipment that is not furnished by Hewlett Packard Contents In this Contents section new to 5 3 x contexts and commands are preceded with an asterisk and formatted in green like this new context new command Introduction About this UMS ii Se ris iesiri oraa AEN ARE E ipa Eon ps ue M HM ri ema Edd 1 2 See ebe oli CNN T T E uednebathheauntitalecsalesienuardtids 1 2 HP ProCurve Product Naming unns e pEP ea enne rtt e ed degen 1 2 Tree 1 3 Typographical conventions xcisiivcssssenteeceveectsssvaeddenteveceesseavsrvsxexsetanseue Uno Ra Ecko 1 3 Command syntaX dee 1 3 luta MOTO TOOL MN 1 4 HP ProCurve Networking SUPPOlt cscccsssccssssecsssecssssecsssceessnesesesesesseesessneeseeees 1 4 Before contacting support sacs cise credo asissasensnci bisnasdpedansieu cis sseuesenseeutepsdaeeedeaeses 1 4 Online LEE 1 5 CLI support in autonomous and controlled modes esses 1 5 Controlled ee uenire EET ERE RR IR ER SER i i Min epee Ni 1 5 Autonomous mode NN cileicadyuneetdiacieandananbetdsss 1 5 Co
48. e pin config Supported on MSM310 MSM320 MSM335 MSM410 MSM422 config Switches to the config context 2 7 CLI commands show all config Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show all config Print all configuration that applies to this device 2 8 CLI commands Config context Path View gt Enable gt Config This is the root context for all configuration commands certificate Supported on MSM310 MSM320 MSM335 MSM410 MSM422 certificate authority local lt uri gt lt certname gt lt password gt Add a new certificate to the store using the friendly name certificate binding Supported on MSM310 MSM320 MSM335 MSM410 MSM422 certificate binding web management html auth soap eap lt certname gt Assign a certificate to a service no certificate binding web management html auth soap eap lt certname gt Unassign a certificate from a service certificate revocation Supported on MSM310 MSM320 MSM335 MSM410 MSM422 certificate revocation lt uri gt lt certname gt Add a Certificate Revocation List to an existing authority certificate end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context factory settings Supported on MSM310 MSM320 MSM335 MSM410 MSM422 factory settings Resets the system configuration to factory default settings interface ethernet Supported on MSM310 MSM320 MSM335 MSM410 MSM422 interface ethernet port
49. eam diffserv tagging wmm advertising Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wmm advertising Enables WMM information element advertising no wmm advertising Disables WMM information element advertising location aware group Supported on MSM310 MSM320 MSM335 MSM410 MSM422 location aware group name Sets the specified group name for the access point no location aware group Deletes the specified group name for the access point end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context 2 65 CLI commands 2 66 security Supported on MSM310 MSM320 MSM335 MSM410 MSM422 security none wep 802 1x wep static wep wpa psk radius v1 v2 UN Sets the current wireless security policy Parameters none No wireless security wep This option enables support for wireless users with WEP client software 802 1x This option enables support for wireless users with 802 1X client software The AP supports 802 1x client software that uses EAP TLS EAP TTLS EAP SIM and PEAP wep Enables the use of dynamic WEP keys for all 802 1X sessions Dynamic key rotation occurs on key 1 which is the broadcast key Key 0 is the pairwise key It is automatically generated by the AP static wep Support client stations using static WEP keys wpa This option enables support for wireless users with WPA client software psk Enables support for a preshared key radius The AP obtains th
50. eass 2 37 1D TOUTOG ALC WAY ee EE 2 37 let 2 38 dotlx reath Perioden niana ae e i a EE A E aa 2 38 dot1lx reauth Ee 2 38 dotIx supplicaht GIIeOUL uie etie ise n deet 2 38 dynamie Key uie Ue pd ba Pria se iei VEN add god eM ru e vga bu IRE ead 2 38 dynamic key ut EG 2 39 add wireless MerCi Eee 2 39 delete wireless ip qos profile all s ccescccssccessccosecccvsnndecescanseeescasssciccesgnecteandeseseoess 2 39 delete wireless ip qos profile 1 2 entries toot epar een ENEE SS 2 39 Eegeregie eegene 2 39 Sensor discovery mode 5 croi cori sooni isa ent EENS Seege 2 39 Sensor network detector ias eebe eeh 2 40 SENSOM SOLVER Eege eeh 2 40 SENSO Server TIAIIIG iu staves secta betta to neat tee dial SCENE dE Bee 2 40 EIERE ee e 2 40 Port 2 interface Contexte ect konnen akt een inpr Rye Eeer 2 41 E 2 41 duplex ee EE Ee 2 41 SPEEA NEE 2 41 puri EE 2 41 vlan compatibility lioe 6E 2 42 Vian Wianage E 2 42 alte 0 bl gad E 2 42 Eent interface CONTE s s cocks ed de Ee EE Eeer 2 43 il Tp hee ee 2 43 duplex eegene 2 43 SPCC BG 2 43 AAD EE 2 43 vlan compatibility mode utro eom DT eege ee 2 44 vlan management filter NS 2 44 interface E s tete Iit baile E e tci ue E 2 44 WAN IP interface E E 2 45 Dppoe client US OK EE 2 45 Re e TE 2 45 TVA CSS ears Coca ge 2 45 leoi MH 2 45 ip address dhcp client ld suieiiu i irte us cenar ihe bro aene ne ss agen bre Yee i pen koe depre d 2 46 gp
51. ed on MSM310 MSM320 MSM335 MSM410 MSM422 Clock custom dst begins day weekday month time Set parameters of the rule defining the beginning of daylight savings time Parameters day Day of the month Range 1 31 weekday Weekday Valid values are sun mon tue wed thu fri sat month Month Valid values are jan feb mar apr may jun jul aug sep oct nov dec time Time as hh mm ss For example 15 44 00 If a parameter does not apply to the configured DST rule format simply set this parameter to any valid value clock custom dst begins format Supported on MSM310 MSM320 MSM335 MSM410 MSM422 clock custom dst begins format fixed last weekday following date preceding date Set the format of the custom DST rule Parameters fixed Rule of the form The Day th of Month at Time lt last weekday gt Rule of the form The last Weekday of Month at Time lt following date gt Rule of the form The first Weekday on or after the Day th of Month at Time lt preceding date gt Rule of the form The first Weekday on or before the Day th of Month at Time CLI commands clock custom dst ends Supported on MSM310 MSM320 MSM335 MSM410 MSM422 clock custom dst end lt day gt lt weekday gt lt month gt lt time gt Set parameters of the rule defining the end of daylight savings time Parameters lt day gt Day of
52. ed settings pppoe client user Supported on MSM310 MSM320 MSM335 MSM410 MSM422 pppoe client user username password Sets the PPPoE username and password no pppoe client user Deletes the PPPoE username Parameters username The username assigned to you by your ISP The AP will use this username to log on to your ISP when establishing a PPPoE connection password The password assigned to you by your ISP The AP will use this username to log on to your ISP when establishing a PPPoE connection ip address mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip address mode dhcp pppoe static Sets the IP addressing mode for Port 2 Parameters dhcp Dynamic host configuration protocol The DHCP server will automatically assign an address to the AP which functions as a DHCP client pppoe Point to point protocol over Ethernet The PPPoE server will automatically assign an IP address to the AP You need to supply a username and password so the AP can log on static This option enables you to manually assign an IP address to the AP ip address Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip address ip address gt lt mask gt Sets a static IP address for the port Parameters address IP address lt mask gt Subnet mask in CIDR format Specifies the number of bits in the mask ip default gateway Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip default gateway ip address Sets the
53. elay eese eene eene 2 72 Snr Cost POT HOD o o torpe eL su chats ate eae ieu M era peace etudes pa ae 2 12 RADIUS COMLEX DEE 2 73 OTIC BEE 2 73 radius server accounting DOT 2 73 radius server alternate hosts e tete ra ee onu en po SERA 2 73 radius server authentication method 2 73 radius server authentication DO cscs cccececissscascteveenscesesedesdeeeesecdessedeeuseeveesseanes 2 73 rtadius server e 2 74 radius servetr e E 2 74 radius server WC 2 74 radius server message authenticator eese eere 2 74 PACTS E 2 74 tadrus server TIaSK cerien a e ae AREE EREE 2 75 ya di s Server eerste eher 2 75 radi s server CINCOM EE 2 75 EIERE 2 76 OTN EE 2 76 Miror E 2 76 PTE gta UHR ve be uH rd INST RARE 2 76 profil NaMe pens RTT E o eats 2 76 One 2 76 Start POTU NECI c ain 2 76 GRE interface GOTDIEOXE oot tetro RP EESR Re Fett rata n a e kao Pappe Ea En Ee Leah uu 2 78 end TOR EE 2 78 gre HEET 2 78 EE eerste 2 78 pe rip le 2 78 remote To auf PES su doa etra Egger EE 2 78 Syslog CLOSE ee T 2 79 Tee 2 79 logpme TAeI y sooo Pann Ha Ek DERE D uae amped aca ids ed IUDA UHR eons 2 79 logging OST PM aE Tia asa 2 79 logging pre X eR EEEa 2 79 TNAIN E EEA EE T 2 79 SIALE coos E E AE A AE A A A A AA 2 80 ET BE 2 80 VG E 2 80 MACES e eee eise ss 2 80 Ir o M M H R 2 80 TESS AGC TT p
54. ensor retry lt retries gt Specify how many retries the service sensor will attempt when polling the target device When the retry limit is reached the radio on the AP is turned off Parameters lt retires gt Number of retries Range 0 100 service sensor timeout Supported on MSM310 MSM320 MSM335 MSM410 MSM422 service sensor timeout lt seconds gt Sets how long the service sensor will wait for a response to a poll before timing out Parameters lt seconds gt Length of timeout Range 1 5 seconds ip name server Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip name server lt primary gt lt secondary gt lt third gt Sets the primary and secondary DNS servers overriding dynamically assigned ones Parameters lt primary gt IP address of the primary DNS server lt secondary gt IP address of the secondary DNS server lt third gt IP address of the third DNS server ip name server cache Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip name server cache Enables the DNS cache no ip name server cache Disables the DNS cache Once a host name has been successfully resolved to an IP address by a remote DNS server it is stored in the cache This speeds up network performance as the remote DNS server now does not have to be queried for subsequent requests for this host The entry stays in the cache until m an error occurs when connecting to the remote host m the time to live TTL of the DNS request e
