HP (Hewlett-Packard) MSM3XX manual

Pr oC ur v e 5400zl S wit che s Installati on an d Getting Started Guide CLI Reference Guide for HP ProCurve MSM3xx / MSM4xx Access Points ProCur v e MSM3 xx / MSM 4x x Acce ss P oint s CLI Re fer ence Guide[...]

[...]

HP ProCurve MSM3xx / MSM4xx Access Points CLI Reference Guide[...]

Copyright and Disclaimer Notices © Copyright 2009 Hew lett-Packard Developm ent Company , L.P . The information contained he rein is subject to change without notice. This document contains propri etary information, which is protected by copyright. No pa rt of this document may be photocopied, reproduced, or trans lated into another language witho[...]

Contents In this Contents section, new to 5.3.x contexts and commands are preceded with an asterisk “*” and formatted in green like this: * new context * new command 1 Introduction About this guide ........................................................................................................... 1-2 Products covered ...................[...]

ping .......................................................................................................................... 2 -2 ps ............................................................................................................................. 2-3 quit ...............................................................................[...]

Config context .............................................................................................................. 2-9 certificate ................................................................................................................ 2-9 certificate binding........................................................................[...]

* clock use custom dst rules .............................................................................. 2-15 ntp protocol .......................................................................................................... 2-16 ntp server .....................................................................................................[...]

snmp-server access interface gre ...................................................................... 2-23 snmp-server access wireless .............................................................................. 2-24 snmp-server access port-2 .................................................................................. 2-24 * snmp-server u[...]

firmware-update automatic ................................................................................ 2-30 firmware-update start ......................................................................................... 2-31 firmware-update time.......................................................................................... 2-31 firmw[...]

add wireless ip-qos profile.................................................................................. 2-39 delete wireless ip-qos profile all ........................................................................ 2-39 delete wireless ip-qos profile ............................................................................. 2-39 wireless[...]

W ireless context ......................................................................................................... 2-48 end ......................................................................................................................... 2-4 8 radio active ............................................................................[...]

authentication server radius .............................................................................. 2-56 dot1x authentication ........................................................................................... 2-56 wpa-psk ...............................................................................................................[...]

security ................................................................................................................. 2-66 VLAN interface context ............................................................................................. 2-67 end ................................................................................................[...]

radius-server message-au thenticator ................................................................ 2-74 radius-server name .............................................................................................. 2-74 radius-server nasid .............................................................................................. 2-75 radi[...]

* user name .......................................................................................................... 2-82 * SNMP notification recei ver context ...................................................................... 2-83 * community ....................................................................................................[...]

Alphabetical list of commands In this alphabetical list, ne w to 5.3.x commands are preceded by an asterisk “*” and formatted in green like this: * command 2-xxx accept forced links 2-71 access controlle r shared secret 2-35 * access level 2-82 access-contro ller restrict location 2- 32 active 2-62 active 2-69 active 2-79 add ip filter 2-61 add[...]

ip http port 2-12 ip https port 2-12 ip name-server 2-33 ip name-server cache 2-33 ip name-server dynamic 2-3 4 ip name-server intercept ion 2-34 ip name-server switch-on-servfail 2-34 ip name-server s witch-over 2-34 ip route gateway 2-37 iperf 2-2 iperf 2-4 ip-qos profile 2-36 layer3 mobility 2-63 level 2-80 level 2-80 local mesh name 2-69 local [...]

snmp-server access port-2 2-24 snmp-server access wireless 2-24 snmp-server allow 2-20 snmp-server chassis-id 2-20 snmp-server contact 2-20 snmp-server heartbea t period 2-20 snmp-server location 2-20 * snmp-server notificat ion receiver 2-24 snmp-server port 2-2 1 snmp-server readonly 2-21 snmp-server readwrite 2-21 snmp-server trap 2-21 snmp-serv[...]

xviii[...]

Chapter 1: Introduction 1 Introduction Contents About this guide ........................................................................................................... 1-2 Products covered ................................................................................................... 1-2 HP ProCurve Product Naming .........................[...]