55. er location lt name gt Specifies the location where the AP is installed no snmp server location Deletes location information CLI commands Parameters lt name gt Location where the AP is installed snmp server port Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server port lt port number gt Sets the port the AP will use to respond to SNMP requests Parameters lt port number gt SNMP port number Range 1 65535 snmp server readonly Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server readonly community Sets the read only community string no snmp server readonly Deletes the read only community string snmp server readwrite Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server readwrite community Sets the read write community string no snmp server readwrite Deletes the read write community string snmp server trap Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap Enables support for SNMP traps no snmp server trap Disables support for SNMP traps snmp server trap community Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap community str Sets the password required by the remote host that will receive the trap no snmp server trap community Deletes the password required by the remote host that will receive the trap 2 21 CLI commands 2 22 snmp server trap destination Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp s
56. er trap firmware update 2 31 snmp server trap heartbeat 2 22 snmp server trap link state 2 22 snmp server trap low snr 2 27 snmp server trap low snr interval 2 27 snmp server trap low snr level 2 27 snmp server trap network trace 2 30 snmp server trap new association 2 27 snmp server trap new association interval 2 28 snmp server trap snmp authentication 2 22 snmp server trap syslog matches 2 30 snmp server trap syslog matches regex 2 30 snmp server trap syslog severity 2 19 snmp server trap syslog severity level 2 30 snmp server trap unauthorized ap 2 34 snmp server trap unauthorized ap interval 2 35 snmp server trap vpn connection 2 28 snmp server trap web fail 2 13 snmp server trap web login 2 13 snmp server trap web logout 2 13 snmp server trap wireless association fail 2 28 snmp server trap wireless association success 2 28 snmp server trap wireless authentication fail 2 28 snmp server trap wireless authentication success 2 28 snmp server trap wireless deauthentication fail 2 29 snmp server trap wireless deauthentication success 2 29 snmp server trap wireless disassociation fail 2 29 snmp server trap wireless disassociation success 2 29 snmp server trap wireless reassociation fail 2 29 snmp server trap wireless reassociation success 2 29 snmp server user 2 24 snmp server version 1 2 22 snmp server version 2c 2 23 snmp server version 3 2 23 snr cost per hop 2 72 soap server 2 24 Soap server access interface gre 2 2
57. er user Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server user lt name gt Creates a new SNMP user or switches to the SNMP user context with the specified user name no snmp server user lt name gt Deletes the specified SNMP user snmp server notification receiver Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server notification receiver host Creates a new SNMP notification receiver or switches to the SNMP notification receiver context with the specified IP address no snmp server notification receiver host Deletes the specified SNMP notification receiver soap server Supported on MSM310 MSM320 MSM335 MSM410 MSM422 Soap server Enables the SOAP server no soap server Disables the SOAP server CLI commands soap server access interface vlan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 soap server access interface vlan lt name gt Enables access to SOAP via this VLAN no soap server access interface vlan lt name gt Disables access to SOAP via this VLAN soap server access port 1 Supported on MSM310 MSM320 MSM335 MSM410 MSM422 Soap server access port 1 Enables SOAP access on the downstream port no soap server access port 1 Blocks SOAP access on the downstream port soap server access port 2 Supported on MSM310 MSM320 MSM335 MSM410 MSM422 Soap server access port 2 Enables SOAP access on the upstream port no soap server access port 2 Blocks SOAP access on the u
58. erface gre Supported on MSM310 MSM320 MSM335 MSM410 MSM422 interface gre name Switches to the specified GRE interface or creates a new GRE interface with the specified name no interface gre name Deletes the specified GRE interface virtual ap Supported on MSM310 MSM320 MSM335 MSM410 MSM422 virtual ap name Creates a new VAP VSC profile or switches to the existing VAP VSC context with the specified name no virtual ap name Deletes the specified Virtual AP profile Parameters name Name of an existing or new VAP VSC profile admin local authentication Supported on MSM310 MSM320 MSM335 MSM410 MSM422 admin local authentication Enable the authentication of administrator logins to occur using local account no admin local authentication Disable administrator authentication via local account admin radius authentication Supported on MSM310 MSM320 MSM335 MSM410 MSM422 admin radius authentication Sets the authentication of administrator logins to occur using RADIUS no admin radius authentication Disable administrator authentication via RADIUS 2 11 CLI commands 2 12 admin radius authentication server Supported on MSM310 MSM320 MSM335 MSM410 MSM422 admin radius authentication server lt name gt Sets the authentication of administrator logins to occur using RADIUS ip http port Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip http port lt number gt Sets the port number to use
59. ertificate Display current certificates show certificate binding Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show certificate binding Display how the certificates are used iperf Supported on MSM310 MSM320 MSM335 MSM410 MSM422 iperf c host t time Runs a performance throughput test Parameters c host The IP address or DNS name of the iperf server to connect to t length Length of the throughput test in seconds ping Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ping host c lt count gt s lt length gt q Determines if the specified remote IP address is active Parameters c host The IP address or DNS name of the host to ping c count Number of pings s length Length of the ping datagram q Quiet mode No output CLI commands arping Supported on MSM310 MSM320 MSM335 MSM410 MSM422 arping AbDfhqUV c lt count gt w deadline s source I interface destination Pings a destination on a device interface using ARP packets arp Supported on MSM310 MSM320 MSM335 MSM410 MSM422 arp evn H type i if hostname arp v i if d hostname pub arp v H type i if s hostname hw addr temp arp v H type i if s hostname hw addr netmask nm pub arp v H type i if Ds hostname ifa netmask nm pub Displays and modifies the Inte
60. erval value in the range 20 and 500 time units TU 1 TU 1024us dot11 automatic frequency Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dot11 automatic frequency Enable this option to have the AP automatically determine the best operating frequency CLI commands no dotil automatic frequency Disable automatic frequency selection dot11 automatic frequency period Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dot11 automatic frequency period disabled 1h 2h 4h 8h 12h 24h Specify how often the frequency setting is re evaluated when automatic frequency selection is enabled dot11 automatic frequency time Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dot11 automatic frequency time time Specify when the channel should be re evaluated dot11 automatic transmit power Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dot11 automatic transmit power Enables automatic transmit power selection no dot11 automatic transmit power Disables automatic transmit power selection dot11 automatic transmit power period Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dot11 automatic transmit power period 1h 2h 4h 8h 12h 24h Sets the interval at which the transmit power setting is re evaluated when automatic power selection is enabled multicast rate Supported on MSM310 MSM320 MSM335 MSM410 MSM422 multicast rate 1 2 5 5 6 9 11 12 18 24 36 48 54 Sets the transmit rat
61. erver trap destination lt host gt lt port number gt Add a new trap destination no snmp server trap destination lt host gt lt port gt Deletes the specified trap destination Parameters lt host gt Sets the IP address or domain name of the host that the AP will send traps to lt port number gt SNMP port number Range 1 65535 By default port 162 is used snmp server trap heartbeat Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap heartbeat Enables sending of heartbeat traps at regular intervals no snmp server trap heartbeat Disables sending of heartbeat traps at regular intervals snmp server trap link state Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap link state Send a trap when the link state changes on any interface no snmp server trap link state Do not send this trap snmp server trap snmp authentication Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap snmp authentication Send a trap each time an SNMP request fails to supply the correct community name snmp server version 1 Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server version 1 Enable version 1 no snmp server version 1 Disable version 1 CLI commands snmp server version 2c Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server version 2c Enable version 2c no snmp server version 2c Disable version 2c snmp server version 3 Supported on MSM310 MSM320 MSM