Introduction About this guide About this guide This guide explains how to work with the Co mmand Line Interface (CLI) on HP ProCurve Networking MSM3xx and MSM4xx APs. Products covered This guide covers the following pr oducts: Model Part number USA version W orldwide version MSM310 Access Point J9374A J9379A MSM310-R Access Point J9380A J9383A MSM3[...]

Introduction About this guide Colubris name HP ProCurve name MAP-320 MultiServic e Access Point MSM310 Access Point MAP-320R MultiService Access Point MSM310-R Access Point MAP-330 MultiServic e Access Point MSM320 Access Point MAP-330R MultiService Access Point MSM320-R Access Point MAP-330 AP+Sensor MultiService Access Point MSM325 Access Point w[...]

Introduction HP ProCurve Networking support Example Description end [force] Items enclosed i n square brackets are optional . Y ou can either include them or not . Do not include the brackets. In this exam ple you can either include “force” or omit it. firewall mode (high|low|none) Items enclosed in parenthesis and separated by a vertical line [...]

Introduction Online documentation Online documentation For the latest documentation, visit the HP ProCurve Networking manuals W eb page at: www .procurve.com/manuals . CLI support in autonomous and controlled modes An AP operates in eit her controlled mo de or autonomous mode. Controlled mode Controlled mode is the factory default mode for all APs.[...]

Introduction Configuring CLI support Configuring CLI support Using the AP management tool, o pen the page Management > CLI . Use this page to enable/ disable CLI support via an SSH or serial c onnect ion. A maximum of three concurrent CLI sessions are supported regard less of the connection type. The CLI supports SSH on the standard TCP port (22[...]

Introduction Entering strings SSH client support The following SSH clients have been te sted with the CLI. Others may work as well:  OpenSSH  Te c t i a  SecureCRT  Putty Entering strings When entering a value th at contains spaces, you must enclos e it in quotation marks. For example, if the command synt ax is: ssid <name> you mu[...]

Introduction Sample CLI session Sample CLI session This sample CLI session shows you how to set the wireless port to support 802.11a on channel 60 with medium distance betw een acce ss points. (The CLI prompt is shown in bold.) CLI> enable CLI# config CLI(config)# interface wireless CLI(config-if-wlan)# dot11 a 60 CLI(config-if-wlan)# distance m[...]

Chapter 2: CLI commands 2 CLI commands[...]

CLI commands V iew context Path: Vi ew This is the root of the command tree. arping Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 arping [ -AbDfhqUV] [ -c <count> ] [ -w <dead line> ] [ -s <source> ] -I <interface> <destination> Pings a destination on a device interface using ARP packets. enable Supported on: MSM310[...]

CLI commands ps Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 ps Displays all running processes. quit Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 quit Quits the CLI. show license Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 show license (eula | gpl | other) Displays license information. show logging filtered Supported on: MSM310 MS M[...]

CLI commands Enable context Path: View > Enable This context provides ac cess to various utilities. reboot device Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 reboot device Restarts the system. show certificate Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 show certificate Display current certificates. show certificate binding Supported[...]

CLI commands arping Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 arping [ -AbDfhqUV] [ -c <count> ] [ -w <dead line> ] [ -s <source> ] -I <interface> <destination> Pings a destination on a device interface using ARP packets. arp Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 arp [-evn] [-H <type> ] [- i i[...]

CLI commands show bridge forwarding Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 show bridge forwarding Show bridge f orwarding information. show dns cache Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 show dns cache [ <serial> ] Show DNS cache entries. Specify a seri al number to display detailed information. show interfaces Support[...]

CLI commands show dot11 associations Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 show dot11 associations Show all current wireless associations. show dot11 statis tics client-traf fic Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 show dot11 statistics cli ent-traffic Show current cli ent matrix st atistics. show local mesh Supported on: M[...]

CLI commands show all config Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 show all config Print all configuration that applies t o this device. 2-8[...]

CLI commands Config context Path: View > Enable > Config This is the root context fo r all configuration co mmands. certificate Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 certificate (authority | local) <uri> <certname> [ <password> ] Add a new certificate to the store, using the friendly name. certificate binding Sup[...]

CLI commands reboot device Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 reboot device Restarts the system. show certificate Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 show certificate Display current certificates. show certificate binding Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 show certificate binding Display how the certific[...]

CLI commands local mesh profile Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 local mesh link <name> Switches to the specified local mesh link context. Parameters <name> Number of the local mesh link to configure. interface gre Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 interface gre <name> Switches to the specified GRE[...]

CLI commands admin radius authentication server Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 admin radius authenticati on server <name> Sets the authentication of administ rator logins to occur using RADIU S. ip http port Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 ip http port <number> Sets the port number to use for HTTP ac[...]

CLI commands snmp-server trap web-fail Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 snmp-server trap web-fail Send a trap each time an a dministrator login is refused. no snmp-server trap web-f ail Do not send a trap each time an administrator lo gin is re fused. snmp-server trap web-login Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 snmp[...]

CLI commands world-mode dot11 country code Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 world-mode dot11 country code <code> Specifi es the country the AP is op erating in. Parameters <code> An ISO3166 three-letter country code. web access port-1 Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 web access port-1 Enables access to [...]

CLI commands no web access interface g re <name> Disables access to the management t ool via the specified GR E tunnel. web access local mesh Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 web access local mesh <na me> Enables access to the management to ol via the specified loca l mesh. no web access local mesh <name> Disables [...]

CLI commands ntp protocol Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 ntp protocol (ntp | sntp) Sets the netwo rk time protocol to use. ntp server Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 ntp server Enable this opt ion to have the AP periodically cont act a network ti me server to update its internal clock. no ntp server Disables the[...]

CLI commands clock custom dst ends Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 clock custom dst end <day > <weekday> <month> <time> Set parameters of the rul e defining the end of daylig ht savings time. Parameters <day> Day of the month. Range 1 - 31. <weekday> W eekday . V alid values are: "sun"[...]

CLI commands config-update automatic Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 config-update automatic Enables schedul ed configuration r e st ore or backup. no config-update automati c Disables scheduled configur ation restore or backup. The AP can automaticall y download the configuration file fr om a local or remote URL (restore). It is [...]

CLI commands no snmp-server trap confi g-change Do not send this trap. snmp-server trap config-u pdate Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap config-u pdate Send a trap whenever the firmware is updated. no snmp-server trap confi g-update Do not send this trap. logging destination Supported on: MSM310 MSM320 MSM335 MSM410 [...]

CLI commands snmp-server allow Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 snmp-server allow <ip address> / <m ask> Adds a host to the list of IP address from which access to t he SNMP interface is permitted. no snmp-server allow <ip address> / <mask> Removes a host from the list of IP address from which access to the [...]

CLI commands Parameters <name> Location where the AP is installed. snmp-server port Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 snmp-server port <port number> Sets the port the AP will use to respond to SNMP requests. Parameters <port number> SNMP port number . Range 1 - 65535. snmp-server readonly Supported on: MSM310 MS M3[...]

CLI commands snmp-server trap destination Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 snmp-server trap destinat ion <host> <[port number]> Add a new trap destinat ion. no snmp-server trap desti nation <host> [ <port> ] Deletes the specified trap destination. Parameters <host> Sets the IP address or domain name of [...]

CLI commands snmp-server version 2c Supported on: MSM310 MS M320 MSM335 snmp-server version 2c Enable version 2 c MSM410 MSM422 no snmp-server version 2c Disable versi on 2c snmp-server version 3 Supported on: MSM310 MS M320 MSM335 snmp-server version 3 Enable version 3 MSM410 MSM422 no snmp-server version 3 Disable versi on 3 snmp-server access in[...]

CLI commands snmp-server access wireless Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 snmp-server access wirele ss Enables SNMP access on the wireless port. no snmp-server access wir eless Blocks SNMP access on the wireless po rt. snmp-server access port-2 Supported on: MSM310 MSM320 snmp-server access port-2 Enables SNMP access on the upstrea[...]