62. example 00 00 00 0a 0f 01 Description This feature enables you to control access to the AP based on the MAC address of client stations You can either block access or allow access depending on your requirements When both this option and the MAC based authentication options are enabled the following applies if a user MAC address does not appear in the MAC filtering list then MAC based authentication takes place for that user mac filters mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mac filters mode allow block Either allow or block access to the wireless network for client stations whose addresses appear in the MAC filter list mac authentication accounting Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mac authentication accounting Enables RADIUS accounting for this VAP VSC no mac authentication accounting Disables RADIUS accounting for this VAP VSC mac authentication accounting radius profile Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mac authentication accounting radius profile name Sets RADIUS accounting to use the specified RADIUS profile no mac authentication accounting radius profile Disables accounting support for MAC authentication mandatory authentication Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mandatory authentication MAC based authentication is mandatory CLI commands no mandatory authentication MAC based authentication is not mandatory mac authenticat
63. f enabled snr cost per hop Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snr cost per hop number Slave Set the group s SNR cost per hop CLI commands RADIUS context Path View gt Enable gt Config gt RADIUS This context provides commands for configuring RADIUS profiles end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context radius server accounting port Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server accounting port lt number gt Specifies the port to use for RADIUS accounting Parameters lt number gt Accounting port number Range 1 65535 radius server alternate hosts Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server alternate hosts Try last answering RADIUS host first no radius server alternate hosts Try primary RADIUS host first radius server authentication method Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server authentication method mschap chap mschapv2 pap eap md5 Sets the authentication method to use when communicating with the RADIUS server For 802 1x users the authentication method is always determined by the 802 1x client software and is not controlled by this setting If traffic between the AP and the RADIUS server is not protected by a VPN it is recommended that you use either EAP MD5 or MSCHAP V2 if supported by your RADIUS Server PAP MSCHAP V1 and CHAP are less secure protocols
64. for HTTP access to the AP Parameters lt number gt Port number Range 1 65535 Description HTTP connections made to this port are met with a warning and the browser is redirected to the secure web server port By default this parameter is set to port 80 ip https port Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip https port lt number gt Sets the port number used for HTTPS access to the AP Parameters lt number gt Port number Range 1 65535 snmp server trap certificate expired Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap certificate expired Send a trap when the SSL certificate has expired A trap is sent every 12 hours no snmp server trap certificate expired Do not send a trap when the SSL certificate has expired snmp server trap certificate expires soon Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap certificate expires soon Send a trap when the SSL certificate is about to expire A trap is sent every 12 hours starting 15 days before the certificate expires no snmp server trap certificate expires soon Do not send a trap when the SSL certificate is about to expire CLI commands snmp server trap web fail Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap web fail Send a trap each time an administrator login is refused no snmp server trap web fail Do not send a trap each time an administrator login is refused snmp server trap web logi
65. hes regex Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap syslog matches regex lt regex gt Sets the regular expression used to match the syslog messages snmp server trap syslog severity level Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap syslog severity level debug info notice warning error critical alert emergency Set the severity level of syslog messages that will trigger a trap snmp server trap network trace Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap network trace Send a trap when a network trace is started or stopped no snmp server trap network trace Do not send this trap firmware update automatic Supported on MSM310 MSM320 MSM335 MSM410 MSM422 firmware update automatic Enables scheduled firmware upgrades no firmware update automatic Disables scheduled firmware upgrade The AP can automatically retrieve and install firmware from a local or remote URL at preset times By placing AP firmware on a web or ftp server you can automate the update process for multiple units When the update process is triggered the AP retrieves the first 2K of the firmware file to determine if it is different from the active version If different the entire firmware file is then downloaded and installed CLI commands Different means older or newer This enables you to return to a previous firmware version if required Configuration settings are prese
66. ilters local 2 59 mac filters mode 2 60 mandatory authentication 2 60 matches 2 80 max association 2 54 mesh id 2 71 message 2 80 message 2 81 minimum snr 2 71 multicast rate 2 51 name 2 79 nslookup 2 2 ntp protocol 2 16 ntp server 2 16 ntp server 2 17 ntp server failure trap 2 17 password 2 82 peer ip address 2 78 ping 2 2 ping 2 4 port 2 83 pppoe auto reconnect 2 46 pppoe client user 2 45 pppoe mru 2 46 pppoe mtu 2 46 pppoe unnumbered 2 47 preserve master link 2 72 priority 2 76 process 2 81 process 2 81 profile name 2 76 promiscuous mode 2 72 promiscuous mode startup delay 2 72 protocol 2 76 ps 2 3 public forwarding 2 63 qos 2 64 quit 2 3 quit 2 5 radio active 2 48 radius server accounting port 2 73 radius server alternate hosts 2 73 radius server authentication method 2 73 radius server authentication port 2 73 radius server deadtime 2 74 radius server host 2 74 radius server key 2 2 74 radius server message authenticator 2 74 radius server name 2 74 radius server nasid 2 75 radius server profile 2 36 radius server timeout 2 75 radius server timeout 2 75 rcapture 2 5 reboot device 2 10 reboot device 2 4 receiver 2 83 remote ip address 2 78 remote mac 2 69 rts threshold 2 48 security 2 66 security 2 70 security 2 82 security mode 2 70 security psk 2 70 security wep 2 70 sensor discovery mode 2 39 sensor network detector 2 40 sensor server id 2 40
67. ime a time server synchronization failed no ntp server failure trap Do not send a trap each time a time server synchronization failed CLI commands 2 18 config update automatic Supported on MSM310 MSM320 MSM335 MSM410 MSM422 config update automatic Enables scheduled configuration restore or backup no config update automatic Disables scheduled configuration restore or backup The AP can automatically download the configuration file from a local or remote URL restore It is also possible to upload the current configuration to a given URL backup Theses operations can be done at preset times config update operation Supported on MSM310 MSM320 MSM335 MSM410 MSM422 config update operation restore backup Sets the type of operation that will take place at the preset time config update time Supported on MSM310 MSM320 MSM335 MSM410 MSM422 config update time time Sets the time of day when the scheduled configuration operation backup or restore will take place Parameters time Time as hh mm ss For example 15 44 00 config update uri Supported on MSM310 MSM320 MSM335 MSM410 MSM422 config update uri uri Sets the URI where the AP will download or upload the configuration file no config update uri Clears the configuration file URI config update weekday Supported on MSM310 MSM320 MSM335 MSM410 MSM422 config update weekday everyday monday tuesday wednesday thursday friday sat
68. ion mask gateway metric Adds a static route no ip route gateway destination mask gateway lt metric gt Removes the specified static route Parameters destination Traffic addressed to this IP address will be routed mask Indicates the number of bits in the destination address that is checked for a match gateway Indicates the IP address of the gateway the AP will forward routed traffic to The gateway address must be on the same subnet as one of the available interfaces Internet port or LAN port metrix Indicates the priority of a route If two routes exist for a destination address then the AP chooses the one with the lower metric CLI commands 2 38 dotlx reauth Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dotix reauth Enable this option to force 802 1X client stations to reauthenticate no dotix reauth Disables 802 1X reauthentication dotlx reauth period Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dotix reauth period 15m 30m 1h 2h 4h 8h 12h Sets the 802 1X reauthentication interval Client stations must reauthenticate when this interval expires dotlx reauth terminate Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dotix reauth terminate Enable this option to allow client stations to remain connected during re authentication Client traffic is blocked only when re authentication fails no dotix reauth terminate Disabled this option to