CLI commands soap-server access interface vlan Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 soap-server access interf ace vlan <name> Enables acc ess to SO AP via this VLAN. no soap-server access int erface vlan <name> Disables access to SOAP via this VLAN. soap-server access port-1 Supported on: MSM310 MS M320 MSM335 MSM410 MSM422[...]

CLI commands soap-server http auth entication password Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 soap-server http authenti cation password Set the SOAP server HTTP authen tication password. soap-server http auth entication username Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 soap-server http authenti cation username Set the SOAP serve[...]

CLI commands soap-server access wireless Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 soap-server access wirele ss Enables SOAP access on the wireless port . no soap-server access wir eless Blocks SOAP access on the wireless port. soap-server access local mesh Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 soap-server access local mesh <[...]

CLI commands snmp-server trap new- association interval Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 snmp-server trap new-association interval <number> Interval, in minutes, betw een no tifications. snmp-server trap vpn-connection Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 snmp-server trap vpn-conn ection Send a tra p when a user [...]

CLI commands snmp-server trap wirele ss-deauthenti cation-fail Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 snmp-server trap wireless -deauthentication-fail Send a trap when a wire less client stati on fails to deauthen ticate from the AP . no snmp-server trap wirel ess-deauthentication-fail Do not send this trap. snmp-server trap wireless- de[...]

CLI commands no snmp-server trap wirel ess-reassociation-success Do not send this trap. snmp-server trap syslog-matches Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 snmp-server trap syslog-m atches Send a trap when syslog messages matches a specif ied regular expression. no snmp-server trap syslo g-matches Do not send this trap. snmp-server tr[...]

CLI commands (Different means older or newer . This enables you to return to a previo us firmware versio n if required). Configurati on settings are preserved duri ng the update unless stated otherwise in the release notes for the firmware. However , al l active connections w ill be term inated. Users will have to log in again after the AP restarts[...]

CLI commands access-controller re strict location Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 access-controller restric t location (gateway | mac <mac address> ) Identifies the access controller the AP will commu nicate with. Parameters gateway Use the default gatew ay as the servic e controller . mac U se the spec ified MAC address as [...]

CLI commands service-sensor retry Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 service-sensor retry <ret ries> Specify how many retries the service sensor will att empt when polling the t arget device. When the retry limit is reached , the radio on the AP is turned off. Parameters <retires> Number of retries. Range: 0 - 100. servic[...]

CLI commands ip name-server dynamic Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 ip name-server dynamic Enables dynamic assignment of DNS servers. no ip name-server dynamic Disables dynamic DNS assi gnment. ip name-server interception Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 ip name-server intercepti on Intercepts all DNS requests fro[...]

CLI commands snmp-server trap unauthorized-ap interval Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 snmp-server trap unauthorized-ap interval <number> If set to 0, then traps ar e only sent when a rogue acce ss po int is detected. If set to 0, the entire l ist of rogue access points is sent e ach time the interval expires. wireless-scan [...]

CLI commands The service controller will only ac cept authenticat ion/location-awa re information from satellites that have a matching sh ared secret to its own. radius-server profile Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 radius-server profile <na me> Creates a new RADIUS profile or switch es to the RADIUS context with the specifi[...]

CLI commands bridge priority Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 bridge priority <number> Sets the bridge priority for the spannin g tree. The spanning tree uses the bridge ID to elect the root bridge and the designated bridges. The bridge ID is b uilt with the MAC address of the bridge and the br idge priority . The first 2 most[...]

CLI commands dot1x reauth Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 dot1x reauth Enable this opti on to force 802.1X client stations to reauthenticate. no dot1x reauth Disables 802.1X reauthentication. dot1x reauth period Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 dot1x reauth period (15m | 30m | 1h | 2h | 4h | 8h | 12h) Sets the 802[...]

CLI commands dynamic key interval Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 dynamic key interval (5m | 10m | 15m | 30m | 1h | 2h | 4h | 8h | 1 2h) Specifies how o f t en (in minutes or hours) that the group (broadcast) key is changed for 802.1X and WP A . add wireless ip-qos profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 add wirele[...]

CLI commands  The AP must be able to reac h the RF Manager Server via a network co nnected to port 1 or port 2. For example, you should be able to ping the RF Manager Server IP address from the AP .  If there are any firewalls betwe en the AP and th e RF Manager Server , then TCP and UDP ports 3851 must be open bidirectiona lly .  If using[...]

CLI commands Port-2 interface context Path: View > Enable > Config > Port-2 interface This context provides comman ds for configurin g Port-2. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. duplex Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 duplex (auto | half | ful l) Sets the du plex mode on Por[...]

CLI commands vlan compatibility mode Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 vlan compatibility mode When this op tion is enab led, the AP sends al l management traffi c AND all untagged traf fic on both the default VLAN and untagged. no vlan compatibility mod e Disable VLAN and untagge d compatibility mode. vlan-management filter Support[...]

CLI commands Port-1 interface context Path: View > Enable > Config > Port-1 interface This context provides comman ds for configurin g Port-1. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. duplex Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 duplex (auto | half | ful l) Sets the du plex mode on Por[...]

CLI commands vlan compatibility mode Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 vlan compatibility mode When this op tion is enab led, the AP sends al l management traffi c AND all untagged traf fic on both the default VLAN and untagged. no vlan compatibility mod e Disable VLAN and untagge d compatibility mode. vlan-management filter Support[...]

CLI commands W AN IP interface context Path: View > Enable > Config > W AN IP interface This context provides comman ds for config uring various IP-networking rela ted settings. pppoe client user Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 pppoe client user <username> <password> Sets the PPPoE username and password. no ppp[...]

CLI commands no ip default-gateway Deletes the default gateway IP address. Parameters <address> IP address. ip address dhcp client-id Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 ip address dhcp client-id <id> Specifies an ID to iden tify the AP to a DHCP se rver . This parameter i s not required by all ISPs. no ip address dhcp clie[...]

CLI commands Parameters <bytes> Maximum size (in bytes) of a PPPoE pa cket when transmitting. Range: 500 - 1500 bytes. pppoe unnumbered Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 pppoe unnumbered Enable unnumb ered mode. no pppoe unnumbered Disable unnumbered mode. This feature is usef ul when the AP is connected to th e Internet and N[...]

CLI commands W ireless context Path: View > Enable > Config > W ireless This context provides commands for conf iguring the wireless netw ork. end Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 end Switches to parent context. radio active Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 radio active Enables the radi o. no radio active [...]

CLI commands Use this parame ter to adjust th e receiver sensi tivity of the AP . This parameter should on ly be changed i f:  you have more than one wireless acce ss poin t installed in your locati on  you are experiencing throughput problems In all other cases, use the d efault setting of Large. If you have insta lled multiple AP s, red uci[...]

CLI commands Note: The actual transmit power used may less than the value specified. The AP determines the power to us ed based on the settings you m ade for regula tory domain, wirel ess mode, and operating frequency . antenna bidirect ionnal Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 antenna bidirectionnal (d iversity | main | auxiliary) S[...]

CLI commands no dot11 automatic freque ncy Disable au tomatic frequency selectio n. dot11 automatic frequency period Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 dot11 automatic frequency period (disabled | 1h | 2h | 4h | 8h | 1 2h | 24h) Specify how of ten the frequency setting is re- eva luated when automati c frequency selection is enabled.[...]

CLI commands This is a global setting that is useful when creating wireless links to remote sites. However , it also applies to all wi reless connection made wi th the radio, not just for wireless links. Therefore, if you are also using the radio to serve local wireless clie nt stations, adjusting this settin g may lower the performance for clients[...]

CLI commands bandwidth Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 bandwidth Enables bandwid th control. no bandwidth Disables bandwidth contr o l. bandwidth max Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 bandwidth max <rate> Set the maximum data rate on the wi reless port in kb ps. Parameters <rate> Maximum data rate. Rang[...]

CLI commands V irtual AP context Path: View > Enable > Config > Virtual A P This context provides comman ds for configuring V irtual AP profiles (V AP (VSC)s). By default one profile exists with the name "". This is the de fault profile an d cannot be deleted. The following example shows how to add a new V AP (VSC) with egress ma[...]

CLI commands ssid name Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 ssid name <name> Specifies the WLAN name (SSID) for the profile. vlan Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 vlan <id> Assigns a VLAN ID to this V AP (VSC). no vlan Deletes the VLAN ID f o r this V AP (VSC). Parameters <id> VLAN ID. Range: 1 - 4094[...]

CLI commands transmit key Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 transmit key <key number> Sets the key the AP will use to en crypt transmitte d data. All four keys are used to decrypt received data. Parameters <key number> T ransmi t key number . R ange: 1 -4. authentication server access controller Supported on: MSM310 MS M[...]

CLI commands wpa-psk Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 wpa-psk <key> Sets the WP A presha red key . no wpa-psk Deletes the WP A preshared key . Parameters <key> Specify a key that is betw een 8 and 63 alphanumeric characters in length. It is recommended that the preshared key be at least 20 characters long, and be a mix [...]

CLI commands no wireless filters mac < mac> Deletes the MAC address of the upst ream device to send traffic to. wireless filters rule input Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 wireless filters rule input <rule> Adds a custom filter definition for incoming wireless traffic. Use this command to define c ust om security filte[...]

CLI commands custom Lets you define cust om security fi lters and address for the upstr eam device. Descriptio n The AP features an inte lligent bridge which can apply security fil ters to safeguard the flow of wireless traffic. The filters limit bo th incoming an d outgoi ng traffic as defi ned below , and force the AP to exchange traffi c with a [...]

CLI commands mac-filters Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 mac-filters <address> Adds an address to the MAC filter list. no mac-filters <address> Remove the specified address from the MAC filter list. Parameters <address> MAC address. Specify 6 pairs of hexadecimal number s separated by colons, with the values a to[...]

CLI commands no mandatory authenticati on MAC-based authen tication is not mandato ry . mac authentication radius profile Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 mac authentication radius profile <radiusname> Specifies the name of the RADIUS profile to use for MAC- based authenticatio n. no mac authentication rad ius profile Do not [...]

CLI commands delete ip filter Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 delete ip filter <ip address> / <ma sk> Deletes the specified addres s from the IP filter list. If the l ist is empty , then all wi reless-to-wi red LAN traffic is permi tted. Where: <address> IP address. </mask> Subnet mask in CIDR format. Speci[...]

CLI commands beacon transmit power Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 beacon transmit power Advertise th e current transmit power setting in the beacon. no beacon transmit power Do not adverti se the current transmit power sett ing in the beacon. data rate Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 data rate (a | b | g | bg | [...]

CLI commands delete ip-qos profile all Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 delete ip-qos profile all Clears the list of IP QoS profiles cu rrently in effect for this V AP (VSC). delete ip-qos profile Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 delete ip-qos profile <na me> Removes the specified profil e from the list of IP Q[...]

CLI commands vap0 to vap3 Allows a specific priority level to be spec ified for all traffic on a V AP (VSC) profile. This en ables client stations without a QoS mechanism to set traffic priority by connecting to the appropriate SSID. If you enable thi s priority mechan ism, it takes prec edence regardless of the priority mechanism su pported by ass[...]

CLI commands security Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 security (none | wep | 80 2.1x [wep | static-wep] | wpa (psk | radi us) [ v1 | v2 ] ) Sets the current wire less security policy . Parameters none No wire less security . wep T his option enables suppo rt for wire less users with WEP client software . 802.1x This option enables[...]

CLI commands VLAN interface context Path: View > Enable > Config > Port-2 interface > VLAN interface View > Enable > Config > Port-1 interface > VLAN interface View > Enable > Config > Local mesh > VLAN interface This context provi des commands for configuring V irtual LANs (VLANs). In this co ntext, VLANs can be[...]

CLI commands vlan name Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 vlan name <name> Change the name of this VLAN interface. 2-68[...]

CLI commands Local mesh context Path: View > Enable > Config > Local mesh This context provides commands for configuring lo cal meshes. end Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 end Switches to parent context. active Supported on: MSM310 MSM320 MSM335 MSM410 MSM422 active Activates the local mesh. no active Deactiva tes the loca[...]

CLI commands security Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 security Enables wireless security . no security Disables wireless security . security mode Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 security mode (wep | tkip | ccmp) Set the security mode. security psk Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 security psk <[...]

CLI commands accept forced links Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 accept forced links May accept master orders for selection. no accept forced links ignore master order s for selection. allowed downtime Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 allowed downtime <number> Set the allowed downtime for a co nnection (or a[...]

CLI commands preserve master link Supported on: MSM310 MS M320 MSM335 preserve master link Preserve master link across reboots. MSM410 MSM422 no preserve master link Do not preserve master link across reboots. promiscuous mode Supported on: MSM310 MS M320 promiscuous mode Slave: Accept any group. MSM335 MSM410 MSM422 no promiscuous mode Slave: Use [...]

CLI commands RADIUS context Path: View > Enable > Config > RADIUS This context provides commands for configuring RADI US profiles. end Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 end Switches to parent context. radius-server accounti ng port Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 radius-server accounting port <number>[...]

CLI commands radius-server deadtime Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 radius-server deadtime <s econds> Sets the retry interval for access a nd accounting requests that time-out. If no reply is received within this interval, th e AP sw itches between th e primary and secondary RADIUS servers (if defined) . If a reply is receiv[...]

CLI commands radius-server na sid Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 radius-server nasid <id> Sets the network access server ID you want to use for the AP . By default, the seri al number of the AP is used. T h e AP includes the NAS-ID attribute in all packets that it sends to the RADIUS server . radius-serv er timeout Supporte[...]

CLI commands IP_QOS context Path: View > Enable > Config > I P _QOS This context provides commands for configuring IP QoS profiles. end Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 end Returns to a previous context. end-port Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 end-port <number> Specifies the end port to use for thi[...]

CLI commands Parameters <number> Start port number . Range: 0 - 65535 2-77[...]

CLI commands GRE interface context Path: View > Enable > Config > GRE interface Details of the GRE interface. end force Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 end [force] Quits the GRE context. gre name Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 gre name <name> Renames the current GRE interface. ip address Supported[...]

CLI commands Syslog destination context Path: View > Enable > Config > Syslog destination This context provides commands for confi guring Syslog destination s. active Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 active Enables loggi ng to the current destination. no active Disables logging to the c urrent destination. logging facility[...]

CLI commands end Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 end Switches to parent context. level Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 level Enables filtering of the lo g file by severity level. no level Disables filtering of the lo g file by severity level. level Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 level (lower | [...]

CLI commands no message Disables filterin g of th e log file messa ge field. message Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 message (matches | notmat ches) <regex> Use this filter to include log messages. Use a regu lar expression to define the match criteria for the log file message field. no message Disables filterin g of th e lo[...]

CLI commands SNMP user context Path: View > Enable > Config > SNMP user This context provides commands for configuring SNMP user . access level Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 access level (read-only | read-write) Specifies the access level for this SN MP user . end Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 end Re[...]

CLI commands SNMP notification receiver context Path: View > Enable > Config > SNMP notification receiver This context provides co mmands for confi guring SNMP notificati on receiver . community Supported on: MSM310 MS M320 MSM335 MSM410 MSM422 community <community> Specifi es the community f or this SNMP notifi cation rece iver . en[...]

CLI commands 2-84[...]

[...]

Pr oCurv e 5400zl S wit ch es Inst allation an d Getting S tart d Gui de T e chnology for better busi ness outcomes T o learn m or e, v isit w ww .hp .com/go/pr ocurv e/ © Cop yri ght 2009 Hewle t t-P ack ard De velopment C ompan y , L.P . The inf ormati on contained her ein is su bject to change without noti ce. The only war ranties f or HP pr od[...]