69. ion radius profile Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mac authentication radius profile lt radiusname gt Specifies the name of the RADIUS profile to use for MAC based authentication no mac authentication radius profile Do not use a RADIUS profile mac authentication radius stationid case Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mac authentication radius stationid case uppercase lowercase Specifies the case applied to the station delimiter if it is a letter mac authentication radius stationid delimiter Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mac authentication radius stationid delimiter null colon dash dot space comma under Specifies the one character delimiter that will be used to format both the calling station ID and the called station ID attributes in RADIUS packets mac authentication Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mac authentication Enables support for MAC based authentication no mac authentication Disable support for MAC based authentication add ip filter Supported on MSM310 MSM320 MSM335 MSM410 MSM422 add ip filter lt ip address gt lt mask gt Adds an IP filter to the list of destination addresses that traffic will be accepted for All other traffic will be blocked If the list is empty then all wireless to wired LAN traffic is permitted Where lt address gt IP address lt mask gt Subnet mask in CIDR format Specifies the num
70. is connected to half Forces the port to operate in half duplex mode full Forces the port to operate in full duplex mode speed Supported on MSM310 MSM320 MSM335 MSM410 MSM422 speed auto 10 100 Sets the speed of Port 2 Parameters auto Lets the AP automatically set port speed based on the type of equipment it is connected to 100 Forces the port to operate at 100 mbps 10 Forces the port to operate at 10 mbps vlan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 vlan id Sets the default VLAN ID Range 1 4094 All outgoing traffic that does not have a VLAN already assigned to it is sent on this VLAN no vlan Deletes the default VLAN ID 2 41 CLI commands 2 42 vlan compatibility mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 vlan compatibility mode When this option is enabled the AP sends all management traffic AND all untagged traffic on both the default VLAN and untagged no vlan compatibility mode Disable VLAN and untagged compatibility mode vlan management filter Supported on MSM310 MSM320 MSM335 MSM410 MSM422 vlan management filter Restricts the default VLAN to carry management traffic only no vlan management filter Does not restrict the default VLAN to carry management traffic only Management traffic includes m all traffic that is exchanged by the AP and the access controller m all communications with RADIUS servers m HTTPS sessions to the management tool m SNM
71. kout ENEE 2 13 EE ee 2 13 world mode dot11 country code 2 14 wWebaccess DOPO EE 2 14 web access EA EE 2 14 Kat 2 14 Web aecessanterfaee vlde icis aicut sacwsesavsevaunelectuacesblavsiceriaveiectaextives 2 14 Ee EE 2 14 web access LOCAL EE 2 15 CLOG EE 2 15 FACTO Fe beet 2 15 clock TIMEZONE EN 2 15 clock use custom dst rulesg AANEREN AAEENN ase 2 15 NEP POR OG ON TL 2 16 ND BOTY Gi eT H 2 16 clock custom dst DGgitlg iuis rper tne rte er Pe tem tree vtr ease eegend 2 16 dl custom dst begins TOFHVIL E 2 16 clock custom CST CIS T D ana a ia eia aE 2 17 clock custom dst ends format eege aech 2 17 al EE 2 17 ntp SET VEL failure E 2 17 config update AULOMIALIC scsi scsiessicasonevasvalersautconsrsdebeniiunnoeneasbelensoananaseanatboncaecionns 2 18 CONTE ALC ODBFOSUIOEI acceso aste sukoen cuv ra Ies sisus issin Eod moseswestususenvbersiusocennes 2 18 config update EEG desee acted iekeas eadeni ee 2 18 CONME DOSE e os nese one o E an t de bust er are Du eS 2 18 config update weekday uec pue esset reet visa e tono toe Fu URubas Se outre id dea PR u n Ue Ru FUE pay 2 18 snmp server trap config change ener 2 18 snmp server trap config update eerte eerie nera utat anne b ao en aaa p eacus 2 19 erte TE 2 19 snmp server trap syslog severlty 0 cccsesecsssssacocsersneesscceversocavsonascerecdsscsasesences 2 19 SHE SOEVOT coo teri reti ege 2 19 snmp server ACC
72. lan hongkong CLI virtual ap ssid name newap CLI virtual ap ingress ssid CLI virtual ap bandwidth high CLI virtual ap end CLI config virtual ap name Supported on MSM310 MSM320 MSM335 MSM410 MSM422 virtual ap name lt name gt Change the VAP VSC name ingress interface Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ingress interface wireless wireless lt name gt Sets the specified interface as the ingress interface traffic will be accepted on no ingress interface wireless wireless lt name gt Removes the specified interface as an ingress interface guest mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 guest mode Enables broadcast of the wireless network name SSID no guest mode Disables broadcast of the wireless network name SSID max association Supported on MSM310 MSM320 MSM335 MSM410 MSM422 max association lt stations gt Sets the maximum number of clients stations that can associate with this VAP VSC lt stations gt Number of client stations Range 1 255 2 54 CLI commands ssid name Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ssid name lt name gt Specifies the WLAN name SSID for the profile vlan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 vlan id Assigns a VLAN ID to this VAP VSC no vlan Deletes the VLAN ID for this VAP VSC Parameters id VLAN ID Range 1 4094 encryption key 1 Supported on MSM310 MSM320 MSM335
73. less filters rule input Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wireless filters rule input lt rule gt Adds a custom filter definition for incoming wireless traffic Use this command to define custom security filters for incoming wireless traffic Filters are specified using standard pcap syntax http www tcpdump org tcpdump_man html with the addition of a few specific placeholders These placeholders can be used to refer to specific MAC addresses and are expanded by the AP when the filter is activated Once expanded the filter must respect the pcap syntax The pcap syntax is documented in the tcpdump man page Placeholders m a MAC address of the access controller m b MAC address of the bridge m g Mac address of the default gateway assigned to the AP m w MAC address of wireless port wireless filters rule output Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wireless filters rule output rule Adds a custom filter definition for outgoing wireless traffic Use this command to define custom security filters for outgoing wireless traffic Filters are specified using standard pcap syntax http www tcpdump org tcpdump_man html with the addition of a few specific placeholders These placeholders can be used to refer to specific MAC addresses and are expanded by the AP when the filter is activated Once expanded the filter must respect the pcap syntax The pcap syntax is documented in the tcpdump man page
74. ly sent when a rogue access point is detected If set to 0 the entire list of rogue access points is sent each time the interval expires wireless scan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wireless scan Enables wireless neighborhood scanning no wireless scan Disables wireless neighborhood scanning wireless scan period Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wireless scan period lt seconds gt Specifies the interval between wireless neighborhood scans Parameters lt seconds gt Scanning interval Range 10 600 seconds wireless scan url Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wireless scan url lt location gt Sets the URL of the file that contains a list of all authorized access points no wireless scan url Deletes the URL of the file that contains a list of all authorized access points The format of this file is XML Each entry in the file is composed of two items MAC address and SSID Each entry should appear on a new line For example 00 00 00 07 5 11 AP 1 00 00 00 07 5 23 AP 2 00 00 00 07 5 12 AP 3 access controller shared secret Supported on MSM310 MSM320 MSM335 MSM410 MSM422 access controller shared secret secret Sets the shared secret used to communicate with the service controller no access controller shared secret Sets the shared secret used to communicate with the access controller 2 35 CLI commands 2 36 The service controller will o
75. m Certain address management protocols ARP DHCP regardless of their source address m Any traffic addressed to the AP including 802 1x Blocked m All other traffic is blocked This includes NetBIOS traffic regardless of its source destination address TTPS traffic not addressed to the AP or upstream device is also blocked which means wireless client stations cannot access the management tool on other products Default filters for outgoing wireless traffic Applies to traffic sent from the AP to wireless client stations Accepted m Any IP traffic coming from the upstream device except NetBIOS packets PPPoE traffic from the upstream device m IP broadcast packets except NetBIOS m ARP and DHCP Offer and ACK packets m Any traffic coming from the AP itself including 802 1x Blocked m Allother traffic is blocked This includes NetBIOS traffic regardless of its source destination address mac filters local Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mac filters local Enables the MAC filter list no mac filters local Disables the MAC filter list CLI commands 2 60 mac filters Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mac filters lt address gt Adds an address to the MAC filter list no mac filters address Remove the specified address from the MAC filter list Parameters address MAC address Specify 6 pairs of hexadecimal numbers separated by colons with the values a to f in lowercase For
76. n Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap web login Send a trap each time an administrator login is accepted no snmp server trap web login Do not send a trap each time an administrator login is accepted snmp server trap web logout Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap web logout Send a trap each time an administrator logs out no snmp server trap web logout Do not send a trap each time an administrator logs out web admin kickout Supported on MSM310 MSM320 MSM335 MSM410 MSM422 web admin kickout Enables a new administrator login to terminate an existing administrator session no web admin kickout Stops a new administrator from logging in until an existing administrator logs out web allow Supported on MSM310 MSM320 MSM335 MSM410 MSM422 web allow lt ip address gt lt mask gt Adds an address to the list of hosts that can access the management tool no web allow lt ip address gt lt mask gt Removes the specified address from the list of hosts that can access the management tool Parameters lt address gt IP address lt mask gt Subnet mask in CIDR format Specifies the number of bits in the mask 2 13 CLI commands 2 14 world mode dot11 country code Supported on MSM310 MSM320 MSM335 MSM410 MSM422 world mode dot11 country code lt code gt Specifies the country the AP is operating in Parameters lt code gt An ISO3166 three letter country code
77. n key format 2 55 end force 2 78 end port 2 76 factory reset 2 6 factory settings 2 9 fast authentication 2 63 firmware update automatic 2 30 firmware update start 2 31 firmware update time 2 31 firmware update uri 2 31 firmware update weekday 2 31 gre name 2 78 guest mode 2 54 ingress interface 2 54 initial discovery time 2 71 interface 2 69 interface ethernet 2 9 interface gre 2 11 interface ip 2 10 interface vlan 2 42 interface vlan 2 44 interface vlan 2 70 interface wireless 2 10 ip address 2 45 ip address 2 67 ip address 2 78 ip address dhcp client id 2 46 ip address mode 2 45 ip address mode 2 67 ip default gateway 2 45 ip filters 2 62 ip http port 2 12 ip https port 2 12 ip name server 2 33 ip name server cache 2 33 ip name server dynamic 2 34 ip name server interception 2 34 ip name server switch on servfail 2 34 ip name server switch over 2 34 ip route gateway 2 37 iperf 2 2 iperf 2 4 ip qos profile 2 36 layer3 mobility 2 63 level 2 80 level 2 80 local mesh name 2 69 local mesh profile 2 11 location aware group 2 65 logging destination 2 19 logging facility 2 79 logging host 2 79 logging prefix 2 79 mac authentication 2 61 mac authentication accounting 2 60 mac authentication accounting radius profile 2 60 mac authentication radius profile 2 61 mac authentication radius stationid case 2 61 mac authentication radius stationid delimiter 2 61 mac filters 2 60 mac f
78. ncreasing values for Tx multiple retry frames or Tx single retry frames you should adjust this value until the errors clear up Start with a value of 1024 and then decrease to 512 until errors are reduced or eliminated Using a small value for RTS threshold can affect throughput If a packet is larger than the threshold the AP will hold it and issue a request to send RTS message to the client station Only when the client station replies with a clear to send CTS message will the AP send the packet Packets smaller than the threshold are transmitted without this handshake distance Supported on MSM310 MSM320 MSM335 MSM410 MSM422 distance small medium large Sets the distance between access points CLI commands Use this parameter to adjust the receiver sensitivity of the AP This parameter should only be changed if m you have more than one wireless access point installed in your location m you are experiencing throughput problems In all other cases use the default setting of Large If you have installed multiple APs reducing the receiver sensitivity of the AP from its maximum will help to reduce the amount of crosstalk between the wireless stations to better support roaming clients By reducing the receiver sensitivity client stations will be more likely to connect with the nearest access point dotll Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dot11 mode frequency Sets the wireless mode and the frequen
79. nfiguring Eegeregie EE Eed 1 6 SSH chent aU POO EE 1 7 huis utei rabie NP PH 1 7 Context TCP AEC iy ioi vere Rar gti qi omi piene nec pela bm ped pi Re fas eri Neg 1 7 Sample CLI SESSIODG 9 m tec UE RP TA UR Eege 1 8 CLI commands MA VERSER ELT T EEEE SE EEE 2 2 BA NETS ee cg ecare sos ecto DD MP rM EEE E 2 2 Deeg deeg eens t EE eerie a RE EE ea eects 2 2 i EE 2 2 TS SOU EE 2 2 iii E 2 3 EI ee 2 3 SOW e 2 3 show logging filtered ND 2 3 Ce 2 3 PRR NOUS eege eegene 2 3 Enable ONO EE 2 4 EE 2 4 Show Certificat T 2 4 show certificate binding Lo rante i tenera obe enint ead e rax e Sa a eet E Rank 2 4 e E 2 4 SC 2 4 BUNS isco tues 2 5 E 2 5 EE 2 5 rrt c 2 5 EENEG E E 2 5 lani ueri EE cS 2 5 SHOW ee EE 2 5 show bridge TorwardIng TT 2 6 GEES 2 6 Show InterfaCES oa ee dees 2 6 EE 2 6 Show ID e 2 6 show system E 2 6 ELAKO ra TOS OU E E E A 2 6 switch operational mode seeeseeeseeesesssssessssreerrereesssrrssssreeessertesseeeessesressssrreessee 2 6 show dot11 associations 2 7 show dot11 statistics client traffic eese enne 2 7 show local meshes eeocncenvosicrcensnisecerdiocevedloulauineoosk cansnisecreltobetnaiedetictoecewaasnunceess 2 7 show wireless neighborhood 12255 entiers rr ein Il pie x erase sl petra ara 2 7 SHOW wireless rogue ap 2 7
80. nly accept authentication location aware information from satellites that have a matching shared secret to its own radius server profile Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radius server profile lt name gt Creates anew RADIUS profile or switches to the RADIUS context with the specified profile name no radius server profile lt name gt Deletes the specified RADIUS profile ip qos profile Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip qos profile lt name gt Creates a new IP QoS profile or switches to the IP QoS context with the specified profile name no ip qos profile name Deletes the specified IP QoS profile dot11 igmp snooping helper Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dot11 igmp snooping helper Enables IGMP snooping helpers which ensure that the AP correctly delivers multicast packets to roaming client stations that are part of a multicast group no dotil igmp snooping helper Disable IGMP snooping helpers discovery protocol Supported on MSM310 MSM320 MSM335 MSM410 MSM422 discovery protocol Enables broadcast of device information for interoperability with CDP enabled networking hardware no discovery protocol Disable broadcast of device information discovery protocol device id Supported on MSM310 MSM320 MSM335 MSM410 MSM422 discovery protocol device id lt name gt Overwrite the device id field of information packets the AP serial number is not used no disco
81. nmp server trap low snr interval Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap low snr interval number Sets the interval at which the average SNR level is checked for each VAP VSC snmp server trap low snr level Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap low snr level number Sets the SNR level that will trigger a trap snmp server trap new association Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap new association Send trap on when a new wireless client station associates with any VAP VSC no snmp server trap new association Do not send this trap 2 27 CLI commands 2 28 snmp server trap new association interval Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap new association interval lt number gt Interval in minutes between notifications snmp server trap vpn connection Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap vpn connection Send a trap when a user establishes a VPN connection with the AP no snmp server trap vpn connection Do not send this trap snmp server trap wireless association fail Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap wireless association fail Send a trap when a wireless client station fails to associate with the AP no snmp server trap wireless association fail Do not send this trap snmp server trap wireless association success Supported on MSM31
82. nomous mode Controlled mode Controlled mode is the factory default mode for all APs When in controlled mode an AP establishes a control channel with a service controller The service controller manages the AP and provides all configuration settings Discovery of the service controller is automatic if default settings are used on all devices In controlled mode access to the CLI is possible only before any control channel is established which can occur in the following scenarios m Network failures prevent a control channel from being created m Afteran AP is restarted prior to establishment of the control channel during the brief service controller discovery process When the AP is in controlled mode a reduced number of CLI commands are available The most notable command is switch operational mode which enables you to switch the AP to autonomous mode The config context is not available Autonomous mode When in autonomous mode the AP operates as a stand alone unit You can configure and manage the AP using the AP management tool SNMP CLI or SOAP Autonomous mode supports all CLI commands Introduction Configuring CLI support Configuring CLI support Using the AP management tool open the page Management gt CLI Use this page to enable disable CLI support via an SSH or serial connection A maximum of three concurrent CLI sessions are supported regardless of the connection type Command Line Interface CLI configur
83. ntime Supported on MSM310 MSM320 MSM335 MSM410 MSM422 allowed downtime lt number gt Set the allowed downtime for a connection or a link to a peer dynamic local mesh Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dynamic local mesh Use dynamic local mesh no dynamic local mesh Use static local mesh dynamic mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 dynamic mode master alt master slave Selects the dynamic operation mode initial discovery time Supported on MSM310 MSM320 MSM335 MSM410 MSM422 initial discovery time lt number gt Slave Set the group s initial discovery time in seconds mesh id Supported on MSM310 MSM320 MSM335 MSM410 MSM422 mesh id id Set the local mesh group id minimum snr Supported on MSM310 MSM320 MSM335 MSM410 MSM422 minimum snr number Slave Set the group s minimum SNR 2 71 CLI commands 2 72 preserve master link Supported on MSM310 MSM320 MSM335 MSM410 MSM422 preserve master link Preserve master link across reboots no preserve master link Do not preserve master link across reboots promiscuous mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 promiscuous mode Slave Accept any group no promiscuous mode Slave Use only the slave s group promiscuous mode startup delay Supported on MSM310 MSM320 MSM335 MSM410 MSM422 promiscuous mode startup delay number Set delay in seconds before promiscuous mode starts i
84. ntly in effect for this VAP VSC delete ip qos profile Supported on MSM310 MSM320 MSM335 MSM410 MSM422 delete ip qos profile lt name gt Removes the specified profile from the list of IP QoS profiles in effect for this VAP VSC lt profile name gt Name of an existing IP QoS profile currently in the profile list for this VAP VSC qos Supported on MSM310 MSM320 MSM335 MSM410 MSM422 qos 802 1p very high high normal low diffsrv tos default vapO vapi vap2 vap3 Sets the QoS level for this profile no qos Disables QoS for this profile Four traffic queues are provided based on the WME standard In order of priority these queues are m 1 Voice traffic m 2 Video traffic m 3 Best effort data traffic m 4 Background data traffic Each QoS priority mechanism maps traffic to one of the four traffic queues Client stations that do not support the QoS mechanism for the profile they are connected to are always assigned to queue 3 Important Traffic delivery is based on strict priority per the WME standard Therefore if excessive traffic is present on queues 1 or 2 it will reduce the flow of traffic on queues 3 and 4 802 1p Traffic from 802 1p client stations is classified based on the VLAN priority field present within the VLAN header When this mechanism is selected the AP will advertise WME capabilities enabling WME clients to associate and take advantage of them This setting has no effect
85. of October 1st 2008 Colubris Networks was acquired by HP ProCurve HP ProCurve has begun integrating the Colubris product line into the HP ProCurve Networking product portfolio www procurve com news colubris 10 01 08 htm In the online help and this manual Colubris product names have been changed to their equivalent HP ProCurve product names SOAP and SNMP MIBs retain the Colubris naming so you do not need to change your existing SOAP and MIB usage The Colubris Networks product names and their corresponding new HP ProCurve product names are as follows Colubris name HP ProCurve name MSC 5100 MultiService Controller MSM710 Controller MSC 5200 MultiService Controller MSM730 Controller MSC 5500 MultiService Controller MSM750 Controller Introduction About this guide Colubris name HP ProCurve name MAP 320 MultiService Access Point MSM310 Access Point MAP 320R MultiService Access Point MSM310 R Access Point MAP 330 MultiService Access Point MSMB20 Access Point MAP 330R MultiService Access Point MSM320 R Access Point MAP 330 AP Sensor MultiService Access Point MSM325 Access Point with Sensor MAP 625 MultiService Access Point MSM422 Access Point MAP 630 AP Sensor MultiService Access Point MSM335 Access Point with Sensor WCB 200 Wireless Client Bridge M111 Client Bridge Visitor Management Tool Guest Management Software RF Manager 1500
86. or this VLAN interface Parameters dhcp Dynamic host configuration protocol The DHCP server will automatically assign an address to the AP which functions as a DHCP client static This option enables you to manually assign an IP address to the AP none This VLAN does not have an IP address 2 67 CLI commands vlan name Supported on MSM310 MSM320 MSM335 MSM410 MSM422 vlan name lt name gt Change the name of this VLAN interface 2 68 CLI commands Local mesh context Path View gt Enable gt Config gt Local mesh This context provides commands for configuring local meshes end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context active Supported on MSM310 MSM320 MSM335 MSM410 MSM422 active Activates the local mesh no active Deactivates the local mesh interface Supported on MSM310 MSM320 MSM335 MSM410 MSM422 interface radiol radio2 radio3 Select the interface to which this local mesh link applies no interface radiol radio2 radio3 Select the interface to remove for this local mesh link local mesh name Supported on MSM310 MSM320 MSM335 MSM410 MSM422 local mesh name name Renames the current local mesh link remote mac Supported on MSM310 MSM320 MSM335 MSM410 MSM422 remote mac address Sets the MAC address of the remote access point no remote mac Deletes the MAC address of the remote access point Parameters address
87. ork Detector sensor server id Supported on MSM320 MSM335 sensor server id id Sets the server ID of the the RF Manager Server to connect to Parameters ID Specify the Server ID of the RF Manager Server to connect to Set the Server ID to 0 to have the AP send a discovery request to all active RF Manager Servers The AP will connect to the first server that responds to the discovery request sensor server name Supported on MSM320 MSM335 sensor server name lt name gt Sets the IP address or hostname of the the RF Manager Server to connect to Parameters Name Specify the IP address of the the RF Manager Server or its hostname If a hostname is specified the AP must be able to resolve it via DNS that is an entry must be created on the network DNS server that points to the IP address of the RF Manager Server config version Supported on MSM310 MSM320 MSM335 MSM410 MSM422 config version string Sets a string to identify the user configuration version CLI commands Port 2 interface context Path View gt Enable gt Config gt Port 2 interface This context provides commands for configuring Port 2 end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context duplex Supported on MSM310 MSM320 MSM335 MSM410 MSM422 duplex auto half full Sets the duplex mode on Port 2 Parameters auto Lets the AP automatically set duplex mode based on the type of equipment it
88. ower Supported on MSM310 MSM320 MSM335 MSM410 MSM422 beacon transmit power Advertise the current transmit power setting in the beacon no beacon transmit power Do not advertise the current transmit power setting in the beacon data rate Supported on MSM310 MSM320 MSM335 MSM410 MSM422 data rate a b g bg n rate Enable the given data rate for a particular PHY type no data rate a b g bg n rate Disable the given data rate for a particular PHY type public forwarding Supported on MSM310 MSM320 MSM335 MSM410 MSM422 public forwarding any 802 1x none ipv6 Enables support for traffic exchange between wireless client stations fast authentication Supported on MSM310 MSM320 MSM335 MSM410 MSM422 fast authentication Enables WPA2 opportunistic key caching no fast authentication Disables WPA2 opportunistic key caching layer3 mobility Supported on MSM310 MSM320 MSM335 MSM410 MSM422 layer3 mobility Enables Layer 3 mobility no layer3 mobility Disables Layer 3 mobility add ip qos profile Supported on MSM310 MSM320 MSM335 MSM410 MSM422 add ip qos profile name Adds the specified profile to the list of IP QoS profiles in effect for this VAP VSC lt profile name gt Name of an existing IP QoS profile 2 63 CLI commands 2 64 delete ip qos profile all Supported on MSM310 MSM320 MSM335 MSM410 MSM422 delete ip qos profile all Clears the list of IP QoS profiles curre
89. pstream port soap server allow Supported on MSM310 MSM320 MSM335 MSM410 MSM422 soap server allow ip address gt lt mask gt Adds a host to the list of IP address from which access to the SOAP interface is permitted no soap server allow ip address gt lt mask gt Removes a host from the list of IP address from which access to the SOAP interface is permitted Parameters address IP address lt mask gt Subnet mask in CIDR format Specifies the number of bits in the mask soap server http authentication Supported on MSM310 MSM320 MSM335 MSM410 MSM422 soap server http authentication Enable the SOAP server HTTP authentication no soap server http authentication Disable the SOAP server HTTP authentication 2 25 CLI commands soap server http authentication password Supported on MSM310 MSM320 MSM335 MSM410 MSM422 soap server http authentication password Set the SOAP server HTTP authentication password soap server http authentication username Supported on MSM310 MSM320 MSM335 MSM410 MSM422 soap server http authentication username Set the SOAP server HTTP authentication username soap server port Supported on MSM310 MSM320 MSM335 MSM410 MSM422 soap server port lt port number gt Sets the port the AP will use to respond to SOAP requests Parameters lt port number gt SOAP port number Range 1 65535 soap server ssl Supported on MSM310 MSM320 MSM335 MSM410 MSM422 soap server ssl SSL enabled
90. radius server profile lt name gt IP_QOS context ip qos profile lt name gt Introduction Sample CLI session Sample CLI session This sample CLI session shows you how to set the wireless port to support 802 11a on channel 60 with medium distance between access points The CLI prompt is shown in bold CLI gt enable CLI config CLI config interface wireless CLI config if wlan dot11 a 60 CLI config if wlan distance medium CLI config if wlan end CLI config end CLI quit CLI commands CLI commands 2 2 View context Path View This is the root of the command tree arping Supported on MSM310 MSM320 MSM335 MSM410 MSM422 arping AbDfhqUV c lt count gt w deadline s lt source gt I interface destination Pings a destination on a device interface using ARP packets enable Supported on MSM310 MSM320 MSM335 MSM410 MSM422 enable Switches to the enable context iperf Supported on MSM310 MSM320 MSM335 MSM410 MSM422 iperf c host t time Runs a performance throughput test Parameters c host The IP address or DNS name of the iperf server to connect to t length Length of the throughput test in seconds nslookup Supported on MSM310 MSM320 MSM335 MSM410 MSM422 nslookup option authentication host to find server Queries DNS servers for information on hosts or domains ping Supported on MSM310 MSM320 MSM335 MSM410 M
91. rnet to Ethernet address translation tables used by the address resolution protocol end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context quit Supported on MSM310 MSM320 MSM335 MSM410 MSM422 quit Exit the enable context rcapture Supported on MSM310 MSM320 MSM335 MSM410 MSM422 rcapture lt a gt lt b gt lt c gt lt d gt lt e gt lt f gt lt g gt lt h gt Sends port capture to an FTP server Refer to Linux documentation for a complete description of this command and its options show arp Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show arp Show the ARP table show bridge Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show bridge Show bridge information 2 5 CLI commands 2 6 show bridge forwarding Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show bridge forwarding Show bridge forwarding information show dns cache Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show dns cache lt serial gt Show DNS cache entries Specify a serial number to display detailed information show interfaces Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show interfaces Show networking interfaces show ip Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show ip Show all IP addresses mask MTU and MAC addresses show ip route Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show ip route Show all IP routes show sy
92. rted on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context level Supported on MSM310 MSM320 MSM335 MSM410 MSM422 level Enables filtering of the log file by severity level no level Disables filtering of the log file by severity level level Supported on MSM310 MSM320 MSM335 MSM410 MSM422 level lower higher debug info notice warning error critical alert emergency Defines the severity of messages that will be logged no level Disables filtering of the log file by severity level Parameters debug Debug level messages info Informational messages notice Normal but significant condition warning Warning conditions error Error conditions critical Critical conditions alert Action must be taken immediately emergency System is unusable matches Supported on MSM310 MSM320 MSM335 MSM410 MSM422 matches any all filters All three log file filters message process and level are combined to filter the log according to this setting message Supported on MSM310 MSM320 MSM335 MSM410 MSM422 message Enables filtering of the log file message field CLI commands no message Disables filtering of the log file message field message Supported on MSM310 MSM320 MSM335 MSM410 MSM422 message matches notmatches lt regex gt Use this filter to include log messages Use a regular expression to define the match criteria for the log file message field no mess
93. rved during the update unless stated otherwise in the release notes for the firmware However all active connections will be terminated Users will have to log in again after the AP restarts firmware update start Supported on MSM310 MSM320 MSM335 MSM410 MSM422 firmware update start Upload the firmware based on a specified URI This URI can be set with the command firmware update uri firmware update time Supported on MSM310 MSM320 MSM335 MSM410 MSM422 firmware update time lt time gt Sets the time of day the scheduled firmware upgrade will take place Parameters lt time gt Time as hh mm ss For example 15 44 00 firmware update uri Supported on MSM310 MSM320 MSM335 MSM410 MSM422 firmware update uri lt uri gt Sets the URI where the AP will retrieve new firmware no firmware update uri Clears the firmware URI firmware update weekday Supported on MSM310 MSM320 MSM335 MSM410 MSM422 firmware update weekday everyday monday tuesday wednesday thursday friday saturday sunday Sets the day when the scheduled firmware upgrade will take place snmp server trap firmware update Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap firmware update Send a trap on firmware update no snmp server trap firmware update Do not send a trap on firmware update 2 31 CLI commands access controller restrict location Supported on MSM310 MSM320 MSM335 MSM410 MSM422 access controller restric
94. s parameter can reduce the throughput of your Internet connection CLI commands Parameters lt bytes gt Maximum size in bytes of a PPPoE packet when transmitting Range 500 1500 bytes pppoe unnumbered Supported on MSM310 MSM320 MSM335 MSM410 MSM422 pppoe unnumbered Enable unnumbered mode no pppoe unnumbered Disable unnumbered mode This feature is useful when the AP is connected to the Internet and NAT is not being used Instead of assigning two IP addresses to the AP one to the Internet port and one to the LAN port both ports can share a single IP address This is especially useful when a limited number of IP addresses are available to you 2 47 CLI commands 2 48 Wireless context Path View gt Enable gt Config gt Wireless This context provides commands for configuring the wireless network end Supported on MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context radio active Supported on MSM310 MSM320 MSM335 MSM410 MSM422 radio active Enables the radio no radio active Disables the radio rts threshold Supported on MSM310 MSM320 MSM335 MSM410 MSM422 rts threshold value Sets the RTS threshold no rts threshold Deletes the RTS threshold value Parameters value Threshold value in the range 128 and 1540 Description Use this parameter to control collisions on the link that can reduce throughput If the Status Wireless page on the management tool shows i
95. sted with the CLI Others may work as well OpenSSH m Tectia SecureCRT m Putty Entering strings When entering a value that contains spaces you must enclose it in quotation marks For example if the command syntax is ssid lt name gt you must specify one of the following ssid ANameWithNoSpaces ssid A name with spaces Context hierarchy CLI commands are grouped into functional contexts The following table shows the context hierarchy and the command used to switch from the parent context Context hierarchy Command to switch from parent context View context This is the first context No command is needed Enable context enable Config context config WAN IP interface context interface ip Port 2 interface context interface ethernet port 2 VLAN interface context interface vlan lt id gt lt id2 gt Port 1 interface context interface ethernet port 1 VLAN interface context interface vlan lt id gt lt id2 gt Wireless context interface wireless lt number gt Local mesh context local mesh profile lt name gt VLAN interface context interface vlan lt number gt GRE interface context interface gre lt name gt Virtual AP context virtual ap lt name gt Syslog destination context logging destination lt name gt SNMP user context snmp server user lt name gt SNMP notification receiver context snmp server notification receiver lt host gt RADIUS context
96. stem info Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show system info Show basic system information factory reset Supported on MSM310 MSM320 MSM335 MSM410 MSM422 factory reset Resets the unit to factory default settings switch operational mode Supported on MSM310 MSM320 MSM335 MSM410 MSM422 switch operational mode Switches the unit operational mode show dot11 associations Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show dot11 associations Show all current wireless associations show dot11 statistics client traffic Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show dotl11 statistics client traffic Show current client matrix statistics show local mesh Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show local mesh Show current local mesh interfaces show wireless neighborhood Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show wireless neighborhood Show all access points detected nearby show wireless rogue ap Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show wireless rogue ap Show all rogue access points detected nearby show client log Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show client log lt macaddr gt CLI commands Display client station log Enter the MAC address to display more details for a specific client station show discrete pin Supported on MSM310 MSM320 MSM335 MSM410 MSM422 show discrete pin Display the state of the discret
97. stream Since this is a static key it is not as secure as the RADIUS option authentication server accounting radius stationid case Supported on MSM310 MSM320 MSM335 MSM410 MSM422 authentication server accounting radius stationid case uppercase lowercase Specifies the case applied to the station delimiter if it is a letter authentication server accounting radius stationid delimiter Supported on MSM310 MSM320 MSM335 MSM410 MSM422 authentication server accounting radius stationid delimiter null colon dash dot space comma under Specifies the one character delimiter that will be used to format both the calling station ID and the called station ID attributes in RADIUS packets wireless filters Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wireless filters Enables the wireless security filters which only allow traffic to flow between the AP and a specific upstream device such as a service controller no wireless filters Do not limit traffic flow between the AP and an upstream device This prevents wireless users from accessing resources on the backbone LAN that interconnects the AP and the upstream device wireless filters mac Supported on MSM310 MSM320 MSM335 MSM410 MSM422 wireless filters mac mac Sets the MAC address of the upstream device to send traffic to CLI commands 2 58 no wireless filters mac lt mac gt Deletes the MAC address of the upstream device to send traffic to wire
98. t location gateway mac lt mac address gt Identifies the access controller the AP will communicate with Parameters gateway Use the default gateway as the service controller mac Use the specified MAC address as the gateway lt mac address gt MAC address Specify 6 pairs of hexadecimal numbers separated by colons with the values a to f in lowercase For example 00 00 00 0a 0f 01 service sensor Supported on MSM310 MSM320 MSM335 MSM410 MSM422 service sensor Enables the service sensor The service sensor polls a target device at present intervals If the device does not respond the radio is shut off no service sensor Disables the service sensor service sensor Supported on MSM310 MSM320 MSM335 MSM410 MSM422 service sensor gateway address ip address Sets the target device the service sensor will poll This can be the default gateway or a specific IP address no service sensor Disables the service sensor Parameters gateway The service sensor will poll the default gateway address The service sensor will poll another device ip address IP address of the other device For example 192 168 10 10 service sensor poll Supported on MSM310 MSM320 MSM335 MSM410 MSM422 service sensor poll seconds Sets the poll frequency Parameters seconds Poll frequency Range 1 3600 seconds 2 32 CLI commands service sensor retry Supported on MSM310 MSM320 MSM335 MSM410 MSM422 service s
99. tlin channel extension Supported on MSM410 MSM422 dotiin channel extension above below Select the 802 11n channel extension Applicable only in the 2 4 GHz band with a 40 MHz channel width dotlln channel width Supported on MSM410 MSM422 dotlin channel width 40 20 auto Select the 802 11n channel width dotlln guard interval Supported on MSM410 MSM422 dotlin guard interval short long Select the 802 11n guard interval dotlin multicast rate Supported on MSM410 MSM422 dotiin multicast rate lt rate gt Set the multicast rate for use with 802 11n networks CLI commands bandwidth Supported on MSM310 MSM320 MSM335 MSM410 MSM422 bandwidth Enables bandwidth control no bandwidth Disables bandwidth control bandwidth max Supported on MSM310 MSM320 MSM335 MSM410 MSM422 bandwidth max lt rate gt Set the maximum data rate on the wireless port in kbps Parameters lt rate gt Maximum data rate Range 50 500000 kbps 2 53 CLI commands Virtual AP context Path View gt Enable gt Config gt Virtual AP This context provides commands for configuring Virtual AP profiles VAP VSC s By default one profile exists with the name This is the default profile and cannot be deleted The following example shows how to add a new VAP VSC with egress mapped to an existing VLAN named hongkong CLI config virtual ap newap CLI virtual ap access control CLI virtual ap egress any v
100. urday sunday Sets the day when the scheduled configuration operation backup or restore will take place snmp server trap config change Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap config change Send a trap whenever the configuration is changed CLI commands no snmp server trap config change Do not send this trap snmp server trap config update Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap config update Send a trap whenever the firmware is updated no snmp server trap config update Do not send this trap logging destination Supported on MSM310 MSM320 MSM335 MSM410 MSM422 logging destination lt name gt Creates a new remote destination for syslog no logging destination lt name gt Deletes the specified syslog destination Parameters lt name gt Name of syslog destination Use the name local to edit your local log file settings Any other name will edit create a remote log destination snmp server trap syslog severity Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap syslog severity Set the severity level of syslog messages that will trigger a trap no snmp server trap syslog severity Do not send this trap snmp server Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server Enables the SNMP agent no snmp server Disables the SNMP agent snmp server access port 1 Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server a
101. ver access POW certen EeeeeeE 2 24 snmp server UGE ccsnsissveseceresassbasevennecsowsideenssnanseesvenscevesasergnvasanscsbennenenassasecsens 2 24 snmp server notification receiver ccscccesssecssssecssssecssecesssseeesssecssaseessnees 2 24 GE EE 2 24 soap server access interface vlan ceeeesessececececeeesssnsecececeeeceesessaeeeeeeseeenes 2 25 soap server access port 1 ccccsssecssseecsseecssececsensecssnsecssnsecssnsecsenesessneeeseneeeues 2 25 soap server access DOrt 2 edere te ter bethe e pu YE EE EAEE ERE REEF EXE Kk Y MEE RAE EAR rd eU 2 25 Soap server Eiere 2 25 soap server http AULHMENICALON cisssccccssevsccsreseancereresscivecessviasessauonvssenvesencessees 2 25 soap server http authentication D ssword 2 26 soap server http authentication usertame esee 2 26 Soap S rv r POT T Mr 2 26 soap server SS cccesssssseccecececsssesssensecececeesesseaneeseceescsesesseeneeseceeeeseseaneuseeeceeeeees 2 26 soap server ssl with client certificate ccccccccccceseesssseeecccecsessessseseceeseeenees 2 26 soapsserver access interface BG eid ee stop sisi cbe a epe RE p RR EUE EYE XEN AS EK e Vl bet EM RE eT 2 26 soap server access wireless eene nennnnnn nnne rn nsns sese 2 27 soap server access local mech 2 27 SHMpP Server irap LOWS egenen heeten biet 2 27 snmp server trap low snr interval ccscccceseceeceessneececeeseeeceeseeeeceeesaeeeeeeaaes 2 27 snmp server trap low snr level
102. very protocol device id Do not overwrite the device id field of information packets use the AP serial number CLI commands bridge priority Supported on MSM310 MSM320 MSM335 MSM410 MSM422 bridge priority lt number gt Sets the bridge priority for the spanning tree The spanning tree uses the bridge ID to elect the root bridge and the designated bridges The bridge ID is built with the MAC address of the bridge and the bridge priority The first 2 most significant bytes are the bridge priority and the next 6 bytes are the MAC address To control which bridge will become the root bridge you can configure the bridge priority parameter on the bridges The root will be the bridge with the lowest bridge ID The Bridge priority has a valid range of 0 to OXFFFF The default value is the middle value 0x8000 bridge protocol ieee Supported on MSM310 MSM320 MSM335 MSM410 MSM422 bridge protocol ieee Enable the bridge spanning tree protocol to prevent undesirable loops from occurring in the network that may result in decreased throughput no bridge protocol ieee Disable the bridge spanning tree protocol bridge protocol ieee vlan Supported on MSM310 MSM320 MSM335 MSM410 MSM422 bridge protocol ieee vlan Enable the bridge spanning tree protocol for VLANs no bridge protocol ieee vlan Disable the bridge spanning tree protocol for VLANs ip route gateway Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip route gateway destinat
103. viii Introduction Contents Aboutthis Heger eeh Ee ege 1 2 Products COW ME 1 2 HP ProCurve Product Naming aue aeene ee a tos ete Seege Sah Fein edens 1 2 DOM Cher 1 3 Typographical conventions 12 9e tenue aeter en Se toro 0er a ta reseau ne assa tro eae hp Do desean LEES 1 3 HP ProCurve Networking SUPPOTt ccccssscsssssecescecssssecssnseeseneeessseeesseceeseneesseees 1 4 Online documentation sese eese eene enne enne nnne enne enne 1 5 CLI support in autonomous and controlled modes eese 1 5 Controlled Mdai ipare iiie teite SEA 1 5 INUtODORIOUS e TN 1 5 Configuring CLI Sia GE 1 6 SSH client MERTERT 1 7 Entering Strings c rona Ica ek HO Haec roe Oy deele 1 7 Context hierarchy enne an a a a an ae aS 1 7 ample BEE 1 8 Introduction About this guide Note About this guide This guide explains how to work with the Command Line Interface CLI on HP ProCurve Networking MSM3xx and MSM4xx APs Products covered This guide covers the following products Part number USA Worldwide Model version version MSM310 Access Point J9374A J9379A MSM310 R Access Point J9380A J9383A MSM320 Access Point J9360A J9364A MSM320 R Access Point J9365A J9368A MSM325 Access Point with Sensor J9369A J93 3A MSM335 Access Point with Sensor J9356A J935 7A MSM410 Access Point J9426A J9427A MSM422 Access Point J9358A J9359A HP ProCurve Product Naming As
104. xpires the AP is restarted 2 33 CLI commands 2 34 ip name server dynamic Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip name server dynamic Enables dynamic assignment of DNS servers no ip name server dynamic Disables dynamic DNS assignment ip name server interception Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip name server interception Intercepts all DNS requests from users and relays them to configured servers no ip name server interception Process DNS requests addressed to this device only ip name server switch on servfail Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip name server switch on servfail Switch to next server when server failure is received no ip name server switch on servfail Do not switch to next server when server failure is received ip name server switch over Supported on MSM310 MSM320 MSM335 MSM410 MSM422 ip name server switch over Switch over to primary when active no ip name server switch over Do not switch over to primary when active snmp server trap unauthorized ap Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap unauthorized ap Send a trap when a rogue access point is detected no snmp server trap unauthorized ap Do not send this trap CLI commands snmp server trap unauthorized ap interval Supported on MSM310 MSM320 MSM335 MSM410 MSM422 snmp server trap unauthorized ap interval lt number gt If set to 0 then traps are on
105. yption Key H 2 55 encryption key formatis eid eg a EELE Ee eeh 2 55 transmit EE 2 56 authentication Server access controller essere enne 2 56 authentication server ACCOUNTING ener enne enne enne 2 56 authentication server accounting radius profile AA 2 56 authentication server radius eesceeeeeeeeeeeeeee eene eene hne eene nne teen nh etse nenne 2 56 Geen Eege EE ec 2 56 puncelleme D eo areas 2 57 authentication server accounting radius stationid case 2 57 authentication server accounting radius stationid delimiter 2 57 wireless TIILOTS E 2 57 wireless filtefs Tae ER 2 57 vireless Bilters rule Au EE 2 58 wireless filters rule OUUDUL eerie encre eben ce totae aperto EE Reno ege 2 58 Wireless Tillers E 2 58 mac filters local Ee EE eene 2 59 an De E 2 60 mac filters Modes o eebe 2 60 mac authentication accounting E 2 60 mac authentication accounting radius profile eese 2 60 mandatory GOERENS 2 60 mac authentication radius profile 2 61 mac authentication radius stationid case 2 61 mac authentication radius stationid deltmmiter 2 61 TE Te e SE 2 61 add SEIEN REC e 2 61 d lete TO TG eege tasers od cone oe 2 62 UE 2 62 Wp TUG OPS iis eent ege eebe eebe 2 62 EE 2 62 DEACON Eed 2 62 DEACON transmit POWER EE 2 63 EE 2 63 publie LOW ee

HP MSM3XX User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents