display mdc - HPE Support Center

HP FlexFabric 12900 Switch Series
Fundamentals
Command Reference
Part number: 5998-7260
Software version: R103x
Document version: 6W100-20150116
Legal and notice information
© Copyright 2015 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or
use of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained
herein.
Contents
Basic CLI commands ···················································································································································· 1 command-alias enable ············································································································································· 1 command-alias mapping ········································································································································· 1 display | { begin | exclude | include } ·················································································································2 display | by-linenum ················································································································································ 3 display > ··································································································································································· 4 display >> ································································································································································· 5 display command-alias ············································································································································ 6 display history-command ········································································································································· 7 display history-command all ···································································································································· 7 display hotkey ··························································································································································· 8 hotkey ········································································································································································ 9 quit ·········································································································································································· 10 return ······································································································································································· 11 screen-length disable············································································································································· 11 system-view ···························································································································································· 12 Login management commands ································································································································· 13 activation-key ························································································································································· 13 authentication-mode ·············································································································································· 14 auto-execute command ········································································································································· 15 command accounting············································································································································ 17 command authorization ········································································································································ 18 databits ··································································································································································· 18 display line ····························································································································································· 19 display telnet client ················································································································································ 21 display user-interface ············································································································································ 21 display users ·························································································································································· 23 escape-key······························································································································································ 24 flow-control ····························································································································································· 26 free line··································································································································································· 26 free user-interface ·················································································································································· 27 history-command max-size ··································································································································· 28 idle-timeout ····························································································································································· 29 line ·········································································································································································· 30 line class ································································································································································· 31 lock·········································································································································································· 32 parity······································································································································································· 33 protocol inbound ··················································································································································· 34 screen-length ·························································································································································· 35 send ········································································································································································ 36 set authentication password ································································································································· 37 shell ········································································································································································· 38 speed ······································································································································································ 39 stopbits···································································································································································· 40 telnet ······································································································································································· 40 telnet client source ················································································································································· 41 telnet ipv6······························································································································································· 42 telnet server acl ······················································································································································ 43 i
telnet server dscp ··················································································································································· 44 telnet server enable ··············································································································································· 44 telnet server ipv6 acl ············································································································································· 45 telnet server ipv6 dscp ·········································································································································· 46 terminal type ·························································································································································· 46 user-interface ·························································································································································· 47 user-interface class ················································································································································ 48 user-role ·································································································································································· 50 RBAC commands ······················································································································································· 51 description ······························································································································································ 51 display role ···························································································································································· 51 display role feature ··············································································································································· 54 display role feature-group ···································································································································· 57 feature ····································································································································································· 59 interface policy deny ············································································································································ 60 permit interface ······················································································································································ 61 permit vlan ····························································································································································· 63 permit vpn-instance ··············································································································································· 64 role ·········································································································································································· 65 role default-role enable ········································································································································· 66 role feature-group ·················································································································································· 67 rule ·········································································································································································· 68 super ······································································································································································· 72 super authentication-mode···································································································································· 73 super default role··················································································································································· 74 super password ····················································································································································· 75 vlan policy deny ···················································································································································· 76 vpn-instance policy deny ······································································································································ 77 FTP commands ···························································································································································· 79 FTP server commands ···················································································································································· 79 display ftp-server···················································································································································· 79 display ftp-user ······················································································································································· 80 free ftp user ···························································································································································· 81 free ftp user-ip ························································································································································ 81 free ftp user-ip ipv6 ··············································································································································· 82 ftp server acl ·························································································································································· 82 ftp server dscp ······················································································································································· 83 ftp server enable ···················································································································································· 83 ftp server ipv6 dscp ··············································································································································· 84 ftp timeout······························································································································································· 85 FTP client commands ······················································································································································ 85 append ··································································································································································· 85 ascii········································································································································································· 86 binary ····································································································································································· 87 bye ·········································································································································································· 87 cd ············································································································································································ 88 cdup ········································································································································································ 89 close ········································································································································································ 90 debug ····································································································································································· 90 delete ······································································································································································ 91 dir ············································································································································································ 92 disconnect ······························································································································································ 93 display ftp client source ········································································································································ 93 ii
ftp ············································································································································································ 94 ftp client ipv6 source ············································································································································· 95 ftp client source ······················································································································································ 96 ftp ipv6 ··································································································································································· 97 get ··········································································································································································· 98 help ········································································································································································· 99 lcd ········································································································································································· 100 ls ············································································································································································ 101 mkdir ····································································································································································· 102 newer ···································································································································································· 102 open ······································································································································································ 103 passive ·································································································································································· 104 put ········································································································································································· 104 pwd ······································································································································································· 106 quit ········································································································································································ 106 reget ······································································································································································ 107 rename·································································································································································· 107 reset ······································································································································································ 108 restart ···································································································································································· 108 rhelp ······································································································································································ 109 rmdir ····································································································································································· 111 rstatus ···································································································································································· 111 status ····································································································································································· 113 system ··································································································································································· 114 user ······································································································································································· 115 verbose ································································································································································· 115 ? ············································································································································································ 116 TFTP commands ······················································································································································· 118 tftp ········································································································································································· 118 tftp client ipv6 source ·········································································································································· 119 tftp client source ··················································································································································· 120 tftp ipv6 ································································································································································ 121 tftp-server acl ························································································································································ 122 tftp-server ipv6 acl ··············································································································································· 123 File system management commands ····················································································································· 125 cd ·········································································································································································· 125 copy ······································································································································································ 127 delete ···································································································································································· 129 dir ·········································································································································································· 131 fdisk······································································································································································· 133 file prompt ···························································································································································· 135 fixdisk···································································································································································· 135 format···································································································································································· 136 gunzip··································································································································································· 137 gzip ······································································································································································· 137 md5sum ································································································································································ 138 mkdir ····································································································································································· 139 more ······································································································································································ 139 mount ···································································································································································· 141 move ····································································································································································· 142 pwd ······································································································································································· 142 rename·································································································································································· 143 reset recycle-bin ··················································································································································· 143 iii
rmdir ····································································································································································· 144 sha256sum ·························································································································································· 145 tar create ······························································································································································ 145 tar extract ····························································································································································· 146 tar list ···································································································································································· 147 umount ·································································································································································· 148 undelete ································································································································································ 149 Configuration file management commands ·········································································································· 150 backup startup-configuration ······························································································································ 150 configuration encrypt ·········································································································································· 150 display current-configuration ······························································································································ 151 display default-configuration ······························································································································ 152 display saved-configuration ······························································································································· 153 display startup ····················································································································································· 154 display this ··························································································································································· 155 reset saved-configuration ···································································································································· 156 restore startup-configuration ······························································································································· 158 save ······································································································································································· 159 startup saved-configuration ································································································································ 162 Software upgrade commands ································································································································ 164 boot-loader file····················································································································································· 164 boot-loader update ·············································································································································· 166 bootrom backup ·················································································································································· 167 bootrom restore ··················································································································································· 168 bootrom update ··················································································································································· 169 bootrom-update security-check enable ·············································································································· 170 display boot-loader ············································································································································· 171 display install active ············································································································································ 172 display install committed ···································································································································· 174 install activate ······················································································································································ 177 install commit ······················································································································································· 178 install deactivate ·················································································································································· 179 version auto-update enable ································································································································ 180 version check ignore ··········································································································································· 181 Device management commands ···························································································································· 182 clock datetime ······················································································································································ 182 clock protocol ······················································································································································ 183 clock summer-time ··············································································································································· 184 clock timezone ····················································································································································· 185 command······························································································································································ 186 copyright-info enable ·········································································································································· 187 display alarm ······················································································································································· 188 display asset-info ················································································································································· 190 display clock ························································································································································ 192 display copyright ················································································································································· 192 display cpu-usage················································································································································ 193 display cpu-usage configuration ························································································································ 195 display cpu-usage history ··································································································································· 196 display device ······················································································································································ 198 display device manuinfo ····································································································································· 201 display device manuinfo chassis-only ··············································································································· 204 display device manuinfo fan ······························································································································ 205 display device manuinfo power ························································································································ 206 iv
display diagnostic-information ··························································································································· 206 display environment ············································································································································ 207 display fan ··························································································································································· 209 display memory ··················································································································································· 211 display memory-threshold ··································································································································· 213 display power ······················································································································································ 215 display scheduler job ·········································································································································· 216 display scheduler logfile ····································································································································· 217 display scheduler reboot ···································································································································· 218 display scheduler schedule································································································································· 218 display switch-mode status ································································································································· 220 display system-working-mode····························································································································· 221 display transceiver alarm ··································································································································· 221 display transceiver diagnosis ····························································································································· 222 display transceiver interface ······························································································································ 223 display transceiver manuinfo ····························································································································· 224 display version ····················································································································································· 225 display version-update-record ···························································································································· 226 header ·································································································································································· 227 job ········································································································································································· 228 memory-threshold ················································································································································ 229 monitor cpu-usage enable ·································································································································· 230 monitor cpu-usage interval ································································································································· 231 monitor handshake-timeout disable-port ··········································································································· 232 password-recovery enable ································································································································· 233 reboot ··································································································································································· 233 reset asset-info······················································································································································ 236 reset scheduler logfile ········································································································································· 237 reset version-update-record ································································································································ 238 scheduler job ······················································································································································· 238 scheduler logfile size··········································································································································· 239 scheduler reboot at ············································································································································· 239 scheduler reboot delay ······································································································································· 240 scheduler schedule ·············································································································································· 241 set asset-info ························································································································································· 242 shutdown-interval ················································································································································· 244 switch-fabric isolate ············································································································································· 244 switch-fabric removal-signal-suppression ·········································································································· 245 switch-mode ························································································································································· 246 sysname ································································································································································ 247 system-working-mode ·········································································································································· 248 temperature-limit ·················································································································································· 249 time at ··································································································································································· 250 time once ······························································································································································ 251 time repeating ······················································································································································ 253 user-role ································································································································································ 254 MDC commands ····················································································································································· 256 MDC commands for the default MDC ······················································································································· 256 allocate interface ················································································································································· 256 display mdc ·························································································································································· 257 display mdc interface ·········································································································································· 258 display mdc resource ·········································································································································· 259 limit-resource cpu ················································································································································· 262 limit-resource disk ················································································································································ 263 v
limit-resource memory ········································································································································· 264 location ································································································································································· 265 switchto mdc ························································································································································ 266 mdc ······································································································································································· 267 mdc start ······························································································································································· 268 MDC commands for non-default MDCs ····················································································································· 268 display mdc ·························································································································································· 268 display mdc interface ·········································································································································· 269 display mdc resource ·········································································································································· 269 switchback···························································································································································· 271 Support and other resources ·································································································································· 273 Contacting HP ······························································································································································ 273 Subscription service ············································································································································ 273 Related information ······················································································································································ 273 Documents ···························································································································································· 273 Websites······························································································································································· 273 Conventions ·································································································································································· 274 Index ········································································································································································ 276 vi
Basic CLI commands
command-alias enable
Use command-alias enable to enable the command keyword alias function.
Use undo command-alias enable to disable the command keyword alias function.
Syntax
command-alias enable
undo command-alias enable
Default
The command keyword alias function is disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Configured command keyword aliases take effect only when the command keyword alias function is
enabled.
Disabling the command keyword alias function does not delete configured aliases.
Examples
# Enable the command keyword alias function.
<Sysname> system-view
[Sysname] command-alias enable
Related commands
•
command-alias mapping
•
display command-alias
command-alias mapping
Use command-alias mapping to configure a command keyword alias.
Use undo command-alias mapping to delete a command keyword alias.
Syntax
command-alias mapping cmdkey alias
undo command-alias mapping cmdkey
1
Default
A command keyword has no alias.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
cmdkey: Specifies the first keyword of a non-undo command or the second keyword of an undo
command. You must enter the keyword in its complete form.
alias: Specifies an alias for the keyword, a string of 1 to 20 characters. It must be different from the first
keyword of any non-undo command and the second keyword of any undo command.
Usage guidelines
You can configure an alias for the first keyword of a non-undo command or the second keyword of an
undo command. Then, when you execute a command that starts with the keyword or the undo keyword
plus the keyword, you can use the alias. For example, if you configure show as the alias for the display
keyword, you can enter show clock to execute the display clock command.
To use configured command keyword aliases, make sure the command-alias enable command is
configured.
Examples
# Define show as the alias of the display keyword.
<Sysname> system-view
[Sysname] command-alias mapping display show
Related commands
•
command-alias enable
•
display command-alias
display | { begin | exclude | include }
Use display | { begin | exclude | include } to filter the output from a display command with a regular
expression.
Syntax
display command | { begin | exclude | include } regular-expression
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
2
Parameters
command: Specifies the keywords and arguments of a display command. To display available keywords
and arguments, enter display ?.
begin: Displays the first line matching the specified regular expression and all subsequent lines.
exclude: Displays all lines not matching the specified regular expression.
include: Displays all lines matching the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Usage guidelines
Use the | { begin | exclude | include } regular-expression option with a display command to filter the
command output. For more information about regular expressions, see Fundamentals Configuration
Guide.
Examples
# Display the lines that contain vlan in the running configuration.
<Sysname> display current-configuration | include vlan
vlan 1
vlan 999
port access vlan 999
display | by-linenum
Use display | by-linenum to number each output line for a display command.
Syntax
display command | by-linenum
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
command: Specifies the keywords and arguments of a display command. To display available keywords
and arguments, enter display ?.
Usage guidelines
By numbering each output line from a display command, you can easily identify the lines of interest.
Each line number is displayed as a 5-character string and might be followed by a colon (:) or hyphen (-).
If you specify both | by-linenum and | begin regular-expression for a display command, a hyphen is
displayed for all lines that do not match the regular expression.
Examples
# Display VLAN 999 settings, with each output line identified by a number.
3
<Sysname> display vlan 999 | by-linenum
1:
VLAN ID: 999
2:
VLAN type: Static
3:
Route interface: Configured
4:
IP address: 192.168.2.1
5:
Subnet mask: 255.255.255.0
6:
Description: For LAN Access
7:
Name: VLAN 0999
8:
Tagged ports:
9:
Untagged ports:
10:
None
Ten-GigabitEthernet1/0/1
# Display the first line that begins with user-group in the running configuration and all of the following
lines.
<Sysname> display current-configuration | by-linenum begin user-group
114:
user-group system
115-
#
116-
return
display >
Use display > to save the output from a display command to a separate file.
Syntax
display command > filename
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
command: Specifies the keywords and arguments of a display command. To display available keywords
and arguments, enter display ?.
filename: Specifies the name of the file that is used to save the output, a string of 1 to 63 characters.
Usage guidelines
The display commands show the configuration, statistics, and states of the device. You can use the
display > command to save the output to a file.
If the specified file does not exist, the system creates the file and saves the output to the file. If the file
already exists, the system overwrites the file.
Examples
# Save VLAN 1 settings to a separate file named vlan.txt.
<Sysname> display vlan 1 > vlan.txt
4
# Verify the content of the vlan.txt file.
<Sysname> more vlan.txt
VLAN ID: 1
VLAN type: Static
Route interface: Not configured
Description: VLAN 0001
Name: VLAN 0001
Tagged ports:
None
Untagged ports:
Ten-GigabitEthernet1/0/2
display >>
Use display >> to append the output from a display command to the end of a file.
Syntax
display command >> filename
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
command: Specifies the keywords and arguments of a display command. To display available keywords
and arguments, enter display ?.
filename: Specifies the name of the file that is used to save the output, a string of 1 to 63 characters.
Usage guidelines
The display commands show the configuration, statistics, and states of the device. You can use display >>
to save the output to a file.
If the specified file does not exist, the system creates the file and saves the output to the file. If the file
already exists, the system appends the output to the end of the file.
Examples
# Append the VLAN 999 settings to the end of the vlan.txt file.
<Sysname> display vlan 999 >> vlan.txt
<Sysname>
# Check the content of the vlan.txt file.
<Sysname> more vlan.txt
VLAN ID: 1
VLAN type: Static
Route interface: Not configured
Description: VLAN 0001
5
Name: VLAN 0001
Tagged ports:
None
Untagged ports:
Ten-GigabitEthernet1/0/2
VLAN ID: 999
VLAN type: Static
Route interface: Configured
IP address: 192.168.2.1
Subnet mask: 255.255.255.0
Description: For LAN Access
Name: VLAN 0999
Tagged ports:
None
Untagged ports:
Ten-GigabitEthernet1/0/1
display command-alias
Use display command-alias to display the status of the command keyword alias function and the
configured command keyword alias.
Syntax
display command-alias
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display command keyword alias information.
<Sysname> display command-alias
Command alias is enabled
Index Alias
Command key
1
ping1
ping
2
ssh1
ssh
Related commands
•
command-alias enable
•
command-alias mapping
6
display history-command
Use display history-command to display all commands that are saved in the command history buffer for
the current CLI session.
Syntax
display history-command
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
The system automatically saves commands you have successfully executed to the command history buffer
for the current CLI session. You can view them and execute them again.
By default, the system can save up to 10 commands in the buffer. You can use the history-command
max-size command to change the buffer size.
Examples
# Display all commands saved in the command history buffer for the current CLI session.
<Sysname> display history-command
system-view
vlan 2
quit
Related commands
history-command max-size
display history-command all
Use display history-command all to display all commands saved in the command history buffer for all
CLI sessions.
Syntax
display history-command all
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
7
mdc-operator
Usage guidelines
The system automatically saves commands successfully executed by users to the command history buffer
for all CLI sessions. Users can view them and execute them again.
Up to 1024 commands can be saved in the command history buffer. When this number is reached, the
system deletes the earliest commands to make room for newly executed commands.
Examples
# Display all commands saved in the command history buffer for all CLI sessions.
<Sysname> display history-command all
Date
Time
Terminal
03/16/2013 20:03:33 vty0
Ip
User
192.168.1.26
**
192.168.1.26
**
Cmd:dis his all
03/16/2013 20:03:29 vty0
Cmd:sys
Related commands
display history-command
display hotkey
Use display hotkey to display hotkey information.
Syntax
display hotkey
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display hotkey information.
<Sysname> display hotkey
----------------- Hotkeys -----------------Defined command hotkeysCTRL_G display current-configuration
CTRL_L display ip routing-table
CTRL_O undo debugging all
-Undefined command hotkeysCTRL_T NULL
CTRL_U NULL
8
-System-reserved hotkeysCTRL_A
Move the cursor to the beginning of the line.
CTRL_B
Move the cursor one character to the left.
CTRL_C
Stop the current command.
CTRL_D
Erase the character at the cursor.
CTRL_E
Move the cursor to the end of the line.
CTRL_F
Move the cursor one character to the right.
CTRL_H
Erase the character to the left of the cursor.
CTRL_K
Abort the connection request.
CTRL_N
Display the next command in the history buffer.
CTRL_P
Display the previous command in the history buffer.
CTRL_R
Redisplay the current line.
CTRL_V
Paste text from the clipboard.
CTRL_W
Delete the word to the left of the cursor.
CTRL_X
Delete all characters from the beginning of the line to the cursor.
CTRL_Y
Delete all characters from the cursor to the end of the line.
CTRL_Z
Return to the User View.
CTRL_]
Kill incoming connection or redirect connection.
ESC_B
Move the cursor back one word.
ESC_D
Delete all characters from the cursor to the end of the word.
ESC_F
Move the cursor forward one word.
ESC_N
Move the cursor down a line.
ESC_P
Move the cursor up a line.
ESC_<
Move the cursor to the beginning of the clipboard.
ESC_>
Move the cursor to the end of the clipboard.
Related commands
hotkey
hotkey
Use hotkey to assign a command to a configurable hotkey.
Use undo hotkey to restore the default.
Syntax
hotkey { CTRL_G | CTRL_L | CTRL_O | CTRL_T | CTRL_U } command
undo hotkey { CTRL_G | CTRL_L | CTRL_O | CTRL_T | CTRL_U }
Default
•
Ctrl_G: display current-configuration (display the running configuration).
•
Ctrl_L: display ip routing-table (display the IPv4 routing table information).
•
Ctrl_O: undo debugging all (disable all debugging functions).
•
Ctrl_T: No command is assigned to this hotkey.
•
Ctrl_U: No command is assigned to this hotkey.
Views
System view
9
Predefined user roles
network-admin
mdc-admin
Parameters
CTRL_G: Assigns a command to Ctrl+G.
CTRL_L: Assigns a command to Ctrl+L.
CTRL_O: Assigns a command to Ctrl+O.
CTRL_T: Assigns a command to Ctrl+T.
CTRL_U: Assigns a command to Ctrl+U.
command: Specifies the command to be assigned to the hotkey.
Usage guidelines
The system defines some hotkeys and provides five configurable command hotkeys. Pressing a hotkey
executes the command assigned to the hotkey.
To display system-defined and configurable hotkeys, use the display hotkey command.
Examples
# Assign the display tcp status command to the hotkey Ctrl+T.
<Sysname> system-view
[Sysname] hotkey ctrl_t display tcp status
Related commands
display hotkey
quit
Use quit to return to the upper-level view.
Syntax
quit
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
Executing this command in user view disconnects you from the device.
Examples
# Return from Ten-GigabitEthernet 1/0/1 interface view to system view and then to user view.
[Sysname-Ten-GigabitEthernet1/0/1] quit
10
[Sysname] quit
<Sysname>
return
Use return to return to user view from any other view.
Syntax
return
Views
Any view except user view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
Pressing Ctrl+Z has the same effect as the return command.
Examples
# Return to user view from Ten-GigabitEthernet 1/0/1 interface view.
[Sysname-Ten-GigabitEthernet1/0/1] return
<Sysname>
screen-length disable
Use screen-length disable to disable pausing between screens of output for the current session.
Use undo screen-length disable to enable pausing between screens of output for the current session.
Syntax
screen-length disable
undo screen-length disable
Default
The default varies by settings of the screen-length command in user line view.
The following are the default settings for the screen-length command:
•
Pausing between screens of output.
•
Displaying up to 24 lines on a screen.
Views
User view
Predefined user roles
network-admin
mdc-admin
11
Usage guidelines
If you disable pausing between screens of output, all output is displayed. The screen is refreshed
continuously until the final screen is displayed.
This command takes effect only for the current session. When you are logged out, the default is restored.
Examples
# Disable pausing between screens of output for the current session.
<Sysname> screen-length disable
Related commands
screen-length
system-view
Use system-view to enter system view from user view.
Syntax
system-view
Views
User view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Enter system view from user view.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname]
12
Login management commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see Security Configuration Guide.
Some login management commands are available in both user line view and user line class view. For
these commands, the device uses the following rules to determine the settings to be activated:
•
A setting in user line view is applied only to the user line. A setting in user line class view is applied
to all user lines of the class.
•
A non-default setting in either view takes precedence over a default setting in the other view. A
non-default setting in user line view takes precedence over a non-default setting in user line class
view.
•
A setting in user line view takes effect immediately and affects the online user. A setting in user line
class view takes effect only for new login users. It does not affect online users.
activation-key
Use activation-key to define a shortcut key for starting a terminal session.
Use undo activation-key to restore the default.
Syntax
activation-key character
undo activation-key
Default
Pressing Enter starts a terminal session.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Parameters
character: Specifies the shortcut key. It can be a single character, a key sequence, or the ASCII code
value (in the range of 0 to 127) of the character or key sequence.
Usage guidelines
This command is not supported in VTY line view or VTY line class view.
This command is available in both user line view and user line class view. A non-default setting in either
view takes precedence over a default setting in the other view. A non-default setting in user line view
takes precedence over a non-default setting in user line class view.
To display the shortcut key you have defined, use the display current-configuration | include
activation-key command.
13
Examples
# Configure character s as the shortcut key for starting a terminal session on the user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] activation-key s
To verify the configuration:
1.
Exit the console session.
[Sysname-line-aux1] return
<Sysname> quit
2.
Log in again through the AUX line.
The following message appears:
Press ENTER to get started.
3.
Press Enter.
Pressing Enter does not start a session.
4.
Enter s.
A terminal session is started.
<Sysname>
authentication-mode
Use authentication-mode to set the authentication mode for a user line.
Use undo authentication-mode to restore the default.
Syntax
In non-FIPS mode:
authentication-mode { none | password | scheme }
undo authentication-mode
In FIPS mode:
authentication-mode scheme
undo authentication-mode
Default
In non-FIPS mode, the authentication mode is password for VTY lines, and none for AUX lines.
In FIPS mode, the authentication mode is scheme.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Parameters
none: Disables authentication.
14
password: Performs local password authentication.
scheme: Performs AAA authentication. For more information about AAA, see Security Configuration
Guide.
Usage guidelines
When the authentication mode is none, a user can log in without authentication. To improve device
security, use the password or scheme authentication mode.
In VTY line view, this command is associated with the protocol inbound command. If you specify a
non-default value for only one of the two commands in VTY line view, the other command uses the default
setting, regardless of the setting in VTY line class view.
Examples
# Enable the none authentication mode for user line VTY 0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode none
# Enable password authentication for user line VTY 0 and set the password to 321.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode password
[Sysname-line-vty0] set authentication password simple 321
# Enable scheme authentication for user line VTY 0. Configure local user 123 and set the password to
321. Assign the Telnet service and the user role network-admin to the user.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode scheme
[Sysname-line-vty0] quit
[Sysname] local-user 123
[Sysname-luser-123] password simple 321
[Sysname-luser-123] service-type telnet
[Sysname-luser-123] authorization-attribute user-role network-admin
Related commands
set authentication password
auto-execute command
CAUTION:
After configuring this command for a user line, you might be unable to access the CLI through the user line.
Make sure you can access the CLI through a different user line before you configure this command and
save the configuration.
Use auto-execute command to specify a command that is automatically executed when a user logs in
through the current user line.
Use undo auto-execute command to remove the configuration.
Syntax
auto-execute command command
15
undo auto-execute command
Default
Command auto-execution is disabled.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Parameters
command: Specifies the command to be automatically executed.
Usage guidelines
This command is not supported in AUX line view or AUX line class view.
This command is available in both user line view and user line class view. A non-default setting in either
view takes precedence over a default setting in the other view. A non-default setting in user line view
takes precedence over a non-default setting in user line class view.
The device automatically executes the specified command when a user logs in through the user line, and
closes the user connection after the command is executed. If the command triggers another task, the
device does not close the user connection until the task is completed.
Typically, you configure the auto-execute command telnet X.X.X.X command on the device so the device
redirects a Telnet user to the host at X.X.X.X. In this case, the connection to the current device is closed
when the user terminates the Telnet connection to X.X.X.X.
Examples
# Configure the device to automatically Telnet to 192.168.1.41 after a user logs in through user line VTY
0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] auto-execute command telnet 192.168.1.41
% This action will lead to configuration failure through line-vty0. Are you sure?
[Y/N]:y
[Sysname-line-vty0]
# To verify the configuration, Telnet to 192.168.1.40.
The device automatically Telnets to 192.168.1.41, and the following output is displayed:
C:\> telnet 192.168.1.40
******************************************************************************
* Copyright (c) 2010-2013 Hewlett-Packard Development Company, L.P.
*
* Without the owner's prior written consent,
*
* no decompiling or reverse-engineering shall be allowed.
*
******************************************************************************
<Sysname>
Trying 192.168.1.41 ...
Press CTRL+K to abort
Connected to 192.168.1.41 ...
16
******************************************************************************
* Copyright (c) 2010-2013 Hewlett-Packard Development Company, L.P.
*
* Without the owner's prior written consent,
*
* no decompiling or reverse-engineering shall be allowed.
*
******************************************************************************
<Sysname.41>
This operation is the same as directly logging in to the device at 192.168.1.41 through Telnet. When you
break the Telnet connection to 192.168.1.41, the Telnet connection to 192.168.1.40 is broken at the same
time.
command accounting
Use command accounting to enable command accounting.
Use undo command accounting to restore the default.
Syntax
command accounting
undo command accounting
Default
Command accounting is disabled, and the accounting server does not record executed commands.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When command accounting is enabled but command authorization is not, every executed command is
recorded on the HWTACACS server.
When both command accounting and command authorization are enabled, only authorized commands
that are executed are recorded on the HWTACACS server.
Invalid commands issued by users are not recorded.
If the command accounting command is configured in user line class view, command accounting is
enabled on all user lines in the class, and you cannot configure the undo command accounting
command in the view of a user line in the class.
Examples
# Enable command accounting for user line VTY 0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] command accounting
Related commands
•
accounting command (Security Command Reference)
•
command authorization
17
command authorization
Use command authorization to enable command authorization.
Use undo command authorization to restore the default.
Syntax
command authorization
undo command authorization
Default
Command authorization is disabled. Logged-in users can execute commands without authorization.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When command authorization is enabled, a command is available only if the following requirements are
met:
•
The user has the commensurate user role.
•
The user is authorized to use the command by the AAA scheme.
If the command authorization command is configured in user line class view, command authorization is
enabled on all user lines in the class, and you cannot configure the undo command authorization
command in the view of a user line in the class.
Examples
# Enable command accounting for VTY 0 so the VTY 0 user can execute only authorized commands that
are permitted by the user role.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] command authorization
Related commands
•
authorization command (Security Command Reference)
•
command accounting
databits
Use databits to specify the number of data bits for each character.
Use undo databits to restore the default.
Syntax
databits { 5 | 6 | 7 | 8 }
undo databits
18
Default
Eight data bits are used for each character.
Views
User line view
Predefined user roles
network-admin
mdc-admin
Parameters
5: Uses five data bits for each character.
6: Uses six data bits for each character.
7: Uses seven data bits for each character.
8: Uses eight data bits for each character.
Usage guidelines
This command is not supported in VTY line view.
This setting must be the same as that on the configuration terminal.
Examples
# Configure AUX 1 to use five data bits for each character.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] databits 5
display line
Use display line to display user line information.
Syntax
display line [ number1 | { aux | vty } number2 ] [ summary ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode
and 0 to 71 in IRF mode.
aux: Specifies the AUX line.
vty: Specifies the VTY line.
19
number2: Specifies the relative number of a user line. The following are the value ranges:
•
AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode.
•
VTY line—0 to 63.
summary: Displays summary information about user lines. If you do not specify this keyword, the
detailed information is displayed.
Examples
# Display user line information.
<Sysname> display line 3
Idx
F 3
Type
Tx/Rx
Modem Auth
Int
Location
AUX 2/1
9600
-
-
2/1/0
N
+
: Line is active.
F
: Line is active and in async mode.
Idx
: Absolute index of line.
Type : Type and relative index of line.
Auth : Login authentication mode.
Int
: Physical port of the line.
A
: Authentication use AAA.
N
: No authentication is required.
P
: Password authentication.
Table 1 Command output
Field
Description
Modem
Whether the modem allows calling in or out. By default, this attribute is not configured and a
hyphen (-) is displayed.
Location
Physical position of the line, in the form slot number/CPU number in standalone mode or chassis
number/slot number/CPU number in IRF mode.
# In IRF mode, display summary information about all user lines.
<Sysname> display line summary
Line type : [AUX]
0:XXXU XXXX XXXX XXXX
16:XXXX XXXX XXXX XXXX
32:XXXX XXXX XXXX XXXX
48:XXXX XXXX XXXX XXXX
...
6352:XXXX XXXX XXXX XXXX
6368:XXXX XXXX XXXX XXXX
6384:XXXX XX
Line type : [VTY]
6390:UXUU UXXX XXXX XXXX
6406:XXXX XXXX XXXX XXXX
6422:XXXX XXXX XXXX XXXX
6438:XXXX XXXX XXXX XXXX
5 lines used.
(U)
20
6449 lines not used.
(X)
Table 2 Command output
Fields
Description
number—Absolute number of the first user line in the user line class.
number:status
status—User line status. X is for unused and U is for used.
For example, if "0:XXXU XXXX XXXX XXXX" is displayed, the user line class has 16
user lines. The user lines use the absolute numbers 0 through 15. User line 3 is being
used, and the others are not.
display telnet client
Use display telnet client to display the source address or interface for outgoing Telnet packets when the
device acts as a Telnet client.
Syntax
display telnet client
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display the Telnet client configuration of the device when it acts as a Telnet client.
<Sysname> display telnet client
The source IP address is 1.1.1.1.
The output shows that the device uses the source IPv4 address 1.1.1.1 for outgoing Telnet packets when it
acts as a Telnet client.
Related commands
telnet client source
display user-interface
Use display user-interface to display user line information.
Syntax
display user-interface [ number1 | { aux | vty } number2 ] [ summary ]
Views
Any view
21
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode
and 0 to 71 in IRF mode.
aux: Specifies the AUX line.
vty: Specifies the VTY line.
number2: Specifies the relative number of a user line. The following are the value ranges:
•
AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode.
•
VTY line—0 to 63.
summary: Displays summary information about user lines. If you do not specify this keyword, the
detailed information is displayed.
Usage guidelines
This command is an older version reserved for backward compatibility purposes. HP recommends that
you use the display line command.
Examples
# Display user line information.
<Sysname> display user-interface 3
Idx
F 3
Type
Tx/Rx
Modem Auth
Int
Location
AUX 2/1
9600
-
-
2/1/0
N
+
: Line is active.
F
: Line is active and in async mode.
Idx
: Absolute index of line.
Type : Type and relative index of line.
Auth : Login authentication mode.
Int
: Physical port of the line.
A
: Authentication use AAA.
N
: No authentication is required.
P
: Password authentication.
Table 3 Command output
Field
Description
Modem
Whether the modem allows calling in or out. By default, this attribute is not configured and a
hyphen (-) is displayed.
Location
Physical position of the line, in the form slot number/CPU number in standalone mode or chassis
number/slot number/CPU number in IRF mode.
# In IRF mode, display summary information about all user lines.
<Sysname> display user-interface summary
22
Line type : [AUX]
0:XXXU XXXX XXXX XXXX
16:XXXX XXXX XXXX XXXX
32:XXXX XXXX XXXX XXXX
48:XXXX XXXX XXXX XXXX
...
6352:XXXX XXXX XXXX XXXX
6368:XXXX XXXX XXXX XXXX
6384:XXXX XX
Line type : [VTY]
6390:UXUU UXXX XXXX XXXX
6406:XXXX XXXX XXXX XXXX
6422:XXXX XXXX XXXX XXXX
6438:XXXX XXXX XXXX XXXX
5 lines used.
(U)
6449 lines not used.
(X)
Table 4 Command output
Fields
Description
number—Absolute number of the first user line in the user line class.
number:status
status—User line status. X is for unused and U is for used.
For example, if "0:XXXU XXXX XXXX XXXX" is displayed, the user line class has 16
user lines. The user lines use the absolute numbers 0 through 15. User line 3 is being
used, and the others are not.
display users
Use display users to display online CLI user information.
Syntax
display users [ all ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
all: Displays all user lines supported by the device.
Examples
# Display online user information.
<Sysname> display users
23
Idx
Line
Idle
Time
Pid
Type
10
VTY 0
00:10:49
Jun 11 11:27:32
320
TEL
+ 11
VTY 1
00:00:00
Jun 11 11:39:40
334
TEL
Following are more details.
VTY 0
:
Location: 192.168.1.12
VTY 1
:
Location: 192.168.1.26
+
: Current operation user.
F
: Current operation user works in async mode.
The output shows that two users have logged in to the device: one is using user line VTY 0 and the other
(yourself) is using VTY 1. Your IP address is 192.168.1.26.
Table 5 Command output
Field
Description
Idx
Absolute number of the user line.
Line
Type and relative number of the user line.
Idle
Time elapsed after the user's most recent input, in the format hh:mm:ss.
Time
Login time of the user.
Pid
Process ID of the user session.
Type
User type, such as Telnet, SSH.
+
Indicates the user line you are using.
Location
IP address of the user.
escape-key
Use escape-key to define a shortcut key for terminating a task.
Use undo escape-key to disable the shortcut key for terminating a task.
Syntax
escape-key { character | default }
undo escape-key [ default ]
Default
Pressing Ctrl+C terminates a task.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
24
Parameters
character: Specifies the shortcut key. It can be a single character, a key sequence, or the ASCII code
value (in the range of 0 to 127) of the character or key sequence.
default: Restores the default escape key sequence Ctrl+C.
Usage guidelines
Some commands might take a long time to complete in certain situations. Examples include:
•
A ping command that has 1000 packets to send.
•
A tracert command that is used for an unreachable destination.
To stop a command, press the shortcut key for terminating tasks.
Whether a command can be terminated by Ctrl+C by default depends on the software implementation
of the command. For more information, see the description of the command.
HP recommends that you use a key sequence as the shortcut key. If you define a single character as the
shortcut key, pressing the key while a command is being executed stops the command. If no command
is being executed, the result depends on the following situations:
•
If you are managing the local device, pressing the key enters the character as a common character.
•
If you Telnet to another device and manage the remote device, pressing the key does nothing.
You can execute this command multiple times, but only the most recent configuration takes effect. To view
the current shortcut key definition, use the display current-configuration command.
This command is available in both user line view and user line class view. A non-default setting in either
view takes precedence over a default setting in the other view. A non-default setting in user line view
takes precedence over a non-default setting in user line class view.
Examples
# Define character a as the shortcut key for terminating a task.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] escape-key a
To verify the configuration:
1.
Ping IP address 192.168.1.49, specifying the -c keyword to set the number of ICMP echo request
packets to 20.
<Sysname> ping -c 20 192.168.1.49
PING 192.168.1.49: 56
data bytes, press a to break
Reply from 192.168.1.49: bytes=56 Sequence=1 ttl=255 time=3 ms
Reply from 192.168.1.49: bytes=56 Sequence=2 ttl=255 time=3 ms
2.
Press a.
The task is terminated, and the system returns to user view.
--- 192.168.1.49 ping statistics --2 packet(s) transmitted
2 packet(s) received
0.00% packet loss
round-trip min/avg/max = 3/3/3 ms
<Sysname>
25
flow-control
Use flow-control to configure the flow control mode.
Use undo flow-control to restore the default.
Syntax
flow-control { hardware | none | software }
undo flow-control
Default
The flow control mode is none.
Views
User line view
Predefined user roles
network-admin
mdc-admin
Parameters
hardware: Performs hardware flow control.
none: Disables flow control.
software: Performs software flow control.
Usage guidelines
This command is not supported in VTY line view.
The device supports flow control in both the inbound and outbound directions.
•
For flow control in the inbound direction, the local device listens to flow control information from the
remote device.
•
For flow control in the outbound direction, the local device sends flow control information to the
remote device.
The flow control setting takes effect in both directions.
To communicate, two devices must be configured with the same flow control mode.
Examples
# Configure software flow control in the inbound and outbound directions for user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] flow-control software
free line
Use free line to release a user line.
Syntax
free line { number1 | { aux | vty } number2 }
26
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode
and 0 to 71 in IRF mode.
aux: Specifies the AUX line.
vty: Specifies the VTY line.
number2: Specifies the relative number of a user line. The following are the value ranges:
•
AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode.
•
VTY line—0 to 63.
Usage guidelines
This command does not release the line you are using.
Examples
# Release user line VTY 1:
1.
Display online users.
<Sysname> display users
Idx
Line
Idle
Time
Pid
Type
10
VTY 0
00:10:49
Jun 11 11:27:32
320
TEL
+ 11
VTY 1
00:00:00
Jun 11 11:39:40
334
TEL
Following are more details.
VTY 0
:
Location: 192.168.1.12
VTY 1
:
Location: 192.168.1.26
2.
+
: Current operation user.
F
: Current operation user works in async mode.
If the operations of the user on VTY 1 impact your operations, log out the user.
<Sysname> free line vty 1
Are you sure to free line vty1? [Y/N]:y
[OK]
free user-interface
Use free user-interface to release a user line.
Syntax
free user-interface { number1 | { aux | vty } number2 }
27
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode
and 0 to 71 in IRF mode.
aux: Specifies the AUX line.
vty: Specifies the VTY line.
number2: Specifies the relative number of a user line. The following are the value ranges:
•
AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode.
•
VTY line—0 to 63.
Usage guidelines
This command does not release the line you are using.
This command is an older version reserved for backward compatibility purposes. HP recommends you
use the free line command.
Examples
# Release user line VTY 1:
1.
Display online users.
<Sysname> display users
Idx
LINE
Idle
Time
Pid
Type
10
VTY 0
00:10:49
Jun 11 11:27:32
320
TEL
+ 11
VTY 1
00:00:00
Jun 11 11:39:40
334
TEL
Following are more details.
VTY 0
:
Location: 192.168.1.12
VTY 1
:
Location: 192.168.1.26
2.
+
: Current operation user.
F
: Current operation user works in async mode.
If the operations of the user on VTY 1 impact your operations, log out the user.
<Sysname> free user-interface vty 1
Are you sure to free line vty1? [Y/N]:y
[OK]
history-command max-size
Use history-command max-size to set the size of the command history buffer for a user line.
Use undo history-command max-size to restore the default.
28
Syntax
history-command max-size size-value
undo history-command max-size
Default
The buffer of a user line saves up to 10 history commands.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Parameters
size-value: Specifies the maximum number of history commands the buffer can store, in the range of 0 to
256.
Usage guidelines
Each user line uses a separate command history buffer to save commands successfully executed by its
user. The size of the buffer determines how many history commands the buffer can store.
To view stored history commands on your user line, press the up or down arrow key, or execute the
display history-command command.
Terminating a CLI session clears the commands in the history buffer.
This command is available in both user line view and user line class view. A non-default setting in either
view takes precedence over a default setting in the other view. A non-default setting in user line view
takes precedence over a non-default setting in user line class view.
Examples
# Set the size of the command history buffer to 20 for user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] history-command max-size 20
idle-timeout
Use idle-timeout to set the session idle timeout.
Use undo idle-timeout to restore the default.
Syntax
idle-timeout minutes [ seconds ]
undo idle-timeout
Default
The idle-timeout interval is 10 minutes.
Views
User line view, user line class view
29
Predefined user roles
network-admin
mdc-admin
Parameters
minutes: Specifies the number of minutes for the idle timeout, in the range of 0 to 35791. The default is
10 minutes.
seconds: Specifies the number of seconds for the idle timeout, in the range of 0 to 59. The default is 0
seconds.
Usage guidelines
The system automatically terminates a user connection if no information interaction occurs on the
connection within the idle-timeout interval.
Setting the idle timeout to 0 disables the idle timeout function.
This command is available in both user line view and user line class view. A non-default setting in either
view takes precedence over a default setting in the other view. A non-default setting in user line view
takes precedence over a non-default setting in user line class view.
Examples
# Set the idle timeout to 1 minute and 30 seconds for user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] idle-timeout 1 30
line
Use line to enter one or multiple user line views.
Syntax
line { first-number1 [ last-number1 ] | { aux | vty } first-number2 [ last-number2 ] }
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
first-number1: Specifies the absolute number of the first user line. The value range is 0 to 65 in standalone
mode and 0 to 71 in IRF mode.
last-number1: Specifies the absolute number of the last user line. This number cannot be smaller than
first-number1.
aux: Specifies the AUX line.
vty: Specifies the VTY line.
first-number2: Specifies the relative number of the first user line. The following are the value ranges:
•
AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode.
30
•
VTY line—0 to 63.
last-number2: Specifies the relative number of the last user line. This number cannot be smaller than
first-number2.
Usage guidelines
To configure settings for a single user line, use this command to enter the user line view.
To configure the same settings for multiple user lines, use this command to enter multiple user line views.
Examples
# Enter the view of user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1]
# Enter the views of user lines VTY 0 to VTY 4.
<Sysname> system-view
[Sysname] line vty 0 4
[Sysname-line-vty0-4]
Related commands
line class
line class
Use line class to enter user line class view.
Syntax
line class { aux | vty }
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
aux: Specifies the AUX line class view.
vty: Specifies the VTY line class view.
Usage guidelines
To configure the same settings for all user lines of a line class, use this command to enter the user line
class view.
Some login management commands are available in both user line view and user line class view. For
these commands, the device uses the following rules to determine the settings to be activated:
•
A setting in user line view is applied only to the user line. A setting in user line class view is applied
to all user lines of the class.
31
•
A non-default setting in either view takes precedence over a default setting in the other view. A
non-default setting in user line view takes precedence over a non-default setting in user line class
view.
•
A setting in user line view takes effect immediately and affects the online user. A setting in user line
class view takes effect only for new login users. It does not affect online users.
Examples
# Set the user connection timeout to 15 minutes in VTY line class view.
<Sysname> system-view
[Sysname] line class vty
[Sysname-line-class-vty] idle-timeout 15
# In AUX line class view, configure character s as the shortcut key for starting a terminal session.
<Sysname> system-view
[Sysname] line class aux
[Sysname-line-class-aux] activation-key s
[Sysname-line-class-aux] quit
# In AUX 1 line view, restore the default shortcut key for starting a terminal session.
[Sysname] line aux 1
[Sysname-line-aux1] undo activation-key
Alternatively:
[Sysname-line-aux1] activation-key 13
To verify the configuration:
1.
Exit the console session.
[Sysname-line-aux1] return
<Sysname> quit
2.
Log in again through the AUX line.
The following message appears:
Press ENTER to get started.
3.
Press Enter.
Pressing Enter does not start a session.
4.
Enter s.
A terminal session is started.
<Sysname>
Related commands
line
lock
Use lock to lock the current user line. This method prevents unauthorized users from using the user line.
Syntax
lock
Default
By default, the system does not lock any user lines.
32
Views
User view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command is not supported in FIPS mode.
After executing the lock command, enter the password for unlocking the user line and confirm the
password by entering it again.
To unlock the user line, press Enter and enter the correct password.
Examples
# Lock the current user line and then unlock it.
<Sysname> lock
Please input password<1 to 16> to lock current line:
Password:
Again:
locked !
// The user line is locked. To unlock it, press Enter and enter the password:
Password:
<Sysname>
parity
Use parity to specify a parity check mode.
Use undo parity to restore the default.
Syntax
parity { even | mark | none | odd | space }
undo parity
Default
The setting is none, and no parity check is performed.
Views
User line view
Predefined user roles
network-admin
33
mdc-admin
Parameters
even: Performs even parity check.
mark: Performs mark parity check.
none: Disables parity check.
odd: Performs odd parity check.
space: Performs space parity check.
Usage guidelines
This command is not supported in VTY line view.
The configuration terminal and the device must be configured with the same parity check mode to
communicate.
Examples
# Configure user line AUX 1 to perform odd parity check.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] parity odd
protocol inbound
Use protocol inbound to enable a user line to support Telnet, SSH, or both protocols.
Use undo protocol inbound to restore the default.
Syntax
In non-FIPS mode:
protocol inbound { all | ssh | telnet }
undo protocol inbound
In FIPS mode:
protocol inbound ssh
undo protocol inbound
Default
In non-FIPS mode, both protocols are supported.
In FIPS mode, SSH is supported.
Views
VTY line view, VTY line class view
Predefined user roles
network-admin
mdc-admin
Parameters
all: Supports both protocols.
34
ssh: Supports SSH only.
telnet: Supports Telnet only.
Usage guidelines
A protocol change does not take effect for current online users. It takes effect only for new login users.
Before configuring a user line to support SSH, set the authentication mode to scheme for the user line. For
more information, see authentication-mode.
In VTY line view, this command is associated with the authentication-mode command. If you specify a
non-default value for only one of the two commands in VTY line view, the other command uses the default
setting, regardless of the setting in VTY line class view.
Examples
# Enable user lines VTY 0 through VTY 4 to support only SSH.
<Sysname> system-view
[Sysname] line vty 0 4
[Sysname-line-vty0-4] authentication-mode scheme
[Sysname-line-vty0-4] protocol inbound ssh
# Enable scheme authentication for the VTY line class and enable the line class to support only SSH.
Disable authentication for VTY lines 0 through 4.
<Sysname> system-view
[Sysname] line class vty
[Sysname-line-class-vty] authentication-mode scheme
[Sysname-line-class-vty] protocol inbound ssh
[Sysname-line-class-vty] line vty 0 4
[Sysname-line-vty0-4] authentication-mode none
screen-length
Use screen-length to set the maximum number of lines to be displayed on a screen.
Use undo screen-length to restore the default.
Syntax
screen-length screen-length
undo screen-length
Default
Up to 24 lines are displayed on a screen.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Parameters
screen-length: Specifies the maximum number of lines to be displayed on a screen, in the range of 0 to
512. Setting this argument to 0 disables pausing between screens of output.
35
Usage guidelines
This command sets the maximum number of lines that can be displayed on one screen when the screen
pause function is enabled. If the screen pause function is disabled, the system displays command output
without a pause.
The actual number of lines that can be displayed on a screen is restricted by the display specification of
the configuration terminal. For example, if you set the maximum number of lines for a screen to 40, the
device sends 40 lines to the screen at a time. If the display specification is 24 lines, only the last 24 lines
are displayed on the screen. To view the previous 16 lines, you must press PgUp.
The screen pause function is enabled by default. To disable this function, use the screen-length 0 or
screen-length disable command. The screen-length disable command is available in user view.
This command is available in both user line view and user line class view. A non-default setting in either
view takes precedence over a default setting in the other view. A non-default setting in user line view
takes precedence over a non-default setting in user line class view.
Examples
# Set the maximum number of lines to be displayed on a screen to 30 for user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] screen-length 30
Related commands
screen-length disable
send
Use send to send messages to user lines.
Syntax
send { all | number1 | { aux | vty } number2 }
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
all: Specifies all user lines.
number1: Specifies the absolute number of a user line. The value range is 0 to 65 in standalone mode
and 0 to 71 in IRF mode.
aux: Specifies the AUX line.
vty: Specifies the VTY line.
number2: Specifies the relative number of a user line. The following are the value ranges:
•
AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode.
•
VTY line—0 to 63.
36
Usage guidelines
To end a message, press Enter. To cancel a message and return to user view, press Ctrl+C.
Examples
# Before you restart the device, send a notification to VTY 1 to inform the user.
<Sysname> send vty 1
Input message, end with Enter; abort with CTRL+C:
Your attention, please. I will reboot the system in 3 minutes.
Send message? [Y/N]:y
The message should appear on the screen of the user's configuration terminal, as shown in the following
example:
[Sysname]
***
***
***Message from vty0 to vty1
***
Your attention, please. I will reboot the system in 3 minutes.
set authentication password
Use set authentication password to set a password for password authentication.
Use undo set authentication password to remove the password.
Syntax
set authentication password { hash | simple } password
undo set authentication password
Default
No password is set for password authentication.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Parameters
hash: Sets a hashed password.
simple: Sets a plaintext password.
password: Specifies the password string. This argument is case sensitive. If simple is specified, it must be
a string of 1 to 16 characters. If hash is specified, it must be a string of 1 to 110 characters.
Usage guidelines
This command is not supported in FIPS mode.
For security purposes, the password is hashed before being saved, whether you specify the hash or
simple keyword.
37
This command is available in both user line view and user line class view. A non-default setting in either
view takes precedence over a default setting in the other view. A non-default setting in user line view
takes precedence over a non-default setting in user line class view.
Examples
# Set the password for password authentication on user line AUX 1 to hello.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] authentication-mode password
[Sysname-line-aux1] set authentication password simple hello
When you log in again through user line AUX 1, you must enter the password hello to pass
authentication.
Related commands
authentication-mode
shell
Use shell to enable the terminal service for a user line.
Use undo shell to disable the terminal service for a user line.
Syntax
shell
undo shell
Default
The terminal service is enabled on all user lines.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
The undo shell command is not supported in AUX line view or AUX line class view.
You cannot disable the terminal service on the user line you are using.
When the device operates as a Telnet or SSH server, you cannot configure the undo shell command.
If the undo shell command is configured in user line class view, you cannot configure the shell command
in the view of a user line in the class.
Examples
# Disable the terminal service for user line VTY 0 through VTY 4 so no user can log in to the device
through the user lines.
<Sysname> system-view
[Sysname] line vty 0 4
[Sysname-line-vty0-4] undo shell
Disable ui-vty0-4 , are you sure? [Y/N]:y
38
[Sysname-line-vty0-4]
speed
Use speed to set the transmission rate (also called the "baud rate") on a user line.
Use undo speed to restore the default.
Syntax
speed speed-value
undo speed
Default
The transmission rate is 9600 bps.
Views
User line view
Predefined user roles
network-admin
mdc-admin
Parameters
speed-value: Specifies the transmission rate in bps. Supported transmission rates vary by configuration
environment. The transmission rates for asynchronous serial interfaces might include:
•
300 bps.
•
600 bps.
•
1200 bps.
•
2400 bps.
•
4800 bps.
•
9600 bps.
•
19200 bps.
•
38400 bps.
•
57600 bps.
•
115200 bps.
Usage guidelines
This command is not supported in VTY line view.
The configuration terminal and the device must be configured with the same transmission rate to
communicate.
Examples
# Set the transmission rate to 19200 bps for user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] speed 19200
39
stopbits
Use stopbits to specify the number of stop bits for a character.
Use undo stopbits to restore the default.
Syntax
stopbits { 1 | 1.5 | 2 }
undo stopbits
Default
One stop bit is used.
Views
User line view
Predefined user roles
network-admin
mdc-admin
Parameters
1: Uses one stop bit.
1.5: Uses one and a half stop bits. The device does not support using one and a half stop bits. If you
specify this keyword, two stop bits are used.
2: Uses two stop bits.
Usage guidelines
This command is not supported in VTY line view.
The configuration terminal and the device must be configured to use the same number of stop bits to
communicate.
Examples
# Set the number of stop bits to 1 for user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] stopbits 1
telnet
Use telnet to Telnet to a host in an IPv4 network.
Syntax
telnet remote-host [ service-port ] [ vpn-instance vpn-instance-name | dscp dscp-value ] * [ source
{ interface interface-type interface-number | ip ip-address } ]
Views
User view
Predefined user roles
network-admin
40
mdc-admin
Parameters
remote-host: Specifies the IPv4 address or host name of a remote host. A host name can be a
case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits,
hyphens (-), underscores (_), and dots (.).
service-port: Specifies the TCP port number for the Telnet service on the remote host. The value range is
0 to 65535 and the default is 23.
vpn-instance vpn-instance-name: Specifies the VPN instance to which the remote host belongs, where
vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the remote host belongs to the public
network, do not specify this option.
dscp dscp-value: Specifies the DSCP value for IP to use in outgoing Telnet packets to indicate the packet
transmission priority. The value range is 0 to 63. The default is 48.
source: Specifies a source IPv4 address or source interface for outgoing Telnet packets.
interface interface-type interface-number: Specifies the source interface. The primary IPv4 address of the
interface will be used as the source IPv4 address for outgoing Telnet packets.
ip ip-address: Specifies the source IPv4 address for outgoing Telnet packets.
Usage guidelines
This command is not supported in FIPS mode.
To terminate the current Telnet connection, press Ctrl+K or execute the quit command.
The source address or interface specified by this command is applied only to the current Telnet
connection.
Examples
# Telnet to host 1.1.1.2, using 1.1.1.1 as the source IP address for outgoing Telnet packets.
<Sysname> telnet 1.1.1.2 source ip 1.1.1.1
Related commands
telnet client source
telnet client source
Use telnet client source to specify a source IPv4 address or source interface for outgoing Telnet packets
when the device acts as a Telnet client.
Use undo telnet client source to remove the configuration.
Syntax
telnet client source { interface interface-type interface-number | ip ip-address }
undo telnet client source
Default
No source IPv4 address or source interface is specified for outgoing Telnet packets. The source IPv4
address is the primary IPv4 address of the outbound interface.
Views
System view
41
Predefined user roles
network-admin
mdc-admin
Parameters
interface interface-type interface-number: Specifies a source interface. The primary IPv4 address of the
interface will be used as the source IPv4 address for outgoing Telnet packets.
ip ip-address: Specifies a source IPv4 address.
Usage guidelines
This command is not supported in FIPS mode.
The source IPv4 address or source interface that is specified by this command applies to all Telnet
connections. However, if a user specifies a source IPv4 address or source interface when executing the
telnet command, the setting specified by the user takes effect.
Examples
# Set the source IPv4 address for outgoing Telnet packets to 1.1.1.1 when the device acts as a Telnet client.
<Sysname> system-view
[Sysname] telnet client source ip 1.1.1.1
Related commands
display telnet client configuration
telnet ipv6
Use telnet ipv6 to Telnet to a host in an IPv6 network.
Syntax
telnet ipv6 remote-host [ -i interface-type interface-number ] [ port-number ] [ vpn-instance
vpn-instance-name | dscp dscp-value ] *
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
remote-host: Specifies the IP address or host name of a remote host. A host name can be a
case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits,
hyphens (-), underscores (_), and dots (.).
-i interface-type interface-number: Specifies the outbound interface for sending Telnet packets. This
option is required when the destination address is a link-local address.
port-number: Specifies the TCP port number for the Telnet service on the remote host. The value range is
0 to 65535 and the default is 23.
vpn-instance vpn-instance-name: Specifies the VPN instance to which the remote host belongs, where
vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the remote host belongs to the public
network, do not specify this option.
42
dscp dscp-value: Specifies the DSCP value for IPv6 to use in outgoing Telnet packets to indicate the
packet transmission priority. The value range is 0 to 63. The default is 48.
Usage guidelines
This command is not supported in FIPS mode.
To terminate the current Telnet connection, press Ctrl+K or execute the quit command.
Examples
# Telnet to the host at 5000::1.
<Sysname> telnet ipv6 5000::1
telnet server acl
Use telnet server acl to apply an ACL to filter Telnet logins.
Use undo telnet server acl to restore the default.
Syntax
telnet server acl acl-number
undo telnet server acl
Default
No ACL is used to filter Telnet logins.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
acl-number: Specifies an ACL by its number. The following are the value ranges:
•
Basic ACL—2000 to 2999.
•
Advanced ACL—3000 to 3999.
•
Ethernet frame header ACL—4000 to 4999.
Usage guidelines
This command is not supported in FIPS mode.
Only one ACL can be used to filter Telnet logins, and only users permitted by the ACL can Telnet to the
device.
This command does not take effect on existing Telnet connections.
You can specify an ACL that has not been created yet in this command. The command takes effect after
the ACL is created.
For more information about ACL, see ACL and QoS Configuration Guide.
Examples
# Permit only the user at 1.1.1.1 to Telnet to the device.
<Sysname> system-view
43
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 1.1.1.1 0
[Sysname-acl-basic-2001] quit
[Sysname] telnet server acl 2001
telnet server dscp
Use telnet server dscp to set the DSCP value for IPv4 to use for outgoing Telnet packets on a Telnet server.
Use undo telnet server dscp to restore the default.
Syntax
telnet server dscp dscp-value
undo telnet server dscp
Default
IPv4 uses the DSCP value 48 for outgoing Telnet packets on a Telnet server.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
dscp-value: Specifies a DSCP value in the range of 0 to 63.
Usage guidelines
This command is not supported in FIPS mode.
The DSCP value is carried in the ToS field of an IP packet, and it indicates the transmission priority of the
packet.
Examples
# Set the DSCP value for IPv4 to use for outgoing Telnet packets to 30 on a Telnet server.
<Sysname> system-view
[Sysname] telnet server dscp 30
telnet server enable
Use telnet server enable to enable the Telnet server function.
Use undo telnet server enable to disable the Telnet server function.
Syntax
telnet server enable
undo telnet server enable
Default
The Telnet server function is disabled.
44
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command is not supported in FIPS mode.
Administrators can Telnet to the device only when the Telnet server function is enabled.
Examples
# Enable the Telnet server function.
<Sysname> system-view
[Sysname] telnet server enable
telnet server ipv6 acl
Use telnet server ipv6 acl to apply an IPv6 ACL to filter IPv6 Telnet logins.
Use undo telnet server ipv6 acl to restore the default.
Syntax
telnet server ipv6 acl [ ipv6 ] acl-number
undo telnet server ipv6 acl
Default
No ACL is used to filter IPv6 Telnet logins.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
acl-number: Specifies an IPv6 ACL by its number. The following are the value ranges:
•
Basic ACL—2000 to 2999. The ipv6 option is required.
•
Advanced ACL—3000 to 3999. The ipv6 option is required.
•
Ethernet frame header ACL—4000 to 4999. Do not specify the ipv6 option.
Usage guidelines
This command is not supported in FIPS mode.
If the ACL does not exist or does not have a rule, all users are permitted to Telnet to the device.
When the ACL exists and has rules, only users permitted by the ACL can Telnet to the device.
This command does not take effect for existing Telnet connections.
If you execute this command multiple times, the most recent configuration takes effect.
45
For more information about ACL, see ACL and QoS Configuration Guide.
Examples
# Permit only the user at 2000::1 to Telnet to the device.
<Sysname> system-view
[Sysname] acl ipv6 number 2001
[Sysname-acl6-basic-2001] rule permit source 2000::1 128
[Sysname-acl6-basic-2001] quit
[Sysname] telnet server ipv6 acl ipv6 2001
telnet server ipv6 dscp
Use telnet server ipv6 dscp to set the DSCP value for IPv6 to use for outgoing Telnet packets on a Telnet
server.
Use undo telnet server ipv6 dscp to restore the default.
Syntax
telnet server ipv6 dscp dscp-value
undo telnet server ipv6 dscp
Default
IPv6 uses the DSCP value 48 for outgoing Telnet packets on a Telnet server.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
dscp-value: Specifies a DSCP value in the range of 0 to 63.
Usage guidelines
This command is not supported in FIPS mode.
The DSCP value is carried in the Traffic class field of an IPv6 packet, and it indicates the transmission
priority of the packet.
Examples
# Set the DSCP value for IPv6 to use for outgoing Telnet packets to 30 on a Telnet server.
<Sysname> system-view
[Sysname] telnet server ipv6 dscp 30
terminal type
Use terminal type to specify the terminal display type.
Use undo terminal type to restore the default.
46
Syntax
terminal type { ansi | vt100 }
undo terminal type
Default
The terminal display type is ANSI.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Parameters
ansi: Specifies the terminal display type ANSI.
vt100: Specifies the terminal display type VT100.
Usage guidelines
The device supports two terminal display types: ANSI and VT100. HP recommends that you set the
display type to VT100 on both the device and the configuration terminal. If either side uses the ANSI type,
a display problem such as cursor positioning error might occur when a command line has more than 80
characters.
Examples
# Set the terminal display type to VT100.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] terminal type vt100
user-interface
Use user-interface to enter one or multiple user line views.
Syntax
user-interface { first-number1 [ last-number1 ] | { aux | vty } first-number2 [ last-number2 ] }
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
first-number1: Specifies the absolute number of the first user line. The value range is 0 to 65 in standalone
mode and 0 to 71 in IRF mode.
last-number1: Specifies the absolute number of the last user line. This number cannot be smaller than
first-number1.
47
aux: Specifies the AUX line.
vty: Specifies the VTY line.
first-number2: Specifies the relative number of the first user line. The following are the value ranges:
•
AUX line—0 to 1 in standalone mode and 0 to 7 in IRF mode.
•
VTY line—0 to 63.
last-number2: Specifies the relative number of the last user line. This number cannot be smaller than
first-number2.
Usage guidelines
To configure settings for a single user line, use this command to enter the user line view.
To configure the same settings for multiple user lines, use this command to enter multiple user line views.
This command is an older version reserved for backward compatibility purposes. HP recommends you
use the line command.
Examples
# Enter the view of user line AUX 1.
<Sysname> system-view
[Sysname] user-interface aux 1
[Sysname-line-aux1]
# Enter the views of user lines VTY 0 to VTY 4.
<Sysname> system-view
[Sysname] user-interface vty 0 4
[Sysname-line-vty0-4]
Related commands
user-interface class
user-interface class
Use user-interface class to enter user line class view.
Syntax
user-interface class { aux | vty }
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
aux: Specifies the AUX line class view.
vty: Specifies the VTY line class view.
48
Usage guidelines
This command is an older version reserved for backward compatibility purposes. HP recommends that
you use the line class command.
To configure the same settings for all user lines of a line class, you can use this command to enter the user
line class view.
Some login management commands are available in both user line view and user line class view. For
these commands, the device uses the following rules to determine the settings to be activated:
•
A setting in user line view is applied only to the user line. A setting in user line class view is applied
to all user lines of the class.
•
A non-default setting in either view takes precedence over a default setting in the other view. A
non-default setting in user line view takes precedence over a non-default setting in user line class
view.
•
A setting in user line view takes effect immediately and affects the online user. A setting in user line
class view takes effect only for new login users. It does not affect online users.
Examples
# Set the user connection timeout to 15 minutes in VTY line class view.
<Sysname> system-view
[Sysname] user-interface class vty
[Sysname-line-class-vty] idle-timeout 15
# In AUX line class view, configure character s as the shortcut key for starting a terminal session.
<Sysname> system-view
[Sysname] line class aux
[Sysname-line-class-aux] activation-key s
[Sysname-line-class-aux] quit
# In AUX 1 line view, restore the default shortcut key for starting a terminal session.
[Sysname] line aux 1
[Sysname-line-aux1] undo activation-key
Alternatively:
[Sysname-line- aux1] activation-key 13
To verify the configuration:
1.
Exit the console session.
[Sysname-line- aux1] return
<Sysname> quit
2.
Log in again through the AUX line.
The following message appears:
Press ENTER to get started.
3.
Press Enter.
Pressing Enter does not start a session.
4.
Enter s.
A terminal session is started.
<Sysname>
Related commands
user-interface
49
user-role
Use user-role to assign a user role to a user line so users logged in through the user line get the user role
at login.
Use undo user-role to remove a user role or restore the default.
Syntax
user-role role-name
undo user-role [ role-name ]
Default
An AUX line user of the default MDC is assigned the user role network-admin. Users of other default MDC
user lines are assigned the user role network-operator.
A non-default MDC user switched from the default device by using the switchto mdc command is
assigned the user role mdc-admin. Other non-default MDC users are assigned the user role
mdc-operator.
Views
User line view, user line class view
Predefined user roles
network-admin
mdc-admin
Parameters
role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role can be
user-defined or predefined (network-admin, network-operator, mdc-admin, mdc-operator, or level-0 to
level-15). If you do not specify this argument, the undo user-role command restores the default user role.
Usage guidelines
This command is not supported in FIPS mode.
You can assign up to 64 user roles to a user line. A user logged in through the user line gets all the user
roles.
For more information about user roles, see "Configuring RBAC."
Examples
# Assign user role network-admin through the user line VTY 0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] user-role network-admin
50
RBAC commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see Security Configuration Guide.
description
Use description to configure a description for a user role.
Use undo description to delete the description of a user role.
Syntax
description text
undo description
Default
A user role does not have a description.
Views
User role view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Configure a user role description, a case-sensitive string of 1 to 128 characters.
Examples
# Configure the description as labVIP for the user role role1.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] description labVIP
Related commands
•
display role
•
role
display role
Use display role to display user role information.
Syntax
display role [ name role-name ]
51
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
name role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. If you do not
specify a user role name, the command displays information about all user roles, including the
predefined user roles.
Examples
# Display information about the user role 123.
<Sysname> display role name 123
Role: 123
Description: new role
VLAN policy: deny
Permitted VLANs: 1 to 5, 7 to 8
Interface policy: deny
Permitted interfaces: Ten-GigabitEthernet1/0/1 to Ten-GigabitEthernet1/0/3,
Vlan-interface1 to Vlan-interface20
VPN instance policy: deny
Permitted VPN instances: vpn, vpn1, vpn2
------------------------------------------------------------------Rule
Perm
Type
Scope
Entity
------------------------------------------------------------------1
permit RWX
feature-group abc
2
deny
feature
ldap
3
permit
command
system ; radius sc *
4
permit R--
xml-element
-
5
permit RW-
oid
1.2.1
-W-
R:Read W:Write X:Execute
Table 6 Command output
Field
Description
User role name.
Predefined user role names:
Role
Description
•
•
•
•
•
•
network-admin.
network-operator.
mdc-admin.
mdc-operator.
level-n (where n represents an integer in the range of 0 to 15).
security-audit.
User role description you have configured for easy identification.
52
Field
Description
VLAN policy of the user role:
VLAN policy
• deny—Denies access to any VLAN except permitted VLANs.
• permit (default)—Default VLAN policy, which enables the user role
to access any VLAN.
Permitted VLANs
VLANs accessible to the user role.
Interface policy of the user role:
Interface policy
• deny—Denies access to any interface except permitted interfaces.
• permit (default)—Default interface policy, which enables the user
role to access any interface.
Permitted interfaces
Interfaces accessible to the user role.
VPN instance policy of the user role:
VPN instance policy
• deny—Denies access to any VPN except permitted VPNs.
• permit (default)—Default VPN instance policy, which enables the
user role to access any VPN instance.
Permitted VPN instances
VPNs accessible to the user role.
User role rule number.
Rule
A user role rule specifies access permissions for items, including
commands, feature-specific commands, XML elements, and MIB
nodes.
Predefined user role rules are identified by sys-n, where n represents
an integer.
Access control type:
Perm
• permit—User role has access to the specified items.
• deny—User role does not have access to the specified items.
Item type:
Type
• R—Read-only.
• W—Write.
• X—Execute.
Rule control scope:
• command—Controls access to the command or commands, as
specified in the Entity field.
• feature—Controls access to the commands of the feature, as
Scope
specified in the Entity field.
• feature-group—Controls access to the commands of the features in
the feature group, as specified in the Entity field.
• xml-element—Controls access to XML elements.
• oid—Controls access to MIB nodes.
Entity
Command string, feature name, feature group, XML element, or OID
specified in the user role rule:
• An en dash (–) represents any feature.
• An asterisk (*) represents zero or more characters.
Related commands
role
53
display role feature
Use display role feature to display features available in the system.
Syntax
display role feature [ name feature-name | verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
name feature-name: Displays the commands of a feature. The feature-name argument specifies the
feature name, and all letters must be in lower case.
verbose: Displays the commands of each feature.
Usage guidelines
If you specify neither the name feature-name option nor the verbose keyword, the command displays
only the list of features available in the system.
Examples
# Display the list of feature names.
<Sysname> display role feature
Feature: device
(Device configuration related commands)
Feature: interface
(Interface related commands)
Feature: syslog
(Syslog related commands)
Feature: process
(Process related commands)
…
# Display the commands of each feature.
<Sysname> display role feature verbose
Feature: device
(Device configuration related commands)
display clock
(R)
debugging dev
(W)
display debugging dev
display device *
(R)
(R)
display diagnostic-information *
display environment *
display fan *
(R)
(R)
(R)
display alarm *
(R)
display power *
(R)
display system-working-mode
(R)
display current-configuration *
display saved-configuration *
(R)
(R)
54
display default-configuration *
display startup
display this *
(R)
display archive configuration
display bootrom-access
clock datetime *
reboot *
save *
(R)
(R)
(R)
(R)
(W)
(W)
(W)
archive configuration
(W)
backup startup-configuration to *
(W)
restore startup-configuration from *
reset saved-configuration *
startup saved-configuration *
display transceiver *
bootrom *
(W)
(W)
(W)
(R)
(W)
bootrom-access *
(W)
system-view ; temperature-limit *
system-view ; sysname *
(W)
(W)
system-view ; clock timezone *
(W)
system-view ; clock summer-time *
(W)
system-view ; configuration replace file *
system-view ; transceiver *
(W)
(W)
system-view ; system-working-mode *
(W)
system-view ; archive configuration *
(W)
system-view ; configuration encrypt *
system-view ; version check ignore
(W)
(W)
system-view ; version auto-update enable
(W)
system-view ; bootrom-update security-check enable
system-view ; priority-flow-control *
system-view ; clock protocol *
(W)
(W)
system-view ; rtm * ; action *
(W)
system-view ; rtm * ; running-time *
system-view ; rtm * ; commit
(W)
(W)
system-view ; rtm * ; user-role *
display rtm *
(W)
(W)
system-view ; password-recovery *
system-view ; rtm *
(W)
(W)
(R)
system-view ; probe ;
(W)
system-view ; probe ; display system internal startup cache
system-view ; probe ; view *
(R)
system-view ; probe ; list *
(R)
system-view ; probe ; display system internal lipc *
system-view ; probe ; lipc *
debugging lipc *
(R)
(W)
(W)
system-view ; probe ; display system internal dbm *
(R)
system-view ; probe ; display hardware internal transceiver *
Feature: interface
(R)
(Interface related commands)
reset counters interface *
(W)
55
(R)
reset packet-drop *
(W)
debugging ifmgr *
(W)
display debugging ifmgr
(R)
debugging system-event *
(W)
display debugging system-event
display interface *
(R)
(R)
…
# Display the commands of the aaa feature.
<Sysname> display role feature name aaa
Feature: aaa
(AAA related commands)
system-view ; domain *
(W)
system-view ; header *
(W)
system-view ; aaa *
display domain *
(W)
(R)
system-view ; user-group *
(W)
system-view ; local-user *
(W)
display local-user *
(R)
display user-group *
(R)
display debugging local-server
debugging local-server *
super *
(R)
(W)
(X)
display password-control *
reset password-control *
(R)
(W)
system-view ; password-control *
(W)
Table 7 Command output (display role feature name aaa)
Field
Description
Feature
Displays the name and brief function description of the feature.
system-view ; domain *
All commands that start with the domain keyword in system view, and
all commands in ISP domain view.
system-view ; header *
All commands that start with the header keyword in system view.
system-view ; aaa *
All commands that start with the aaa keyword in system view.
display domain *
All commands that start with the display domain keywords in user
view.
system-view ; user-group *
All commands that start with the user-group keyword in system view,
and all commands in user group view.
system-view ; local-user *
All commands that start with the local-user keyword in system view,
and all commands in local user view.
display user-group *
All commands that start with the display user-group keywords in user
view.
display debugging local-server
All commands that start with the display debugging local-server
keywords in user view.
debugging local-server *
All commands that start with the debugging local-server keywords in
user view.
super *
All commands that start with the super keyword in user view.
56
Field
Description
display password-control *
All commands that start with the display password-control keywords in
user view.
reset password-control *
All commands that start with the reset password-control keywords in
user view.
system-view ; password-control *
All commands that start with the password-control keyword in system
view.
(W)
Command type is Write. A write command configures the system.
(R)
Command type is Read. A read command displays configuration or
maintenance information.
(X)
Command type is Execute. An execute command executes a specific
function.
Related commands
feature
display role feature-group
Use display role feature-group to display feature group information.
Syntax
display role feature-group [ name feature-group-name ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
name feature-group-name: Specifies a feature group. The feature-group-name argument represents the
feature group name, a case-sensitive string of 1 to 31 characters. If you do not specify a feature group,
the command displays information about all feature groups.
verbose: Displays the commands of each feature in the specified feature group. If you do not specify a
feature group, the keyword enables displaying the commands of each feature in every feature group. If
you do not specify this keyword, the command displays only the feature lists of feature groups.
Usage guidelines
Feature groups L2 and L3 are predefined feature groups.
Examples
# Display the feature lists of feature groups.
<Sysname> display role feature-group
Feature group: L2
57
Feature: igmp-snooping
(IGMP-Snooping related commands)
Feature: mld-snooping
(MLD-Snooping related commands)
Feature: lacp
(LACP related commands)
Feature: stp
(STP related commands)
Feature: lldp
(LLDP related commands)
Feature: dldp
(DLDP related commands)
Feature: cfm
(CFM related commands)
Feature: eoam
(EOAM related commands)
Feature: smart-link
(Smart-link related commands)
Feature: monitor-link
(Monitor-link related commands)
Feature: loopbk-detect
(Loopback-detection related commands)
Feature: vlan
(Virtual LAN related commands)
Feature: evi-isis
(EVI-ISIS related commands)
Feature: evb
(EVB related commands)
…
# Display the commands in each feature group. For more information about the wildcards and marks
used in the command list, see Table 7.
<Sysname> display role feature-group verbose
Feature group: L2
Feature: igmp-snooping
(IGMP-Snooping related commands)
system-view ; igmp-snooping
(W)
system-view ; multicast-vlan *
(W)
system-view ; vlan * ; igmp-snooping *
(W)
system-view ; vlan * ; pim-snooping *
(W)
system-view ; interface * ; igmp-snooping *
(W)
system-view ; interface * ; port multicast-vlan *
display igmp-snooping *
(R)
display pim-snooping *
(R)
display multicast-vlan *
reset igmp-snooping *
reset pim-snooping *
(W)
(R)
(W)
(W)
reset multicast-vlan *
(W)
debugging igmp-snooping *
(W)
display debugging igmp-snooping *
(R)
system-view ; probe * ; debugging system internal igmp-snooping *
Feature: mld-snooping
(MLD-Snooping related commands)
system-view ; mld-snooping
(W)
system-view ; ipv6 multicast-vlan *
(W)
system-view ; vlan * ; mld-snooping *
(W)
system-view ; vlan * ; ipv6 pim-snooping *
(W)
system-view ; interface * ; mld-snooping *
(W)
system-view ; interface * ; ipv6 port multicast-vlan *
display mld-snooping *
(R)
display ipv6 pim-snooping *
(R)
display ipv6 multicast-vlan *
reset mld-snooping *
(R)
(W)
reset ipv6 pim-snooping *
reset ipv6 multicast-vlan *
(W)
(W)
58
(W)
(W)
debugging mld-snooping *
(W)
display debugging mld-snooping *
(R)
system-view ; probe * ; debugging system internal mld-snooping *
(W)
…
# Display the feature list of the L3 feature group.
<Sysname> display role feature-group name L3
Feature group: L3
Feature: route
(Route management related commands)
Feature: usr
(Unicast static route related commands)
Feature: ospf
(Open Shortest Path First protocol related commands)
Feature: rip
(Routing Information Protocol related commands)
Feature: isis
(ISIS protocol related commands)
Feature: bgp
(Border Gateway Protocol related commands)
Feature: l3vpn
(Layer 3 Virtual Private Network related commands)
Feature: multicast
(Multicast related commands)
Feature: pim
(Protocol Independent Multicast related commands)
…
Related commands
•
feature
•
role feature-group
feature
Use feature to add a feature to a feature group.
Use undo feature to remove a feature from a feature group.
Syntax
feature feature-name
undo feature feature-name
Default
A user-defined feature group does not have any features.
Views
Feature group view
Predefined user roles
network-admin
mdc-admin
Parameters
feature-name: Specifies a feature name. You must enter the feature name exactly as the feature name is
displayed, including the case.
Usage guidelines
Repeat the feature command to add multiple features to a feature group.
59
Examples
# Add the security features AAA and ACL to the security group security-features.
<Sysname> system-view
[Sysname] role feature-group name security-features
[Sysname-featuregrp-security-features] feature aaa
[Sysname-featuregrp-security-features] feature acl
Related commands
•
display role feature
•
display role feature-group
•
role feature-group
interface policy deny
Use interface policy deny to enter user role interface policy view.
Use undo interface policy deny to restore the default user role interface policy.
Syntax
interface policy deny
undo interface policy deny
Default
A user role has access to any interface.
Views
User role view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
To restrict the interface access of a user role to a set of interfaces, perform the following tasks:
1.
Use interface policy deny to enter user role interface policy view.
2.
Use permit interface to specify accessible interfaces.
NOTE:
The interface policy deny command denies the access of the user role to all interfaces if the permit
interface command is not configured.
To configure an interface, make sure the interface is permitted by the user role interface policy in use. You
can perform the following tasks on an accessible interface:
•
Create, remove, or configure the interface.
•
Enter the interface view.
•
Specify the interface in feature commands.
The create and remove operations are available only for logical interfaces.
60
Any change to a user role interface policy takes effect only on users who log in with the user role after the
change.
Examples
# Enter user role interface policy view of role1, and deny the user role to access any interface.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] interface policy deny
[Sysname-role-role1-ifpolicy] quit
# Enter user role interface policy view of role1, and deny the user role to access any interface except
Ten-GigabitEthernet 1/0/1 to Ten-GigabitEthernet 1/0/5.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] interface policy deny
[Sysname-role-role1-ifpolicy] permit interface ten-gigabitethernet 1/0/1 to
ten-gigabitethernet 1/0/5
Related commands
•
display role
•
permit interface
•
role
permit interface
Use permit interface to configure a list of interfaces accessible to a user role.
Use undo permit interface to disable the access of a user role to specific interfaces.
Syntax
permit interface interface-list
undo permit interface [ interface-list ]
Default
No permitted interfaces are configured in user role interface policy view.
Views
User role interface policy view
Predefined user roles
network-admin
mdc-admin
Parameters
interface interface-list: Specifies a space-separated list of up to 10 interface items. Each interface item
specifies one interface in the interface-type interface-number form or a range of interfaces in the
interface-type interface-number to interface-type interface-number form. If you specify an interface range,
the end interface must meet the following requirements:
•
Be the same type as the start interface.
•
Have a higher interface number than the start interface.
61
Usage guidelines
To permit a user role to access an interface after you configure the interface policy deny command, you
must add the interface to the permitted interface list of the policy. With the user role, you can perform the
following tasks on the interfaces in the permitted interface list:
•
Create, remove, or configure the interfaces.
•
Enter the interface views.
•
Specify the interfaces in feature commands.
The create and remove operations are available only for logical interfaces.
You can repeat the permit interface command to add permitted interfaces to a user role interface policy.
The undo permit interface command removes the entire list of permitted interfaces if you do not specify
an interface.
Any change to a user role interface policy takes effect only on users who log in with the user role after the
change.
Examples
1.
Configure user role role1:
# Permit the user role to execute all commands available in interface view and VLAN view.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] rule 1 permit command system-view ; interface *
[Sysname-role-role1] rule 2 permit command system-view ; vlan *
# Permit the user role to access Ten-GigabitEthernet 1/0/1, and Ten-GigabitEthernet 1/0/5 to
Ten-GigabitEthernet 1/0/7.
[Sysname-role-role1] interface policy deny
[Sysname-role-role1-ifpolicy] permit interface ten-gigabitethernet 1/0/1
ten-gigabitethernet 1/0/5 to ten-gigabitethernet 1/0/7
[Sysname-role-role1-ifpolicy] quit
[Sysname-role-role1] quit
2.
Verify that you cannot use the user role to work on any interfaces except Ten-GigabitEthernet
1/0/1 and Ten-GigabitEthernet 1/0/5 to Ten-GigabitEthernet 1/0/7:
# Verify that you can enter Ten-GigabitEthernet 1/0/1 interface view.
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] quit
# Verify that you can assign Ten-GigabitEthernet 1/0/5 to VLAN 10. In this example, the user role
can access any VLAN because the default VLAN policy of the user role is used.
[Sysname] vlan 10
[Sysname-vlan10] port ten-gigabitethernet 1/0/5
[Sysname-vlan10] quit
# Verify that you cannot enter Ten-GigabitEthernet 1/0/2 interface view.
[Sysname] interface ten-gigabitethernet 1/0/2
Permission denied.
Related commands
•
display role
•
interface policy deny
62
•
role
permit vlan
Use permit vlan to configure a list of VLANs accessible to a user role.
Use undo permit vlan to remove the permission for a user role to access specific VLANs.
Syntax
permit vlan vlan-id-list
undo permit vlan [ vlan-id-list ]
Default
No permitted VLANs are configured in user role VLAN policy view.
Views
User role VLAN policy view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each VLAN item specifies a VLAN
by VLAN ID or specifies a range of VLANs in the form of vlan-id1 to vlan-id2. The value range for the
VLAN IDs is 1 to 4094. If you specify a VLAN range, the value for the vlan-id2 argument must be greater
than the value for the vlan-id1 argument.
Usage guidelines
To permit a user role to access a VLAN after you configure the vlan policy deny command, you must add
the VLAN to the permitted VLAN list of the policy. With the user role, you can perform the following tasks
on the VLANs in the permitted VLAN list:
•
Create, remove, or configure the VLANs.
•
Enter the VLAN views.
•
Specify the VLANs in feature commands.
You can repeat the permit vlan command to add permitted VLANs to a user role VLAN policy.
The undo permit vlan command removes the entire list of permitted VLANs if you do not specify a VLAN.
Any change to a user role VLAN policy takes effect only on users who log in with the user role after the
change.
Examples
1.
Configure user role role1:
# Permit the user role to execute all commands available in interface view and VLAN view.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] rule 1 permit command system-view ; interface *
[Sysname-role-role1] rule 2 permit command system-view ; vlan *
# Permit the user role to access VLANs 2, 4, and 50 to 100.
63
[Sysname-role-role1] vlan policy deny
[Sysname-role-role1-vlanpolicy] permit vlan 2 4 50 to 100
[Sysname-role-role1-vlanpolicy] quit
[Sysname-role-role1] quit
2.
Verify that you cannot use the user role to work on any VLAN except VLANs 2, 4, and 50 to 100:
# Verify that you can create VLAN 100 and enter the VLAN view.
[Sysname] vlan 100
[Sysname-vlan100] quit
# Verify that you can add port Ten-GigabitEthernet 1/0/1 to VLAN 100 as an access port.
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] port access vlan 100
[Sysname-Ten-GigabitEthernet1/0/1] quit
# Verify that you cannot create VLAN 101 or enter the VLAN view.
[Sysname] vlan 101
Permission denied.
Related commands
•
display role
•
role
•
vlan policy deny
permit vpn-instance
Use permit vpn-instance to configure a list of VPNs accessible to a user role.
Use undo permit vpn-instance to disable the access of a user role to specific VPNs.
Syntax
permit vpn-instance vpn-instance-name&<1-10>
undo permit vpn-instance [ vpn-instance-name&<1-10> ]
Default
No permitted VPNs are configured in user role VPN instance policy.
Views
User role VPN instance policy view
Predefined user roles
network-admin
mdc-admin
Parameters
vpn-instance-name&<1-10>: Specifies a space-separated list of up to 10 MPLS L3VPN names. Each
name is a case-sensitive string of 1 to 31 characters.
Usage guidelines
To permit a user role to access an MPLS L3VPN after you configure the vpn-instance policy deny
command, you must add the VPN to the permitted VPN list of the policy. With the user role, you can
perform the following tasks on the VPNs in the permitted VPN list:
64
•
Create, remove, or configure the VPNs.
•
Enter the VPN instance views.
•
Specify the VPNs in feature commands.
You can repeat the permit vpn-instance command to add permitted MPLS L3VPNs to a user role VPN
instance policy.
The undo permit vpn-instance command removes the entire list of permitted VPNs if you do not specify
a VPN.
Any change to a user role VPN instance policy takes effect only on users who log in with the user role
after the change.
Examples
1.
Configure user role role1:
# Permit the user role to execute all commands available in system view and in the child views of
system view.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] rule 1 permit command system-view ; *
# Permit the user role to access VPN vpn1.
[Sysname-role-role1] vpn policy deny
[Sysname-role-role1-vpnpolicy] permit vpn-instance vpn1
[Sysname-role-role1-vpnpolicy] quit
[Sysname-role-role1] quit
2.
Verify that you cannot use the user role to work on any VPN except vpn1:
# Verify that you can enter the view of vpn1.
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] quit
# Verify that you can assign the primary accounting server at 10.110.1.2 to the VPN in the
RADIUS scheme radius1.
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary accounting 10.110.1.2 vpn-instance vpn1
[Sysname-radius-radius1] quit
# Verify that you cannot create the VPN vpn2 or enter the VPN instance view.
[Sysname] ip vpn-instance vpn2
Permission denied.
Related commands
•
display role
•
role
•
vpn-instance policy deny
role
Use role to create a user role and enter user role view. If the user role has been created, you directly enter
user role view.
Use undo role to delete a user role.
65
Syntax
role name role-name
undo role name role-name
Default
The system has the following predefined user roles: network-admin, network-operator, mdc-admin,
mdc-operator, level-n (where n represents an integer in the range of 0 to 15), and security-audit.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
name role-name: Specifies a username. The role-name argument is a case-sensitive string of 1 to 63
characters.
Usage guidelines
You can create a maximum of 64 user roles in addition to the predefined user roles.
To change the permissions assigned to a user role, you must first enter the user role view.
You cannot delete the predefined user roles or change the permissions assigned to network-admin,
network-operator, mdc-admin, mdc-operator, level-15, or security-audit.
You cannot assign the security-audit user role to non-AAA authentication users.
Level-0 to level-14 users can modify their own permissions for any commands except for the display
history-command all command.
Examples
# Create the user role role1 and enter the user role view.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1]
Related commands
•
display role
•
interface policy deny
•
rule
•
vlan policy deny
•
vpn-instance policy deny
role default-role enable
Use role default-role enable to enable the default user role feature for remote AAA users.
Use undo role default-role enable to restore the default.
66
Syntax
role default-role enable
undo role default-role enable
Default
The default user role feature is disabled. AAA users who do not have a user role cannot log in to the
device.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
The default user role feature allows AAA authentication users to access the system if the AAA server does
not authorize any user roles to the users.
You can configure this feature to enable an AAA authentication user who has not been assigned any user
role to log in with a default user role.
•
For login to the default MDC, the default user role is network-operator.
•
For login to a non-default MDC, the default user role is mdc-operator.
If AAA users have been assigned user roles, they log in with the user roles.
Examples
# Enable the default user role feature.
<Sysname> system-view
[Sysname] role default-role enable
Related commands
role
role feature-group
Use role feature-group to create a user role feature group and enter user role feature group view.
Use undo role feature-group to delete a user role feature group.
Syntax
role feature-group name feature-group-name
undo role feature-group name feature-group-name
Default
Two user role feature groups, L2 and L3, are created.
Views
System view
Predefined user roles
network-admin
67
mdc-admin
Parameters
name feature-group-name: Specifies a feature group name. The feature-group-name argument is a
case-sensitive string of 1 to 31 characters.
Usage guidelines
The L2 feature group includes all Layer 2 feature commands, and the L3 feature group includes all Layer
3 feature commands. These predefined feature groups are not user configurable.
In addition to the predefined feature groups L2 and L3, you can create a maximum of 64 user role feature
groups.
After you create a user role feature group, you can use the display role feature command to display the
features available in the system. Then you can use the feature command to add features to the feature
group.
Examples
# Create the feature group security-features.
<Sysname> system-view
[Sysname] role feature-group name security-features
[Sysname-featuregrp-security-features]
Related commands
•
display role feature-group
•
display role feature
•
feature
rule
Use rule to create or change a user role rule for controlling command, XML element, or MIB node access.
Use undo rule to delete a user role rule.
Syntax
rule number { deny | permit } { command command-string | { execute | read | write } * { feature
[ feature-name ] | feature-group feature-group-name | oid [ oid-string ] | xml-element [ xml-string ] } }
undo rule { number | all }
Default
A user-defined user role does not have any rules and cannot use any command, XML element, or MIB
node.
Views
User role view
Predefined user roles
network-admin
mdc-admin
Parameters
number: Specifies a rule number in the range of 1 to 256.
68
deny: Denies access to any specified command, XML element, or MIB node.
permit: Permits access to any specified command, XML element, or MIB node.
command command-string: Specifies a command string. The command-string argument is a
case-sensitive string of 1 to 128 characters, including the following characters:
•
The wildcard asterisk (*).
•
The delimiters space and tab.
•
All printable characters.
execute: Specifies the execute commands, XML elements, or MIB nodes. An execute command (for
example, ping), XML element, or MIB node executes a specific function or program.
read: Specifies the read commands, XML elements, or MIB nodes. A read command (for example,
display, dir, more, or pwd), XML element, or MIB node displays configuration or maintenance
information.
write: Specifies the write commands, XML elements, or MIB nodes. A write command (for example, ssh
server enable), XML element, or MIB node configures the system.
feature [ feature-name ]: Specifies one or all features. The feature-name argument specifies a feature
name. If you do not specify a feature name, you specify all the features in the system. When you specify
a feature, the feature name must be the same, including the case, as the name displayed by the display
role feature command.
feature-group feature-group-name: Specifies a user-defined or predefined feature group. The
feature-group-name argument represents the feature group name, a case-sensitive string of 1 to 31
characters. If the feature group has not been created, the rule takes effect after the group is created. To
display the feature groups that have been created, use the display role feature-group command.
oid [ oid-string ]: Specifies an OID of a MIB node. The oid-string argument represents the OID, a
case-insensitive string of 1 to 255 characters. The OID is a dotted numeric string that uniquely identifies
the path from the root node to this node. For example, 1.3.6.1.4.1.25506.8.35.14.19.1.1.
xml-element [ xml-string ]: Specifies an XML element. The xml-string argument represents the XPath of the
XML element, a case-insensitive string of 1 to 255 characters. Use the forward slash (/) to separate Xpath
items, for example, Interfaces/Index/Name. If you do not specify an XML element, the rule applies to all
XML elements.
all: Deletes all the user role rules.
Usage guidelines
You can define the following types of rules for different access control granularities:
•
Command rule—Controls access to a command or a set of commands that match a regular
expression.
•
Feature rule—Controls access to the commands of a feature by command type.
•
Feature group rule—Controls access to the commands of a group of features by command type.
•
XML element rule—Controls access to XML elements by element type.
•
OID rule—Controls access to the specified MIB node and its child nodes by node type.
A user role can access the set of permitted commands, XML elements, and MIB nodes specified in the
user role rules. User role rules include predefined (identified by sys-n) and user-defined rules.
The following guidelines apply to non-OID rules:
69
•
•
If two user-defined rules of the same type conflict, the rule with the higher ID takes effect. For
example, a user role can use the tracert command but not the ping command if the user role
contains rules configured by using the following commands:
{
rule 1 permit command ping
{
rule 2 permit command tracert
{
rule 3 deny command ping
If a predefined user role rule and a user-defined user role rule conflict, the user-defined user role rule
takes effect.
The following guidelines apply to OID rules:
•
•
The system compares an OID with the OIDs specified in rules, and it uses the longest match
principle to select a rule for the OID. For example, a user role cannot access the MIB node with OID
1.3.6.1.4.1.25506.141.3.0.1 if the user role contains rules configured by using the following
commands:
{
rule 1 permit read write oid 1.3.6
{
rule 2 deny read write oid 1.3.6.1.4.1
{
rule 3 permit read write oid 1.3.6.1.4
If the same OID is specified in multiple rules, the rule with the higher ID takes effect. For example,
a user role can access the MIB node with OID 1.3.6.1.4.1.25506.141.3.0.1 if the user role contains
rules configured by using the following commands:
{
rule 1 permit read write oid 1.3.6
{
rule 2 deny read write oid 1.3.6.1.4.1
{
rule 3 permit read write oid 1.3.6.1.4.1
You can configure a maximum of 256 user-defined rules for a user role. The total number of user-defined
user role rules cannot exceed 1024.
Any rule modification, addition, or removal for a user role takes effect only on the users who log in with
the user role after the change.
Access to the file system commands is controlled by both the file system command rules and the file
system feature rule.
A command with output redirection to the file system is permitted only when the command type write is
assigned to the file system feature.
When you specify a command string, follow the guidelines in Table 8.
70
Table 8 Command string configuration rules
Rule
Guidelines
Use a semicolon to separate the command of each view that you must
enter before you access a command or a set of commands. However, do
not use a semicolon to separate commands available in user view or any
view, for example, display and dir.
Each semicolon-separated segment must have a minimum of one printable
character.
Semicolon (;) is the delimiter.
To specify the commands in a view but not the commands in the view's
subviews, use a semicolon as the last printable character in the last
segment. To specify the commands in a view and the view's subviews, the
last printable character in the last segment must not be a semicolon.
For example, you must enter system view before you enter interface view.
To specify all commands starting with the ip keyword in any interface
view, you must use the "system ; interface * ; ip * ;" command string.
For another example, the "system ; radius scheme * ;" command string
represents all commands that start with the radius scheme keywords in
system view. The "system ; radius scheme *" command string represents
all commands that start with the radius scheme keywords in system view
and all commands in RADIUS scheme view.
An asterisk represents zero or multiple characters.
In a non-last segment, you can use an asterisk only at the end of the
segment.
Asterisk (*) is the wildcard.
In the last segment, you can use an asterisk in any position of the segment.
If the asterisk appears at the beginning, you cannot specify a printable
character behind the asterisk.
For example, the "system ; *" command string represents all commands
available in system view and all subviews of the system view. The
"debugging * event" command string represents all event debugging
commands available in user view.
Keyword abbreviation is allowed.
To control the access to a
command, you must specify the
command immediately after the
view that has the command.
You can specify a keyword by entering the first few characters of the
keyword. Any command that starts with this character string matches the
rule.
For example, "rule 1 deny command dis mpls lsp protocol static" denies
access to the commands display mpls lsp protocol static and display mpls
lsp protocol static-cr.
To control access to a command, you must specify the command
immediately behind the view to which the command is assigned. The rules
that control command access for any subview do not apply to the
command.
For example, the "rule 1 deny command system ; interface * ; *"
command string disables access to any command that is assigned to
interface view. However, you can still execute the acl number command in
interface view, because this command is assigned to system view rather
than interface view. To disable access to this command, use "rule 1 deny
command system ; acl *;".
71
Rule
Do not include the vertical bar (|),
greater-than sign (>), or double
greater-than sign (>>) when you
specify display commands in a
user role command rule.
Guidelines
The system does not treat the redirect signs and the parameters that follow
the signs as part of command lines. However, in user role command rules,
these redirect signs and parameters are handled as part of command
lines. As a result, no rule that includes any of these signs can find a match.
For example, "rule 1 permit command display debugging > log" can
never find a match. This is because the system has a display debugging
command but not a display debugging > log command.
Examples
# Permit the user role role1 to execute the display acl command.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] rule 1 permit command display acl
# Permit the user role role1 to execute all commands that start with the display keyword.
[Sysname-role-role1] rule 2 permit command display *
# Permit the user role role1 to execute the radius scheme aaa command in system view and use all
commands assigned to RADIUS scheme view.
[Sysname-role-role1] rule 3 permit command system ; radius scheme aaa
# Deny the access of role1 to any read or write command of any feature.
[Sysname-role-role1] rule 4 deny read write feature
# Deny the access of role1 to any read command of the aaa feature.
[Sysname-role-role1] rule 5 deny read feature aaa
# Permit role1 to access all read, write, and execute commands of the feature group security-features.
[Sysname-role-role1] rule 6 permit read write execute feature-group security-features
# Permit role1 to access all read and write MIB nodes starting from the node with OID 1.1.2.
[Sysname-role-role1] rule 7 permit read write oid 1.1.2
Related commands
•
display role
•
display role feature
•
display role feature-group
•
role
super
Use super to obtain another user role without reconnecting to the device.
Syntax
super [ rolename ]
Views
User view
Predefined user roles
network-admin
72
mdc-admin
Parameters
rolename: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in
the system. If you do not specify a user role, you obtain the default target user role.
Usage guidelines
The obtained user role is a temporary user role, because this command is effective only on the current
login. The next time you are logged in with the user account, the original user role settings take effect.
To enable users to obtain another user role without reconnecting to the device, you must configure user
role authentication.
•
If no local password is configured in the local password authentication (local), an AUX user can
obtain the user role by either entering a string or not entering anything.
•
If no local password is configured in the local-then-remote authentication (local scheme), the
following rules apply:
{
{
A VTY user performs remote authentication.
An AUX user can obtain user role authorization by either entering a string or not entering
anything.
Examples
# Obtain the user role network-operator.
<Sysname> super network-operator
Password:
User privilege role is network-operator, and only those commands can be used that authorized
to the role.
Related commands
•
authentication super
•
super authentication-mode
•
super password
super authentication-mode
Use super authentication-mode to set an authentication mode for temporary user role authorization.
Use undo super authentication-mode to restore the default.
Syntax
super authentication-mode { local | scheme } *
undo super authentication-mode
Default
Local password authentication applies.
Views
System view
Predefined user roles
network-admin
73
mdc-admin
Parameters
local: Enables local password authentication.
scheme: Enables remote AAA authentication.
Usage guidelines
For local password authentication, use the super password command to set a password.
For remote AAA authentication, set the username and password on the RADIUS or HWTACACS server.
If you specify both local and scheme keywords, the keyword first entered in the command takes
precedence.
•
scheme local—Enables remote-then-local authentication mode. The device first performs AAA
authentication to obtain a temporary user role. Local password authentication is performed if the
remote HWTACACS or RADIUS server does not respond, or if the AAA configuration on the device
is invalid.
•
local scheme—Enables local-then-remote authentication mode. The device first performs local
password authentication. If no password is configured for the user role, the device performs remote
authentication.
For more information about AAA, see Security Configuration Guide.
Examples
# Enable local-only authentication for temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode local
# Enable remote-then-local authentication for temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode scheme local
Related commands
•
authentication super
•
super password
super default role
Use super default role to specify the default target user role for temporary user role authorization.
Use undo super default role to restore the default.
Syntax
super default role rolename
undo super default role
Default
If you log in to the default MDC, the default target user role is network-admin.
If you log in to a non-default MDC, the default target user role is mdc-admin.
Views
System view
74
Predefined user roles
network-admin
mdc-admin
Parameters
rolename: Specifies the name of the default target user role, a case-sensitive string of 1 to 63 characters.
The user role must exist in the system.
Usage guidelines
The default target user role is applied to the super or super password command when you do not specify
a user role for the command.
Examples
# Specify the default target user role as network-operator for temporary user role authorization.
<Sysname> system-view
[Sysname] super default role network-operator
Related commands
•
super
•
super password
super password
Use super password to set a password for a user role.
Use undo super password to restore the default.
Syntax
In non-FIPS mode:
super password [ role rolename ] [ { hash | simple } password ]
undo super password [ role rolename ]
In FIPS mode:
super password [ role rolename ]
undo super password [ role rolename ]
Default
No password is set for a user role.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
role rolename: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist
in the system. If you do not specify a user role, the command sets a password for the default target user
role.
75
hash: Sets a hashed password.
simple: Sets a plaintext password. This password will be saved in hashed text for security purposes.
password: Specifies the password string. This argument is case sensitive.
•
•
In non-FIPS mode:
{
If the simple keyword is specified, the password must be a string of 1 to 63 characters.
{
If the hash keyword is specified, the password must be a string of 1 to 110 characters.
In FIPS mode, the password must be a string of 15 to 63 characters. The string must contain four
character types including digits, uppercase letters, lowercase letters, and special characters.
Usage guidelines
If you do not specify any parameters, you specify a plaintext password in the interactive mode.
The FIPS mode supports only the interactive mode for setting a password.
Set a password if you configure local password authentication for temporary user role authorization.
It is a good practice to specify different passwords for different user roles.
Examples
# Set the password to 123456TESTplat&! for the user role network-operator.
<Sysname> system-view
[Sysname] super password role network-operator simple 123456TESTplat&!
# Set the password to 123456TESTplat&! in the interactive mode for the user role network-operator.
<Sysname> system-view
[Sysname] super password role network-operator
Password:
Confirm :
Related commands
•
super authentication-mode
•
super default role
vlan policy deny
Use vlan policy deny to enter user role VLAN policy view.
Use undo vlan policy deny to restore the default user role VLAN policy.
Syntax
vlan policy deny
undo vlan policy deny
Default
A user role has access to any VLAN.
Views
User role view
Predefined user roles
network-admin
76
mdc-admin
Usage guidelines
To restrict the VLAN access of a user role to a set of VLANs, perform the following tasks:
1.
Use vlan policy deny to enter user role VLAN policy view.
2.
Use permit vlan to specify accessible VLANs.
NOTE:
The vlan policy deny command denies the access of the user role to all VLANs if the permit vlan command
is not configured.
To configure a VLAN, make sure the VLAN is permitted by the user role VLAN policy in use. You can
perform the following tasks on an accessible VLAN:
•
Create, remove, or configure the VLAN.
•
Enter the VLAN view.
•
Specify the VLAN in feature commands.
Any change to a user role VLAN policy takes effect only on users who log in with the user role after the
change.
Examples
# Enter user role VLAN policy view of role1, and deny the access of role1 to any VLAN.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] vlan policy deny
[Sysname-role-role1-vlanpolicy] quit
# Enter user role VLAN policy view of role1, and deny the access of role1 to any VLAN except VLANs
50 to 100.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] vlan policy deny
[Sysname-role-role1-vlanpolicy] permit vlan 50 to 100
Related commands
•
display role
•
permit vlan
•
role
vpn-instance policy deny
Use vpn-instance policy deny to enter user role VPN instance policy view.
Use undo vpn-instance policy deny to restore the default user role VPN instance policy.
Syntax
vpn-instance policy deny
undo vpn-instance policy deny
77
Default
A user role has access to any VPN.
Views
User role view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
To restrict the VPN access of a user role to a set of VPNs, perform the following tasks:
1.
Use vpn-instance policy deny to enter user role VPN instance policy view.
2.
Use permit vpn-instance to specify accessible VPNs.
NOTE:
The vpn-instance policy deny command denies the access of the user role to all VPNs if the permit
vpn-instance command is not configured.
To configure a VPN, make sure the VPN is permitted by the user role VPN instance policy in use. You can
perform the following tasks on an accessible VPN:
•
Create, remove, or configure the VPN.
•
Enter the VPN instance view.
•
Specify the VPN in feature commands.
Any change to a user role VPN instance policy takes effect only on users who log in with the user role
after the change.
Examples
# Enter user role VPN instance policy view of role1, and deny the access of role1 to any VPN.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] vpn-instance policy deny
[Sysname-role-role1-vpnpolicy] quit
# Enter user role VPN instance policy view of role1, and deny the access of role1 to any VPN except
vpn2.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] vpn-instance policy deny
[Sysname-role-role1-vpnpolicy] permit vpn-instance vpn2
Related commands
•
display role
•
permit vpn-instance
•
role
78
FTP commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see Security Configuration Guide.
FTP is not supported in FIPS mode.
FTP server commands
display ftp-server
Use display ftp-server to display FTP server configuration and status information.
Syntax
display ftp-server
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display FTP server configuration and status information.
<Sysname> display ftp-server
FTP server is running.
User count:
1
Idle-timeout timer (in minutes):
30
Table 9 Command output
Field
Description
User count
Number of the current logged-in users.
Idle-timeout timer (in minutes)
If no packet is exchanged between the FTP server and client during this
period, the FTP connection is broken.
Related commands
•
ftp server enable
•
ftp timeout
79
display ftp-user
Use display ftp-user to display detailed information about logged-in FTP users.
Syntax
display ftp-user
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display detailed information about logged-in FTP users.
<Sysname> display ftp-user
UserName
HostIP
Port
HomeDir
root
192.168.20.184
46539
flash:
A field value is wrapped if its length exceeds the limit. The wrapped value is right justified.
The limits for fields are as follows:
•
UserName—10 characters.
•
HostIP—15 characters.
•
HomeDir—37 characters.
<Sysname> display ftp-user
UserName
HostIP
Port
HomeDir
user2
2000:2000:2000:
1499
flash:/user2
10001
flash:/123456789/123456789/123456789/
2000:2000:2000:
2000:2000
administra
100.100.100.100
tor
123456789/123456789/123456789/1234567
89/123456789
Table 10 Command output
Field
Description
UserName
Name of the user.
HostIP
IP address of the user.
Port
Port number of the user.
HomeDir
Authorized directory for the user.
80
free ftp user
Use free ftp user to manually release the FTP connections established by using a specific user account.
Syntax
free ftp user username
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
username: Specifies a username. You can use the display ftp-user command to display FTP user
information.
Examples
# Release the FTP connections established by using the user account ftpuser.
<Sysname> free ftp user ftpuser
Are you sure to free FTP connection? [Y/N]:y
<Sysname>
free ftp user-ip
Use free ftp user-ip to manually release the FTP connections established from a specific IPv4 address.
Syntax
free ftp user-ip ipv4-address [ port port ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
ipv4-address: Specifies the source IP address of an FTP connection. You can use the display ftp-user
command to view the source IP addresses of FTP connections.
port port: Specifies the source port of an FTP connection. You can use the display ftp-user command to
view the source ports of FTP connections.
Examples
# Release the FTP connections established from IP address 192.168.20.184.
<Sysname> free ftp user-ip 192.168.20.184
Are you sure to free FTP connection? [Y/N]:y
<Sysname>
81
free ftp user-ip ipv6
Use free ftp user-ip ipv6 to manually release the FTP connections established from a specific IPv6
address.
Syntax
free ftp user-ip ipv6 ipv6-address [ port port ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
ipv6-address: Specifies the source IPv6 address of an FTP connection. You can use the display ftp-user
command to view the source IPv6 addresses of FTP connections.
port port: Specifies the source port of an FTP connection. You can use the display ftp-user command to
view the source ports of FTP connections.
Examples
# Release the FTP connections established from IPv6 address 2000::154.
<Sysname> free ftp user-ip ipv6 2000::154
Are you sure to free FTP connection? [Y/N]:y
<Sysname>
ftp server acl
Use ftp server acl to use an ACL to control FTP clients' access to the FTP server.
Use undo ftp server acl to restore the default.
Syntax
ftp server acl { acl-number | ipv6 acl-number6 }
undo ftp server acl [ ipv6 ]
Default
No ACL is used to control FTP clients' access to the FTP server.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
acl-number: Specifies an IPv4 ACL number in the range of 2000 to 3999.
ipv6 acl-number6: Specifies an IPv6 ACL number in the range of 2000 to 3999.
82
Usage guidelines
You can use this command to permit only FTP requests from specific FTP clients. This configuration takes
effect only for FTP connections to be established. It does not impact existing FTP connections. If you
execute the command multiple times, the most recently specified ACL takes effect.
Examples
# Use ACL 2001 to allow only client 1.1.1.1 to access the FTP server.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule 0 permit source 1.1.1.1 0
[Sysname-acl-basic-2001] rule 1 deny source any
[Sysname-acl-basic-2001] quit
[Sysname] ftp server acl 2001
ftp server dscp
Use ftp server dscp to set the DSCP value for IPv4 to use for outgoing FTP packets on an FTP server.
Use undo ftp server dscp to restore the default.
Syntax
ftp server dscp dscp-value
undo ftp server dscp
Default
IPv4 uses the DSCP value 0 for outgoing FTP packets on an FTP server.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
dscp-value: Specifies a DSCP value in the range of 0 to 63.
Usage guidelines
The DSCP value is carried in the ToS field of an IP packet, and it indicates the transmission priority of the
packet.
Examples
# Set the DSCP value for IPv4 to use for outgoing FTP packets to 30 on an FTP server.
<Sysname> system-view
[Sysname] ftp server dscp 30
ftp server enable
Use ftp server enable to enable the FTP server.
Use undo ftp server enable to disable the FTP server.
83
Syntax
ftp server enable
undo ftp server enable
Default
The FTP server is disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Examples
# Enable the FTP server.
<Sysname> system-view
[Sysname] ftp server enable
ftp server ipv6 dscp
Use ftp server ipv6 dscp to set the DSCP value for IPv6 to use for outgoing FTP packets on an FTP server.
Use undo ftp server ipv6 dscp to restore the default.
Syntax
ftp server ipv6 dscp dscp-value
undo ftp server ipv6 dscp
Default
IPv6 uses the DSCP value 0 for outgoing FTP packets on an FTP server.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
dscp-value: Specifies a DSCP value in the range of 0 to 63.
Usage guidelines
The DSCP value is carried in the Traffic class field of an IPv6 packet, and it indicates the transmission
priority of the packet.
Examples
# Set the DSCP value for IPv6 to use for outgoing FTP packets to 30 on an FTP server.
<Sysname> system-view
[Sysname] ftp server ipv6 dscp 30
84
ftp timeout
Use ftp timeout to set the idle-timeout interval for FTP connections.
Use undo ftp timeout to restore the default.
Syntax
ftp timeout minute
undo ftp timeout
Default
The FTP idle-timeout interval is 30 minutes.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
minute: Specifies an idle-timeout interval in the range of 1 to 35791 minutes.
Usage guidelines
If no packet is exchanged on an FTP connection within the idle-timeout interval, the FTP server breaks the
FTP connection to release resources.
Examples
# Set the idle-timeout interval to 36 minutes.
<Sysname> system-view
[Sysname] ftp timeout 36
FTP client commands
Before executing FTP client configuration commands, make sure you have configured authorization
settings for users on the FTP server. Authorized operations include viewing the files in the working
directory, reading/downloading/uploading/renaming/removing files, and creating directories.
The FTP client commands in this section are supported by the device, but whether they can be executed
successfully depends on the FTP server.
The output in the examples of this section varies by FTP server type.
append
Use append to add the content of a file on the FTP client to a file on the FTP server.
Syntax
append localfile [ remotefile ]
85
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
localfile: Specifies a local file on the FTP client.
remotefile: Specifies a remote file on the FTP server.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Append the content of the local a.txt file to the b.txt file on the FTP server.
ftp> append a.txt b.txt
local: a.txt remote: b.txt
150 Connecting to port 50190
226 File successfully transferred
1657 bytes sent in 0.000736 seconds (2.15 Mbyte/s)
ascii
Use ascii to set the file transfer mode to ASCII.
Syntax
ascii
Default
The file transfer mode is binary.
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
FTP transfers files in either of the following modes:
•
Binary mode—Transfers non-text files.
•
ASCII mode—Transfers text files.
When the device operates as the FTP server, the transfer mode is determined by the FTP client. When the
device operates as the FTP client, you can set the transfer mode. The transfer mode is binary by default.
Examples
# Set the file transfer mode to ASCII.
86
ftp> ascii
200 TYPE is now ASCII
Related commands
binary
binary
Use binary to set the file transfer mode to binary, which is also called the flow mode.
Syntax
binary
Default
The file transfer mode is binary.
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
FTP transfers files in either of the following modes:
•
Binary mode—Transfers non-text files.
•
ASCII mode—Transfers text files.
When the device operates as the FTP server, the transfer mode is determined by the FTP client. When the
device operates as the FTP client, you can set the transfer mode. The default transfer mode is binary.
Examples
# Set the file transfer mode to binary.
ftp> binary
200 TYPE is now 8-bit binary
Related commands
ascii
bye
Use bye to terminate the connection to the FTP server and return to user view.
If no connection is established between the device and the remote FTP server, use this command to
return to user view.
Syntax
bye
87
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Examples
# Terminate the connection to the FTP server and return to user view.
ftp> bye
221-Goodbye. You uploaded 2 and downloaded 2 kbytes.
221 Logout.
<Sysname>
Related commands
quit
cd
Use cd to change the current working directory to another directory on the FTP server.
Syntax
cd { directory | .. | / }
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
directory: Specifies the name of the target directory in the format [drive:][/]path, where drive represents
the storage medium name, typically flash or cf. If the target directory does not exist, the cd command
does not change the current working directory. If no drive information is provided, the argument
represents a folder or subfolder in the current directory. For more information about the drive and path
arguments, see Fundamentals Configuration Guide.
..: Returns to the upper directory. Executing the cd .. command is the same as executing the cdup
command. If the current working directory is the FTP root directory, the cd .. command does not change
the current working directory.
/: Returns to the FTP root directory.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
The directory that can be accessed must be authorized by the FTP server.
Examples
# Change the working directory to the subdirectory logfile of the current directory.
ftp> cd logfile
88
250 OK. Current directory is /logfile
# Change the working directory to the subdirectory diagfile in the FTP root directory.
ftp> cd /diagfile
250 OK. Current directory is /diagfile
# Change the working directory to the upper directory of the current directory.
ftp> cd ..
250 OK. Current directory is /
# Change the working directory to the FTP root directory.
ftp> cd /
250 OK. Current directory is /
Related commands
•
cdup
•
pwd
cdup
Use cdup to enter the upper directory of the FTP server.
This command does not change the working directory if the current directory is the FTP root directory.
Syntax
cdup
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Change the working directory to the upper directory.
ftp> pwd
257 "/ftp/subdir" is your current location
ftp> cdup
250 OK. Current directory is /ftp
ftp> pwd
257 "/ftp" is your current location
Related commands
•
cd
•
pwd
89
close
Use close to terminate the connection to the FTP server without exiting FTP client view.
Syntax
close
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Terminate the connection to the FTP server without exiting the FTP client view.
ftp> close
221-Goodbye. You uploaded 0 and downloaded 0 kbytes.
221 Logout.
ftp>
Related commands
disconnect
debug
Use debug to enable or disable FTP client debugging.
Syntax
debug
Default
FTP client debugging is disabled.
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When FTP client debugging is enabled, executing this command disables FTP client debugging.
When FTP client debugging is disabled, executing this command enables FTP client debugging.
Examples
# Enable and then disable FTP client debugging.
90
ftp> debug
Debugging on (debug=1).
ftp> debug
Debugging off (debug=0).
# When the device acts as the FTP client, enable FTP client debugging and download file a.txt from the
current directory of the FTP server.
ftp> debug
Debugging on (debug=1).
ftp> get a.txt
local: a.txt remote: a.txt
---> EPRT |2|8::124|50198|
200 PORT command successful
---> RETR a.txt
150 Connecting to port 50198
226 File successfully transferred
1569 bytes received in 0.0104 seconds (147.2 kbyte/s)
Table 11 Command output
Field
Description
FTP command.
• 2—IPv6 (1 for IPv4).
• 8::124—IPv6 address of the FTP server.
• 50198—Port number of the FTP server.
---> EPRT |2|8::124|50198|
200 PORT command successful
Received FTP reply code. 200 represents the reply
code, defined in RFC 959.
---> RETR a.txt
Downloads file a.txt.
delete
Use delete to permanently delete a file on the FTP server.
Syntax
delete remotefile
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
remotefile: Specifies the name of a file on the FTP server.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
To perform this operation, you must have delete permission on the FTP server.
91
Examples
# Delete file b.txt.
ftp> delete b.txt
250 Deleted b.txt
dir
Use dir to display detailed information about the files and subdirectories in the current directory on the
FTP server.
Use dir remotefile to display detailed information about a file or directory on the FTP server.
Use dir remotefile localfile to save detailed information about a file or directory on the FTP server to a
local file.
Syntax
dir [ remotefile [ localfile ] ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
remotefile: Specifies the name of a file or directory on the FTP server.
localfile: Specifies the name of the local file used for saving the displayed information.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
In FTP client view, executing the dir command is the same as executing the ls command.
Examples
# Display detailed information about the files and subdirectories in the current directory on the FTP
server.
ftp> dir
150 Connecting to port 50201
-rwxr-xr-x
1 0
0
-rwxr-xr-x
1 0
0
1481 Jul
7 15:36 a.txt
drwxr-xr-x
2 0
0
8192 Jul
2 14:33 diagfile
drwxr-xr-x
3 0
0
8192 Jul
7 15:21 ftp
-rwxr-xr-x
1 0
0
drwxr-xr-x
2 0
0
drwxr-xr-x
2 0
-rwxr-xr-x
1 0
-rwxr-xr-x
0 Sep 27
0 Sep 27
2010 base.bin
2010 kernel.bin
8192 Jul
5 09:15 logfile
0
8192 Jul
2 14:33 seclog
0
40808448 Jul
1 0
0
3050 Jul
7 12:26 startup.cfg
-rwxr-xr-x
1 0
0
54674 Jul
4 09:24 startup.mdb
-rwxr-xr-x
1 0
0
1481 Jul
2 14:33 simware-cmw710-sys
tem-a1801.bin
92
7 12:34 x.cfg
226 11 matches total
# Save detailed information about file a.txt to s.txt.
ftp> dir a.txt s.txt
output to local-file: s.txt ? [Y/N]y
150 Connecting to port 50203
226-Glob: a.txt
# Display the content of file s.txt.
ftp> bye
221-Goodbye. You uploaded 0 and downloaded 2 kbytes.
221 Logout.
<Sysname> more s.txt
-rwxr-xr-x
1 0
0
1481 Jul
7 12:34 a.txt
Related commands
ls
disconnect
Use disconnect to terminate the connection to the FTP server without exiting FTP client view.
Syntax
disconnect
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Terminate the connection to the FTP server without exiting the FTP client view.
ftp> disconnect
221-Goodbye. You uploaded 0 and downloaded 0 kbytes.
221 Logout.
ftp>
Related commands
close
display ftp client source
Use display ftp client source to display the source address settings on the FTP client.
Syntax
display ftp client source
93
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display the source address settings on the FTP client.
<Sysname> display ftp client source
The source IP address of the FTP client is 1.1.1.1.
The source IPv6 address of the FTP client is 2001::1.
ftp
Use ftp to log in to an FTP server and enter FTP client view.
Syntax
ftp [ ftp-server [ service-port ] [ vpn-instance vpn-instance-name ] [ dscp dscp-value | source { interface
interface-type interface-number | ip source-ip-address } ] ] *
Views
User view
Parameters
ftp-server: Specifies the IPv4 address or host name of an FTP server. A host name can be a
case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits,
hyphens (-), underscores (_), and dots (.).
service-port: Specifies the TCP port number of the FTP server, in the range of 0 to 65535. The default
value is 21.
vpn-instance vpn-instance-name: Specifies the VPN instance to which the FTP server belongs. The
vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the FTP server belongs to
the public network, do not specify this option.
dscp dscp-value: Specifies the DSCP value for IPv4 to use in outgoing FTP packets to indicate the packet
transmission priority. The value range is 0 to 63. The default is 0.
source { interface interface-type interface-number | ip source-ip-address }: Specifies the source address
used to establish the FTP connection.
•
interface interface-type interface-number: Specifies an interface by its type and number. The
device will use the interface's primary IPv4 address as the source address. To establish the FTP
connection successfully, make sure the interface is up and has the primary IPv4 address configured.
•
ip source-ip-address: Specifies an IPv4 address. To establish the FTP connection successfully, make
sure this address is the IPv4 address of an interface in up state on the device.
Usage guidelines
This command is only applicable to IPv4 networks.
94
If no parameters are specified, this command enters the FTP client view without logging in to the FTP
server.
If the server parameters are specified, you are prompted to enter the username and password for logging
in to the FTP server.
Examples
# Log in to the FTP server 192.168.0.211. Use the source IPv4 address of 192.168.0.212 for outgoing FTP
packets.
<Sysname>ftp 192.168.0.211 source ip 192.168.0.212
Press CTRL+C to abort.
Connected to 192.168.0.211 (192.168.0.211).
220 WFTPD 2.0 service (by Texas Imperial Software) ready for new user
User (192.168.0.211:(none)): abc
331 Give me your password, please
Password:
230 Logged in successfully
Remote system type is MSDOS.
200 Type is Image (Binary)
ftp>
ftp client ipv6 source
Use ftp client ipv6 source to specify the source IPv6 address for FTP packets sent to the IPv6 FTP server.
Use undo ftp client ipv6 source to restore the default.
Syntax
ftp client ipv6 source { interface interface-type interface-number | ipv6 source-ipv6-address }
undo ftp client ipv6 source
Default
No source address is specified for FTP packets sent to the IPv6 FTP server. The device automatically
selects a source IPv6 address as defined in RFC 3484.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. The device will
use the interface's IPv6 address as the source address. For successful FTP packet transmission, make sure
the interface is up and is configured with an IPv6 address.
ipv6 source-ipv6-address: Specifies an IPv6 address. For successful FTP packet transmission, make sure
this address is the IPv6 address of an interface in up state on the device.
Usages guidelines
If you execute this command multiple times, the most recent configuration takes effect.
95
The source address specified with the ftp ipv6 command takes precedence over the source address
specified with the ftp client ipv6 source command.
The source address specified with the ftp client ipv6 source command applies to all FTP connections. The
source address specified with the ftp ipv6 command applies only to the current FTP connection.
Examples
# Specify the source IPv6 address of 2000::1 for outgoing FTP packets.
<Sysname> system–view
[Sysname] ftp client ipv6 source ipv6 2000::1
Related commands
ftp ipv6
ftp client source
Use ftp client source to specify the source IPv4 address for FTP packets sent to the IPv4 FTP server.
Use undo ftp client source to restore the default.
Syntax
ftp client source { interface interface-type interface-number | ip source-ip-address }
undo ftp client source
Default
No source IPv4 address is specified for FTP packets sent to the IPv4 FTP server. The device uses the
primary IPv4 address of the output interface for the route to the server as the source address.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. The device will
use the interface's primary IPv4 address as the source address. For successful FTP packet transmission,
make sure the interface is up and has the primary IPv4 address configured.
ip source-ip-address: Specifies an IPv4 address. For successful FTP packet transmission, make sure this
address is the IPv4 address of an interface in up state on the device.
Usages guidelines
If you execute this command multiple times, the most recent configuration takes effect.
The source address specified with the ftp command takes precedence over the source address specified
with the ftp client source command.
The source address specified with the ftp client source command applies to all FTP connections. The
source address specified with the ftp command applies only to the current FTP connection.
Examples
# Specify the source IPv4 address of 192.168.20.222 for outgoing FTP packets.
96
<Sysname> system-view
[Sysname] ftp client source ip 192.168.20.222
Related commands
ftp
ftp ipv6
Use ftp ipv6 to log in to an FTP server and enter FTP client view.
Syntax
ftp ipv6 [ ftp-server [ service-port ] [ vpn-instance vpn-instance-name ] [ dscp dscp-value | source { ipv6
source-ipv6-address | interface interface-type interface-number } ] * [ -i interface-type
interface-number ] ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
ftp-server: Specifies the IPv6 address or host name of an FTP server. A host name can be a
case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits,
hyphens (-), underscores (_), and dots (.).
service-port: Specifies the TCP port number of the FTP server, in the range of 0 to 65535. The default
value is 21.
dscp dscp-value: Specifies the DSCP value for IPv6 to use in outgoing FTP packets to indicate the packet
transmission priority. The value range is 0 to 63. The default is 0.
source { ipv6 source-ipv6-address | interface interface-type interface-number }: Specifies the source
address used to establish the FTP connection.
•
interface interface-type interface-number: Specifies an interface by its type and number. The device
will use the interface's IPv6 address as the source address. To establish the FTP connection
successfully, make sure the interface is up and is configured with an IPv6 address.
•
ipv6 source-ipv6-address: Specifies an IPv6 address. To establish the FTP connection successfully,
make sure this address is the IPv6 address of an interface in up state on the device.
vpn-instance vpn-instance-name: Specifies the VPN instance to which the FTP server belongs. The
vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the FTP server belongs to
the public network, do not specify this option.
-i interface-type interface-number: Specifies an output interface by its type and number. This option can
be used only when the FTP server address is a link local address and the specified output interface has
a link local address. For more information about link local addresses, see Layer 3—IP Services
Configuration Guide.
Usage guidelines
This command is only applicable to IPv6 networks.
If no parameters are specified, this command enters the FTP client view.
97
If the FTP server parameters are specified, you are prompted to enter the username and password for
logging in to the FTP server.
Examples
# Log in to the FTP server 2000::154.
<Sysname>ftp ipv6 2000::154
Press CTRL+C to abort.
Connected to 2000::154 (2000::154).
220 FTP service ready.
User (2000::154): root
331 Password required for root.
Password:
230 User logged in
Remote system type is HP
get
Use get to download a file from the FTP server and save the file.
Syntax
get remotefile [ localfile ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
remotefile: Specifies the name of the file to be downloaded.
localfile: Specifies a name for the downloaded file.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
To save the downloaded file to the working directory accessed by the ftp command, the localfile
argument must specify a file name such as a.cfg. If you do not provide the localfile argument, the
downloaded file uses its original name.
To save the downloaded file to some other directory, the localfile argument must specify the target
directory plus the file name such as flash:/subdirectory/a.cfg. Otherwise, the command fails to take
effect.
Examples
# Download file a.txt and save it as b.txt in the working directory accessed by the ftp command.
ftp> get a.txt b.txt
local: b.txt remote: a.txt
150 Connecting to port 47457
226 File successfully transferred
1569 bytes received in 0.00527 seconds (290.6 kbyte/s)
98
# Download file a.txt to the folder test from the working directory accessed by the ftp command.
ftp> get a.txt flash:/test/b.txt
local: flash:/test/b.txt remote: a.txt
150 Connecting to port 47457
226 File successfully transferred
1569 bytes received in 0.00527 seconds (290.6 kbyte/s)
# In standalone mode, download file a.txt to the Flash root directory of the standby MPU (in slot 16) and
save it as c.txt.
ftp> get a.txt slot16#flash:/c.txt
local: slot16#flash:/c.txt remote: a.txt
150 Connecting to port 47460
226 File successfully transferred
1569 bytes received in 0.0564 seconds (27.2 kbyte/s)
# In IRF mode, download file a.txt to the Flash root directory of the MPU that resides in slot 17 of member
device 1. Save it as c.txt.
ftp> get a.txt chassis1#slot17#flash:/c.txt
local: chassis1#slot17#flash:/c.txt remote: a.txt
150 Connecting to port 47460
226 File successfully transferred
1569 bytes received in 0.0564 seconds (27.2 kbyte/s)
Related commands
put
help
Use help to display all commands supported by an FTP client.
Use help command-name to display the help information of a command.
Syntax
help [ command-name ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
command-name: Specifies a command supported by the FTP client.
Usage guidelines
In FTP client view, executing the help command is the same as entering?.
Examples
# Display all commands supported by the FTP client.
ftp> help
Commands may be abbreviated.
Commands are:
99
append
delete
ls
quit
rmdir
ascii
debug
mkdir
reget
status
binary
dir
newer
rstatus
system
bye
disconnect
open
rhelp
user
cd
get
passive
rename
verbose
cdup
help
put
reset
?
close
lcd
pwd
restart
# Display the help information for the dir command.
ftp> help dir
dir
list contents of remote directory
Related commands
?
lcd
Use lcd to display the local working directory of the FTP client.
Use lcd directory to change the local working directory of the FTP client to the specified directory.
Use lcd / to change the local working directory of the FTP client to the local root directory.
Syntax
lcd [ directory | / ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
directory: Specifies a local directory of the FTP client. There must be a slash sign (/) before the name of
the storage medium, for example, /flash:/logfile.
/: Specifies the root directory of the FTP client.
Examples
# Display the local working directory.
ftp> lcd
Local directory now /flash:
# Change the local working directory to flash:/logfile.
ftp> lcd /flash:/logfile
Local directory now /flash:/logfile
100
ls
Use ls to display detailed information about the files and subdirectories under the current directory on the
FTP server.
Use ls remotefile to display detailed information about a file or directory on the FTP server.
Use ls remotefile localfile to save detailed information about a file or directory on the FTP server to a local
file.
Syntax
ls [ remotefile [ localfile ] ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
remotefile: Specifies the file name or directory on the FTP server.
localfile: Specifies the local file used to save the displayed information.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
In FTP client view, executing the ls command is the same as executing the dir command.
Examples
# Display detailed information about the files and subdirectories under the current directory on the FTP
server.
ftp> ls
150 Connecting to port 50201
-rwxr-xr-x
1 0
0
-rwxr-xr-x
1 0
0
1481 Jul
7 15:36 a.txt
drwxr-xr-x
2 0
0
8192 Jul
2 14:33 diagfile
drwxr-xr-x
3 0
0
8192 Jul
7 15:21 ftp
-rwxr-xr-x
1 0
0
drwxr-xr-x
2 0
0
drwxr-xr-x
2 0
-rwxr-xr-x
1 0
-rwxr-xr-x
0 Sep 27
0 Sep 27
2010 base.bin
2010 kernel.bin
8192 Jul
5 09:15 logfile
0
8192 Jul
2 14:33 seclog
0
40808448 Jul
1 0
0
3050 Jul
7 12:26 startup.cfg
-rwxr-xr-x
1 0
0
54674 Jul
4 09:24 startup.mdb
-rwxr-xr-x
1 0
0
1481 Jul
2 14:33 simware-cmw710-sys
tem-a1801.bin
226 11 matches total
# Save detailed information about file a.txt to s.txt.
ftp> ls a.txt s.txt
output to local-file: s.txt ? [Y/N]y
150 Connecting to port 50203
101
7 12:34 x.cfg
226-Glob: a.txt
# Display the content of file s.txt.
ftp> bye
221-Goodbye. You uploaded 0 and downloaded 2 kbytes.
221 Logout.
<Sysname> more s.txt
-rwxr-xr-x
1 0
0
1481 Jul
7 12:34 a.txt
Related commands
dir
mkdir
Use mkdir to create a subdirectory in the current directory on the FTP server.
Syntax
mkdir directory
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
directory: Specifies the name of the directory to be created.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
You must have permission to perform this operation on the FTP server.
Examples
# Create subdirectory newdir in the current directory of the remote FTP server.
ftp> mkdir newdir
257 "newdir" : The directory was successfully created
newer
Use newer to update a local file by using a remote file on the FTP server.
Syntax
newer remotefile [ localfile ]
Views
FTP client view
Predefined user roles
network-admin
102
mdc-admin
Parameters
remotefile: Specifies the name of the remote file on the FTP server.
localfile: Specifies the name of the local file to be updated.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
If the local file does not exist, this command downloads the file from the FTP server and saves it locally.
If the remote file on the FTP server is not newer than the local file, this command does not update the local
file.
Examples
# Update the local file with the file a.txt on the FTP server.
ftp> newer a.txt
local: a.txt remote: a.txt
150 Connecting to port 63513
226 File successfully transferred
1573 bytes received in 0.0293 seconds (52.3 kbyte/s)
open
Use open to log in to the FTP server in FTP client view.
Syntax
open server-address [ service-port ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
server-address: Specifies the IP address or host name of the FTP server.
service-port: Specifies the TCP port number of the FTP server, in the range of 0 to 65535. The default
value is 21.
Usage guidelines
After you issue this command, the system will prompt you to enter the username and password.
After you log in to one FTP server, you must disconnect from the server before you can use the open
command to log in to another server.
Examples
# In FTP client view, log in to the FTP server 192.168.40.7.
<Sysname>ftp
ftp> open 192.168.40.7
Press CTRL+C to abort.
103
Connected to 192.168.40.7 (192.168.40.7).
220 FTP service ready.
User (192.168.40.7:(none)): root
331 Password required for root.
Password:
230 User logged in.
Remote system type is HP.
ftp>
passive
Use passive to set the FTP operation mode to passive.
Syntax
passive
Default
The FTP operation mode is passive.
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
FTP can operate in either of the following modes:
•
Active mode—The FTP server initiates the TCP connection.
•
Passive mode—The FTP client initiates the TCP connection.
You can use this command multiple times to change between active and passive modes.
This command is mainly used together with a firewall to control FTP session establishment between
private network users and public network users.
Examples
# Set the FTP operation mode to passive.
ftp> passive
Passive mode on.
ftp> passive
Passive mode off.
put
Use put to upload a file on the client to the remote FTP server.
Syntax
put localfile [ remotefile ]
104
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
localfile: Specifies the name of the local file to be uploaded.
remotefile: Specifies the file name for saving the uploaded file on the FTP server.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
To upload a file in the working directory accessed by the ftp command, the localfile argument must
specify a file name such as a.cfg.
To upload a file in some other directory, the localfile argument must specify the target directory plus the
file name such as flash:/subdirectory/a.cfg. Otherwise, the command fails to take effect.
Examples
# Upload the file a.txt in the working directory accessed by the ftp command. Save the file as b.txt on
the FTP server.
ftp> put a.txt b.txt
local: a.txt remote: b.txt
150 Connecting to port 47461
226 File successfully transferred
1569 bytes sent in 0.000671 seconds (2.23 Mbyte/s)
# Upload the file a.txt in the folder test from the working directory accessed by the ftp command. Save
the file as b.txt on the FTP server.
ftp> put flash:/test/a.txt b.txt
local: flash:/test/a.txt remote: b.txt
150 Connecting to port 47461
226 File successfully transferred
1569 bytes sent in 0.000671 seconds (2.23 Mbyte/s)
# In standalone mode, upload the file a.txt in the root directory of the storage medium on the standby
MPU (in slot 16). Save the file as b.txt on the FTP server.
ftp> put slot16#flash:/test/a.txt b.txt
local: slot16#flash:/test/a.txt remote: b.txt
150 Connecting to port 47461
226 File successfully transferred
1569 bytes sent in 0.000671 seconds (2.23 Mbyte/s)
# In IRF mode, upload the file a.txt in the Flash root directory of MPU 1 (in slot 17) of member device 1.
Save the file as b.txt on the FTP server.
ftp> put chassis1#slot17#flash:/test/a.txt b.txt
local: chassis1#slot17#flash:/test/a.txt remote: b.txt
150 Connecting to port 47461
226 File successfully transferred
1569 bytes sent in 0.000671 seconds (2.23 Mbyte/s)
105
Related commands
get
pwd
Use pwd to display the currently accessed directory on the FTP server.
Syntax
pwd
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Display the currently accessed directory on the remote FTP server.
ftp> cd subdir
250 OK. Current directory is /subdir
ftp> pwd
257 "/subdir" is your current location
quit
Use quit to terminate the connection to the FTP server and return to user view.
Syntax
quit
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Examples
# Terminate the connection to the FTP server and return to user view
ftp> quit
221-Goodbye. You uploaded 0 and downloaded 0 kbytes.
221 Logout.
<Sysname>
Related commands
bye
106
reget
Use reget to get the missing part of a file from the FTP server.
Syntax
reget remotefile [ localfile ]
Views
FTP client view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
remotefile: Specifies the name of the file on the FTP server.
localfile: Specifies the name of the local file.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
If a file download is not completed due to network or storage space problems, use this command to get
the part that has not been downloaded yet.
Examples
# Get the part of the s.bin file that is missing due to transmission interruption.
ftp> reget s.bin
local: s.bin remote: s.bin
350 Restarting at 1749706
150-Connecting to port 47429
150 38143.3 kbytes to download
226 File successfully transferred
39058742 bytes received in 66.2 seconds (576.1 kbyte/s)
rename
Use rename to rename a file.
Syntax
rename [ oldfilename [ newfilename ] ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
107
Parameters
oldfilename: Specifies the original file name.
newfilename: Specifies the new file name.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Rename the file a.txt as b.txt.
•
Method 1:
ftp> rename
(from-name) a.txt
(to-name) b.txt
350 RNFR accepted - file exists, ready for destination
250 File successfully renamed or moved
•
Method 2:
ftp> rename a.txt
(to-name) b.txt
350 RNFR accepted - file exists, ready for destination
250 File successfully renamed or moved
•
Method 3:
ftp> rename a.txt b.txt
350 RNFR accepted - file exists, ready for destination
250 File successfully renamed or moved
reset
Use reset to clear the reply information received from the FTP server in the buffer.
Syntax
reset
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Examples
# Clear the reply information received from the FTP server.
ftp> reset
restart
Use restart to specify the marker to retransmit a file.
108
Syntax
restart marker
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
marker: Specifies the retransmit marker.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Support for this command depends on the FTP server.
Examples
# Retransmit the file h.c (82 bytes) from 2 bytes.
ftp> restart 2
restarting at 2. execute get, put or append to initiate transfer
ftp> put h.c h.c
local: h.c remote: h.c
350 Restart position accepted (2).
150 Ok to send data.
226 File receive OK.
80 bytes sent in 0.000445 seconds (175.6 kbyte/s)
ftp> dir
150 Here comes the directory listing.
-rw-r--r--
1 0
0
80 Jul 18 02:58 h.c
rhelp
Use rhelp to display the FTP-related commands supported by the FTP server.
Use rhelp protocol-command to display the help information of an FTP-related command supported by
the FTP server.
Syntax
rhelp [ protocol-command ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
protocol-command: Specifies an FTP-related command.
109
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Display the FTP-related commands supported by the FTP.
ftp> rhelp
214-The following FTP commands are recognized
USER PASS NOOP QUIT SYST TYPE
HELP CWD
XCWD PWD
CDUP XCUP
XPWD LIST NLST MLSD PORT EPRT
PASV EPSV REST RETR STOR APPE
DELE MKD
XMKD RMD
XRMD ABOR
SIZE RNFR RNTO
4 UNIX Type: L8
Table 12 Command output
Field
Description
USER
Username, corresponding to the xx command in FTP client
view.
PASS
Password.
NOOP
Null operation.
SYST
System parameters.
TYPE
Request type.
CWD
Changes the current working directory.
XCWD
Extended command with the meaning of CWD.
PWD
Prints the working directory.
CDUP
Changes the directory to the upper directory.
XCUP
Extended command with the meaning of CDUP.
XPWD
Extended command with the meaning of PWD.
LIST
Lists files.
NLST
Lists brief file description.
MLSD
Lists file content.
PORT
Active mode (IPv4).
EPRT
Active mode (IPv6).
PASV
Passive mode (IPv4).
EPSV
Passive mode (IPv6).
REST
Restarts.
RETR
Downloads files.
STOR
Uploads files.
APPE
Appends uploading.
DELE
Deletes files.
110
Field
Description
MKD
Creates folders.
XMKD
Extended command with the meaning of MKD.
RMD
Removes folders.
XRMD
Extended command with the meaning of RMD.
ABOR
Aborts the transmission.
SIZE
Size of the transmission file.
RNFR
Original name.
RNTO
New name.
rmdir
Use rmdir to permanently delete a directory on the FTP server.
Syntax
rmdir directory
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
directory: Specifies the name of a directory on the remote FTP server.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
To perform this operation, you must have delete permission on the FTP server.
Delete all files and subdirectories in a directory before you delete the directory. For more information
about how to delete files, see the delete command.
Executing the rmdir command also deletes the files in the recycle bin of the specified directory.
Examples
# Delete the empty directory subdir1.
ftp>rmdir subdir1
250 The directory was successfully removed
Related commands
delete
rstatus
Use rstatus to display FTP server status.
111
Use rstatus remotefile to display detailed information about a directory or file on the FTP server.
Syntax
rstatus [ remotefile ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
remotefile: Specifies a directory or file on the FTP server.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Support for this command depends on the FTP server.
Examples
# Display FTP server status.
ftp> rstatus
211-FTP server status:
Connected to 192.168.20.177
Logged in as root
TYPE: ASCII
No session bandwidth limit
Session timeout in seconds is 300
Control connection is plain text
Data connections will be plain text
At session startup, client count was 1
vsFTPd 2.0.6 - secure, fast, stable
211 End of status
Table 13 Command output
Filed
Description
211-FTP server status:
Beginning of the display of FTP server status, where
211 specifies the FTP command.
Connected to 192.168.20.177
IP address of the FTP client.
Logged in as root
Login username root.
TYPE: ASCII
File transfer mode ASCII.
Session timeout in seconds is 300
Timeout interval is 300 seconds.
Control connection is plain text
Control connection type is plain text.
Data connections will be plain text
Data connection type is plain text.
At session startup, client count was 1
FTP connection number is 1.
vsFTPd 2.0.6 - secure, fast, stable
FTP version is 2.0.6.
112
Filed
Description
211 End of status
End of the display of FTP server status.
# Display file a.txt.
ftp> rstatus a.txt
213-Status follows:
-rw-r--r--
1 0
0
80 Jul 18 02:58 a.txt
213 End of status
Table 14 Command output
Field
Description
213-Status follows:
Beginning of the display of the file, where 213 specifies the FTP command.
-rw-r--r--
•
•
•
•
•
•
•
The first bit specifies the file type.
-—Common.
B—Block.
c—Character.
d—Directory.
l—Symbol connection file.
p—Pipe.
s—socket.
The second bit through the tenth bit are divided into three groups. Each group
contains three characters, representing the access permission of the owner,
group, and other users.
•
•
•
•
-—No permission.
r—Read permission.
w—Write permission.
x—Execution permission.
1
Number of connections.
0
Name of the file owner.
0
Group number of the file owner.
80
File size, in bytes.
Jul 18 02:58
Date and time when the file was most recently modified.
a.txt
File name.
213 End of status
End of the display of the file information.
status
Use status to display FTP status.
Syntax
status
Views
FTP client view
113
Predefined user roles
network-admin
mdc-admin
Examples
# Display FTP status.
ftp> status
Connected to 192.168.1.56.
No proxy connection.
Not using any security mechanism.
Mode: stream; Type: ascii; Form: non-print; Structure: file
Verbose: on; Bell: off; Prompting: on; Globbing: off
Store unique: off; Receive unique: off
Case: off; CR stripping: on
Ntrans: off
Nmap: off
Hash mark printing: off; Use of PORT cmds: on
Table 15 Command output
Field
Description
Connected to 192.168.1.56.
IP address of the FTP server that is connected to the FTP
client.
Verbose: on; Bell: off; Prompting: on; Globbing: off
Displays debugging information.
Store unique: off; Receive unique: off
The name of the file on the FTP server is unique and the
name of the local file is unique.
Case: off; CR stripping: on
Does not support obtaining multiple files once and
deletes "\r" when downloading text files.
Ntrans: off
Does not use the input-output transmission table.
Nmap: off
The file name does not use the input-to-output mapping
template.
Hash mark printing: off; Use of PORT cmds: on
Does not end with a pound sign (#) and uses "PORT"
data transmission.
system
Use system to display the system information of the FTP server.
Syntax
system
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
114
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Display the system information of the FTP server.
ftp> system
5 UNIX Type: L8
user
Use user to change to another user account after login.
Syntax
user username [ password ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Parameters
username: Specifies the username of the target user account.
password: Specifies the password of the target user account.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
The username and password of the target user account must have already been configured. Otherwise,
the user account change operation fails and the FTP connection is closed.
Examples
# After logging in to the FTP server, use the username ftp and password 123456 to log in again to the FTP
server.
•
Method 1:
ftp> user ftp 123456
331 Password required for ftp.
230 User logged in.
•
Method 2:
ftp> user ftp
331 Password required for ftp.
Password:
230 User logged in.
verbose
Use verbose to enable or disable the device to display detailed information about FTP operations.
115
Syntax
verbose
Default
The device displays detailed information about FTP operations.
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
The verbose command takes effect only for the current FTP session. It is lost after the session is
disconnected.
Examples
# Disable the device from displaying detailed information about FTP operations.
ftp> verbose
Verbose mode off.
# Execute the get command.
ftp> get a.cfg 1.cfg
# Enable the device to display detailed information about FTP operations.
ftp> verbose
Verbose mode on.
# Execute the get command.
ftp> get a.cfg 2.cfg
227 Entering Passive Mode (192,168,1,58,68,14)
150-Accepted data connection
150 The computer is your friend. Trust the computer
226 File successfully transferred
3796 bytes received in 0.00762 seconds (486.5 kbyte/s)
?
Use ? to display all commands supported by an FTP client.
Use ? command-name to display the help information for a command.
Syntax
? [ command-name ]
Views
FTP client view
Predefined user roles
network-admin
mdc-admin
116
Parameters
command-name: Specifies a command supported by the FTP client.
Usage guidelines
In FTP client view, entering ? is the same as executing the help command.
Examples
# Display all commands supported by the FTP client.
ftp> ?
Commands may be abbreviated.
Commands are:
append
delete
ls
quit
rmdir
ascii
debug
mkdir
reget
status
binary
dir
newer
rstatus
system
bye
disconnect
open
rhelp
user
cd
get
passive
rename
verbose
cdup
help
put
reset
?
close
lcd
pwd
restart
# Display the help information for the dir command.
ftp> ? dir
dir
list contents of remote directory
Related commands
help
117
TFTP commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see Security Configuration Guide.
TFTP is not supported in FIPS mode.
tftp
Use tftp to download a file from a TFTP server or upload a file to a TFTP server in an IPv4 network.
Syntax
tftp tftp-server { get | put | sget } source-filename [ destination-filename ] [ vpn-instance
vpn-instance-name ] [ dscp dscp-value | source { interface interface-type interface-number | ip
source-ip-address } ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
tftp-server: Specifies the IPv4 address or host name of a TFTP server. The host name can be a
case-insensitive string of 1 to 253 characters and can contain only letters, digits, hyphens (-), underscores
(_), and dots (.).
get: Downloads a file and writes the file directly to the destination folder. If the destination folder already
has a file using the same name, the system deletes the existing file before starting the download
operation. The existing file is permanently deleted even if the download operation fails.
put: Uploads a file.
sget: Downloads a file and saves the file to memory before writing it to the destination folder. The system
starts to write the file to the destination folder only after the file is downloaded and saved to memory
successfully. If the destination folder already has a file using the same name, the system overwrites the
existing file. If the download or save-to-memory operation fails, the existing file in the destination folder
is not overwritten.
source-filename: Specifies the source file name, a case-insensitive string of 1 to 1 to 255 characters.
destination-filename: Specifies the destination file name, a case-insensitive string of 1 to 255 characters.
If this argument is not specified, the file uses the source file name.
vpn-instance vpn-instance-name: Specifies the VPN instance to which the TFTP server belongs. The
vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the TFTP server belongs to
the public network, do not specify this option.
dscp dscp-value: Specifies the DSCP value for IPv4 to use for outgoing TFTP packets to indicate the packet
transmission priority. The value range is 0 to 63. The default is 0.
118
source { interface interface-type interface-number | ip source-ip-address }: Specifies the source address
for outgoing TFTP packets. If you do not specify this option, the device uses the primary IPv4 address of
the output interface for the route to the TFTP server as the source address.
•
interface interface-type interface-number: Specifies an interface by its type and number. The device
will use the interface's primary IPv4 address as the source IPv4 address. For successful TFTP packet
transmission, make sure the interface is up and has the primary IPv4 address configured.
•
ip source-ip-address: Specifies an IPv4 address. For successful TFTP packet transmission, make sure
this address is the IPv4 address of an interface in up state on the device.
Usages guidelines
The source address specified with the tftp command takes precedence over the source address specified
with the tftp client source command.
The source address specified with the tftp client source command applies to all TFTP connections. The
source address specified with the tftp command applies only to the current TFTP connection.
Examples
# Download the new.bin file from the TFTP server at 192.168.1.1 and save it as new.bin.
<Sysname> tftp 192.168.1.1 get new.bin
Press CTRL+C to abort.
% Total
100 13.9M
% Received % Xferd
100 13.9M
0
0
Average Speed
Time
Dload
Total
1206k
Upload
0
0:00:11
Time
Spent
0:00:11
Time
Current
Left
Speed
--:--:-- 1206k
<System>
Table 16 Command output
Field
Description
%
Percentage of file transmission progress.
Total
Size of files to be transmitted, in bytes.
%
Percentage of received file size to total file size.
Received
Received file size, in bytes.
%
Percentage of sent file size to total file size.
Xferd
Sent file size, in bytes.
Average Dload
Average download speed, in bps.
Speed Upload
Average upload speed, in bps.
Related commands
tftp client source
tftp client ipv6 source
Use tftp client ipv6 source to specify the source IPv6 address for TFTP packets sent to the IPv6 TFTP server.
Use undo tftp client ipv6 source to restore the default.
Syntax
tftp client ipv6 source { interface interface-type interface-number | ipv6 source-ipv6-address }
119
undo tftp client ipv6 source
Default
No source address is specified for TFTP packets sent to the IPv6 TFTP server . The device automatically
selects a source IPv6 address as defined in RFC 3484.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. The device will
use the interface's IPv6 address as the source address. For successful TFTP packet transmission, make
sure the interface is up and is configured with an IPv6 address.
ipv6 source-ipv6-address: Specifies an IPv6 address . For successful TFTP packet transmission, make sure
this address is the IPv6 address of an interface in up state on the device.
Usages guidelines
If you execute this command multiple times, the most recent configuration takes effect.
The source address specified with the tftp ipv6 command takes precedence over the source address
specified with the tftp client ipv6 source command.
The source address specified with the tftp client ipv6 source command applies to all TFTP connections.
The source address specified with the tftp ipv6 command applies only to the current TFTP connection.
Examples
# Specify the source IPv6 address of 2000::1 for outgoing TFTP packets.
<Sysname> system–view
[Sysname] tftp client ipv6 source ipv6 2000::1
Related commands
tftp ipv6
tftp client source
Use tftp client source to specify the source IPv4 address for TFTP packets sent to the IPv4 TFTP server.
Use undo tftp client source to restore the default.
Syntax
tftp client source { interface interface-type interface-number | ip source-ip-address }
undo tftp client source
Default
No source IPv4 address is specified for TFTP packets sent to the IPv4 TFTP server. The device uses the
primary IPv4 address of the output interface for the route to the server as the source address.
Views
System view
120
Predefined user roles
network-admin
mdc-admin
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. The device will
use the interface's primary IPv4 address as the source address. For successful TFTP packet transmission,
make sure the interface is up and has the primary IPv4 address configured.
ip source-ip-address: Specifies an IPv4 address. For successful TFTP packet transmission, make sure this
address is the IPv4 address of an interface in up state on the device.
Usages guidelines
If you execute this command multiple times, the most recent configuration takes effect.
The source address specified with the tftp command takes precedence over the source address specified
with the tftp client source command.
The source address specified with the tftp client source command applies to all TFTP connections. The
source address specified with the tftp command applies only to the current TFTP connection.
Examples
# Specify the source IP address of 192.168.20.222 for outgoing TFTP packets.
<Sysname> system-view
[Sysname] tftp client source ip 192.168.20.222
Related commands
tftp
tftp ipv6
Use tftp ipv6 to download a file from a TFTP server or upload a file to a TFTP server in an IPv6 network.
Syntax
tftp ipv6 tftp--server [ -i interface-type interface-number ] { get | put | sget } source-filename
[ destination-filename ] [ vpn-instance vpn-instance-name ] [ dscp dscp-value | source { interface
interface-type interface-number | ipv6 source-ipv6-address } ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
tftp--server: Specifies the IPv6 address or host name of a TFTP server. The host name can be a
case-insensitive string of 1 to 253 characters and can contain only letters, digits, hyphens (-), underscores
(_), and dots (.).
-i interface-type interface-number: Specifies an output interface by its type and number. This option can
be used only when the TFTP server address is a link local address and the specified output interface has
a link local address. For link local address configuration, see Layer 3—IP Services Configuration Guide.
121
get: Downloads a file and writes the file directly to the destination folder. If the destination folder already
has a file using the same name, the system deletes the existing file before starting the download
operation. The existing file is permanently deleted even if the download operation fails.
put: Uploads a file.
sget: Downloads a file and saves the file to memory before writing it to the destination folder. The system
starts to write the file to the destination folder only after the file is downloaded and saved to memory
successfully. If the destination folder already has a file using the same name, the system overwrites the
existing file. If the download or save-to-memory operation fails, the existing file in the destination folder
is not overwritten.
source-file: Specifies the source file name, a case-insensitive string of 1 to 255 characters.
destination-file: Specifies the destination file name, a case-insensitive string of 1 to 255 characters. If this
argument is not specified, the file uses the source file name.
vpn-instance vpn-instance-name: Specifies the VPN instance to which the TFTP server belongs. The
vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the TFTP server belongs to
the public network, do not specify this option.
dscp dscp-value: Specifies the DSCP value for IPv6 to use in outgoing TFTP packets to indicate the packet
transmission priority. The value range is 0 to 63. The default is 0.
source { interface interface-type interface-number | ipv6 source-ipv6-address }: Specifies the source
address for outgoing TFTP packets. If you do not specify this option, the device uses the primary IPv6
address of the route for the route to the TFTP server as the source address.
•
interface interface-type interface-number: Specifies an interface by its type and number. The device
will use the interface's IPv6 address as the source IPv6 address. For successful TFTP packet
transmission, make sure the interface is up and is configured with an IPv6 address.
•
ipv6 source-ipv6-address: Specifies an IPv6 address. For successful TFTP packet transmission, make
sure this address is the IPv6 address of an interface in up state on the device.
Usages guidelines
The source address specified with the tftp ipv6 command takes precedence over the source address
specified with the tftp client ipv6 source command.
The source address specified with the tftp client ipv6 source command applies to all TFTP connections.
The source address specified with the tftp ipv6 command applies only to the current TFTP connection.
Examples
# Download the new.bin file from the TFTP server at 2001::1 and save it as new.bin.
<Sysname> tftp ipv6 2001::1 get new.bin new.bin
Press CTRL+C to abort.
% Total
100 13.9M
% Received % Xferd
100 13.9M
0
0
Average Speed
Time
Time
Time
Current
Dload
Total
Spent
Left
Speed
1206k
Upload
0
0:00:11
0:00:11
--:--:-- 1206k
For more information about the command output, see Table 16.
tftp-server acl
Use tftp-server acl to use an ACL to control the device's access to TFTP servers in an IPv4 network.
Use undo tftp-server acl to restore the default.
122
Syntax
tftp-server acl acl-number
undo tftp-server acl
Default
No ACL is used to control the device's access to TFTP servers.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
acl-number: Specifies the number of a basic ACL, in the range of 2000 to 2999.
Usages guidelines
You can use an ACL to deny or permit the device's access to specific TFTP servers.
Examples
# Allow the device to access only the TFTP server at 1.1.1.1.
<Sysname> System-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 1.1.1.1 0
[Sysname-acl-basic-2000] quit
[Sysname] tftp-server acl 2000
tftp-server ipv6 acl
Use tftp-server ipv6 acl to use an ACL to control the device's access to TFTP servers in an IPv6 network.
Use undo tftp-server ipv6 acl to restore the default.
Syntax
tftp-server ipv6 acl acl-number
undo tftp-server ipv6 acl
Default
No ACL is used to control the device's access to TFTP servers.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
acl-number: Specifies the number of a basic ACL, in the range of 2000 to 2999.
123
Usages guidelines
You can use an ACL to deny or permit the device's access to specific TFTP servers.
Examples
# Allow the device to access only the TFTP server at 2001::1.
<Sysname> System-view
[Sysname] acl ipv6 number 2001
[Sysname-acl6-basic-2001] rule permit source 2001::1/128
[Sysname-acl6-basic-2001] quit
[Sysname] tftp-server ipv6 acl 2001
124
File system management commands
IMPORTANT:
• Before managing storage media, files, and directories, make sure you know the possible impacts.
• A file or directory whose name starts with a period (.) is considered a hidden file or directory. Do not
give a common file or directory a name that starts with a period.
• Some system files and directories are hidden.
A file name must be specified in one of the file name formats allowed. For more information, see
Fundamentals Configuration Guide.
Before you use the copy, delete, fixdisk, format, gunzip, gzip, mkdir, move, rename, rmdir, or undelete
command on a USB disk, make sure the disk is not write protected.
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see Security Configuration Guide.
cd
Use cd to change the current working directory.
Syntax
cd { directory | .. }
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
directory: Specifies the name of the destination directory, in the format [drive:/]path. For more
information about how to enter the drive and path arguments, see Fundamentals Configuration Guide.
If no drive information is provided, the argument represents a folder or subfolder in the current directory.
..: Returns to an upper directory. If the current working directory is the root directory, an error message
appears when you execute the cd .. command. No online help information is available for this keyword.
Examples
# Access the test folder after logging in to the device.
<Sysname> cd test
# Return to the upper directory.
<Sysname> cd ..
# In standalone mode, change to the test folder in the root directory of the active MPU:
1.
Display the number of the slot where the standby MPU resides.
125
<Sysname> display device
Slot No. Brd Type
Brd Status
Subslot Num
Sft Ver
Patch Ver
0
NONE
Absent
0
NONE
None
1
NONE
Absent
0
NONE
None
2
NONE
Absent
0
NONE
None
3
NONE
Absent
0
NONE
None
4
NONE
Absent
0
NONE
None
5
NONE
Absent
0
NONE
None
6
NONE
Absent
0
NONE
None
7
NONE
Absent
0
NONE
None
8
NONE
Absent
0
NONE
None
9
LSX1TGS48EA1
Normal
0
12910-1031L01
None
10
LSX1FAB10B1
Normal
0
12910-1031L01
None
11
LSX1FAB10B1
Normal
0
12910-1031L01
None
12
NONE
Absent
0
NONE
None
13
NONE
Absent
0
NONE
None
14
NONE
Absent
0
NONE
None
15
NONE
Absent
0
NONE
None
16
LSX1SUP10A1
Standby
0
12910-1031L01
None
17
LSX1SUP10A1
Master
0
12910-1031L01
None
The output shows that the slot number of the standby MPU is 16.
2.
Access the root directory of the Flash on the standby MPU.
<Sysname> cd slot16#flash:/
3.
Change to the test folder in the root directory of the active MPU.
<Sysname> cd flash:/test
# In IRF mode, change to the Flash root directory of the global standby MPU that resides in slot 1 of
member device 2. Then, change to the test folder in the Flash root directory of the global active MPU:
4.
Display the member IDs and slot numbers of all MPUs.
<Sysname> display irf
Member
Slot
Role
Priority
CPU-Mac
2
16
Standby 20
00e0-fc0f-8c0f
2
17
Standby 20
00e0-fc0f-8c1f
*+3
16
Master
20
00e0-fc0f-8c22
3
17
Standby 20
00e0-fc0f-8c32
-------------------------------------------------* indicates the device is the master.
+ indicates the device through which the user logs in.
The Bridge MAC of the IRF is: 00e0-fc00-0a00
Auto upgrade
: yes
Mac persistent
: 6 min
The output shows that the IRF fabric has two members and four MPUs.
{
{
5.
The global active MPU resides in slot 16 of member device 3.
The three global standby MPUs resides in slot 16 and slot 17 of member device 2, and slot 17
of member device 3.
Access the test folder in the Flash root directory of the global active MPU.
126
<Sysname> cd flash:/test
6.
Change to the Flash root directory of the global standby MPU that resides in slot 16 of member
device 2.
<Sysname> cd chassis2#slot16#flash:/
7.
Change to the test folder in the Flash root directory of the global active MPU.
<Sysname> cd flash:/
copy
Use copy to copy a file.
Syntax
In non-FIPS mode:
copy fileurl-source fileurl-dest [ vpn-instance vpn-instance-name ] [ source interface interface-type
interface-number ]
In FIPS mode:
copy fileurl-source fileurl-dest
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
fileurl-source: Specifies the name or URL of the file to be copied in non-FIPS mode, and specifies the name
of the file to be copied in FIPS mode. If the file resides on an FTP or TFTP server rather than on the device,
specify the URL of the file. Whether a URL is case sensitive depends on the server.
fileurl-dest: Specifies the name or URL of the destination file or directory in non-FIPS mode, and specifies
the name of the destination file or directory in FIPS mode. To copy the source file to an FTP or TFTP server,
specify a URL. If you specify a directory, the device copies the specified file to the directory and saves it
with its original file name. Whether a URL is case sensitive depends on the server.
vpn-instance vpn-instance-name: Specifies the VPN instance to which the destination FTP or TFTP server
belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the server
belongs to the public network, do not specify this option. Support for this option depends on the device
model.
source interface interface-type interface-number: Specifies the source interface used to connect to the
server. The device uses the primary IP address of the source interface as the source IP address for
outgoing packets. If you do not specify this option, the device uses the outgoing interface as the source
interface.
Usage guidelines
In non-FIPS mode, you can use the copy command to perform the following tasks:
•
Copy a local file and save it locally.
•
Copy a local file and save it to an FTP or TFTP server.
•
Copy a file on an FTP or TFTP server and save it locally.
127
In FIPS mode, the command can only copy a local file and save it locally.
To specify a file or directory, use the following guidelines:
Location
Name format
Remarks
On the device
Use the file name guidelines in
Fundamentals Configuration Guide.
N/A
On an FTP server
Enter the URL in the format ftp://FTP
username[:password]@server
address[:port number]/file path[/file
name].
The username and password must be the same as
those configured on the FTP server. If the server
authenticates users only by the username, you are
not required to enter the password.
For example, to use the username 1 and password
1 and specify the startup.cfg file in the authorized
working directory on FTP server 1.1.1.1, enter
ftp://1:1@1.1.1.1/startup.cfg.
To specify an IPv6 address, enclose the IPv6
address in square brackets ([ ]), for example,
ftp://test:test@[2001::1]:21/test.cfg.
On a TFTP server
Enter the URL in the format
tftp://server address[:port
number]/file path[/file name].
For example, to specify the startup.cfg file in the
working directory on TFTP server 1.1.1.1, enter
the URL tftp://1.1.1.1/startup.cfg.
To enter an IPv6 address, enclose the IPv6 address
in square brackets ([ ]), for example,
ftp://test:test@[2001::1]:21/test.cfg.
Examples
# Copy the test.cfg file in the current folder and save it to the current folder as testbackup.cfg.
<Sysname> copy test.cfg testbackup.cfg
Copy flash:/test.cfg to flash:/testbackup.cfg?[Y/N]:y
Copying file flash:/test.cfg to flash:/testbackup.cfg...Done.
# Copy 1.cfg from the Flash's test folder to the USB disk's first partition. Save the copy to the testbackup
folder as 1backup.cfg.
<Sysname> copy flash:/test/1.cfg usb0:/testbackup/1backup.cfg
Copy flash:/test/1.cfg to usb0:/testbackup/1backup.cfg?[Y/N]:y
Copying file flash:/test/1.cfg to usb0:/testbackup/1backup.cfg...Done.
# Copy test.cfg from the working directory on FTP server 1.1.1.1. Save the copy to the local current folder
as testbackup.cfg. In this example, the FTP username and password are user and private.
<Sysname> copy ftp://user:private@1.1.1.1/test.cfg testbackup.cfg
Copy ftp://user:private@1.1.1.1/test.cfg to flash:/testbackup.cfg?[Y/N]:y
Copying file ftp://user:private@1.1.1.1/test.cfg to flash:/testbackup.cfg... Done.
# Copy test.cfg from the current folder. Save the copy to the working directory on FTP server 1.1.1.1 as
testbackup.cfg. In this example, the FTP username and password are user and private.
<Sysname> copy test.cfg ftp://user:private@1.1.1.1/testbackup.cfg
Copy flash:/test.cfg to ftp://user:private@1.1.1.1/testbackup.cfg?[Y/N]:y
Copying file flash:/test.cfg to ftp://user:private@1.1.1.1/testbackup.cfg... Done.
# Copy test.cfg from the working directory on TFTP server 1.1.1.1. Save the copy to the local current folder
as testbackup.cfg.
<Sysname> copy tftp://1.1.1.1/test.cfg testbackup.cfg
128
Copy tftp://1.1.1.1/test.cfg to flash:/testbackup.cfg?[Y/N]:y
Copying file tftp://1.1.1.1/test.cfg to flash:/testbackup.cfg... Done.
# Copy test.cfg from the current folder. Save the copy to the working directory on TFTP server 1.1.1.1 as
testbackup.cfg.
<Sysname> copy test.cfg tftp://1.1.1.1/testbackup.cfg
Copy flash:/test.cfg to tftp://1.1.1.1/testbackup.cfg?[Y/N]:y
Copying file flash:/test.cfg to tftp://1.1.1.1/testbackup.cfg... Done.
# Copy test.cfg from the working directory on FTP server 2001::1. Save the copy to the local current folder
as testbackup.cfg. In this example, the FTP username and password are user and private, respectively.
<Sysname> copy ftp://user:private@[2001::1]/test.cfg testbackup.cfg
Copy ftp://user:private@[2001::1]/test.cfg to flash:/testbackup.cfg?[Y/N]:y
Copying file ftp://user:private@[2001::1]/test.cfg to flash:/testbackup.cfg... Done.
# Copy test.cfg from the working directory on TFTP server 2001::1. Save the copy to the local current
folder as testbackup.cfg.
<Sysname> copy tftp://[2001::1]/test.cfg testbackup.cfg
Copy tftp://[2001::1]/test.cfg to flash:/testbackup.cfg?[Y/N]:y
Copying file tftp://[2001::1]/test.cfg to flash:/testbackup.cfg... Done.
# In standalone mode, copy the active MPU's configuration file test.cfg to the standby MPU's Flash root
directory.
<Sysname> copy test.cfg slot16#flash:/
Copy flash:/test.cfg to slot16#flash:/test.cfg?[Y/N]:y
Copying file flash:/test.cfg to slot16#flash:/test.cfg...Done.
# In IRF mode, copy a configuration file of the global active MPU. Save the copy to the Flash root
directory of the standby MPU that resides in slot 16 of member device 1.
<Sysname> copy test.cfg chassis1#slot16#flash:/
Copy flash:/test.cfg to chassis1#slot16#flash:/test.cfg?[Y/N]:y
Copying file flash:/test.cfg to chassis1#slot16#flash:/test.cfg...Done.
# In IRF mode, copy a configuration file of the global standby MPU that resides in slot 16 of member
device 1. Save the copy to the Flash root directory of the global standby MPU that resides in slot 16 of
member device 2.
<Sysname> copy chassis1#slot16#flash:/test.cfg chassis2#slot16#flash:/
Copy chassis1#slot16#flash:/test.cfg to chassis2#slot16#flash:/test.cfg?[Y/N]:y
Copying file chassis1#slot16#flash:/test.cfg to chassis2#slot16#flash:/test.cfg...Done.
delete
Use delete to delete a file.
Syntax
delete [ /unreserved ] file-url
Views
User view
Predefined user roles
network-admin
mdc-admin
129
Parameters
/unreserved: Permanently deletes the specified file. If you do not specify this keyword, the command
moves the file to the recycle bin.
file-url: Specifies the name of the file to be deleted. Asterisks (*) are acceptable as wildcards. For
example, to remove files with the .txt extension in the current directory, enter delete *.txt.
Usage guidelines
Use the delete /unreserved file-url command with caution. You cannot restore a file that was deleted with
this command.
The delete file-url command (without /unreserved) moves the specified file to the recycle bin, except in
the following two situations, where the file is permanently deleted:
•
The device is running out of storage space.
•
You are logged in to the default MDC and are using this command to delete a file from a
non-default MDC.
A file moved to the recycle bin can be restored by using the undelete command.
Do not use the delete command to delete files from the recycle bin. To delete files from the recycle bin, use
the reset recycle-bin command.
If you delete two files that have the same name but reside in different directories, both files are retained
in the recycle bin. If you successively delete two files that have the same name from the same directory,
only the file deleted last is retained in the recycle bin.
Examples
# In standalone mode, remove file 1.cfg from the root directory of the active MPU's storage medium.
<Sysname> delete 1.cfg
Delete flash:/1.cfg? [Y/N]:y
Deleting file flash:/1.cfg...Done.
# In standalone mode, permanently delete file 2.cfg from the root directory of the active MPU's storage
medium.
<Sysname> delete /unreserved 2.cfg
The file cannot be restored. Delete flash:/2.cfg?[Y/N]:y
Deleting the file permanently will take a long time. Please wait...
Deleting file flash:/2.cfg...Done.
# In standalone mode, remove file 1.cfg from the root directory of the storage medium on the standby
MPU (in slot 17).
•
Method 1:
<Sysname> delete slot17#flash:/1.cfg
Delete slot17#flash:/1.cfg?[Y/N]:y
Deleting file slot17#flash:/1.cfg...Done.
•
Method 2:
<Sysname> cd slot17#flash:/
<Sysname> delete 1.cfg
Delete slot17#flash:/1.cfg?[Y/N]:y
Deleting file slot17#flash:/1.cfg...Done.
# In IRF mode, remove file 1.cfg from the root directory of the storage medium on the global active MPU.
<Sysname> delete 1.cfg
Delete flash:/1.cfg?[Y/N]:y
130
Deleting file flash:/1.cfg...Done.
# In IRF mode, permanently delete file 2.cfg from the root directory of the storage medium on the global
active MPU.
<Sysname> delete /unreserved 2.cfg
The file cannot be restored. Delete flash:/2.cfg?[Y/N]:y
Deleting the file permanently will take a long time. Please wait...
Deleting file flash:/2.cfg...Done.
# In IRF mode, remove file 1.cfg from the Flash root directory of the global standby MPU that resides in
slot 16 of member device 1.
•
Method 1:
<Sysname> delete chassis1#slot16#flash:/1.cfg
Delete chassis1#slot16#flash:/1.cfg?[Y/N]:y
Deleting file chassis1#slot16#flash:/1.cfg...Done.
•
Method 2:
<Sysname> cd chassis1#slot16#flash:/
<Sysname> delete 1.cfg
Delete chassis1#slot16#flash:/1.cfg?[Y/N]:y
Deleting file chassis1#slot16#flash:/1.cfg...Done.
Related commands
•
undelete
•
reset recycle-bin
dir
Use dir to display files or folders.
Syntax
dir [ /all ] [ file-url | /all-filesystems ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
/all: Displays all files and folders in the current directory, visible or hidden. If you do not specify this
option, only visible files and folders are displayed.
file-url: Displays a specific file or folder. The file-url argument can use the asterisk (*) as a wildcard. For
example, to display files with the .txt extension in the current directory, enter dir *.txt.
/all-filesystems: Displays files and folders in the root directory of all storage media on the device.
Usage guidelines
If no option is specified, the command displays all visible files and folders in the current directory.
The folder name of the recycle bin is .trash. To display files in the recycle bin, use either of the following
methods:
131
•
Execute the dir /all .trash command.
•
Execute the cd .trash command and then the dir command.
Examples
# In standalone mode, display files and folders in the root directory of all storage media on the device.
<Sysname> dir /all-filesystems
Directory of flash:/
...
Directory of usb0:/
...
Directory of slot7#flash:/
...
Directory of slot7#usb0:/
...
# In standalone mode, display information about all files and folders in the storage medium of the
standby MPU (in slot 16).
<Sysname> cd slot16#flash:/
<Sysname> dir /all
Directory of slot16#flash:/
...
# In IRF mode, display information about all files and folders in the storage medium of the global active
MPU.
<Sysname> dir /all
Directory of flash:/
...
# In IRF mode, display files and folders in the root directory of every storage medium in the IRF fabric.
<Sysname> dir /all-filesystems
Directory of flash:/
...
Directory of chassis1#slot1#flash:/
...
# In IRF mode, display information about all files and folders in the storage medium of the global standby
MPU that resides in slot 16 of member device 1.
•
Method 1:
<Sysname> dir /all chassis1#slot16#flash:/
Directory of chassis1#slot16#flash:/
...
•
Method 2:
<Sysname> cd chassis1#slot16#flash:/
<Sysname> dir /all
Directory of chassis1#slot16#flash:/
...
132
Table 17 Command output
Field
Description
Directory of
Current directory.
File or folder information:
• 0—File or folder number, which is automatically allocated by the system.
• -rwh—Attributes of the file or folder. The first character is the folder indicator
(d for folder and – for file). The second character indicates whether the file or
folder is readable (r for readable). The third character indicates whether the
file or directory is writable (w for writable). The fourth character indicates
whether the file or directory is hidden (h for hidden, - for visible). Modifying,
renaming, or deleting hidden files might affect functions.
0
-rwh
3144 Apr 26
2008 13:45:28 xx.xx
• 3144—File size in bytes. For a folder, a hyphen (-) is displayed.
• Apr 26 2008 13:45:28—Last date and time when the file or folder was
modified.
• xx.xx—File or folder name.
fdisk
Use fdisk to partition a storage medium.
Syntax
fdisk medium-name [ partition-number ]
Views
User view
Predefined user roles
network-admin
Parameters
medium-name: Specifies the name of the storage medium to be partitioned.
partition-number: Specifies the number of partitions, in the range of 1 to 4.
Usage guidelines
The Flash cannot be partitioned.
This command is supported only on the default MDC.
If the partition-number argument is specified, the storage medium is divided into the specified number of
partitions. Otherwise, partitioning is performed in an interactive way.
It is normal that the specified partition size and the actual partition size have an error less than 5% of the
total memory.
A partition cannot be partitioned.
Before partitioning a USB disk, perform the following tasks:
•
Back up the files in the storage medium. The partition operation clears all data in the medium.
•
If you are partitioning a USB disk, make sure the disk is not write protected. Otherwise, the partition
operation will fail, and you must remount or reinstall the disk to restore access to the USB disk.
•
Make sure no other users are accessing the medium. Otherwise, the partition operation fails.
133
Examples
# Divide the USB disk on the device evenly into three partitions in simple mode.
<Sysname> fdisk usb: 3
Capacity of usb: : 256M bytes
usb: will be divided into the following partitions:
DeviceName
Capacity
usb0:
85MB
usb1:
85MB
usb2:
86MB
All data on usb: will be lost, continue? [Y/N]:y
Partitioning usb:...Done.
# Divide the USB disk on the device into one partition in an interactive way.
<Sysname> fdisk usb:
The capacity of usb: : 256M bytes
Partition 1 (32MB~224MB, 256MB. Press CTRL+C to quit or Enter to use all available space):
// Press Enter or enter 256.
usb: will be divided into the following partition(s):
DeviceName
usb0:
Capacity
256MB
All data on usb: will be lost, continue? [Y/N]:y
Partitioning usb:...Done.
# Divide the USB disk on the device into three partitions and specify the size for each partition:
<Sysname> fdisk usb:
The capacity of usb: : 256M bytes
Partition 1 (32MB~224MB, 256MB, Press CTRL+C to quit or Enter to use all available
space):128
// Enter 128 to set the size of the first partition to 128 MB.
Partition 2 (32MB~96MB, 128MB, Press CTRL+C to quit or Enter to use all available space):31
// Enter 31 to set the size of the second partition to 31 MB.
The partition size must be greater than or equal to 32MB.
Partition 2 (32MB~96MB, 128MB, Press CTRL+C to quit or Enter to use all available
space):1000
// Enter 1000 to set the size of the second partition to 1000 MB.
The partition size must be less than or equal to 128MB.
Partition 2 (32MB~96MB, 128MB, Press CTRL+C to quit or Enter to use all available space):127
// Enter 127 to set the size of the second partition to 127 MB.
The remaining space is less than 32MB. Please enter the size of partition 2 again.
Partition 2 (32MB~96MB, 128MB, Press CTRL+C to quit or Enter to use all available space):
// Enter 56 to set the size of the second partition to 56 MB.
Partition 3 (32MB~40MB, 72MB, Press CTRL+C to quit or Enter to use all available space):
// Press Enter to assign the remaining space to the third partition.
usb: will be divided into the following partition(s):
DeviceName
Capacity
usb0:
128MB
usb1:
56MB
134
usb2:
72MB
All data on usb: will be lost, continue? [Y/N]:y
Partitioning usb:...Done.
file prompt
Use file prompt to set the operation mode for files and folders.
Syntax
file prompt { alert | quiet }
undo file prompt
Default
The operation mode is alert. The system prompts for confirmation when you perform a destructive file or
folder operation.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
alert: Prompts for confirmation when a destructive file or folder operation is being performed.
quiet: Gives no confirmation prompt for file or folder operations.
Usage guidelines
In quiet mode, the system does not prompt for confirmation when a user performs a file or folder
operation. The alert mode provides an opportunity to cancel a disruptive operation.
Examples
# Set the file and folder operation mode to alert.
<Sysname> system-view
[Sysname] file prompt alert
fixdisk
Use fixdisk to check a storage medium for damage and repair any damage.
Syntax
fixdisk medium-name
Views
User view
Predefined user roles
network-admin
Parameters
medium-name: Specifies the name of a storage medium name.
135
Usage guidelines
This command is supported only on the default MDC.
Use this command to fix a storage medium when space on the medium cannot be used or released due
to abnormal operations.
Before you repair a storage medium, make sure no other users are accessing the medium. Otherwise, the
repair operation fails.
Examples
# Restore the space of the Flash.
<Sysname> fixdisk flash:
Restoring flash: may take some time...
Restoring flash:...Done.
format
Use format to format a storage medium.
Syntax
format medium-name
Views
User view
Predefined user roles
network-admin
Parameters
medium-name: Specifies the name of a storage medium.
Usage guidelines
This command is supported only on the default MDC.
Formatting a storage medium permanently deletes all files on the storage medium. If a startup
configuration file exists on the storage medium, back it up if necessary.
To format a partitioned storage medium, you must format the partitions individually. You cannot use the
format usb command to format the medium as a whole.
You can format a storage medium only when no one is accessing the medium.
Examples
# Format the Flash.
<Sysname> format flash:
All data on flash: will be lost, continue? [Y/N]:y
Formatting flash:... Done.
# Format the third partition of the USB disk.
<Sysname> format usb2:
All data on usb2: will be lost, continue? [Y/N]:y
Formatting usb2:... Done.
136
gunzip
Use gunzip to decompress a file.
Syntax
gunzip filename
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
filename: Specifies the name of the file to be decompressed. This argument must have .gz as the
extension.
Usage guidelines
This command deletes the specified file after decompressing it.
Examples
# Decompress the file system.bin.gz;
1.
Before decompressing the file, you can display files whose names start with the system. string.
<Sysname> dir system.*
Directory of flash:
1 -rw-
20 Jun 14 2012 10:18:53
system.bin.gz
472972 KB total (472840 KB free)
2.
Decompress the file system.bin.gz.
<Sysname> gunzip system.bin.gz
Decompressing file system.bin.gz... Done.
3.
Verify the decompress operation.
<Sysname> dir system.*
Directory of flash:
1 -rw-
0 May 30 2012 11:42:25
472972 KB total (472844 KB free)
gzip
Use gzip to compress a file.
Syntax
gzip filename
Views
User view
Predefined user roles
network-admin
137
system.bin
mdc-admin
Parameters
filename: Specifies the name of the file to be compressed. The compressed file will be saved to file
filename.gz.
Usage guidelines
This command deletes the specified file after compressing it.
Examples
# Compress the file system.bin:
1.
Before compressing the file, you can display files whose names start with system.
<Sysname> dir system.*
Directory of flash:
1 -rw-
0 May 30 2012 11:42:24
system.bin
472972 KB total (472844 KB free)
2.
Compress the file system.bin.
<Sysname> gzip system.bin
Compressing file system.bin... Done.
3.
Verify the compress operation.
<Sysname> dir system.*
Directory of flash:
1 -rw-
20 Jun 14 2012 10:18:53
system.bin.gz
472972 KB total (472840 KB free)
md5sum
Use md5sum to use the MD5 algorithm to calculate the digest of a file.
Syntax
md5sum file-url
Views
User view
Predefined user roles
network-admin
network-operator
Parameters
file-url: Specifies the name of a file.
Usage guidelines
You can use file digests to verify file integrity.
Examples
# Use the MD5 algorithm to calculate the digest of file system.bin.
<Sysname> md5sum system.bin
MD5 digest:
4f22b6190d151a167105df61c35f0917
138
mkdir
Use mkdir to create a folder in the current directory.
Syntax
mkdir directory
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
directory: Specifies the name of a folder.
Usage guidelines
The name of the folder to be created must be unique in the specified directory.
To use this command to create a folder, the specified directory must already exist. For example, to create
the flash:/test/mytest folder, the test folder must already exist. Otherwise, the mytest folder is not
created.
Examples
# Create the test folder in the current directory.
<Sysname> mkdir test
Creating directory flash:/test... Done.
# Create the test/subtest folder in the current directory.
<Sysname> mkdir test/subtest
Creating directory flash:/test/subtest... Done.
# In standalone mode, create the test folder on the standby MPU (in slot 16).
<Sysname> mkdir slot16#flash:/test
Creating directory slot16#flash:/test... Done.
# In IRF mode, create the test folder on the active MPU of the IRF fabric.
<Sysname> mkdir test
Creating directory flash:/test... Done.
# In IRF mode, create the test folder on the standby MPU that resides in slot 16 of member device 2.
<Sysname> mkdir chassis2#slot16#flash:/test
Creating directory chassis2#slot16#flash:/test... Done.
more
Use more to display the contents of a text file.
Syntax
more file-url
139
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
file-url: Specifies a file name.
Examples
# Display the contents of the test.txt file.
<Sysname> more test.txt
Have a nice day.
# Display the contents of the testcfg.cfg file.
<Sysname> more testcfg.cfg
#
version 7.1.045, Release 1030
#
mdc Admin id 1
#
sysname Sysname
#
telnet server enable
#
---- More ----
# In standalone mode, display the contents of the testcfg.cfg file on the standby MPU (in slot 16).
<Sysname> more slot16#flash:/testcfg.cfg
#
version 7.1.045, Release 1030
#
mdc Admin id 1
#
sysname Sysname
#
telnet server enable
#
---- More ----
# In IRF mode, display the contents of the testcfg.cfg file on the global active MPU.
<Sysname> more testcfg.cfg
#
version 7.1.045, Release 1030
#
mdc Admin id 1
#
sysname Sysname
#
telnet server enable
140
#
---- More ----
# In IRF mode, display the contents of the testcfg.cfg file on the standby MPU that resides in slot 16 of
member device 2.
<Sysname> more chassis2#slot16#flash:/testcfg.cfg
#
version 7.1.045, Release 1030
#
mdc Admin id 1
#
sysname Sysname
#
telnet server enable
#
---- More ----
mount
Use mount to mount a hot swappable storage medium.
Syntax
mount medium-name
Default
A storage medium is automatically mounted and in mounted state after being connected to the device,
and you can use it without mounting it.
Views
User view
Predefined user roles
network-admin
Parameters
medium-name: Specifies the name of a storage medium.
Usage guidelines
This command is supported only on the default MDC.
To avoid file system corruption, do not perform the following tasks while the system is mounting a storage
medium:
•
Install or remove storage media or cards.
•
Perform active/standby switchover. (In standalone mode.)
•
Perform a switchover between the global active MPU and a global standby MPU. (In IRF mode.)
•
Create, delete, start, or stop an MDC.
To mount a partitioned storage medium, you must mount all the partitions individually, instead of
mounting the USB disk as a whole.
Examples
# In standalone mode, mount a USB disk on the active MPU.
141
<Sysname> mount usb0:
# In standalone mode, mount a USB disk on the standby MPU (in slot 16).
<Sysname> mount slot16#usb0:
# In IRF mode, mount a USB disk on the master.
<Sysname> mount usb0:
# In IRF mode, mount a USB disk on the MPU that resides in slot 17 of member device 2.
<Sysname> mount chassis2#slot17#usb0:
Related commands
umount
move
Use move to move a file.
Syntax
move fileurl-source fileurl-dest
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
fileurl-source: Specifies the name of the source file.
fileurl-dest: Specifies the name of the destination file or folder.
Usage guidelines
If you specify a destination folder, the system moves the source file to the specified folder without
changing the file name.
Examples
# Move the flash:/test/sample.txt file to flash:/, and save it as 1.txt.
<Sysname> move test/sample.txt 1.txt
Move flash:/test/sample.txt to flash:/1.txt?[Y/N]:y
Moving file flash:/test/sample.txt to flash:/1.txt ...Done.
# Move the b.cfg file to the folder test2.
<Sysname> move b.cfg test2
Move flash:/b.cfg to flash:/test2/b.cfg?[Y/N]:y
Moving file flash:/b.cfg to flash:/test2/b.cfg... Done.
pwd
Use pwd to display the current working directory.
142
Syntax
pwd
Views
User view
Predefined user roles
network-admin
mdc-admin
Examples
# Display the current working directory.
<Sysname> pwd
flash:
rename
Use rename to rename a file or folder.
Syntax
rename fileurl-source fileurl-dest
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
fileurl-source: Specifies the name of the source file or folder.
fileurl-dest: Specifies the name of the destination file or folder.
Usage guidelines
This command is not executed if the destination file or folder name is already used by an existing file or
folder in the current working directory.
Examples
# Rename the copy.cfg file as test.cfg.
<Sysname> rename copy.cfg test.cfg
Rename flash:/copy.cfg as flash:/test.cfg?[Y/N]:y
Renaming flash:/copy.cfg as flash:/test.cfg... Done.
reset recycle-bin
Use reset recycle-bin to delete files from the recycle bin.
Syntax
reset recycle-bin [ /force ]
143
Views
User view
Parameters
/force: Deletes all files in the recycle bin without prompting for confirmation. If you do not specify this
option, the command prompts you to confirm the deletion.
Usage guidelines
The delete file-url command only moves a file to the recycle bin. To permanently delete the file, use the
reset recycle-bin command to clear the recycle bin.
If a file is corrupted, you might not be able to delete the file by using the reset recycle-bin command. In
this case, use the reset recycle-bin /force command.
Examples
# Empty the recycle bin. (In this example there are two files in the recycle bin.)
<Sysname> reset recycle-bin
Clear flash:/a.cfg?[Y/N]:y
Clearing file flash:/a.cfg... Done.
Clear flash:/b.cfg?[Y/N]:y
Clearing file flash:/b.cfg... Done.
# Delete the b.cfg file from the recycle bin. (In this example there are two files in the recycle bin.)
<Sysname> reset recycle-bin
Clear flash:/a.cfg?[Y/N]:n
Clear flash:/b.cfg?[Y/N]:y
Clearing file flash:/b.cfg... Done.
Related commands
delete
rmdir
Use rmdir to remove a folder.
Syntax
rmdir directory
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
directory: Specifies a folder name.
Usage guidelines
To remove a directory, you must delete all files and subfolders in the directory permanently or move them
to the recycle bin. If you move them to the recycle bin, executing the rmdir command permanently deletes
them.
144
Examples
# Remove the subtest folder.
<Sysname>rmdir subtest/
Remove directory flash:/test/subtest and the files in the recycle-bin under this directory
will be deleted permanently. Continue?[Y/N]:y
Removing directory flash:/test/subtest... Done.
sha256sum
Use sha256sum to use the SHA-256 algorithm to calculate the digest of a file.
Syntax
sha256sum file-url
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
file-url: Specifies the name of a file.
Usage guidelines
The digest can be used to verify the integrity of the file. For example, you can use this command to
calculate the digest of a software image file and compare it with that provided on the HP website to
identify whether the file has been tampered with.
Examples
# Use the SHA-256 algorithm to calculate the digest of file system.bin.
<Sysname> sha256sum system.bin
SHA256 digest:
0851e0139f2770e87d01ee8c2995ca9e59a8f5f4062e99af14b141b1a36ca152
tar create
Use tar create to archive files and folders.
Syntax
tar create [ gz ] archive-file fileurl-dest [ verbose ] source fileurl-source-list&<1-5>
Views
User view
Predefined user roles
network-admin
mdc-admin
145
Parameters
gz: Uses gzip to compress the files and folders before archiving them.
archive-file fileurl-dest: Specifies the archive file name. If you specified the gz keyword, the suffix of this
argument must be .tar.gz. If you did not specify the gz keyword, the suffix of this argument must be .tar.
verbose: Displays the names of the successfully archived files and folders.
source fileurl-source-list&<1-5>: Specifies the files and folders to be archived. The fileurl-source-list
argument can be a space-separated list of up to five items. Each item can be a file or folder name.
Examples
# Archive file a.cfg to file a.tar.
<Sysname> tar create archive-file a.tar source a.cfg
Creating archive a.tar …… Done.
# Compress file a.cfg and archive the file to a.tar.gz.
<Sysname> tar create gz archive-file a.tar.gz source a.cfg
Creating archive a.tar.gz Done.
# Compress and archive files and folders, and display the successfully archived files and folders.
<Sysname> tar create gz archive-file a.tar.gz verbose source a.cfg a.dbm ./core
a.cfg
a.dbm
./core
Related commands
•
tar extract
•
tar list
tar extract
Use tar extract to extract files and folders.
Syntax
tar extract archive-file fileurl-dest [ verbose ] [ screen | to directory-name ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
archive-file fileurl-dest: Specifies the archive file name. The suffix can be .tar or .tar.gz.
verbose: Displays the names of the successfully extracted files and folders.
screen: Displays the content of the extracted files and folders on the screen. The extracted files are not
saved.
to directory-name: Saves the extracted files and folders to a path.
146
Usage guidelines
If you do not specify the screen keyword or the to directory-name option, the command extracts the
archived files and folders and saves them to the same folder as the archive file.
Examples
# Extract files and folders, and save them to the same folder as the archive file.
<Sysname> tar extract archive-file a.tar.gz
Extracting archive a.tar.gz …… Done.
# Extract files and folders, and display their content on the screen.
<Sysname> tar extract archive-file a.tar.gz verbose screen
a.cfg
#
version 7.1.045, Release 1030
#
sysname HP
#
# Extract files and folders, save them to the same folder as the archive file, and display the names of the
archived files and folders.
<Sysname> tar extract archive-file a.tar.gz verbose
a.txt
# Extract files and folders, and save them to the path flash:/a.
<Sysname> tar extract archive-file a.tar.gz to flash:/a
Extracting archive a.tar.gz ......Done.
Related commands
•
tar create
•
tar list
tar list
Use tar list to display the names of archived files and folders.
Syntax
tar list archive-file fileurl-dest
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
archive-file fileurl-dest: Specifies the archive file name. The suffix can be .tar or .tar.gz.
Examples
# Display the names of archived files and folders.
<Sysname> tar list archive-file a.tar.gz
a.cfg
147
Related commands
•
tar create
•
tar extract
umount
Use umount to unmount a hot swappable storage medium.
Syntax
umount medium-name
Default
A storage medium is automatically mounted and placed in mounted state.
Views
User view
Predefined user roles
network-admin
Parameters
medium-name: Specifies the name of a storage medium.
Usage guidelines
This command is supported only on the default MDC.
Before you remove a mounted storage medium from the system, first unmount it to avoid damaging the
medium.
Before you unmount a storage medium, make sure no other users are accessing the medium. Otherwise,
the unmount operation fails.
When a storage medium is connected to a lower version system, the system might not be able to
automatically recognize the device. In this case, you must first execute the mount command for the
storage medium to function correctly.
To avoid file system corruption, do not perform the following tasks while the system is unmounting a
storage medium:
•
Install or remove storage media or cards.
•
Perform active/standby switchover. (In standalone mode.)
•
Perform a switchover between the global active MPU and a global standby MPU. (In IRF mode.)
•
Create, delete, start, or stop an MDC.
Examples
# In standalone mode, unmount a USB disk from the active MPU.
<Sysname> umount usb0:
# In standalone mode, unmount a USB disk from the standby MPU (in slot 16).
<Sysname> umount slot16# usb0:
# In IRF mode, unmount a USB disk from the global active MPU.
<Sysname> umount usb0:
# In IRF mode, unmount a USB disk from the standby MPU that resides in slot 17 of member device 2.
148
<Sysname> umount chassis2#slot17# usb0:
Related commands
mount
undelete
Use undelete to restore a file from the recycle bin.
Syntax
undelete file-url
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
file-url: Specifies the name of the file to be restored.
Usage guidelines
If a file with the same name already exists in the directory, the system prompts whether or not you want
to overwrite the existing file. If you enter Y, the existing file is overwritten. If you enter N, the command
is not executed.
Examples
# Restore the copy.cfg file, which was moved from the flash: directory to the recycle bin.
<Sysname>undelete copy.cfg
Undelete flash:/copy.cfg?[Y/N]:y
Undeleting file flash:/copy.cfg... Done.
# Restore the startup.cfg file, which was moved from the flash:/seclog directory to the recycle bin.
•
Method 1:
<Sysname>undelete seclog/startup.cfg
Undelete flash:/seclog/startup.cfg?[Y/N]:y
Undeleting file flash:/seclog/startup.cfg... Done.
<Sysname>
•
Method 2:
<Sysname> cd seclog
<Sysname> undelete startup.cfg
Undelete flash:/seclog/startup.cfg?[Y/N]:y
Undeleting file flash:/seclog/startup.cfg... Done.
149
Configuration file management commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see Security Configuration Guide.
backup startup-configuration
Use backup startup-configuration to back up the main next-startup configuration file to a TFTP server.
Syntax
backup startup-configuration to tftp-server [ dest-filename ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
tftp-server: Specifies a TFTP server by its IPv4 address or host name. The host name is a case-insensitive
string of 1 to 253 characters. Valid characters include letters, digits, hyphens (-), underscores (_), and
dots (.).
dest-filename: Specifies the target file name used for saving the file on the server. The file name must use
the .cfg extension. If you do not specify a target file name, the source file name is used.
Usage guidelines
This command is not supported in FIPS mode.
Examples
# Back up the main next-startup configuration file to the TFTP server at 2.2.2.2, and set the target file
name to 192-168-1-26.cfg.
<Sysname> backup startup-configuration to 2.2.2.2 192-168-1-26.cfg
Backup next startup-configuration file to 2.2.2.2, please wait…finished
Related commands
restore startup-configuration
configuration encrypt
Use configuration encrypt to enable configuration encryption.
Use undo configuration encrypt to restore the default.
Syntax
configuration encrypt { private-key | public-key }
150
undo configuration encrypt
Default
Configuration encryption is disabled. The running configuration is saved to a configuration file without
encryption.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
private-key: Encrypts configuration with a private key. Any HP devices running Comware V7 software
use the same private key.
public-key: Encrypts configuration with a public key. Any HP devices running Comware V7 software use
the same public key.
Usage guidelines
Configuration encryption enables the device to automatically encrypt a configuration file when saving
the running configuration to the file.
Examples
# Enable the public-key method for configuration encryption.
<Sysname> system-view
[Sysname] configuration encrypt public-key
display current-configuration
Use display current-configuration to display the running configuration.
Syntax
display current-configuration [ configuration [ module-name ] | interface [ interface-type
[ interface-number ] ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
configuration [ module-name ]: Displays feature configuration. The module-name argument specifies a
feature module. If no feature module is specified, this command displays all feature settings you have
made. Available feature modules depend on the device configuration.
151
interface [ interface-type [ interface-number ] ]: Displays interface configuration, where the interface-type
argument represents the interface type and the interface-number argument represents the interface
number.
Usage guidelines
Use this command to verify the running configuration you have made.
If the system has automatically changed the setting you have made for a parameter, this command
displays the effective setting instead of the configured one. An automatic change typically occurs
because of system restrictions.
Typically, this command does not display parameters that are using the default settings.
Examples
# Display local user configuration.
<Sysname> display current-configuration configuration local-user
#
local-user ftp
password hash
$h$6$4UDOXMkpPwLyMwIX$ohXVbEb+YPMceuyB1A9k+MBoylujMQSAedf+fskEIkYFqcIBXvAqvdbzgqFK2az
da3BAtLeHakQe9hepn8ejsA==
service-type ftp
authorization-attribute user-role network-operator
#
local-user root
password hash
$h$6$zSWYxJ3Oj01iR7x1$a5BIEHfcqTUKrVkd6HB9vVLh8abWLm9sy/FW8J0ypdnqtH/Du6IU+9UlM8W5OM+
ihHJAWXUkTEAoMuJKBwcogw==
service-type ssh telnet terminal
authorization-attribute user-role network-admin
#
return
# Display Ethernet interface configuration.
<Sysname> display current-configuration interface ten-gigabitethernet 1/0/1
#
interface Ten-GigabitEthernet1/0/1
port link-mode route
#
return
display default-configuration
Use display default-configuration to display the factory defaults.
Syntax
display default-configuration
Views
Any view
152
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display the factory defaults.
<Sysname> display default-configuration
display saved-configuration
Use display saved-configuration to display the contents of the configuration file for the next system
startup.
Syntax
display saved-configuration
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
Use this command to verify that important settings have been saved to the configuration file for the next
system startup.
This command selects the configuration file to display in the following order:
•
If the main startup configuration file is available, this command displays the contents of the main
startup configuration file.
•
If only the backup startup configuration file is available, this command displays the contents of the
backup file.
•
If both the main and backup startup configuration files are not available, this command does not
display anything.
Examples
# Display the contents of the configuration file for the next system startup.
<Sysname> display saved-configuration
#
Version 7.1.045, Release 1030
#
mdc Admin id 1
#
sysname HP
153
#
telnet server enable
#
---- More ----
Related commands
•
reset saved-configuration
•
save
display startup
Use display startup to display the current startup configuration file and the next-startup configuration
files.
Syntax
display startup
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
Current startup configuration file is the configuration file that has been loaded. Next-startup
configuration file is the configuration file used at the next startup.
In standalone mode:
The standby MPU always uses the same current startup configuration file as the active MPU. After an
active/standby switchover, it is normal that the current startup configuration files on the MPUs are
displayed as NULL. This is because the new active MPU continues to run with the running configuration
rather than rebooting with a startup configuration file.
In IRF mode:
The global standby MPUs always use the same current startup configuration file as the global active MPU.
After an active/standby switchover, it is normal that the current startup configuration files on all MPUs are
displayed as NULL. This is because the new global active MPU continues to run with the running
configuration rather than rebooting with a startup configuration file.
Examples
# (In standalone mode.) Display startup configuration files.
<Sysname> display startup
MainBoard:
Current startup saved-configuration file: flash:/startup.cfg
Next main startup saved-configuration file: flash:/startup.cfg
Next backup startup saved-configuration file: NULL
Slot 16:
154
Current startup saved-configuration file: flash:/startup.cfg
Next main startup saved-configuration file: flash:/startup.cfg
Next backup startup saved-configuration file: NULL
Table 18 Command output
Field
Description
MainBoard
Displays the startup configuration files on the active MPU.
Current startup saved-configuration file
Configuration file that the active MPU has started up with.
Next main startup saved-configuration file
Primary startup configuration file to be used at the next startup.
Next backup startup saved-configuration file
Backup startup configuration file to be used at the next startup.
Slot n
Displays the startup configuration files on the MPU in slot n.
# (In IRF mode.) Display startup configuration files.
<Sysname> display startup
MainBoard:
Current startup saved-configuration file: NULL
Next main startup saved-configuration file: flash:/startup.cfg
Next backup startup saved-configuration file: flash:/startup2.cfg
Chassis 2 Slot 16:
Current startup saved-configuration file: NULL
Next main startup saved-configuration file: flash:/startup.cfg
Next backup startup saved-configuration file: flash:/startup2.cfg
Table 19 Command output
Field
Description
MainBoard
Displays the startup configuration files on the global active
MPU.
Current startup saved-configuration file
Configuration file that the global active MPU has started up
with.
Next main startup saved-configuration file
Primary configuration file to be used at the next startup.
Next backup startup saved-configuration file
Backup configuration file to be used at the next startup.
(This file does not exist.)
If the specified next-startup configuration file has been
deleted, this comment appears next to the file name.
Chassis x Slot n
Displays the startup configuration files on the MPU in slot n of
IRF member x.
Related commands
startup saved-configuration
display this
Use display this to display the running configuration in the current view.
Syntax
display this
155
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
Use this command to verify the configuration you have made in a certain view.
Typically, this command does not display parameters that are set to their default settings.
Some parameters can be successfully configured even if their dependent features are not enabled. For
these parameters, this command displays their settings after the dependent features are enabled.
This command can be executed in any user line view to display the running configuration of all user lines.
Examples
# Display the running configuration on interface Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] display this
#
interface Ten-GigabitEthernet1/0/1
port link-mode route
#
return
# Display the running configuration on user lines.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] display this
#
line aux 0
user-role network-operator
#
line vty 0 63
authentication-mode none
user-role network-admin
#
return
reset saved-configuration
Use reset saved-configuration to delete next-startup configuration files.
Syntax
reset saved-configuration [ backup | main ]
156
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
backup: Deletes the backup next-startup configuration file.
main: Deletes the main next-startup configuration file.
Usage guidelines
CAUTION:
Use this command with caution. This command permanently deletes the next-startup configuration file
from each MPU.
Delete a next-startup configuration file if it is corrupted or does not match the software version.
You can delete the main, the backup, or both.
To delete a file that is set as both main and backup next-startup configuration files, you must execute both
the reset saved-configuration backup command and the reset saved-configuration main command.
Using only one of the commands removes the specified file attribute instead of deleting the file.
For example, if the reset saved-configuration backup command is executed, the backup next-startup
configuration file setting is set to NULL. However, the file is still used as the main file. To delete the file,
you must also execute the reset saved-configuration main command.
If no configuration file attribute is specified, the reset saved-configuration command deletes the main
next-startup configuration file.
Examples
# (In standalone mode.) Delete the main next-startup configuration file.
<Sysname> reset saved-configuration
The saved configuration file will be erased. Are you sure? [Y/N]:y
Configuration file in flash is being cleared.
Please wait ...
..
MainBoard:
Configuration file is cleared.
Slot 16:
Erase next configuration file successfully
# (In IRF mode.) Delete the backup next-startup configuration file.
<Sysname> reset saved-configuration backup
The saved configuration file will be erased. Are you sure? [Y/N]:y
Configuration file in flash is being cleared.
Please wait ...
..
MainBoard:
Configuration file is cleared.
Chassis 2 Slot 16:
157
Erase next configuration file successfully
Related commands
display saved-configuration
restore startup-configuration
Use restore startup-configuration to download a configuration file from a TFTP server and specify it as
the main next-startup configuration file.
Syntax
restore startup-configuration from tftp-server src-filename
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
tftp-server: Specifies a TFTP server's IPv4 address or host name. The host name is a case-insensitive string
of 1 to 253 characters. Valid characters include letters, digits, hyphens (-), underscores (_), and dots (.).
src-filename: Specifies the file name of the configuration file to be downloaded.
Usage guidelines
This command is not supported in FIPS mode.
Before restoring the configuration file for the next startup, make sure the following requirements are met:
•
The server is reachable.
•
The server is enabled with TFTP service.
•
You have read and write permissions to the server.
This command provides an easy method for configuration file restoration by automatically performing all
operations required for restoring the main next-startup configuration file.
The configuration file is automatically saved to the root directory of the default storage medium on each
MPU. (The default storage medium is user configurable. For more information, see "Managing the file
system.")
If the storage medium has been partitioned, the configuration file is saved on the first partition.
This command assumes that all MPUs use the same type of storage medium. If a standby MPU uses a
different type of storage medium than the active MPU, the command cannot propagate the configuration
file to the standby MPU. For example, the standby MPU uses a USB disk, but the active MPU uses a flash
memory. In this situation, you must manually restore the next-startup configuration file on the standby
MPU.
Examples
# (In standalone mode.) Download the configuration file config.cfg from the TFTP server at 2.2.2.2, and
specify the file as the main next-startup configuration file.
<Sysname> restore startup-configuration from 2.2.2.2 config.cfg
Restoring the next startup-configuration file from 2.2.2.2. Please wait...finished.
158
Now restoring the next startup-configuration file from main board to backup board. Please
wait...finished.
# (In IRF mode.) Download the configuration file config.cfg from the TFTP server at 2.2.2.2 and specify
the file as the main next-startup configuration file.
<Sysname> restore startup-configuration from 2.2.2.2 config.cfg
Restoring the next startup-configuration file from 2.2.2.2. Please wait...finished.
Now restoring the next startup-configuration file from main board to backup board. Please
wait...finished.
Related commands
backup startup-configuration
save
In standalone mode:
Use save file-url [ all | slot slot-number ] to save the running configuration to a configuration file, without
specifying the file as a next-startup configuration file.
Use save [ safely ] [ backup | main ] [ force ] [ mdc-all ] to save the running configuration to a file in the
root directory of a storage medium. This command applies to each MDC or the MDC where you are
logged in. It automatically specifies the file as a next-startup configuration file.
In IRF mode:
Use save file-url [ all | chassis chassis-number slot slot-number ] to save the running configuration to a
configuration file, without specifying the file as a next-startup configuration file.
Use save [ safely ] [ backup | main ] [ force ] [ mdc-all ] to save the running configuration to a file in the
root directory of a storage medium. This command applies to each MDC or the MDC where you are
logged in. It automatically specifies the file as a next-startup configuration file.
Syntax
In standalone mode:
save file-url [ all | slot slot-number ]
save [ safely ] [ backup | main ] [ force ] [ mdc-all ]
In IRF mode:
save file-url [ all | chassis chassis-number slot slot-number ]
save [ safely ] [ backup | main ] [ force ] [ mdc-all ]
Views
Any view
Predefined user roles
network-admin
mdc-admin
Parameters
file-url: Saves the running configuration to the specified file, without specifying the file as a next-startup
configuration file. The file name must use the extension .cfg and can include path information. If the
159
keyword all or an MPU slot is specified, the file path cannot include a chassis number or slot number. If
the file path includes a folder name, the folder must already exist.
all: Saves the running configuration to both MPUs. If you do not specify this keyword or the slot
slot-number option, the command saves the running configuration only to the active MPU. (In standalone
mode.)
all: Saves the running configuration to all MPUs. If you do not specify this keyword or the chassis
chassis-number slot slot-number option, the command saves the running configuration only to the global
active MPU in the IRF fabric. (In IRF mode.)
slot slot-number: Saves the running configuration to the standby MPU. If you do not specify this option or
the all keyword, the command saves the running configuration only to the active MPU. (In standalone
mode.)
chassis chassis-number slot slot-number: Saves the running configuration to an MPU. If you do not specify
this option or the all keyword, the command saves the running configuration only to the global active
MPU in the IRF fabric. (In IRF mode.)
safely: Saves the configuration file in safe mode. If this keyword is not specified, the device saves the
configuration file in fast mode. Safe mode is slower than fast mode, but more secure.
backup: Saves the running configuration to a configuration file, and specifies the file as the backup
next-startup configuration file. If you do not specify this keyword or the main keyword, the command
specifies the saved file as the main next-startup configuration file.
main: Saves the running configuration to a configuration file, and specifies the file as the main
next-startup configuration file. If you do not specify this keyword or the backup keyword, the command
specifies the saved file as the main next-startup configuration file.
force: Saves the running configuration without prompting for confirmation. Without this keyword, the
system prompts you to confirm the operation. If you do not confirm the operation within 30 seconds, the
system automatically aborts the operation. If you enter Y within the time limit, you can continue the save
process and change the next-startup configuration file during this process.
mdc-all: Saves the running configuration for each MDC. This keyword is available only on the default
MDC. If this keyword is not available or you do not specify this keyword, the save command saves the
running configuration only for the MDC where you are logged in.
Usage guidelines
If the file specified for the command does not exist, the system creates the file before saving the
configuration. If the file already exists, the system prompts you to confirm whether to overwrite the file. If
you choose to not overwrite the file, the system cancels the save operation.
If you do not specify the file-url option for the command, the command saves the running configuration
to an .mdb binary file as well as a .cfg text file. The two files use the same file name. An .mdb file takes
less time to load than a .cfg file.
If you specify the file-url option for the command, the command only saves the running configuration to
the specified .cfg file.
In safe mode, the system saves configuration in a temporary file and starts overwriting the target
next-startup configuration file after the save operation is complete. If a reboot, power failure, or out of
memory event occurs during the save operation, the next-startup configuration file is retained.
In fast mode, the device directly overwrites the target next-startup configuration file. If a reboot, power
failure, or out of memory event occurs during this process, the next-startup configuration file is lost.
HP recommends that you specify the safely keyword for the command.
160
Examples
# Save the running configuration to the configuration file backup.cfg, without specifying the file as the
next-startup configuration file.
<Sysname> save backup.cfg
The current configuration will be saved to flash:/backup.cfg. Continue? [Y/N]:y
Now saving current configuration to the device.
Saving configuration
flash:/backup.cfg. Please wait...
Configuration is saved to flash successfully.
# Save the running configuration to the main next-startup configuration file without any confirmation
required.
<Sysname> save force
Validating file. Please wait....
Configuration is saved to device successfully.
# (In standalone mode.) Save the running configuration to a file in the root directory of a storage medium,
and specify the file as the main next-startup configuration file.
<Sysname> save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
Slot 16:
Save next configuration file successfully.
# (In IRF mode.) Save the running configuration to a file in the root directory of a storage medium, and
specify the file as the main next-startup configuration file.
<Sysname> save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
Chassis 1 Slot 16:
Save next configuration file successfully.
# Save the running configuration to a file in the root directory of a storage medium for each MDC, and
specify the file as the main next-startup configuration file.
[Sysname]save mdc-all
Save current configuration in MDC Admin? [Y/N]:y
Please input the file name(*.cfg)[flash:/1.cfg]
(To leave the existing filename unchanged, press the enter key):
flash:/1.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
Chassis 1 Slot 17:
Save next configuration file successfully.
Save current configuration in MDC mdc1? [Y/N]:y
Please input the file name(*.cfg)[flash:/mdc1.cfg]
161
(To leave the existing filename unchanged, press the enter key):
flash:/mdc1.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
Chassis 1 Slot 16:
Save next configuration file successfully.
Related commands
•
display current-configuration
•
display saved-configuration
startup saved-configuration
In standalone mode:
Use startup saved-configuration to specify a file as a next-startup configuration file for both active MPU
and standby MPU.
Use undo startup saved-configuration to configure the active MPU and the standby MPU to start up with
factory defaults at the next startup.
In IRF mode:
Use startup saved-configuration to specify a file as a next-startup configuration file for all MPUs in the IRF
fabric.
Use undo startup saved-configuration to configure all MPUs to start up with factory defaults at the next
startup.
Syntax
startup saved-configuration cfgfile [ backup | main ]
undo startup saved-configuration
Default
No configuration file is specified for the next startup.
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
cfgfile: Specifies the name of a .cfg file. This .cfg file must already exist in the root directory of the storage
medium.
backup: Specifies the configuration file as the backup next-startup configuration file.
main: Specifies the configuration file as the main next-startup configuration file. This is the primary
configuration file that the device attempts to load at startup. If the loading attempt fails, the device tries
the backup next-startup configuration file.
162
Usage guidelines
CAUTION:
In an IRF fabric, use the undo startup saved-configuration command with caution. This command can
cause an IRF split after the IRF fabric or an IRF member reboots.
The startup saved-configuration command applies to all MPUs. To successfully configure the command,
make sure the following conditions are met:
•
In standalone mode, the specified file already exists in the root directories of the storage media on
both the active MPU and standby MPU.
•
In IRF mode, the specified file already exists in the root directory of the storage medium on each
MPU.
•
All MPUs use the same type of storage medium.
If neither backup nor main is specified, the startup saved-configuration command specifies the main
next-startup configuration file.
Even though the main and backup next-startup configuration files can be the same one, specify them as
separate files for high availability.
The undo startup saved-configuration command changes the file attribute of the main and backup
next-startup configuration files to NULL. However, the command does not delete the two configuration
files.
You can also specify a configuration file as a next startup file when you use the save command to save
the running configuration to it.
Examples
# Specify the main next-startup configuration file.
<Sysname> startup saved-configuration testcfg.cfg
Please wait ....
... Done!
Related commands
display startup
163
Software upgrade commands
boot-loader file
Use boot-loader file to specify startup software image files.
Syntax
In standalone mode:
boot-loader file boot boot-package system system-package [ feature feature-package&<1-30> ] { all |
slot slot-number } { backup | main }
boot-loader file ipe-filename { all | slot slot-number } { backup | main }
In IRF mode:
boot-loader file boot boot-package system system-package [ feature feature-package&<1-30> ] { all |
chassis chassis-number slot slot-number } { backup | main }
boot-loader file ipe-filename { all | chassis chassis-number slot slot-number } { backup | main }
Views
User view
Predefined user roles
network-admin
Parameters
boot boot-package: Specifies the file path of a .bin boot image file, a case-insensitive string. The
maximum length is 63 characters for the storage-medium:/base-filename.bin segments of the file path.
This length limit does not include the IRF member ID or slot number in front of the storage medium
segment. For more information about specifying a file path, see "Managing the file system."
system system-package: Specifies the file path of a .bin system image file, a case-insensitive string. The
maximum length is 63 characters for the storage-medium:/base-filename.bin segments of the file path.
This length limit does not include the IRF member ID or slot number in front of the storage medium
segment. For more information about specifying a file path, see "Managing the file system."
feature feature-package: Specifies a space-separated list of up to 30 .bin feature image file paths. Each
file path is a case-insensitive string. The maximum length is 63 characters for the
storage-medium:/base-filename.bin segments of the file path. This length limit does not include the IRF
member ID or slot number in front of the storage medium segment. For more information about specifying
a file path, see "Managing the file system."
ipe-filename: Specifies the file path of an .ipe image package file, a case-insensitive string. The
maximum length is 63 characters for the storage-medium:/base-filename.ipe segments of the file path.
This length limit does not include the IRF member ID or slot number in front of the storage medium
segment.
all: Upgrades the entire system. You can use this keyword to upgrade MPUs in bulk. The system will
automatically copy images to MPUs.
164
slot slot-number: Upgrades an MPU. The slot-number argument represents the slot number of the MPU. (In
standalone mode.)
chassis chassis-number slot slot-number: Upgrades an MPU on an IRF member device. The
chassis-number argument represents the member ID of the IRF member device. The slot-number argument
represents the slot number of the MPU. (In IRF mode.)
backup: Specifies the files as backup startup files. Backup startup images are used only when main
images are not available.
main: Specifies the files as main startup files. The device always first attempts to start up with main startup
files.
Usage guidelines
Before specifying startup software images, you must save the upgrade file to the root directory of a
storage medium on any one of the MPUs. If the storage medium is partitioned, save the files to the root
directory of the first partition.
For more information about licensing, see Fundamentals Configuration Guide.
The system automatically copies the upgrade file to the flash memory on the MPU you are upgrading,
and sets images in the file as startup images. If a file with the same name as the upgrade file already
exists, you must choose whether to overwrite the existing file. If you specify an .ipe file, the system
prompts for a choice to delete or retain the .ipe file after it successfully sets the .bin startup images. To
delete the .ipe file, enter y at the prompt.
The boot-loader file command overwrites the entire startup software image list. To add new startup
feature images, specify all feature package files, including feature package files in the old startup
software image list. The new startup software image list will contain only the feature package files that
are specified in the command.
Examples
# (In standalone mode.) Specify flash:/all.ipe as the backup startup image file for the MPU in slot 17.
<Sysname> boot-loader file flash:/all.ipe slot 17 backup
Verifying image file......Done.
Images in IPE:
boot.bin
system.bin
ssh.bin
This command will set the backup startup software images. Continue? [Y/N]:Y
Add images to target slot.
flash:/boot.bin already exists on slot 17.
flash:/system.bin already exists on slot 17.
flash:/ssh.bin already exists on slot 17.
Overwrite it? [Y/N]:y
Decompressing file boot.bin to flash:/boot.bin....................................Done.
Decompressing file system.bin to flash:/system.bin................................Done.
The images that have passed all examinations will be used as the backup startup software
images at the next reboot on slot 17.
Decompression completed.
Do you want to delete flash:/all.ipe now? [Y/N]:Y
# (In IRF mode.) Specify flash:/all.ipe as the backup startup image file for the MPU in slot 17 on IRF
member device 1.
<Sysname> boot-loader file flash:/all.ipe chassis 1 slot 17 backup
165
Verifying image file......Done.
Images in IPE:
boot.bin
system.bin
ssh.bin
This command will set the backup startup software images. Continue? [Y/N]:Y
Add images to target slot.
flash:/boot.bin already exists on chassis 1 slot 17.
flash:/system.bin already exists on chassis 1 slot 17.
flash:/ssh.bin already exists on chassis 1 slot 17.
Overwrite it? [Y/N]:y
Decompressing file boot.bin to flash:/boot.bin....................................Done.
Decompressing file system.bin to flash:/system.bin................................Done.
The images that have passed all examinations will be used as the backup startup software
images at the next reboot on chassis 1 slot 17.
Decompression completed.
Do you want to delete flash:/all.ipe now? [Y/N]:Y
Related commands
•
display boot-loader
boot-loader update
In standalone mode:
Use boot-loader update to synchronize startup images from the active MPU to the standby MPU.
In IRF mode:
Use boot-loader update to synchronize startup images from the global active MPU to a standby MPU.
Syntax
In standalone mode:
boot-loader update { all | slot slot-number }
In IRF mode:
boot-loader update { all | chassis chassis-number slot slot-number }
Views
User view
Predefined user roles
network-admin
Parameters
all: Specifies the standby MPU. (In standalone mode.)
all: Specifies all standby MPUs in the IRF fabric. (In IRF mode.)
slot slot-number: Specifies the slot number of the standby MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a standby MPU of the global active MPU. The
chassis-number argument represents the IRF member ID of the device that holds the standby MPU. The
slot-number argument represents the slot number of the standby MPU. (In IRF mode.)
166
Usage guidelines
You can use this command to synchronize startup images after adding new MPUs.
The images used for synchronization are in the main or backup startup software images list instead of the
current software images list (see the display boot-loader command).
•
The main images list is used if the active MPU or global active MPU started up with the main startup
images.
•
The backup image list is used if the active MPU or global active MPU started up with the main
startup images.
The startup images synchronized to the standby MPU are set as main startup images, regardless of
whether the source startup images are main or backup.
To avoid problems, make sure the image list used for synchronization is the same as the current software
images list.
Startup image synchronization fails if any software image being synchronized is not available or is
corrupted.
Examples
# (In standalone mode.) Synchronize startup images from the active MPU to the standby MPU in slot 16.
<Sysname> boot-loader update slot 16
This command will update the specified standby MPU. Continue? [Y/N]:y
Updating. Please wait...
Copying main startup software images to slot 16. Please wait...
Done.
Setting copied images as main startup software images for slot 16...
Done.
Successfully updated the startup software images of slot 16.
# (In IRF mode.) Synchronize startup images from the global active MPU to the MPU in slot 16 on IRF
member device 1.
<Sysname> boot-loader update chassis 1 slot 16
This command will update the specified standby MPU. Continue? [Y/N]:y
Updating. Please wait...
Copying main startup software images to chassis 1 slot 16. Please wait...
Done.
Setting copied images as main startup software images for chassis 1 slot 16...
Done.
Successfully updated the startup software images of chassis 1 slot 16.
Related commands
display boot-loader
bootrom backup
Use bootrom backup to back up the BootWare image in the Normal area to the Backup area on a
BootWare.
Syntax
In standalone mode:
bootrom backup slot slot-number-list
167
In IRF mode:
bootrom backup chassis chassis-number slot slot-number-list
Views
User view
Predefined user roles
network-admin
Parameters
slot slot-number-list: Specifies a space-separated list of up to seven slot number items. An item specifies
a card by its slot number or specifies a range of cards in the form of start-slot-number to end-slot-number.
The end slot number must be equal to or greater than the start slot number. (In standalone mode.)
chassis chassis-number slot slot-number-list: Specifies cards on an IRFmember device. The
chassis-number argument represents the member ID of the IRF member device. The slot-number-list
argument represents a space-separated list of up to seven slot number items. An item specifies a card by
its slot number, a range of cards in the form of start-slot-number to end-slot-number. The end slot number
must be equal to or greater than the start slot number. (In IRF mode.)
Usage guidelines
A BootWare is divided into a Normal area and a Backup area. The BootWare image is stored in the
Normal area and backed up to the Backup area. At startup, the system reads the BootWare image
automatically from the Normal area. If the image is inaccessible, the system reads the BootWare image
from the Backup area.
If the BootWare image in the Normal area is corrupted or requires a version rollback, use the bootrom
restore command to copy the BootWare image in the Backup area to the Normal area.
Examples
# Back up the entire BootWare image from the Normal area to the Backup area on slot 17.
<Sysname> bootrom backup slot 17
Now backuping the Boot ROM, please wait...
......Done.
Related commands
bootrom restore
bootrom restore
Use bootrom restore to replace the BootWare image in the Normal area with the BootWare image in the
Backup area for image restoration or version rollback.
Syntax
In standalone mode:
bootrom restore slot slot-number-list
In IRF mode:
bootrom restore chassis chassis-number slot slot-number-list
Views
User view
168
Predefined user roles
network-admin
Parameters
slot slot-number-list: Specifies a space-separated list of up to seven slot number items. An item specifies
a card by its slot number or specifies a range of cards in the form of start-slot-number to end-slot-number.
The end slot number must be equal to or greater than the start slot number. (In standalone mode.)
chassis chassis-number slot slot-number-list: Specifies cards on an IRFmember device. The
chassis-number argument represents the member ID of the IRF member device. The slot-number-list
argument represents a space-separated list of up to seven slot number items. An item specifies a card by
its slot number, a range of cards in the form of start-slot-number to end-slot-number. The end slot number
must be equal to or greater than the start slot number. (In IRF mode.)
Examples
# (In standalone mode.) Restore the entire BootWare image.
<Sysname> bootrom restore slot 17
This command will restore the Boot ROM file, Continue? [Y/N]:y
Now restoring the Boot ROM, please wait...
......Done.
# (In IRF mode.) Restore the entire BootWare image.
<Sysname> bootrom restore chassis 1 slot 17
This command will restore the Boot ROM file, Continue? [Y/N]:y
Now restoring the Boot ROM, please wait...
......Done.
Related commands
bootrom backup
bootrom update
Use bootrom update to load the BootWare image in a storage medium to the Normal area of BootWare.
Syntax
In standalone mode:
bootrom update file file-url slot slot-number-list
In IRF mode:
bootrom update file file-url chassis chassis-number slot slot-number-list
Views
User view
Predefined user roles
network-admin
Parameters
file file-url: Specifies a .bin image file path, a case-insensitive string. The maximum length is 63
characters for the storage-medium:/base-filename.bin segments of the file path. The file must be stored
in the root directory of the storage medium on any one of the MPUs. This length limit does not include the
169
IRF member ID or slot number in front of the storage medium segment. For more information about
specifying a file path, see "Managing the file system."
slot slot-number-list: Specifies a space-separated list of up to seven slot number items. An item specifies
a card by its slot number or specifies a range of cards in the form of start-slot-number to end-slot-number.
The end slot number must be equal to or greater than the start slot number. (In standalone mode.)
chassis chassis-number slot slot-number-list: Specifies cards on an IRFmember device. The
chassis-number argument represents the member ID of the IRF member device. The slot-number-list
argument represents a space-separated list of up to seven slot number items. An item specifies a card by
its slot number, a range of cards in the form of start-slot-number to end-slot-number. The end slot number
must be equal to or greater than the start slot number. (In IRF mode.)
Usage guidelines
If a software upgrade requires upgrading the BootWare image, you can use this command to preload
the new BootWare image to the BootWare before upgrading Comware images. This command helps
shorten the subsequent upgrade time, reducing the risk of upgrade failure caused by unexpected
electricity failure.
The BootWare image is contained in the Boot image file. To upgrade the BootWare image separately,
use the Boot image file.
To complete the upgrade, reboot the device.
To save space, you can delete the BootWare image in the storage medium after completing the
BootWare image upgrade.
Examples
# (In standalone mode.) Use the file a.bin to upgrade the BootWare image.
<Sysname> bootrom update file flash:/a.bin slot 17
This command will update the Boot ROM file on the specified board(s), Continue? [Y/N]:y
Now updating the Boot ROM, please wait...
.............Done.
# (In IRF mode.) Use the file a.bin to upgrade the BootWare image.
<Sysname> bootrom update file flash:/a.bin chassis 1 slot 17
This command will update the Boot ROM file on the specified board(s), Continue? [Y/N]:y
Now updating the Boot ROM, please wait...
.............Done.
Related commands
boot-loader file
bootrom-update security-check enable
Use bootrom-update security-check enable to enable BootWare image validity check.
Use undo bootrom-update security-check enable to disable BootWare image validity check.
Syntax
bootrom-update security-check enable
undo bootrom-update security-check enable
Default
BootWare image validity check is enabled.
170
Views
System view
Predefined user roles
network-admin
Usage guidelines
Before a BootWare image upgrade starts, this function examines the upgrade BootWare image for file
validity and incompatibility with hardware. If the BootWare image passes the check, the upgrade
process starts. If not, the system does not perform the upgrade.
Examples
# Enable BootWare image validity check.
<Sysname> system-view
[Sysname] bootrom-update security-check enable
display boot-loader
Use display boot-loader to display current software images and startup software images.
Syntax
In standalone mode:
display boot-loader [ slot slot-number ]
In IRF mode:
display boot-loader [ chassis chassis-number slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies the slot number of an MPU. If you do not specify an MPU, this command
displays the software images on each MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the
slot number of the card. If you do not specify a card, this command displays startup images on all cards.
(In IRF mode.)
Examples
# (In standalone mode.) Display current software images and startup software images.
<Sysname> display boot-loader
Software images on slot 17:
Current software images:
flash:/12900-CMW710-BOOT-E1002P06.bin
flash:/12900-CMW710-SYSTEM-E1002P06.bin
Main startup software images:
171
flash:/12900-CMW710-BOOT-E1002P06.bin
flash:/12900-CMW710-SYSTEM-E1002P06.bin
flash:/12900-CMW710-SSH-E1002P06.bin
Backup startup software images:
flash:/12900-CMW710-BOOT-E1002P06.bin
flash:/12900-CMW710-SYSTEM-E1002P06.bin
# (In IRF mode.) Displays current software images and startup software images.
<Sysname> display boot-loader
Software images on chassis 1 slot 16:
Current software images:
flash:/12900-CMW710-BOOT-E1002P06.bin
flash:/12900-CMW710-SYSTEM-E1002P06.bin
Main startup software images:
flash:/12900-CMW710-BOOT-E1002P06.bin
flash:/12900-CMW710-SYSTEM-E1002P06.bin
flash:/12900-CMW710-SSH-E1002P06.bin
Backup startup software images:
flash:/12900-CMW710-BOOT-E1002P06.bin
flash:/12900-CMW710-SYSTEM-E1002P06.bin
Table 20 Command output
Field
Description
Software images on slot slot-number
In standalone mode, this field displays the Comware images on
the MPU in the specified slot.
Software images on chassis chassis-id slot
slot-number
In IRF mode, this field displays the Comware images on the
specified MPU. The chassis ID represents the IRF member ID, and
the slot number represents the MPU's slot number.
Current software images
Comware images that have been loaded.
Main startup software images
Main Comware images for the next startup.
Backup startup software images
Backup Comware images for the next startup.
Related commands
boot-loader file
display install active
Use display install active to display active software images.
Syntax
In standalone mode:
display install active [ slot slot-number ] [ verbose ]
In IRF mode:
display install active [ chassis chassis-number slot slot-number ] [ verbose ]
Views
Any view
172
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays
information for all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the
slot number of the card. If you do not specify a card, this command displays information for all cards. (In
IRF mode.)
verbose: Displays detailed information. If you do not specify this keyword, the command displays only
names of active software images.
Examples
# (In standalone mode.) Display brief information about active software images.
<HP>display install active
Active packages on slot 2:
flash:/BOOT-R1032.bin
flash:/SYSTEM-R1032.bin
flash:/BOOT-R1032H05.bin
flash:/SYSTEM-R1032H05.bin
Active packages on slot 10:
flash:/BOOT-R1032.bin
flash:/SYSTEM-R1032.bin
flash:/BOOT-R1032H05.bin
flash:/SYSTEM-R1032H05.bin
Active packages on slot 17:
flash:/BOOT-R1032.bin
flash:/SYSTEM-R1032.bin
flash:/BOOT-R1032H05.bin
flash:/SYSTEM-R1032H05.bin
# (In IRF mode.) Display brief information about active software images.
<HP>display install active
Active packages on Chassis 1 slot 2:
flash:/BOOT-R1032.bin
flash:/SYSTEM-R1032.bin
flash:/BOOT-R1032H05.bin
flash:/SYSTEM-R1032H05.bin
Active packages on Chassis 1 slot 10:
flash:/BOOT-R1032.bin
flash:/SYSTEM-R1032.bin
flash:/BOOT-R1032H05.bin
flash:/SYSTEM-R1032H05.bin
Active packages on Chassis 1 slot 17:
flash:/BOOT-R1032.bin
flash:/SYSTEM-R1032.bin
flash:/BOOT-R1032H05.bin
173
flash:/SYSTEM-R1032H05.bin
Related commands
install active
display install committed
Use display install committed to display main startup software images.
Syntax
In standalone mode:
display install committed [ slot slot-number ] [ verbose ]
In IRF mode:
display install committed [ chassis chassis-number slot slot-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays
information for all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the
slot number of the card. If you do not specify a card, this command displays information for all cards. (In
IRF mode.)
verbose: Displays detailed information. If you do not specify this keyword, the command displays only
names of main startup software images.
Usage guidelines
After you execute the install commit command, use the display install committed command to verify that
the main startup image list has been updated with the software image change.
Both the install commit and boot-loader file commands modify the main startup software image list.
Examples
# (In standalone mode.) Display brief information about main startup software images.
<Sysname> display install committed
Committed packages on slot 17:
flash:/BOOT-R1032.bin
flash:/SYSTEM-R1032.bin
flash:/BOOT-R1032H05.bin
flash:/SYSTEM-R1032H05.bin
# (In IRF mode.) Display brief information about main startup software images.
<Sysname> display install committed
Committed packages on chassis 1 slot 17:
174
flash:/BOOT-R1032.bin
flash:/SYSTEM-R1032.bin
flash:/BOOT-R1032H05.bin
flash:/SYSTEM-R1032H05.bin
# (In standalone mode.) Display detailed information about main startup software images.
<Sysname> display install committed verbose
Committed packages on slot 17:
flash:/BOOT-R1032.bin
[Package]
Vendor: HP
Product: 12900
Service name: boot
Platform version: 7.1.045P18
Product version: Release 1032
Supported board: mpu lpu
[Component]
Component: boot
Description: boot package
flash:/SYSTEM-R1032.bin
[Package]
Vendor: HP
Product: 12900
Service name: system
Platform version: 7.1.045
Product version: Release 1032
Supported board: mpu lpu
[Component]
Component: system
Description: system package
flash:/BOOT-R1032H05.bin
[Package]
Vendor: HP
Product: 12900
Service name: boot-patch
Platform version: P005
Product version: Release 1032
Supported board: mpu lpu
Component: boot-patch
Description: boot-patch package
flash:/SYSTEM-R1032H05.bin
[Package]
Vendor: HP
Product: 12900
Service name: system-patch
Platform version: P005
175
Product version: Release 1032
Supported board: mpu lpu
Component: system-patch
Description: system-patch package
# (In IRF mode.) Display detailed information about main startup software images.
<Sysname> display install committed verbose
Committed packages on chassis 1 slot 17:
flash:/BOOT-R1032.bin
[Package]
Vendor: HP
Product: 12900
Service name: boot
Platform version: 7.1.045P18
Product version: Release 1032
Supported board: mpu lpu
[Component]
Component: boot
Description: boot package
flash:/SYSTEM-R1032.bin
[Package]
Vendor: HP
Product: 12900
Service name: system
Platform version: 7.1.045
Product version: Release 1032
Supported board: mpu lpu
[Component]
Component: system
Description: system package
flash:/BOOT-R1032H05.bin
[Package]
Vendor: HP
Product: 12900
Service name: boot-patch
Platform version: P005
Product version: Release 1032
Supported board: mpu lpu
Component: boot-patch
Description: boot-patch package
flash:/SYSTEM-R1032H05.bin
[Package]
Vendor: HP
Product: 12900
Service name: system-patch
Platform version: P005
176
Product version: Release 1032
Supported board: mpu lpu
Component: system-patch
Description: system-patch package
Table 21 Command output
Field
Description
[Package]
Detailed information about the software image.
Image type:
Service name
•
•
•
•
•
boot—Boot image.
system—System image.
system-patch—System image patch.
boot-patch—Boot image patch.
Any other value indicates a feature image.
Platform version
Platform software version.
Product version
Product software version.
Supported board
• mpu—Main processing unit.
• lpu—Interface cards and switching fabric modules.
[Component]
Information about components included in the image file.
Component
Component name.
Description
Component description.
Cards supported by the software image:
Related commands
•
boot-loader file
•
display install backup
•
install commit
install activate
Use install activate to activate patch images.
Syntax
In standalone mode:
install activate patch filename { all | slot slot-number }
In IRF mode:
install activate patch filename { all | chassis chassis-number slot slot-number }
Views
User view
Predefined user roles
network-admin
177
Parameters
patch: Specifies a patch image file.
filename: Specifies the file path of a .bin patch image, a case-insensitive string. The maximum length is
63 characters for the storage-medium:/base-filename.bin segments of the file path. This length limit does
not include the IRF member ID or slot number in front of the storage medium segment. The file must be
stored in the root directory of a storage medium on any one of the MPUs. For more information about
specifying a file path, see "Managing the file system."
all: Specifies all cards. (In standalone mode.)
slot slot-number: Specifies a card by its member ID. (In standalone mode.)
all: Specifies all cards. (In IRF mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the
slot number of the card. (In IRF mode.)
Usage guidelines
This command adds patch images to the current image list. The images run immediately after they are
activated. For the image to run at the next startup, you must execute the install commit command.
You can save the patch image file in the root directory of a storage medium on any one of the MPUs. The
install activate command automatically copies the file to the specified cards. The destination directory is
the root directory.
On a standalone device, LPUs are automatically patched when you activate patches on the active MPU.
On an IRF fabric, LPUs are automatically patched when you activate patches on the global active MPU.
Examples
# (In standalone mode.) Activate system-patch.bin and boot-patch.bin on the active MPU in slot 17.
<Sysname> install activate boot-patch.bin slot 17
This operation maybe take several minutes, please wait..........................Done.
<Sysname> install activate system-patch.bin slot 17
This operation maybe take several minutes, please wait..........................Done.
# (In IRF mode.) Activate system-patch.bin and boot-patch.bin on the global active MPU in slot 17 of
member device 1.
<Sysname> install activate boot-patch.bin chassis 1 slot 17
This operation maybe take several minutes, please wait..........................Done.
<Sysname> install activate system-patch.bin chassis 1 slot 17
This operation maybe take several minutes, please wait..........................Done.
Related commands
•
install commit
•
install deactivate
install commit
Use install commit to commit software changes.
Syntax
install commit
178
Views
User view
Predefined user roles
network-admin
Usage guidelines
This command updates the main startup software image list with software changes introduced by
activating or deactivating patches.
For software changes to take effect at the next startup, you must execute this command after executing the
install activate or install deactivate command.
Examples
# Commit software changes.
<Sysname> install commit
Related commands
•
install activate
•
install deactivate
install deactivate
Use install deactivate to deactivate patch images.
Syntax
In standalone mode:
install deactivate patch filename { all | slot slot-number }
In IRF mode:
install deactivate patch filename { all | chassis chassis-number slot slot-number }
Views
User view
Predefined user roles
network-admin
Parameters
patch: Specifies a patch image file.
filename: Specifies the file path of a .bin patch image file, a case-insensitive string of up to 63 characters
in the storage-medium:/base-filename.bin format. The file must be stored in the root directory of the
storage medium. The file path cannot include slot or chassis information.
all: Specifies all cards. (In standalone mode.)
slot slot-number: Specifies a card by its member ID. (In standalone mode.)
all: Specifies all cards. (In IRF mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the
slot number of the card. (In IRF mode.)
179
Usage guidelines
You can deactivate only active patch images.
On a standalone device, you must make sure the image exists on the active MPU. On an IRF fabric, you
must make sure the image exists on the global active MPU.
Patch images are removed from the current software image list and stop working immediately after they
are deactivated. To prevent deactivated images from running after a reboot, you must commit the
software changes by using the install commit command.
Examples
# Deactivate system-patch.bin on the MPU in slot 17.
<Sysname> install deactivate patch flash:/ route -patch.bin slot 17
Related commands
•
display install active
•
display install inactive
version auto-update enable
Use version auto-update enable to enable software synchronization from the active MPU to the standby
MPU at startup.
Use undo version auto-update enable to disable the function.
Syntax
version auto-update enable
undo version auto-update enable
Default
If software inconsistency is detected at startup, the standby MPU loads the current software images of the
active MPU.
Views
System view
Predefined user roles
network-admin
Usage guidelines
This command is available in standalone mode.
To ensure that the standby MPU always runs the same software images as the active MPU, configure both
the version auto-update enable command and the undo version check ignore command.
The startup software version check function examines the standby MPU's startup software images for
version inconsistency with the active MPU's current software images at startup. If their software versions
are different, the standby MPU copies the current software images of the active MPU, specifies them as
main startup software images, and reboots with these images.
To ensure a successful synchronization in a multiuser environment, make sure no one reboots or swaps
MPUs during the software synchronization process. You can configure the information center to output
the synchronization status to configuration terminals (see Network Management and Monitoring
Configuration Guide).
180
Examples
# Enable software auto-update for the standby MPU.
<Sysname> system-view
[Sysname] version auto-update enable
Related commands
version check ignore
version check ignore
Use version check ignore to disable startup software version check for the standby MPU at startup.
Use undo version check ignore to enable this function.
Syntax
version check ignore
undo version check ignore
Default
The startup software images on the standby MPU are checked for version inconsistency with the current
software images on the active MPU.
Views
System view
Predefined user roles
network-admin
Usage guidelines
This command is available in standalone mode.
When the standby MPU starts up, this command disables the system to examine the standby MPU's
startup software images for version inconsistency with the active MPU's current software images. The
standby MPU can start up with a different software version than the active MPU.
The startup software version check function might fail to work because the software versions of the MPUs
are incompatible.
To avoid problems, do not disable startup software version check for the standby MPU unless for software
upgrade.
To make sure the standby MPU always runs the same software images as the active MPU, configure both
the version auto-update enable command and the undo version check ignore command.
Examples
# Enable startup software version check for the standby MPU.
<Sysname> system-view
[Sysname] undo version check ignore
Related commands
version auto-update enable
181
Device management commands
clock datetime
Use clock datetime to set the UTC time.
Syntax
clock datetime time date
Default
The factory default UTC time is used.
Views
User view
Predefined user roles
network-admin
Parameters
time: Specifies a time in the hh:mm:ss format. The value range for hh is 0 to 23. The value range for mm
is 0 to 59. The value range for ss is 0 to 59. The leading zero in a segment can be omitted. If the seconds
segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds segments are 0 (hh:00:00),
you can omit both of the segments. For example, to specify 08:00:00, you can enter 8.
date: Specifies a date in the format of MM/DD/YYYY or YYYY/MM/DD. The value range for YYYY is
2000 to 2035. The value range for MM is 1 to 12. The value range for DD varies by month.
Usage guidelines
When the system time source is the local system time, the system time varies by the following items:
•
Local time zone.
•
UTC time.
•
Daylight saving time.
To view the system time, use the display clock command.
The correct system time setting is essential to network management and communication. Set the system
time correctly or use NTP to synchronize the device with a trusted time source before you run it on the
network.
Examples
# Set the UTC time to 08:08:08 01/01/2012.
<Sysname> clock datetime 8:8:8 1/1/2012
# Set the UTC time to 08:10:00 01/01/2012.
<Sysname> clock datetime 8:10 2012/1/1
Related commands
•
clock protocol
•
clock summer-time
182
•
clock timezone
•
display clock
clock protocol
Use clock protocol to specify the system time source.
Use undo clock protocol to restore the default.
Syntax
clock protocol { none | ntp mdc mdc-id }
undo clock protocol
Default
The default MDC on the device uses NTP to get the system time.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
none: Uses the local clock. After you specify this keyword, you can use the clock datetime, clock
timezone, or clock summer-time command to change the system time.
ntp: Uses the time protocol NTP. If you specify this keyword, you cannot change the system time at the
CLI. You must configure NTP to get the system time. For more information about NTP, see Network
Management and Monitoring Configuration Guide.
mdc mdc-id: Specifies the MDC to be used as the time source, in the range of 1 to 9.
Usage guidelines
If you configure this command multiple times, the most recent configuration takes effect.
The entire device uses one clock. All MDCs on the device use the same system time.
You can perform either of the following tasks:
•
Configure the system time on the device, and use this command to configure the device to use the
local time source.
•
Configure a time protocol on one MDC, and use this command to configure the device to use the
time source of the MDC. For more information about how to configure a time protocol on one MDC,
see Network Management and Monitoring Configuration Guide.
Only the default MDC can act as the local time source because only the default MDC has a local
oscillator.
To use the time source of an MDC, make sure the time protocol configured on the MDC is the same as
the time protocol specified for this command.
Examples
# Configure the device to use the NTP time source on MDC 2.
<Sysname> system-view
183
[Sysname] clock protocol ntp mdc 2
clock summer-time
Use clock summer-time to configure the device to use daylight saving time during a specific period of
time.
Use undo clock summer-time to cancel the configuration.
Syntax
clock summer-time name start-time start-date end-time end-date add-time
undo clock summer-time
Default
Daylight saving time is disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
name: Specifies a name for the daylight saving time schedule, a case-sensitive string of 1 to 32
characters.
start-time: Specifies the start time in the hh:mm:ss format. The value range for hh is 0 to 23. The value
range for mm is 0 to 59. The value range for ss is 0 to 59. The leading zero in a segment can be omitted.
If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds segments are
0 (hh:00:00), you can omit both of the segments. For example, to specify 08:00:00, you can enter 8.
start-date: Specifies the start date in one of the following formats:
•
MM/DD. The value range for MM is 1 to 12. The value range for DD varies by month.
•
month week date, where:
{
month—Takes January, February, March, April, May, June, July, August, September, October,
November or December.
{
week—Represents week of the month. It takes first, second, third, fourth, fifth, or last.
{
day—Takes Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, or Saturday.
end-time: Specifies the end time in the hh:mm:ss format. The value range for hh is 0 to 23. The value
range for mm is 0 to 59. The value range for ss is 0 to 59. The leading zero in a segment can be omitted.
If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds segments are
0 (hh:00:00), you can omit both of the segments. For example, to specify 08:00:00, you can enter 8.
end-date: Specifies the end date in one of the following formats:
•
MM/DD. The value range for MM is 1 to 12. The value range for DD varies by month.
•
month week date, where:
{
{
month—Takes January, February, March, April, May, June, July, August, September, October,
November or December.
week—Represents week of the month. It takes first, second, third, fourth, fifth, or last.
184
{
day—Takes Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, or Saturday.
add-time: Specifies the time to be added to the standard time, in the hh:mm:ss format. The value range
for hh is 0 to 23. The value range for mm is 0 to 59. The value range for ss is 0 to 59. The leading zero
in a segment can be omitted. If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes
and seconds segments are 0 (hh:00:00), you can omit both of the segments. For example, to specify
08:00:00, you can enter 8.
Usage guidelines
When the system time source is the local system time, the system time varies by the following items:
•
Local time zone.
•
UTC time.
•
Daylight saving time.
To view the system time, use the display clock command.
The correct system time setting is essential to network management and communication. Set the system
time correctly or use NTP to synchronize the device with a trusted time source before you run it on the
network.
Examples
# Set the system time ahead 1 hour for the period between 06:00:00 on 08/01 and 06:00:00 on
09/01.
<Sysname> system-view
[Sysname] clock summer-time PDT 6 08/01 6 09/01 1
Related commands
•
clock protocol
•
clock timezone
•
display clock
clock timezone
Use clock timezone to set the local time zone.
Use undo clock timezone to restore the default.
Syntax
clock timezone zone-name { add | minus } zone-offset
undo clock timezone
Default
The local time zone is the UTC time zone.
Views
System view
Predefined user roles
network-admin
mdc-admin
185
Parameters
zone-name: Specifies a time zone by its name, a case-sensitive string of 1 to 32 characters.
add: Adds an offset to the UTC time.
minus: Decreases the UTC time by an offset.
zone-offset: Specifies an offset to the UTC time, in the hh:mm:ss format. The value range for hh is 0 to 23.
The value range for mm is 0 to 59. The value range for ss is 0 to 59. The leading zero in a segment can
be omitted. If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds
segments are 0 (hh:00:00), you can omit both of the segments. For example, to specify 08:00:00, you
can enter 8.
Usage guidelines
When the system time source is the local system time, the system time varies by the following items:
•
Local time zone.
•
UTC time.
•
Daylight saving time.
To view the system time, use the display clock command.
The correct system time setting is essential to network management and communication. Set the system
time correctly or use NTP to synchronize the device with a trusted time source before you run it on the
network.
Examples
# Set the name of the local time zone to Z5, and add 5 hours to the UTC time.
<Sysname> system-view
[Sysname] clock timezone Z5 add 5
Related commands
•
clock datetime
•
clock protocol
•
clock summer-time
•
display clock
command
Use command to assign a command to a job.
Use undo command to revoke a command.
Syntax
command id command
undo command id
Default
No command is assigned to a job.
Views
Job view
186
Predefined user roles
network-admin
mdc-admin
Parameters
id: Specifies an ID for the command, in the range of 0 to 4294967295. A command ID uniquely identifies
a command in a job. Commands in a job are executed in ascending order.
command: Specifies the command to be assigned to the job.
Usage guidelines
If a command uses the ID of an existing command, the existing command is replaced.
A job cannot contain any of these commands: telnet, ftp, ssh2, or monitor process.
The system does not check the validity of the command argument. You must make sure the command is
supported by the device, is input in the correct format, and uses valid values. If these requirements are not
met, the command cannot be executed automatically.
Examples
# Assign commands to job backupconfig to back up configuration file startup.cfg to the TFTP server at
192.168.100.11.
<Sysname> system-view
[Sysname] scheduler job backupconfig
[Sysname-job-backupconfig] command 2 tftp 192.168.100.11 put flash:/startup.cfg
backup.cfg
Related commands
scheduler job
copyright-info enable
Use copyright-info enable to enable displaying the copyright statement.
Use undo copyright-info enable to disable displaying the copyright statement.
Syntax
copyright-info enable
undo copyright-info enable
Default
The copyright statement is displayed.
Views
System view
Predefined user roles
network-admin
mdc-admin
Examples
# Enable displaying the copyright statement.
<Sysname> system-view
187
[Sysname] copyright-info enable
•
When a Telnet user logs in, the following statement appears:
**************************************************************************
* Copyright (c) 2010-2014 Hewlett-Packard Development Company, L.P.
*
* Without the owner's prior written consent,
*
* no decompiling or reverse-engineering shall be allowed.
*
****************************************************************************
<Sysname>
•
When a console user quits user view, the following message appears:
**************************************************************************
* Copyright (c) 2010-2014 Hewlett-Packard Development Company, L.P.
*
* Without the owner's prior written consent,
*
* no decompiling or reverse-engineering shall be allowed.
*
****************************************************************************
User interface aux0 is available.
Press ENTER to get started.
# Disable displaying the copyright statement.
<Sysname> system-view
[Sysname] undo copyright-info enable
•
When a Telnet user logs in, the user view prompt appears:
<Sysname>
•
When a console user quits user view, the following message appears:
User interface aux0 is available.
Press ENTER to get started.
display alarm
Use display alarm to display alarm information.
Syntax
In standalone mode:
display alarm [ slot slot-number ]
In IRF mode:
display alarm [ chassis chassis-number slot slot-number ]
Views
Any view
188
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command
displays the alarm information for all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot
number of the card. If you do not specify this option, the command displays the alarm information for all
cards. (In IRF mode.)
Examples
# (In standalone mode) Display alarm information.
<Sysname> display alarm
Slot
CPU
Level
Info
-
-
ERROR
Fan 1 is faulty
-
-
INFO
Power 2 is absent.
-
-
INFO
Power 4 is absent.
-
-
INFO
Power 5 is absent.
-
-
INFO
Power 6 is absent.
-
-
INFO
Power 7 is absent.
-
-
INFO
Power 8 is absent.
Table 22 Command output
Field
Description
Slot
Slot number of the card. If the value is a hyphen (-), the alarm was generated by the
chassis.
CPU
Number of the CPU for the card.
Level
Alarm severity. Possible values include ERROR, WARNING, NOTICE, and INFO, in
descending order.
Info
Detailed alarm information.
xxx is faulty
The specified hardware is starting up or is faulty.
# In IRF mode, display alarm information.
<Sysname> display alarm
Chassis Slot
CPU
Level
Info
1
-
-
ERROR
Chassis 1 fan 1 is faulty
1
-
-
INFO
Chassis 1 power 2 is absent.
1
-
-
INFO
Chassis 1 power 4 is absent.
1
-
-
INFO
Chassis 1 power 5 is absent.
1
-
-
INFO
Chassis 1 power 6 is absent.
1
-
-
INFO
Chassis 1 power 7 is absent.
1
-
-
INFO
Chassis 1 power 8 is absent.
189
Table 23 Command output
Field
Description
Chassis
Member ID of the IRF member device.
Slot
Slot number of the card.
CPU
Number of the CPU for the card.
Level
Alarm severity. Possible values include ERROR, WARNING, NOTICE, and INFO,
in descending order.
Info
Detailed alarm information.
xxx is faulty.
The specified hardware is starting up or is faulty.
display asset-info
Use display asset-info to display the asset profile for a physical component, such as a chassis, card, fan
tray, or power supply.
Syntax
In standalone mode:
display asset-info { chassis | fan fan-id | power power-id | slot slot-number } [ csn | custom|
department | description | location | service-date | state ]
In IRF mode:
display asset-info chassis chassis-number { chassis | fan fan-id | power power-id | slot slot-number }
[ csn | custom| department | description | location | service-date | state ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
chassis: Specifies a chassis.
fan fan-id: Specifies a fan tray by its ID.
power power-id: Specifies a power supply by its ID.
slot slot-number: Specifies a card by its slot number.
csn: Specifies the user asset ID.
custom: Specifies the customized asset profile.
department: Specifies the department name in the asset profile.
description: Specifies the description in the asset profile.
190
location: Specifies the location in the asset profile.
service-date: Specifies the service start date in the asset profile.
state: Specifies the usage state in the asset profile.
chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.)
NOTE:
When you use this command to clear the asset profile of a power supply, only the csn keyword is
supported.
Usage guidelines
If you do not specify any asset attribute, the command displays all asset attributes for the specified
component.
If you specify a component that does not any asset information configured, the command displays an
empty field.
If you specify a fan tray or power supply that does not exist, the command prompts that the fan tray or
power supply is not present.
Examples
# In standalone mode, display the asset ID for fan tray 0.
<Sysname> display asset-info fan 0 csn
Type
: Fan 0
csn
: 123456
# In standalone mode, display the asset information for fan tray 0.
<Sysname> display asset-info fan 0
Type
: Fan 0
csn
: 123456
description : FAN 0
location
:
service-date:
department
: MKT
state
: Normal
custom:
# In IRF mode, display the asset ID for fan tray 0 on IRF member device 1.
<system-view> display asset-info chassis 1 fan 0 csn
Type
: Fan 0
csn
: 123456
# In IRF mode, display the asset information for fan tray 0 on IRF member device 1.
<Sysname> system-view
[Sysname] display asset-info chassis 1 fan 0
Type
: Fan 0
csn
: 123456
description : FAN 0
location
:
service-date:
department
: MKT
state
: Normal
191
custom:
Related commands
•
reset asset-info
•
set asset-info
display clock
Use display clock to display the system time, date, local time zone, and daylight saving time.
Syntax
display clock
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display the system time and date when the local time zone is not specified.
<Sysname> display clock
10:09:00 UTC Fri 03/16/2012
# Display the system time and date when the local time zone Z5 is specified.
<Sysname> display clock
15:10:00 Z5 Fri 03/16/2012
Time Zone : Z5 add 05:00:00
# Display the system time and date when the local time zone Z5 and daylight saving time PDT are
specified.
<Sysname> display clock
15:11:00 Z5 Fri 03/16/2012
Time Zone : Z5 add 05:00:00
Summer Time : PDT 06:00:00 08/01 06:00:00 09/01 01:00:00
Related commands
•
clock datetime
•
clock summer-time
•
clock timezone
display copyright
Use display copyright to display the copyright statement, including software and hardware copyright
statements.
192
Syntax
display copyright
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display the copyright statement.
<Sysname> display copyright
display cpu-usage
Use display cpu-usage to display CPU usage statistics.
Syntax
In standalone mode:
display cpu-usage [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display cpu-usage [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command
displays the CPU usage statistics for all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot
number of the card. If you do not specify this option on an IRF fabric, the command displays the CPU
usage statistics for all cards. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. The cpu-number argument is fixed at 0.
Usage guidelines
After startup, the device tracks the average CPU usage at the following intervals:
193
•
5 seconds.
•
1 minute.
•
5 minutes.
This command displays the average CPU usage values during the last 5-second, 1-minute, and 5-minute
intervals.
Examples
# In standalone mode, display the current CPU usage.
<Sysname> display cpu-usage
Slot 9 CPU 0 CPU usage:
6% in last 5 seconds
6% in last 1 minute
6% in last 5 minutes
Slot 10 CPU 0 CPU usage:
1% in last 5 seconds
1% in last 1 minute
2% in last 5 minutes
Slot 11 CPU 0 CPU usage:
1% in last 5 seconds
1% in last 1 minute
1% in last 5 minutes
Slot 17 CPU 0 CPU usage:
0% in last 5 seconds
0% in last 1 minute
0% in last 5 minutes
# In IRF mode, display the current CPU usage statistics for all cards.
<Sysname> display cpu-usage
Chassis 1 Slot 9 CPU 0 CPU usage:
5% in last 5 seconds
5% in last 1 minute
5% in last 5 minutes
Chassis 1 Slot 10 CPU 0 CPU usage:
1% in last 5 seconds
1% in last 1 minute
2% in last 5 minutes
Chassis 1 Slot 11 CPU 0 CPU usage:
1% in last 5 seconds
1% in last 1 minute
1% in last 5 minutes
Chassis 1 Slot 17 CPU 0 CPU usage:
4% in last 5 seconds
2% in last 1 minute
194
0% in last 5 minutes
Table 24 Command output
Field
Description
1% in last 5 seconds
Average CPU usage during the last 5-second interval.
1% in last 1 minute
Average CPU usage during the last 1-minute interval.
1% in last 5 minutes
Average CPU usage during the last 5-minute interval.
Slot x CPU y CPU 0 usage
Usage statistics for CPU y of the card in slot x. (In standalone mode.)
Chassis x Slot y CPU z CPU
usage
Usage statistics for CPU z of the card in slot y on member device x. (In IRF
mode.)
display cpu-usage configuration
Use display cpu-usage configuration to display CPU usage monitoring configuration.
Syntax
In standalone mode:
display cpu-usage configuration [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display cpu-usage configuration [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Views
Any view
Predefined user roles
network-admin
mdc-admin
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the active MPU is
specified. (In standalone mode.)
cpu cpu-number: Specifies a CPU by its number. The cpu-number argument is fixed at 0.
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot
number of the card. If you do not specify this option, the command displays the CPU usage monitoring
configuration for the global active MPU. (In IRF mode.)
Examples
# Display the CPU usage monitoring configuration for the active MPU.
<Sysname> display cpu-usage configuration
CPU usage monitor is enabled.
Current monitor interval is 60 seconds.
Current monitor threshold is 99%.
195
display cpu-usage history
Use display cpu-usage history to display the historical CPU usage statistics in charts.
Syntax
In standalone mode:
display cpu-usage history [ job job-id ] [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display cpu-usage history [ job job-id ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
job job-id: Specifies a process by its ID. If you do not specify this option, the command displays the
historical CPU usage statistics for the entire system. To view the IDs and names of the running processes,
use the display process command. For more information, see Network Management and Monitoring
Configuration Guide.
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command
displays the historical CPU usage statistics for the active MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot
number of the card. If you do not specify this option on an IRF fabric, the command displays the historical
CPU usage statistics for all cards. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. The cpu-number argument is fixed at 0.
Usage guidelines
The system regularly collects CPU usage statistics and saves the statistics in the history record area. This
command displays the CPU usage statistics for the last 60 minutes in axes as follows:
•
The vertical axis represents the CPU usage. If a statistic is not a multiple of the usage step, it is
rounded up or down to the closest multiple of the usage step. For example, if the CPU usage step is
5%, the statistic 53% is rounded up to 55%, and the statistic 52% is rounded down to 50%.
•
The horizontal axis represents the time.
•
Consecutive pound signs (#) indicate the CPU usage at a specific time. The value on the vertical
axis for the topmost pound sign at a specific time represents the CPU usage at that time.
Examples
# In standalone mode, display the historical CPU usage statistics for the entire system.
<Sysname> display cpu-usage history
100%|
95%|
196
90%|
85%|
80%|
75%|
70%|
65%|
60%|
55%|
50%|
45%|
40%|
35%|
30%|
25%|
20%|
15%|
#
10%|
###
5%|
#
########
-----------------------------------------------------------10
20
30
40
50
60
(minutes)
cpu-usage (slot 1 CPU 0) last 60 minutes (SYSTEM)
---- More ----
The output shows the historical CPU usage statistics for the entire system (with the name SYSTEM) in the
last 60 minutes.
•
12 minutes ago: Approximately 5%.
•
13 minutes ago: Approximately 10%.
•
14 minutes ago: Approximately 15%.
•
15 minutes ago: Approximately 10%.
•
16 and 17 minutes ago: Approximately 5%.
•
18 minutes ago: Approximately 10%.
•
19 minutes ago: Approximately 5%.
•
Other time: 2% or lower than 2%.
# In standalone mode, display the historical CPU usage statistics for process 1.
<Sysname> display cpu-usage history job 1
100%|
95%|
90%|
85%|
80%|
75%|
70%|
65%|
60%|
55%|
50%|
45%|
197
40%|
35%|
30%|
25%|
20%|
15%|
10%|
5%|
#
-----------------------------------------------------------10
20
30
40
50
60
(minutes)
cpu-usage (slot 17 CPU 0) last 60 minutes (scmd)
---- More ----
The output shows the historical CPU usage statistics of process 1 (with the process name scmd) in the last
60 minutes. A process name with square brackets ([ ]) means that the process is a kernel process.
•
20 minutes ago: Approximately 5%.
•
Other time: 2% or lower than 2%.
display device
Use display device to display device information.
Syntax
In standalone mode:
display device [ flash ] [ slot slot-number [ subslot subslot-number ] | verbose ]
In IRF mode:
display device [ flash ] [ chassis chassis-number [ slot slot-number [ subslot subslot-number ] ] | verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
flash: Specifies a Flash.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number: Specifies an IRF member device. The chassis-number argument specifies the
member ID of the IRF member device. If you do not specify this option, the command displays device
information for all IRF members. (In IRF mode.)
slot slot-number: Specifies a card on the IRF member device. If you do not specify this option and the
chassis chassis-number option specifies an IRF member device, the command displays device
information for all cards on the member device. (In IRF mode.)
198
subslot subslot-number: Specifies a subcard by its subslot number.
verbose: Displays detailed hardware information. If you do not specify this keyword, the command
displays brief information.
Usage guidelines
If the flash keyword is not provided, this command displays information about all cards on the device.
Examples
# In standalone mode, display device information.
<Sysname> display device
Slot No. Brd Type
Brd State
Subslot Sft Ver
Patch Ver
0
LSX1TGS48EA1
Normal
0
12900-1030L16
None
1
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2
LSX1TGS48EA1
Normal
0
12900-1030L16
None
3
LSX1TGS48EA1
Normal
0
12900-1030L16
None
4
LSX1TGS48EA1
Normal
0
12900-1030L16
None
5
LSX1QGS16EA1
Normal
0
12900-1030L16
None
6
LSX1QGS16EA1
Normal
0
12900-1030L16
None
7
LSX1QGS16EA1
Normal
0
12900-1030L16
None
8
LSX1QGS16EA1
Normal
0
12900-1030L16
None
9
LSX1QGS16EA1
Normal
0
12900-1030L16
None
10
LSX1FAB10B1
Normal
0
12900-1030L16
None
11
LSX1FAB10B1
Normal
0
12900-1030L16
None
12
LSX1FAB10B1
Normal
0
12900-1030L16
None
13
LSX1FAB10B1
Normal
0
12900-1030L16
None
14
LSX1FAB10B1
Normal
0
12900-1030L16
None
15
LSX1FAB10B1
Normal
0
12900-1030L16
None
16
LSX1SUP10A1
Standby
0
12900-1030L16
None
17
LSX1SUP10A1
Master
0
12900-1030L16
None
The output shows that the device has the following cards:
•
Two MPUs (in slots 16 and 17).
•
10 interface cards (in slots 0 through 9).
•
Six switching fabric modules (in slots 10 through 15).
Table 25 Command output
Field
Description
Slot No.
Slot number of the card.
Brd Type
Hardware type of the card.
Card status:
Brd State
•
•
•
•
•
Standby—The card is the standby MPU.
Master—The card is the active MPU.
Absent—The slot is not installed with a card.
Fault—The card is faulty and cannot start up.
Normal—The card is operating correctly.
Subslot
Maximum number of subcards that the card supports. The switch does not support subcards.
Sft Ver
Software version of the card.
199
Field
Description
Patch Ver
Patch version of the card.
# In IRF mode, display device information about all IRF member devices.
<Sysname> display device
Slot
Type
State
Soft Ver
Patch Ver
1/0
LSX1TGS48EA1
Normal
Subslot
0
12900-1030L16
None
1/1
LSX1TGS48EA1
Normal
0
12900-1030L16
None
1/2
LSX1TGS48EA1
Normal
0
12900-1030L16
None
1/3
LSX1TGS48EA1
Normal
0
12900-1030L16
None
1/4
LSX1TGS48EA1
Normal
0
12900-1030L16
None
1/5
LSX1TGS48EA1
Normal
0
12900-1030L16
None
1/6
LSX1TGS48EA1
Normal
0
12900-1030L16
None
1/7
LSX1TGS48EA1
Normal
0
12900-1030L16
None
1/8
LSX1TGS48EA1
Normal
0
12900-1030L16
None
1/9
LSX1TGS48EA1
Normal
0
12900-1030L16
None
1/10
LSX1FAB10B1
Normal
0
12900-1030L16
None
1/11
LSX1FAB10B1
Normal
0
12900-1030L16
None
1/12
LSX1FAB10B1
Normal
0
12900-1030L16
None
1/13
LSX1FAB10B1
Normal
0
12900-1030L16
None
1/14
LSX1FAB10B1
Normal
0
12900-1030L16
None
1/15
LSX1FAB10B1
Normal
0
12900-1030L16
None
1/16
LSX1SUP10A1
Standby
0
12900-1030L16
None
1/17
LSX1SUP10A1
Master
0
12900-1030L16
None
2/0
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2/1
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2/2
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2/3
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2/4
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2/5
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2/6
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2/7
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2/8
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2/9
LSX1TGS48EA1
Normal
0
12900-1030L16
None
2/10
LSX1FAB10B1
Normal
0
12900-1030L16
None
2/11
LSX1FAB10B1
Normal
0
12900-1030L16
None
2/12
LSX1FAB10B1
Normal
0
12900-1030L16
None
2/13
LSX1FAB10B1
Normal
0
12900-1030L16
None
2/14
LSX1FAB10B1
Normal
0
12900-1030L16
None
2/15
LSX1FAB10B1
Normal
0
12900-1030L16
None
2/16
LSX1SUP10A1
Standby
0
12900-1030L16
None
2/17
LSX1SUP10A1
Standby
0
12900-1030L16
None
The output shows that the IRF fabric has two member devices (with the member IDs 1 and 2). The card
in slot 17 on member device 1 is the global active MPU. The cards in slots 16 and 17 on member device
2 and the card in slot 16 on member device 1 are the global standby MPUs.
200
Table 26 Command output
Field
Description
Slot
Member ID of the IRF member device.
Type
Card type.
Card state:
State
•
•
•
•
•
Absent—No card is inserted in the slot.
Master—The card is the global active MPU.
Standby—The card is a global standby MPU.
Normal—The card is operating correctly.
Fault—The card is faulty.
Subslot
Maximum number of subcards that the card supports.
Soft Ver
Software version of the card.
Patch Ver
Patch version of the card. If no patch is installed, the value of this field is None.
display device manuinfo
Use display device manuinfo to display the electronic label information for the device.
Syntax
In standalone mode:
display device manuinfo [ slot slot-number ]
In IRF mode:
display device manuinfo [ chassis chassis-number [ slot slot-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command
displays the electronic label information for all cards. (In standalone mode.)
chassis chassis-number: Specifies an IRF member device. The chassis-number argument specifies the
member ID of the IRF member device. If you do not specify this option, the command displays electronic
label information for all IRF members. (In IRF mode.)
slot slot-number: Specifies a card on the IRF member device. If you do not specify this option and the
chassis chassis-number option specifies an IRF member device, the command displays electronic label
information for all cards on the member device. (In IRF mode.)
201
Usage guidelines
An electronic label is a profile of a device or card. It contains the permanent configuration, including the
serial number, manufacturing date, MAC address, and vendor name. The data is written to the storage
component during debugging or testing.
Examples
# In standalone mode, display the electronic label information for the device.
<Sysname> display device manuinfo
Chassis self
DEVICE_NAME
: HP FlexFabric 12910 Switch AC Chassis JG619A
DEVICE_SERIAL_NUMBER : 02A0WU01280
MAC_ADDRESS
: 0004-7679-C101
MANUFACTURING_DATE
: 2013-05-06
VENDOR_NAME
: HP
Slot 1 CPU 0:
DEVICE_NAME
: HP FlexFabric 12900 48-port 10GbE SFP+ EA Module JG624A
DEVICE_SERIAL_NUMBER : 210231A73SA
MAC_ADDRESS
: 000F-E26A-581B
MANUFACTURING_DATE
: 2012-11-10
VENDOR_NAME
: HP
Slot 2 CPU 0:
DEVICE_NAME
: HP FlexFabric 12900 48-port 10GbE SFP+ EA Module JG624A
DEVICE_SERIAL_NUMBER : 210231A76VX
MAC_ADDRESS
: 000F-0123-4565
MANUFACTURING_DATE
: 2012-12-2
VENDOR_NAME
: HP
Slot 10 CPU 0:
DEVICE_NAME
: HP FlexFabric 12910 3.84Tbps Type B Fabric Module JG623A
DEVICE_SERIAL_NUMBER : 210231A76VX
MAC_ADDRESS
: 1231-2312-3123
MANUFACTURING_DATE
: 2012-12-2
VENDOR_NAME
: HP
Slot 16 CPU 0:
DEVICE_NAME
: HP FlexFabric 12910 Main Processing Unit JG621A
DEVICE_SERIAL_NUMBER : 210231S1250
MAC_ADDRESS
: 000F-0123-4565
MANUFACTURING_DATE
: 2012-12-2
VENDOR_NAME
: HP
Fan 2
DEVICE_NAME
: HP FlexFabric 12910 Spare Fan Assembly JG631A
DEVICE_SERIAL_NUMBER : 210231S125X
MAC_ADDRESS
: 0004-7679-0A20
MANUFACTURING_DATE
: 2013-05-06
VENDOR_NAME
: HP
Power 1
DEVICE_NAME
: HP 12500 2000W AC Power Supply JF429A
DEVICE_SERIAL_NUMBER : 210231A0HHN
MAC_ADDRESS
: 0000-FE91-3456
MANUFACTURING_DATE
: 2012-08-14
202
VENDOR_NAME
: HP
# In IRF mode, display the electronic label information.
<Sysname> display device manuinfo
Chassis 1:
Chassis self
DEVICE_NAME
: HP FlexFabric 12910 Switch AC Chassis JG619A
DEVICE_SERIAL_NUMBER : 02A0WU01280
MAC_ADDRESS
: 0004-7679-C101
MANUFACTURING_DATE
: 2013-05-06
VENDOR_NAME
: HP
Slot 1 CPU 0:
DEVICE_NAME
: HP FlexFabric 12900 48-port 10GbE SFP+ EA Module JG624A
DEVICE_SERIAL_NUMBER : 210231A73SA
MAC_ADDRESS
: 000F-E26A-581B
MANUFACTURING_DATE
: 2012-11-10
VENDOR_NAME
: HP
Slot 10 CPU 0:
DEVICE_NAME
: HP FlexFabric 12910 3.84Tbps Type B Fabric Module JG623A
DEVICE_SERIAL_NUMBER : 210231A76VX
MAC_ADDRESS
: 1231-2312-3123
MANUFACTURING_DATE
: 2012-12-2
VENDOR_NAME
: HP
Slot 16 CPU 0:
DEVICE_NAME
: HP FlexFabric 12910 Main Processing Unit JG621A
DEVICE_SERIAL_NUMBER : 210231S1250
MAC_ADDRESS
: 000F-0123-4565
MANUFACTURING_DATE
: 2012-12-2
VENDOR_NAME
: HP
Fan 2
DEVICE_NAME
: HP FlexFabric 12910 Spare Fan Assembly JG631A
DEVICE_SERIAL_NUMBER : 210231S125X
MAC_ADDRESS
: 0004-7679-0A20
MANUFACTURING_DATE
: 2013-05-06
VENDOR_NAME
: HP
Power 1
DEVICE_NAME
: HP 12500 2000W AC Power Supply JF429A
DEVICE_SERIAL_NUMBER : 210231A0HHN
MAC_ADDRESS
: 0000-FE91-3456
MANUFACTURING_DATE
: 2012-08-14
VENDOR_NAME
: HP
Table 27 Command output
Field
Description
Chassis 1
Member ID of the IRF member device.
Chassis self
Indicates the entire chassis.
Slot 1 CPU 0
Slot number of the card and number of the CPU.
DEVICE_NAME
Device name.
203
Field
Description
DEVICE_SERIAL_NUMBER
Serial number.
MAC_ADDRESS
MAC address.
MANUFACTURING_DATE
Manufacturing date.
VENDOR_NAME
Vendor name.
display device manuinfo chassis-only
Use display device manuinfo chassis-only to display the electronic label information of the specified
backplane.
Syntax
In standalone mode:
display device manuinfo chassis-only
In IRF mode:
display device manuinfo chassis chassis-number chassis-only
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.)
Examples
# In standalone mode, display the electronic label information of the backplane.
<Sysname> display device manuinfo chassis-only
Chassis self
DEVICE_NAME
: HP FlexFabric 12910 Switch AC Chassis JG619A
DEVICE_SERIAL_NUMBER : 02A0WU01280
MAC_ADDRESS
: 0004-7679-C101
MANUFACTURING_DATE
: 2013-05-06
VENDOR_NAME
: HP
# In IRF mode, display the electronic label information of the backplane on IRF member device 1.
<Sysname> display device manuinfo chassis 1 chassis-only
Chassis 1
Chassis self:
DEVICE_NAME
: HP FlexFabric 12910 Switch AC Chassis JG619A
DEVICE_SERIAL_NUMBER
: 02A0WU01270
MAC_ADDRESS
: 0000-FE01-3456
204
MANUFACTURING_DATE
: 2012-12-28
VENDOR_NAME
: HP
display device manuinfo fan
Use display device manuinfo fan to display the electronic label information of a fan.
Syntax
In standalone mode:
display device manuinfo fan fan-id
In IRF mode:
display device manuinfo chassis chassis-number fan fan-id
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.)
fan-id: Specifies a fan by its ID.
Examples
# In standalone mode, display the electronic label information of fan 1.
<Sysname> display device manuinfo fan 1
Fan 1:
DEVICE_NAME
: HP FlexFabric 12910 Spare Fan Assembly JG631A
DEVICE_SERIAL_NUMBER : 210231S125X
MAC_ADDRESS
: 0004-7679-0A20
MANUFACTURING_DATE
: 2013-05-06
VENDOR_NAME
: HP
# In IRF mode, display the electronic label information of fan 1 on IRF member device 1.
<Sysname> display device manuinfo chassis 1 fan 1
Chassis 1:
Fan 1:
DEVICE_NAME
: HP FlexFabric 12910 Spare Fan Assembly JG631A
DEVICE_SERIAL_NUMBER : 210231S125X
MAC_ADDRESS
: 0004-7679-0A20
MANUFACTURING_DATE
: 2013-05-06
VENDOR_NAME
: HP
205
display device manuinfo power
Use display device manuinfo power to display the electronic label information of a power supply.
Syntax
In standalone mode:
display device manuinfo power power-id
In IRF mode:
display device manuinfo chassis chassis-number power power-id
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.)
power-id: Specifies a power supply by its ID.
Examples
# In standalone mode, display the electronic label information of power supply 1.
<Sysname> display device manuinfo power 1
Power 1:
DEVICE_NAME
: HP 12500 2000W AC Power Supply JF429A
DEVICE_SERIAL_NUMBER : 210231A0HHN
MANUFACTURING_DATE
: 2012-08-14
VENDOR_NAME
: HP
# In IRF mode, display the electronic label information of power supply 1 on IRF member device 1.
<Sysname> display device manuinfo chassis 1 power 1
Chassis 1:
Power 1:
DEVICE_NAME
: HP 12500 2000W AC Power Supply JF429A
DEVICE_SERIAL_NUMBER
: 210231A0HHN
MANUFACTURING_DATE
: 2012-08-11
VENDOR_NAME
: HP
display diagnostic-information
Use display diagnostic-information to display the operating statistics for multiple feature modules in the
system.
Syntax
display diagnostic-information [ hardware | infrastructure | l2 | l3 | service ] [ filename ]
206
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
hardware: Displays hardware-related operating statistics.
infrastructure: Displays operating statistics for the fundamental modules.
l2: Displays operating statistics for the Layer 2 features.
l3: Displays operating statistics for the Layer 3 features.
service: Displays operating statistics for upper-layer features.
filename: Specifies a .tar.gz file to save the statistics to the file.
Usage guidelines
You can use one of the following methods to collect data for diagnostics and troubleshooting:
•
Use separate display commands to collect running status data module by module.
•
Use the display diagnostic-information command to bulk collect running data for multiple modules.
This display command does not support the | by-linenum option, the > filename option, or the >>
filename option. However, this command asks you whether you want to save the output to a file or
display the output on the screen. The file used to save the output is automatically compressed to save
storage space.
Examples
# Display the operating statistics for multiple feature modules in the system.
<Sysname> display diagnostic-information
Save or display diagnostic information (Y=save, N=display)? [Y/N]:n
===============================================
===============display clock===============
14:03:55 UTC Thu 01/05/2013
=================================================
===============display version===============
…
display environment
Use display environment to display the temperature statistics for the temperature sensors, including the
current temperature and temperature thresholds.
Syntax
In standalone mode:
display environment [ slot slot-number ]
207
In IRF mode:
display environment [ chassis chassis-number [ slot slot-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command
displays temperature statistics for all temperature sensors on the device. (In standalone mode.)
chassis chassis-number: Specifies an IRF member device. The chassis-number argument specifies the
member ID of the IRF member device. If you do not specify this option, the command displays
temperature statistics for the temperature sensors on all IRF members. (In IRF mode.)
slot slot-number: Specifies a card on the IRF member device. If you do not specify this option and the
chassis chassis-number option specifies an IRF member device, the command displays temperature
statistics for the temperature sensors on all cards in the member device. (In IRF mode.)
Usage guidelines
In standalone mode, this command displays statistics for all temperature sensors on the device if you do
not specify a card.
In IRF mode, this command displays statistics for all temperature sensors in the IRF fabric if you do not
specify an IRF member device. If you specify an IRF member device but do not specify a card, this
command displays statistics for all sensors on the member device.
Examples
# In standalone mode, display the temperature statistics for all temperature sensors on the device.
<Sysname> display environment
System temperature information (degree centigrade):
---------------------------------------------------------------------Slot
Sensor
9
9
Temperature
Lower
Warning
Alarm
Shutdown
hotspot 1 42
0
80
95
100
hotspot 2 39
0
80
95
100
9
hotspot 3 41
0
80
95
100
9
hotspot 4 38
0
80
95
100
10
hotspot 1 42
0
75
90
95
10
hotspot 2 34
0
75
90
95
10
hotspot 3 37
0
75
90
95
11
hotspot 1 45
0
75
90
95
11
hotspot 2 35
0
75
90
95
11
hotspot 3 39
0
75
90
95
17
inflow
1 37
0
57
72
77
17
hotspot 1 40
0
76
88
93
17
hotspot 2 37
0
76
88
93
208
# In IRF mode, display the temperature statistics for all temperature sensors in the IRF fabric.
<Sysname> display environment
System temperature information (degree centigrade):
---------------------------------------------------------------------Chassis
Slot
Sensor
Lower
Warning
Alarm
Shutdown
1
9
hotspot 1 50
Temperature
0
80
95
100
1
9
hotspot 2 48
0
80
95
100
1
9
hotspot 3 50
0
80
95
100
1
9
hotspot 4 47
0
80
95
100
1
10
hotspot 1 50
0
75
90
95
1
10
hotspot 2 44
0
75
90
95
1
10
hotspot 3 47
0
75
90
95
1
11
hotspot 1 52
0
75
90
95
1
11
hotspot 2 45
0
75
90
95
1
11
hotspot 3 49
0
75
90
95
1
17
inflow
1 47
0
57
72
77
1
17
hotspot 1 49
0
76
88
93
1
17
hotspot 2 47
0
76
88
93
Table 28 Command output
Field
Description
System temperature
information (degree
centigrade)
Temperature information (°C).
Temperature sensor:
Sensor
• hotspot—Hotspot sensor.
• inflow—Air inlet sensor.
Slot
Slot number of the card. (In standalone mode.)
Chassis
Slot
Member ID of the IRF member device and slot number of the card. (In IRF mode.)
Temperature
Current temperature.
Lower
Low-temperature threshold.
Warning
High-temperature warning threshold.
Alarm
High-temperature alarming threshold.
Shutdown
High-temperature shutdown threshold. When the sensor temperature reaches the limit,
the system shuts down automatically.
display fan
Use display fan to display the operating states of fans.
Syntax
In standalone mode:
display fan [ fan-id ]
In IRF mode:
209
display fan [ chassis chassis-number [ fan-id ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
chassis chassis-number: Specifies an IRF member device by its member ID. If you do not specify this
option, the command displays the operating states of fans on all IRF member devices. (In IRF mode.)
fan-id: Specifies a fan by its ID.
Usage guidelines
If you do not specify any options, the command displays the operating states of all fans on all member
devices.
Examples
# In standalone mode, display the operating states of all fans.
<Sysname> display fan
Fan-tray 1:
Status
: Absent
Fan-tray 2:
Status
: Normal
Fan number: 5
Fan mode
: Auto
Airflow Direction: Front-to-back
Fan
Status
Speed(rpm)
---
----------
----------
1
Normal
3483
2
Normal
1687
3
Normal
2557
4
Normal
1651
5
Normal
2539
# In IRF mode, display the operating states of all fans.
<Sysname> display fan
Chassis 1:
Fan-tray 1:
Status
: Absent
Fan-tray 2:
Status
: Normal
Fan number: 5
Fan mode
: Auto
Airflow Direction: Front-to-back
Fan
Status
Speed(rpm)
210
---
----------
----------
1
Normal
5023
2
Normal
2675
3
Normal
4474
4
Normal
2609
5
Normal
4232
Table 29 Command output
Field
Description
Chassis 1
Member ID of the member device. (In IRF mode.)
Fan-tray
ID of the fan tray.
Operating status of the fan tray:
Status
• Absent—The fan tray is not installed.
• Normal—The fan tray is operating correctly.
• Fault—The fan tray is faulty.
Fan mode
Operating mode of the fan.
Airflow Direction
Airflow direction of the fan tray.
Fan
ID of the fan.
Speed(rpm)
Speed of the fan.
display memory
Use display memory to display memory usage.
Syntax
In standalone mode:
display memory [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display memory [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command
displays memory usage for all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot
211
number of the card. If you do not specify this option on an IRF fabric, the command displays the memory
usage for all cards. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. If you do not specify this option, the command displays
memory usage for the default CPU.
Examples
# In standalone mode, display memory usage.
<Sysname> display memory
The statistics about memory is measured in KB:
Slot 9:
Total
Used
Free
Shared
Buffers
Cached
FreeRatio
1346244
704440
641804
0
0
26724
47.7%
-/+ Buffers/Cache:
677716
668528
Mem:
Swap:
0
0
0
Total
Used
Free
Shared
Buffers
Cached
FreeRatio
1346244
386292
959952
0
0
26708
71.3%
-/+ Buffers/Cache:
359584
986660
Slot 10:
Mem:
Swap:
0
0
0
Total
Used
Free
Shared
Buffers
Cached
FreeRatio
1350340
385680
964660
0
0
26708
71.4%
-/+ Buffers/Cache:
358972
991368
Slot 11:
Mem:
Swap:
0
0
0
Total
Used
Free
Shared
Buffers
Cached
FreeRatio
8061524
1292968
6768556
0
68
600776
84.0%
-/+ Buffers/Cache:
692124
7369400
Slot 17:
Mem:
Swap:
0
0
0
# In IRF mode, display memory usage.
<Sysname> display memory
The statistics about memory is measured in KB:
Chassis 1 Slot 9:
Total
Used
Free
Shared
Buffers
Cached
FreeRatio
1362304
648768
713536
0
0
14376
52.4%
-/+ Buffers/Cache:
634392
727912
Mem:
Swap:
0
0
0
Chassis 1 Slot 10:
Total
Used
Free
Shared
Buffers
Cached
FreeRatio
1362304
321588
1040716
0
0
14376
76.4%
-/+ Buffers/Cache:
307212
1055092
Mem:
Swap:
0
0
0
Chassis 1 Slot 11:
212
Total
Used
Free
Shared
Buffers
Cached
FreeRatio
1366400
321440
1044960
0
0
14376
76.5%
-/+ Buffers/Cache:
307064
1059336
Mem:
Swap:
0
0
0
Chassis 1 Slot 17:
Total
Used
Free
Shared
Buffers
Cached
FreeRatio
8143312
915496
7227816
0
68
265956
88.8%
-/+ Buffers/Cache:
649472
7493840
Mem:
Swap:
0
0
0
Table 30 Command output
Field
Description
Slot
Slot number of a card. (In standalone mode.)
Chassis x Slot x
Slot number of a card on a member device. (In IRF mode.)
Mem
Memory usage information.
Total size of the physical memory space that can be allocated.
Total
The memory space is virtually divided into two parts. Part 1 is solely used for kernel
codes, and kernel management. Part 2 can be allocated and used for such tasks as
running service modules and storing files. The size of part 2 equals the total size minus
the size of part 1.
Used
Used physical memory.
Free
Free physical memory.
Shared
Physical memory shared by processes.
Buffers
Physical memory used for buffers.
Cached
Physical memory used for caches.
FreeRatio
Free memory ratio.
-/+ Buffers/Cache
Swap
-/+ Buffers/Cache:Used = Mem:Used – Mem:Buffers – Mem:Cached, which indicates
the physical memory used by applications.
-/+ Buffers/Cache:Free = Mem:Free + Mem:Buffers + Mem:Cached, which indicates
the physical memory available for applications.
Swap memory.
display memory-threshold
Use display memory-threshold to display memory usage thresholds and memory usage notification
statistics.
Syntax
In standalone mode:
display memory-threshold [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display memory-threshold [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
213
Views
Any view
Predefined user roles
network-admin
mdc-admin
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command
displays the memory usage thresholds and memory usage notification statistics for the active MPU. (In
standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot
number of the card. If you do not specify this option, the command displays the memory usage thresholds
and memory usage notification statistics for the global active MPU. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. If you do not specify this option, the command displays
the memory usage thresholds and memory usage notification statistics for the default CPU.
Usage guidelines
For more information about memory usage notifications, see log information containing
MEM_EXCEED_THRESHOLD or MEM_BELOW_THRESHOLD.
Examples
# Display memory usage thresholds and memory usage notification statistics.
<Sysname> display memory-threshold
Memory usage threshold: 100%
Free memory threshold:
Minor: 96M
Severe: 64M
Critical: 48M
Normal: 128M
Current memory state: Normal
Event statistics:
[Back to normal state]
First notification: 0.0
Latest notification: 0.0
Total number of notifications sent: 0
[Enter minor low-memory state]
First notification at: 0.0
Latest notification at: 0.0
Total number of notifications sent: 0
[Back to minor low-memory state]
First notification at: 0.0
Latest notification at: 0.0
Total number of notifications sent: 0
[Enter severe low-memory state]
First notification at: 0.0
Latest notification at: 0.0
Total number of notifications sent: 0
214
[Back to severe low-memory state]
First notification at: 0.0
Latest notification at: 0.0
Total number of notifications sent: 0
[Enter critical low-memory state]
First notification at: 0.0
Latest notification at: 0.0
Total number of notifications sent: 0
display power
Use display power to display power supply information.
Syntax
In standalone mode:
display power [ power-id ]
In IRF mode:
display power [ chassis chassis-number [ power-id ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
chassis chassis-number: Specifies an IRF member device by its member ID. If you do not specify this
option, the command displays power supply information on all IRF member devices. (In IRF mode.)
power-id: Specifies a power supply by its ID. If you do not specify this option, the command displays
information about all power supplies.
Usage guidelines
If you do not specify any options, the command displays information about all power supplies on all
member devices.
Examples
# In standalone mode, display power supply information.
<Sysname> display power
PowerID State
Current(A)
Voltage(V)
Power(W)
1
Normal
7.80
54.02
421.35
2
Normal
9.20
53.99
496.70
3
Absent
--
--
--
4
Absent
--
--
--
5
Absent
--
--
--
6
Absent
--
--
--
215
7
Absent
--
--
--
8
Absent
--
--
--
# In IRF mode, display power supply information.
<Sysname> display power
Chassis 1:
PowerID State
Current(A)
Voltage(V)
Power(W)
1
Normal
7.80
54.02
421.35
2
Normal
9.20
53.99
496.70
3
Absent
--
--
--
4
Absent
--
--
--
5
Absent
--
--
--
6
Absent
--
--
--
7
Absent
--
--
--
8
Absent
--
--
--
Table 31 Command output
Field
Description
Chassis 1
Member ID of the member device. (In IRF mode.)
PowerID
ID of the power supply.
Operating status of the power supply:
State
• Absent—The power supply is not installed.
• Normal—The power supply is operating correctly.
• Fault—The power supply is faulty.
Current(A)
Input current in A.
Voltage(V)
Input voltage in V.
Power(W)
Input power in W.
--
Not supported.
display scheduler job
Use display scheduler job to display job configuration information.
Syntax
display scheduler job [ job-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
216
Parameters
job-name: Specifies a job by its name, a case-sensitive string of 1 to 47 characters. If you do not specify
this option, the command displays the configuration information of all jobs.
Examples
# Display the configuration information of all jobs.
<Sysname> display scheduler job
Job name: saveconfig
copy startup.cfg backup.cfg
Job name: backupconfig
Job name: creat-VLAN100
system-view
vlan 100
// The output shows that the device has three jobs: the first has one command, the second has no
command, and the third has two commands. Jobs are separated by blank lines.
display scheduler logfile
Use display scheduler logfile to display job execution log information.
Syntax
display scheduler logfile
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display job execution log information.
<Sysname> display scheduler logfile
Logfile Size: 1902 Bytes.
Job name
: shutdown
Schedule name
: shutdown
Execution time
: Tue Dec 27 10:44:42 2013
Completion time : Tue Dec 27 10:44:47 2013
--------------------------------- Job output ----------------------------------<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname]interface rang ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/3
[Sysname-if-range]shutdown
217
Table 32 Command output
Field
Description
Logfile Size
Size of the log file, in bytes.
Schedule name
Schedule to which the job belongs.
Execution time
Time when the job was started.
Completion time
Time when the job was completed. If the job has never been executed or the job has no
commands, this field is blank.
Job output
Commands in the job and their output.
Related commands
reset scheduler logfile
display scheduler reboot
Use display scheduler reboot to display the automatic reboot schedule.
Syntax
display scheduler reboot
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display the automatic reboot schedule.
<Sysname> display scheduler reboot
System will reboot at 16:32:00 05/23/2013 (in 1 hours and 39 minutes).
Related commands
•
scheduler reboot at
•
scheduler reboot delay
display scheduler schedule
Use display scheduler schedule to display schedule information.
Syntax
display scheduler schedule [ schedule-name ]
Views
Any view
218
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
schedule-name: Specifies a schedule by its name, a case-sensitive string of 1 to 47 characters. If you do
not specify this option, the command displays information about all schedules.
Examples
# Display information about all schedules.
<Sysname> display scheduler schedule
Schedule name
: shutdown
Schedule type
: Run once after 0 hours 2 minutes
Start time
: Tue Dec 27 10:44:42 2011
Last execution time
: Tue Dec 27 10:44:42 2011
Last completion time : Tue Dec 27 10:44:47 2011
Execution counts
: 1
----------------------------------------------------------------------Job name
Last execution status
shutdown
Successful
Table 33 Command output
Field
Description
Schedule type
Execution time setting of the schedule. If no execution time is specified, this field is not
displayed.
Start time
Time to execute the schedule for the first time. If no execution time is specified, this field
is not displayed.
Last execution time
Last time when the schedule was executed. If no execution time is specified, this field is
not displayed. If the schedule has never been executed, "Yet to be executed" is displayed
for this field.
Last completion
time
Last time when the schedule was completed. If no execution time is specified, this field is
not displayed.
Execution counts
Number of times the schedule has been executed. If the schedule has never been
executed, this field is not displayed.
Job name
Name of a job under the schedule.
Result of the most recent execution:
Last execution
status
•
•
•
•
•
Successful.
Failed.
Waiting—The device is executing the schedule and the job is waiting to be executed.
In process—The job is being executed.
-NA-—The execution time has not arrived yet.
To view information about whether the commands in the job has been executed and the
execution results, execute the display scheduler logfile command.
219
display switch-mode status
Use display switch-mode status to display the operating mode of all LPUs on the switch. (In standalone
mode.)
Use display switch-mode status chassis to display the operating modes of all LPUs on a member switch.
(In IRF mode.)
Syntax
In standalone mode:
display switch-mode status
In IRF mode:
display switch-mode status chassis chassis-number
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.)
Examples
# In standalone mode, display the operating modes of all LPUs on the switch.
<Sysname> display switch-mode status
LPU switch mode:
Slot
Current
Config
1
NORMAL
NORMAL
3
NORMAL
NORMAL
5
NORMAL
STANDARD-IPV6
7
NORMAL
STANDARD-IPV6
# In IRF mode, display the operating modes of all LPUs on the IRF member device 1.
<Sysname>display switch-mode status chassis 1
LPU switch mode:
Slot
Current
Config
1
NORMAL
NORMAL
3
NORMAL
NORMAL
5
NORMAL
STANDARD-IPV6
7
NORMAL
STANDARD-IPV6
220
Table 34 Command output
Field
Description
LPU switch mode
LPU operating mode.
Slot
Slot number of the LPU.
Current
Current operating mode of the LPU.
Config
Configured operating mode for the LPU.
*
The LPU does not support the operating mode.
Related commands
switch-mode
display system-working-mode
Use display system-working-mode to display system working mode information.
Syntax
display system-working-mode
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display system working mode information.
<Sysname> display system-working-mode
The current system working mode is standard.
The next system working mode is advance.
display transceiver alarm
Use display transceiver alarm to display transceiver alarms.
Syntax
display transceiver alarm interface [ interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
221
mdc-admin
mdc-operator
Parameters
interface [ interface-type interface-number ]: Specifies an interface by its type and number. If no interface
is specified, this command displays the alarms present on every transceiver module.
Usage guidelines
Table 35 shows some common transceiver alarm elements. If no error occurred, "None" is displayed.
Table 35 Common transceiver alarm elements
Field
Remarks
REFCLK
Reference clock.
RX …
Received …
TX …
Transmitted …
TX bias high
The transmitted bias current is high.
TX bias low
The transmitted bias current is low.
Examples
# Display the alarms present on the transceiver module in interface Ten-GigabitEthernet 1/0/1.
<Sysname> display transceiver alarm interface ten-gigabitethernet 1/0/1
Ten-GigabitEthernet1/0/1 transceiver current alarm information:
RX loss of signal
RX power low
Table 36 Command output
Field
Description
transceiver current alarm information
Alarms present on the transceiver module.
RX loss of signal
Received signals are lost.
RX power low
Received power is low.
display transceiver diagnosis
Use display transceiver diagnosis to display the current values of the digital diagnosis parameters on
transceiver modules.
Syntax
display transceiver diagnosis interface [ interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
222
mdc-admin
mdc-operator
Parameters
interface [ interface-type interface-number ]: Specifies an interface by its type and number. If no interface
is specified, this command displays the current values of the digital diagnosis parameters on every
transceiver module.
Usage guidelines
This command cannot display information about some transceiver modules.
Examples
# Display the current values of the digital diagnosis parameters on the transceiver module in interface
Ten-GigabitEthernet1/0/1.
<Sysname> display transceiver diagnosis interface ten-gigabitethernet 1/0/1
GigabitEthernet1/0/1 transceiver diagnostic information:
Current diagnostic parameters:
Temp(°C)
Voltage(V)
Bias(mA)
RX power(dBm)
36
3.31
6.13
-35.64
TX power(dBm)
-5.19
Table 37 Command output
Field
Description
transceiver diagnostic information
Digital diagnosis information of the transceiver module in the interface.
Temp.(°C)
Temperature in °C, accurate to 1°C.
Voltage(V)
Voltage in V, accurate to 0.01 V.
Bias(mA)
Bias current in mA, accurate to 0.01 mA.
RX power(dBm)
RX power in dBm, accurate to 0.01 dBm.
TX power(dBm)
TX power in dBm, accurate to 0.01 dBm.
display transceiver interface
Use display transceiver interface to display the key parameters of transceiver modules.
Syntax
display transceiver interface [ interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
223
Parameters
interface-type interface-number: Specifies an interface by its type and number. If you do not specify this
option, the command displays the key parameters of every transceiver module.
Examples
# Display the key parameters of the transceiver module in interface Ten-GigabitEthernet 1/0/1.
<Sysname> display transceiver interface ten-gigabitethernet 1/0/1
Ten-GigabitEthernet1/0/1 transceiver information:
Transceiver Type
: 1000_BASE_SX_SFP
Connector Type
: LC
Wavelength(nm)
: 850
Transfer Distance(m)
: 550(50um),270(62.5um)
Digital Diagnostic Monitoring : YES
Vendor Name
: HP
Ordering Name
: JD118B
Table 38 Command output
Field
Description
transceiver information
Transceiver information.
Transceiver Type
Transceiver type.
Connector type options:
Connector Type
• MPO—Multi-fiber Push On.
• LC—1.25 mm/RJ-45 fiber connector developed by Lucent.
• RJ-45.
• Fiber transceiver: Central wavelength (in nm) of the transmit laser. If the
transceiver supports multiple wavelengths, every two wavelength values are
separated by a comma.
Wavelength(nm)
• Copper cable: Displayed as N/A.
Transfer distance, with "xx" representing the distance unit: km (kilometers) for
single-mode transceiver modules and m (meters) for other transceiver modules.
Transfer Distance(xx)
Digital Diagnostic
Monitoring
Ordering Name
If the transceiver module supports multiple transfer media, the transfer distances are
separated by commas. The transfer medium is included in the bracket following the
transfer distance value. The following are the transfer media:
•
•
•
•
9 um—9/125 um single-mode fiber.
50 um—50/125 um multi-mode fiber.
62.5 um—62.5/125 um multi-mode fiber.
TP—Twisted pair.
Support for the digital diagnosis function:
• YES—Supported.
• NO—Not supported.
Product code.
display transceiver manuinfo
Use display transceiver manuinfo to display the electronic label information of transceiver modules.
224
Syntax
display transceiver manuinfo interface [ interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface [ interface-type interface-number ]: Specifies an interface by its type and number. If no interface
is specified, this command displays the electronic label information of the transceiver modules on all
interfaces.
Usage guidelines
This command displays only part of the electronic label information.
Examples
# Display the electronic label information of the transceiver module in interface Ten-GigabitEthernet
1/0/1.
<Sysname> display transceiver manuinfo interface ten-gigabitethernet 1/0/1
Ten-GigabitEthernet1/0/1 transceiver manufacture information:
Manu. Serial Number
: 213410A0000
Manufacturing Date
: 2012-09-01
Vendor Name
: HP
Table 39 Command output
Field
Description
Manu. Serial Number
Serial number generated during production of the transceiver module.
Manufacturing Date
Date when the electronic label information was written to the transceiver module.
display version
Use display version to display system version information.
Syntax
display version
Views
Any view
Predefined user roles
network-admin
network-operator
225
mdc-admin
mdc-operator
Examples
# Display system version information.
<Sysname> display version
display version-update-record
Use display version-update-record to display the startup software image upgrade history records of the
active MPU. (In standalone mode.)
Use display version-update-record to display the startup software image upgrade history records of the
global active MPU. (In IRF mode.)
Syntax
display version-update-record
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
The device records its current startup software version information and all subsequent version update
information. Such information can survive reboots.
A maximum of 10 records can be saved.
Examples
# Display the startup software image upgrade history records.
<Sysname> display version-update-record
Name
Record 1
Version
Compile time
(updated on Sep 26 2014 at 10:18:12):
* 12900-CMW710-BOOT-E1030L16.bin
7.1.045 Ess 1030L16 Aug 13 2014 18:18:53
* 12900-CMW710-SYSTEM-E1030L16.bin
7.1.045 Ess 1030L16 Aug 13 2014 18:18:53
Table 40 Command output
Field
Description
Name
Software image file name.
*
The new software image is different from the old one.
Related commands
reset version-update-record
226
header
Use header to create a banner.
Use undo header to clear a banner.
Syntax
header { incoming | legal | login | motd | shell } text
undo header { incoming | legal | login | motd | shell }
Default
The default settings vary by device model.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
incoming: Configures the banner to be displayed before a modem dial-up user accesses user view. If
authentication is required, the incoming banner appears after the authentication is passed.
legal: Configures the banner to be displayed before a user inputs the username and password to access
the CLI.
login: Configures the banner displayed to be before password or scheme authentication is performed for
a login user.
motd: Configures the greeting banner to be displayed before the legal banner appears. Support for the
keyword depends on the device model.
shell: Configures the banner to be displayed before a non-modem dial-in user accesses user view.
text: Specifies the banner message, which can be entered in two formats. For more information, see
Fundamentals Configuration Guide.
Examples
# Create the incoming banner, legal banner, login banner, MOTD banner, and shell banner.
<Sysname> system-view
[Sysname] header incoming
Please input banner content, and quit with the character '%'.
Welcome to incoming(header incoming)%
[Sysname] header legal
Please input banner content, and quit with the character '%'.
Welcome to legal (header legal)%
[Sysname] header login
Please input banner content, and quit with the character '%'.
Welcome to login(header login)%
[Sysname] header motd
Please input banner content, and quit with the character '%'.
Welcome to motd(header motd)%
227
[Sysname] header shell
Please input banner content, and quit with the character '%'.
Welcome to shell(header shell)%
In this example, the percentage sign (%) is the starting and ending character of the text argument.
Entering the percentage sign after the text quits the header command. Because it is the starting and
ending character, the percentage sign is not included in the banner.
# Test the configuration by using Telnet. The login banner appears only when password or scheme login
authentication has been configured.
******************************************************************************
* Copyright (c) 2010-2014 Hewlett-Packard Development Company, L.P.
*
* Without the owner's prior written consent,
*
* no decompiling or reverse-engineering shall be allowed.
*
******************************************************************************
Welcome to legal (header legal)
Press Y or ENTER to continue, N to exit.
Welcome to login(header login)
Password:
Welcome to motd(header motd)
Welcome to shell(header shell)
job
Use job to assign a job to a schedule.
Use undo job to revoke a job.
Syntax
job job-name
undo job job-name
Default
No job is assigned to a schedule.
Views
Schedule view
Predefined user roles
network-admin
mdc-admin
228
Parameters
job-name: Specifies the job name, a case-sensitive string of 1 to 47 characters.
Usage guidelines
You can assign multiple jobs to a schedule. The jobs in a schedule are executed concurrently.
The jobs to be assigned to a schedule must already exist. To create a job, use the scheduler job
command.
Examples
# Assign job save-job to schedule saveconfig.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] job save-job
Related commands
•
scheduler job
•
scheduler schedule
memory-threshold
Use memory-threshold to set free-memory thresholds.
Use undo memory-threshold to restore the defaults.
Syntax
In standalone mode:
memory-threshold [ slot slot-number [ cpu cpu-number ] ] minor minor-value severe severe-value critical
critical-value normal normal-value
undo memory-threshold [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
memory-threshold [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] minor minor-value
severe severe-value critical critical-value normal normal-value
undo memory-threshold [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Default
•
Minor alarm threshold—96 MB.
•
Severe alarm threshold—64 MB.
•
Critical alarm threshold—48 MB.
•
Normal state threshold—128 MB.
Views
System view
Predefined user roles
network-admin
mdc-admin
229
Parameters
minor minor-value: Specifies the minor alarm threshold. This threshold must be equal to or less than the
memory size of the specified card. Setting this threshold to 0 disables the minor alarm function.
severe severe-value: Specifies the severe alarm threshold. This threshold must be equal to or less than the
minor alarm threshold. Setting this threshold to 0 disables the severe alarm function.
critical critical-value: Specifies the critical alarm threshold. This threshold must be equal to or less than the
severe alarm threshold. Setting this threshold to 0 disables the critical alarm function.
normal normal-value: Specifies the normal state threshold. This threshold must be equal to or greater than
the minor alarm threshold.
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command sets
free-memory thresholds for the active MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot
number of the card. If you do not specify this option, the command sets free-memory thresholds for the
global active MPU. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. If you do not specify this option, the command sets
free-memory thresholds for the default CPU.
Usage guidelines
To ensure correct operation and improve memory utilization, the system monitors the amount of free
memory space in real time. When a threshold is exceeded, the system sends an alarm notification or an
alarm-removed notification to affected feature modules or processes so they can take countermeasures.
For more information about the conditions and rules for generating alarm notifications and
alarm-removed notifications, see Fundamentals Configuration Guide.
Examples
# Set the minor alarm, severe alarm, critical alarm, and normal state thresholds to 64 MB, 48 MB, 32 MB,
and 96 MB, respectively.
<Sysname> system-view
[Sysname] memory-threshold minor 64 severe 48 critical 32 normal 96
monitor cpu-usage enable
Use monitor cpu-usage enable to enable CPU usage monitoring.
Use undo monitor cpu-usage enable to disable CPU usage monitoring.
Syntax
In standalone mode:
monitor cpu-usage enable [ slot slot-number [ cpu cpu-number ] ]
undo monitor cpu-usage enable [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
monitor cpu-usage enable [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
undo monitor cpu-usage enable [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Default
CPU usage monitoring is enabled.
230
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command
enables CPU usage monitoring on the active MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot
number of the card. If you do not specify this option, the command enables CPU usage monitoring for the
global active MPU. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. If you do not specify this option, the command enables
CPU usage monitoring for the default CPU.
Examples
# Enable CPU usage monitoring.
<Sysname> system-view
[Sysname] monitor cpu-usage enable
Related commands
•
display cpu-usage
•
display cpu-usage configuration
•
display cpu-usage history
•
monitor cpu-usage interval
monitor cpu-usage interval
Use monitor cpu-usage interval to configure the interval at which the device samples CPU usage
statistics.
Syntax
In standalone mode:
monitor cpu-usage interval interval-value [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
monitor cpu-usage interval interval-value [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Default
The sampling interval is 1 minute.
Views
System view
Predefined user roles
network-admin
mdc-admin
231
Parameters
interval-value: Specifies the CPU usage statistics sampling interval. Valid values include 5Sec for 5
seconds, 1Min for 1 minute, and 5Min for 5 minutes.
slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command sets
the interval for the active MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot
number of the card. If you do not specify this option, the command sets the interval for the global active
MPU. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. If you do not specify this option, the command sets the
interval for the default CPU.
Examples
# Configure the interval at which the device samples CPU usage statistics as 5 seconds.
<Sysname> system-view
[Sysname] monitor cpu-usage interval 5Sec
Related commands
•
display cpu-usage
•
display cpu-usage configuration
•
display cpu-usage history
•
monitor cpu-usage enable
monitor handshake-timeout disable-port
Use monitor handshake-timeout disable-port to enable the port-down function globally.
Use undo monitor handshake-timeout disable-port to disable the function globally.
Default
The port-down function is enabled.
Syntax
monitor handshake-timeout disable-port
undo monitor handshake-timeout disable-port
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
The port-down function is typically used in scenarios where a backup device is provided for high
availability, for example, a VRRP-configured network. When the master does not have an MPU to use,
this function immediately shuts down all service ports of the master to quickly switch services to a backup
device.
232
Examples
# Enable the port-down function globally.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] monitor handshake-timeout disable-port
Set successful!
password-recovery enable
Use password-recovery enable to enable password recovery capability.
Use undo password-recovery enable to disable password recovery capability.
Syntax
password-recovery enable
undo password-recovery enable
Default
Password recovery capability is enabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Password recovery capability controls console user access to the device configuration and SDRAM from
BootWare menus.
If password recovery capability is enabled, a console user can access the device configuration without
authentication to configure new passwords.
If password recovery capability is disabled, console users must restore the factory-default configuration
before they can configure new passwords. Restoring the factory-default configuration deletes the
next-startup configuration files.
To enhance system security, disable password recovery capability.
Availability of BootWare menu options varies by the password recovery capability setting. For more
information, see the release notes.
Examples
# Disable password recovery capability.
<Sysname> system-view
[Sysname] undo password-recovery enable
reboot
Use reboot to reboot a card, a subcard, or the entire system. (In standalone mode.)
233
Use reboot to reboot an IRF member device. (In IRF mode.)
Syntax
In standalone mode:
reboot [ slot slot-number ] [ force ]
In IRF mode:
reboot [ chassis chassis-number [ slot slot-number ] ] [ force ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
chassis chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.)
slot slot-number: Specifies a card by its slot number.
force: Reboots the device immediately without performing any software check. If this keyword is not
specified, the system first checks whether the reboot might result in data loss or a system failure. For
example, the system checks whether the main system software image file exists and whether a write
operation is in progress on a storage medium. If the reboot might cause problems, the system does not
reboot the device.
Usage guidelines
CAUTION:
• Device reboot interrupts network services.
• If the main startup software images are corrupted or missing, you must re-specify a set of main startup
software images before executing the reboot command. Otherwise, the device cannot start up.
• Using the force keyword might cause file system corruption. HP recommends that you use this keyword
only when the system fails or cannot start up.
For data security, the device does not reboot if you reboot the device while the device is performing file
operations.
In standalone mode, specify a slot number to reboot the card. To reboot the entire device, do not specify
the slot number option.
In IRF mode, you can reboot an IRF member, or a card on an IRF member.
•
To reboot a card, specify both the IRF member ID and the slot number.
•
To reboot an IRF member device, specify only the IRF member ID.
•
To reboot all IRF member devices, do not specify the chassis chassis-number [ slot slot-number ]
option.
Examples
# Reboot the device when no configuration change has occurred since the last time you saved the
running configuration.
<Sysname> reboot
234
Start to check configuration with next startup configuration file, please
wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
# If any configuration has changed, reboot the device and save the configuration.
<Sysname> reboot
Start to check configuration with next startup configuration file, please
wait.........DONE!
Current configuration may be lost after the reboot, save current configuration? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
flash:/startup.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Configuration is saved to flash successfully.
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
# If any configuration has changed, reboot the device but do not save the configuration.
<Sysname> reboot
Start to check configuration with next startup configuration file, please
wait.........DONE!
Current configuration may be lost after the reboot, save current configuration? [Y/N]:n
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
# Reboot the device immediately without performing any software check.
<Sysname> reboot force
A forced reboot might cause the storage medium to be corrupted. Continue? [Y/N]:y
Now rebooting, please wait...
# In standalone mode, reboot the interface card in slot 2.
<Sysname> reboot slot 2
This command will reboot the specified slot, Continue? [Y/N]:y
Now rebooting, please wait...
# In standalone mode, reboot the interface card in slot 2 by force.
<Sysname> reboot slot 2 force
A forced reboot might cause the storage medium to be corrupted. Continue? [Y/N]:y
Now rebooting, please wait...
# In IRF mode, reboot IRF member device 2.
<Sysname> reboot chassis 2
This command will reboot the specified chassis, Continue? [Y/N]:y
Now rebooting, please wait...
# In IRF mode, reboot IRF member device 2 by force.
<Sysname> reboot chassis 2 force
This command will reboot the specified chassis, Continue? [Y/N]:y
Now rebooting, please wait...
# In IRF mode, reboot the interface card in slot 2 on IRF member device 2.
<Sysname> reboot chassis 2 slot 2
This command will reboot the specified slot, Continue? [Y/N]:y
235
Now rebooting, please wait...
# In IRF mode, reboot the interface card in slot 2 on IRF member device 2 by force.
<Sysname> reboot chassis 2 slot 2 force
A forced reboot might cause the storage medium to be corrupted. Continue? [Y/N]:y
Now rebooting, please wait...
reset asset-info
Use reset asset-info to clear the asset profile for a physical component, such as a chassis, card, fan tray,
or power supply.
Syntax
In standalone mode:
reset asset-info { chassis | fan fan-id | power power-id | slot slot-number } [ csn | custom | department
| description | location | service-date | state ]
In IRF mode:
reset asset-info chassis chassis-number { chassis | fan fan-id | power power-id | slot slot-number } [ csn
| custom| department | description | location | service-date | state ]
Views
System view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
chassis: Clears the asset profile of the chassis.
fan fan-id: Clears the asset profile of the specified fan tray.
power power-id: Clears the asset profile of the specified power supply.
slot slot-number: Clears the asset profile of the card in the specified slot.
csn: Clears user asset ID.
custom: Clears the customized asset profile.
department: Clears the department name in the asset profile.
description: Clears the description in the asset profile.
location: Clears the location in the asset profile
service-date: Clears the service start date in the asset profile.
state: Clears the usage state in the asset profile
chassis chassis-number: Clears the asset profiles for the specified IRF member device. The chassis-number
argument species the IRF member ID of the device. (In IRF mode.)
236
NOTE:
When you use this command to clear the asset profile of a power supply, only the csn keyword is
supported.
Usage guidelines
If you do not specify any asset attribute, the command clears all asset attributes of the specified
component.
If you specify a fan tray or power supply that does not exist, the command prompts that the fan tray or
power supply is not present.
Examples
# In standalone mode, clear the asset ID for fan tray 0.
<Sysname> system-view
[Sysname] reset asset-info fan 0 csn
# In IRF mode, clear the asset ID for fan tray 0 on IRF member device 1.
<Sysname> system-view
[Sysname] reset asset-info chassis 1 fan 0 csn
Related commands
•
display asset-info
•
set asset-info
reset scheduler logfile
Use reset scheduler logfile to clear job execution log information.
Syntax
reset scheduler logfile
Default
None
Views
User view
Predefined user roles
network-admin
mdc-admin
Examples
# Clear job execution log information.
<Sysname> reset scheduler logfile
Related commands
display scheduler logfile
237
reset version-update-record
Use reset version-update-record to clear the startup software image upgrade history records of the active
MPU. (In standalone mode.)
Use reset version-update-record to clear the startup software image upgrade history records of the
global active MPU. (In IRF mode.)
Syntax
reset version-update-record
Views
System view
Predefined user roles
network-admin
mdc-admin
Examples
# Clear the startup software image upgrade history records.
<Sysname> system-view
[Sysname] reset version-update-record
Related commands
display version-update-record
scheduler job
Use scheduler job to create a job and enter job view. If the job already exists, you enter job view directly.
Use undo scheduler job to delete a job.
Syntax
scheduler job job-name
undo scheduler job job-name
Default
No job exists.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
job-name: Specifies the job name, a case-sensitive string of 1 to 47 characters.
Usage guidelines
A job can be referenced by multiple schedules. In job view, you can assign commands to the job.
238
Examples
# Create a job named backupconfig and enter job view.
<Sysname> system-view
[Sysname] scheduler job backupconfig
[Sysname-job-backupconfig]
Related commands
•
command
•
scheduler schedule
scheduler logfile size
Use scheduler logfile size to set the size of the job execution log file.
Syntax
scheduler logfile size value
Default
The size of the job execution log file is 16 KB.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
value: Sets the size of the job execution log file, in KB. The value range is 16 to 1024.
Usage guidelines
The job execution log file saves the execution information of jobs. If the file is full, old records are deleted
to make room for new records. If the size of the log information is greater than the file size, the excessive
information is not written to the file.
Examples
# Set the size of the job execution log file to 32 KB.
<Sysname> system-view
[Sysname] scheduler logfile size 32
Related commands
display scheduler logfile
scheduler reboot at
Use scheduler reboot at to specify the reboot date and time.
Use undo scheduler reboot to remove the reboot schedule configuration.
Syntax
scheduler reboot at time [ date ]
239
undo scheduler reboot
Default
No reboot date or time is specified.
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
time: Specifies the reboot time in the hh:mm format. The value range for hh is 0 to 23. The value range
for mm is 0 to 59.
date: Specifies the reboot date in the format of MM/DD/YYYY or YYYY/MM/DD. The value range for
YYYY is 2000 to 2035. The value range for MM is 1 to 12. The value range for DD varies by month.
Usage guidelines
CAUTION:
Device reboot interrupts network services.
When the date argument is not specified, the system uses the following rules to determine the reboot time:
•
If the reboot time is later than the current time, a reboot occurs at the reboot time of the current day.
•
If the reboot time is earlier than the current time, a reboot occurs at the reboot time the next day.
For data security, if you are performing file operations at the reboot time, the system does not reboot.
The device supports only one device reboot schedule. If you configure both the schedule reboot delay
and schedule reboot delay commands or configure one of the commands multiple times, the most recent
configuration takes effect.
Examples
# Configure the device to reboot at 12:00 p.m. This example assumes that the current time is 11:43 a.m.
on June 6, 2013.
<Sysname> scheduler reboot at 12:00
Reboot system at 12:00:00 06/06/2013 (in 0 hours and 16 minutes). Confirm? [Y/N]:
Related commands
scheduler reboot delay
scheduler reboot delay
Use scheduler reboot delay to specify the reboot delay time.
Use undo scheduler reboot to remove the reboot schedule configuration.
Syntax
scheduler reboot delay time
undo scheduler reboot
240
Default
No reboot delay time is specified.
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
time: Specifies the reboot delay time in the format of hh:mm or mm. This argument can consist up to 6
characters. When in the hh:mm format, mm must be in the range of 0 to 59.
Usage guidelines
CAUTION:
Device reboot interrupts network services.
For data security, if you are performing file operations at the reboot time, the system does not reboot.
The device supports only one device reboot schedule. If you configure both the schedule reboot delay
and schedule reboot delay commands or configure one of the commands multiple times, the most recent
configuration takes effect.
Examples
# Configure the device to reboot after 88 minutes. This example assumes that the current time is 11:48
a.m. on June 6, 2011.
<Sysname> scheduler reboot delay 88
Reboot system at 13:16 06/06/2011(in 1 hours and 28 minutes). Confirm? [Y/N]:
scheduler schedule
Use scheduler schedule to create a schedule and enter schedule view. If the schedule already exists, you
enter schedule view directly.
Use undo scheduler schedule to delete a schedule.
Syntax
scheduler schedule schedule-name
undo scheduler schedule schedule-name
Default
No schedule exists.
Views
System view
Predefined user roles
network-admin
mdc-admin
241
Parameters
schedule-name: Specifies the schedule name, a case-sensitive string of 1 to 47 characters.
Usage guidelines
You can schedule a job to have the device automatically run a command or a set of commands without
administrative interference.
To configure a schedule:
1.
Use the scheduler job command to create a job.
2.
In job view, use the command command to assign commands to the job.
3.
Use the scheduler schedule command to create a schedule.
4.
In schedule view, use the job command to assign the job to the schedule. You can assign multiple
jobs to a schedule. The jobs must already exist.
5.
In schedule view, use the user-role command to assign user roles to the schedule. You can assign
up to 64 user roles to a schedule.
6.
In schedule view, use the time at, time once, or time repeating command to specify an execution
time for the schedule. You can specify only one execution time per schedule.
Examples
# Create a schedule named saveconfig.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
Related commands
•
job
•
time at
•
time once
•
time repeating
set asset-info
Use set asset-info to set the asset profile for a physical component, such as a chassis, card, fan tray, or
power supply.
Syntax
In standalone mode:
set asset-info { chassis | fan fan-id | power power-id | slot slot-number } { csn csn-number | custom
name value | department department | description description | location location | service-date date
| state state }
In IRF mode:
set asset-info chassis chassis-number { chassis | fan fan-id | power power-id | slot slot-number } { csn
csn-number | custom name value | department department | description description | location location
| service-date date | state state }
Views
System view
242
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
chassis: Sets the asset profile for the chassis.
fan fan-id: Sets the asset profile for the specified fan tray.
power power-id: Sets the asset profile for the specified power supply.
slot slot-number: Sets the asset profile for the card in the specified slot.
csn csn-number: Sets a user asset ID. The csn-number argument is a string of 1 to 64 characters.
custom name value: Sets the customized asset profile. The name argument specifies the asset profile
name, and the value argument specifies the asset profile content.
department department: Sets the department name in the asset profile. The department argument is a
string of 1 to 64 characters.
description description: Sets the description in the asset profile. The description argument is a string of 1
to 64 characters.
location location: Sets the location in the asset profile. The location argument is a string of 1 to 64
characters.
service-date date: Sets the service start date in the asset profile. The date argument is a string of 1 to 25
characters.
state state: Sets the usage state in the asset profile. The state argument is a string of 1 to 64 characters.
chassis chassis-number: Sets the asset profiles for the specified IRF member device. The chassis-number
argument specifies the IRF member ID of the device. (In IRF mode.)
Usage guidelines
If you specify a fan tray or power supply that does not exist, the command prompts that the fan tray or
power supply is not present.
Examples
# In standalone mode, set the asset ID for fan tray 0 to 123456.
<Sysname> system-view
[Sysname] set asset-info fan 0 csn 123456
# In IRF mode, set the asset ID for fan tray 0 on IRF member device 1 to 123456.
<Sysname> system-view
[Sysname] set asset-info chassis 1 fan 0 csn 123456
Related commands
•
display asset-info
•
reset asset-info
243
shutdown-interval
Use shutdown-interval to set the detection timer.
Use undo shutdown-interval to restore the default.
Syntax
shutdown-interval time
undo shutdown-interval
Default
The detection interval is 30 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
time: Specifies a detection timer (in seconds) in the range of 1 to 300.
Usage guidelines
The device starts a detection timer when a port is shut down by a protocol. Once the timer expires, the
device brings up the port so the port status reflects the port's physical status.
If you change the timer during port detection, the device compares the new setting (T1) with the time that
elapsed since the port was shut down (T).
•
If T<T1, the port will be brought up after T1-T seconds.
•
If T>=T1, the port is brought up immediately.
For example, if you change the timer from 30 seconds to 10 seconds two seconds after the port is shut
down, the port will come up 8 seconds later. If you change the timer from 30 seconds to 2 seconds ten
seconds after the port is shut down, the port comes up immediately.
Examples
# Set the detection timer to 100 seconds.
<Sysname> system-view
[Sysname] shutdown-interval 100
switch-fabric isolate
Use switch-fabric isolate to isolate a switching fabric module or channel.
Use undo switch-fabric isolate to restore the default.
Syntax
In standalone mode:
switch-fabric isolate slot slot-number [ channel channel-number ]
undo switch-fabric isolate slot slot-number [ channel channel-number ]
244
In IRF mode:
switch-fabric isolate chassis chassis-number slot slot-number [ channel channel-number ]
undo switch-fabric isolate chassis chassis-number slot slot-number [ channel channel-number ]
Default
A switching fabric module is not isolated from the forwarding plane and forwards traffic.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
slot slot-number: Specifies a switching fabric module by its slot number.
chassis chassis-number slot slot-number: Specifies a switching fabric module on an IRF member device by
its slot number and the member ID.
channel channel-number: Specifies a switching fabric channel. If you do not specify this option, the
command isolates the entire switching fabric module.
Usage guidelines
You can isolate a switching fabric module or a channel from the forwarding plane. An isolated switching
fabric module or channel does not receive any traffic.
Isolating the only switching fabric module of the switch disables the forwarding function. If the switch has
multiple switching fabric modules, isolating a switching fabric module decreases the forwarding
bandwidth and reduces the forwarding performance. To minimize impact on forwarding performance,
isolate only the failed channels.
Isolating a switching fabric module or channel does not affect operations on the control panel, such as
protocol packet resolution and protocol calculation. The switching fabric module or channel can forward
traffic immediately after you cancel the isolation.
Examples
# In standalone mode, isolate the switching fabric module in slot 10.
<Sysname> system-view
[Sysname] switch-fabric isolate slot 10
The command will isolate the switch fabric or a channel from the system. Continue? [Y/N]
# In IRF mode, isolate channel 1 on the switching fabric module in slot 10 of member device 1.
<Sysname> system-view
[Sysname] switch-fabric isolate chassis 1 slot 10 channel 1
The command will isolate the switch fabric or a channel from the system. Continue? [Y/N]
switch-fabric removal-signal-suppression
Use switch-fabric removal-signal-suppression to disable the switching fabric module from sending
removal interrupt signals before it is removed.
Use undo switch-fabric removal-signal-suppression to restore the default.
245
Syntax
switch-fabric removal-signal-suppression
undo switch-fabric removal-signal-suppression
Default
The switching fabric module sends removal interrupt signals before it is removed.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If the switching fabric module frequently sends incorrect removal interrupt signals before it is removed, the
device might fail. To avoid this problem, configure the switch-fabric removal-signal-suppression
command.
Examples
# Disable the switching fabric module from sending removal interrupt signals before it is removed.
<Sysname> system-view
[Sysname] switch-fabric removal-signal-suppression
switch-mode
Use switch-mode to set the operating mode for an LPU.
Use undo switch-mode to restore the default.
Syntax
In standalone mode:
switch-mode { normal | standard-ipv6 | bridging | routing | mix-bridging-routing | ipv6 } slot
slot-number
undo switch-mode slot slot-number
In IRF mode:
switch-mode { normal | standard-ipv6 | bridging | routing | mix-bridging-routing | ipv6 } chassis
chassis-number slot slot-number
undo switch-mode chassis chassis-number slot slot-number
Default
EA, EB, and EX cards operate in normal mode. EC cards operate in mix-bridging-routing mode.
Views
System view
Predefined user roles
network-admin
network-operator
246
mdc-admin
mdc-operator
Parameters
normal: Specifies the normal mode.
standard-ipv6: Specifies the IPv6 standard mode.
bridging: Specifies the extended MAC mode.
routing: Specifies the extended routing mode.
mix-bridging-routing: Specifies the extended hybrid mode.
ipv6: Specifies the IPv6 mode.
slot slot-number: Specifies the number of the slot where the LPU resides.
chassis chassis-number: Specifies the ID of the IRF member device. (In IRF mode.)
Usage guidelines
If your switch has multiple LPUs, specify the same operating mode for them.
For an operating mode change on an LPU to take effect, you must save the configuration and reboot the
LPU.
All interface settings for an LPU are lost if you change the operating mode as follows:
•
From routing, mix-bridging-routing, or normal to bridging.
•
From bridging to routing, mix-bridging-routing, or normal.
You must save the configuration, reboot the LPU, and reconfigure the interfaces.
An LPU might reboot once or twice for self-optimization in the following situations:
•
The first time you change its operating mode.
•
You upgrade the software version of the switch after changing the LPU operating mode.
The reboot process takes about 6 to 10 minutes.
Examples
# In standalone mode, set the operating mode to the IPv6 standard mode for the LPU in slot 2 of the
switch.
<Sysname> system-view
[Sysname] switch-mode standard-ipv6 slot 2
# In IRF mode, set the operating mode to the IPv6 standard mode for the LPU in slot 2 of IRF member
device 2.
<Sysname> system-view
[Sysname] switch-mode standard-ipv6 chassis 2 slot 2
Related commands
display switch-mode status
sysname
Use sysname to set the device name.
Use undo sysname to restore the default.
247
Syntax
sysname sysname
undo sysname
Default
The default name is HP.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
sysname: Specifies a name for the device, a string of 1 to 64 characters.
Usage guidelines
A device name identifies a device in a network and is used as the user view prompt at the CLI. For
example, if the device name is Sysname, the user view prompt is <Sysname>.
Examples
# Set the name of the device to R2000.
<Sysname> system-view
[Sysname] sysname R2000
[R2000]
system-working-mode
Use system-working-mode to set the operating mode of the device.
Use undo system-working-mode to restore the default.
Syntax
system-working-mode { advance | standard }
undo system-working-mode
Default
The device operates in standard mode.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
advance: Sets the operating mode of the device to advanced.
standard: Sets the operating mode of the device to standard.
248
Usage guidelines
The supported features and the specifications of the supported features vary by operating mode of the
device. For example, the device supports FCoE only when it is operating in advanced mode.
After changing the operating mode, you must reboot the device to make the device operate in the new
mode.
Examples
# Set the operating mode to advanced.
<Sysname> system-view
[Sysname] system-working-mode advance
Do you want to change the system working mode? [Y/N]:y
The system working mode is changed, please save the configuration and reboot the system
to make it effective.
temperature-limit
Use temperature-limit to set the temperature alarm thresholds for the device.
Use undo temperature-limit to restore the default.
Syntax
In standalone mode:
temperature-limit slot slot-number { hotspot | inflow } sensor-number lowlimit warninglimit [ alarmlimit ]
undo temperature-limit slot slot-number { hotspot | inflow } sensor-number
In IRF mode:
temperature-limit chassis chassis-number slot slot-number { hotspot | inflow } sensor-number lowlimit
warninglimit [ alarmlimit ]
undo temperature-limit chassis chassis-number slot slot-number { hotspot | inflow } sensor-number
Default
To view the default settings, use the undo temperature-limit command to restore the defaults and then
execute the display environment command.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
slot slot-number: Specifies a card by its slot number.
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot
number of the card. (In IRF mode.)
hotspot: Configures temperature alarm thresholds for hotspot sensors. A hotspot sensor is typically near
the chip that generates a great amount of heat and used to monitor the chip.
249
inflow: Configures temperature alarm thresholds for inlet sensors. An inlet sensor is near the air inlet and
used for monitoring ambient temperature.
sensor-number: Specifies a sensor by its number, an integer starting from 1. Each number represents a
temperature sensor on the card.
lowlimit: Specifies the low temperature threshold in Celsius degrees.
warninglimit: Specifies the high-temperature warning threshold in Celsius degrees. This threshold must
be greater than the low-temperature threshold.
alarmlimit: Specifies the high-temperature alarming threshold in Celsius degrees. This threshold must be
greater than the high-temperature warning threshold.
Usage guidelines
The sensor numbers and threshold value ranges vary by card model. Use the CLI online help system to
view the value ranges.
When the device temperature drops below the low-temperature threshold or reaches the
high-temperature warning threshold, the device performs the following tasks:
•
Logs the event.
•
Sends a log message.
•
Sends a trap.
When the device temperature reaches the high-temperature alarming threshold, the device performs the
following tasks:
•
Logs the event.
•
Sends log messages repeatedly.
•
Sends traps repeatedly.
•
Sets the LEDs on the device panel.
When the temperature of an LPU or switching fabric module reaches the high-temperature shutdown
threshold, the device performs the following tasks:
•
Logs the event.
•
Sends log messages repeatedly.
•
Shuts down the LPU or switching fabric module.
The high-temperature shutdown threshold is not configurable.
Examples
# In standalone mode, set temperature thresholds for hotspot sensor 1 on the card in slot 0.
<Sysname> system-view
[sysname] temperature-limit slot 0 hotspot 1 -10 70 95
# In IRF mode, set temperature thresholds for hotspot sensor 1 on the card in slot 0 on IRF member device
1.
<Sysname> system-view
[sysname] temperature-limit chassis 1 slot 0 hotspot 1 -10 70 95
time at
Use time at to specify an execution date and time for a one-time schedule.
250
Use undo time to remove the execution time configuration for a schedule.
Syntax
time at time date
undo time
Default
No execution time or date is specified for a schedule.
Views
Schedule view
Predefined user roles
network-admin
mdc-admin
Parameters
time: Specifies the schedule execution time in the hh:mm format. The value range for hh is 0 to 23. The
value range for mm is 0 to 59.
date: Specifies the schedule execution date in the format or MM/DD/YYYY or YYYY/MM/DD. The
value range for YYYY is 2000 to 2035. The value range for MM is 1 to 12. The value range for DD varies
by month.
Usage guidelines
The specified time (date plus time) must be later than the current system time.
The time at command, the time once command, and the time repeating command overwrite one another.
The most recently configured command takes effect.
Examples
# Configure the device to execute schedule saveconfig at 01:01 a.m. on May 11, 2011.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time at 1:1 2011/05/11
Related commands
scheduler schedule
time once
Use time once to specify one or more execution days and the execution time for a one-time schedule.
Use undo time to remove the execution time configuration for a schedule.
Syntax
time once at time [ month-date month-day | week-day week-day&<1-7> ]
time once delay time
undo time
Default
No execution time or day is specified for a schedule.
251
Views
Schedule view
Predefined user roles
network-admin
mdc-admin
Parameters
at time: Specifies the execution time in the hh:mm format, where hh is in the range of 0 to 23, and mm
is in the range of 0 to 59.
month-date month-day: Specifies a day in the current month, in the range of 1 to 31. If you specify a day
that does not exist in the current month, the configuration takes effect on that day in the next month.
week-day week-day&<1-7>: Specifies a space-separated list of up to seven week days for the schedule.
Valid values include Mon, Tue, Wed, Thu, Fri, Sat, and Sun.
delay time: Specifies the delay time for executing the schedule, in the format of hh:mm or mm. This
argument can consist up to 6 characters. When in the hh:mm format, mm must be in the range of 0 to 59.
Usage guidelines
If the specified time has already occurred, the schedule will be executed at the specified time the
following day.
If the day in the month has already occurred, the schedule will be executed at the specified day in the
following month.
If the specified day in a week has already occurred, the schedule will be executed at the specified day
in the following week.
The time at command, the time once command, and the time repeating command overwrite one another.
The most recently configured command takes effect.
Examples
# Configure the device to execute schedule saveconfig once at 15:00.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time once at 15:00
Schedule starts at 15:00 5/11/2011.
# Configure the device to execute schedule saveconfig once at 15:00 on the coming 15th day in a
month.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time once at 15:00 month-date 15
# Configure the device to execute schedule saveconfig at 12:00 p.m. on the coming Monday and Friday.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time once at 12:00 week-day mon fri
# Configure the device to execute schedule saveconfig after 10 minutes.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time once delay 10
252
Related commands
scheduler schedule
time repeating
Use time repeating to specify an execution time table for a periodic schedule.
Use undo time to remove the execution time configuration for a schedule.
Syntax
time repeating [ at time [ date ] ] interval interval-time
time repeating at time [ month-date [ month-day | last ] | week-day week-day&<1-7> ]
undo time
Default
No execution time table is specified for a schedule.
Views
Schedule view
Predefined user roles
network-admin
mdc-admin
Parameters
at time: Specifies the execution time in the hh:mm format. The value range for hh is 0 to 23. The value
range for mm is 0 to 59. If you do not specify this option, the current system time is used as the execution
time.
date: Specifies the start date for the periodic schedule, in the format of MM/DD/YYYY or
YYYY/MM/DD. The value range for YYYY is 2000 to 2035. The value range for MM is 1 to 12. The
value range for DD varies by month. If you do not specify this argument, the execution start date is the first
day when the specified time arrives.
interval interval-time: Specifies the execution time interval in the format of hh:mm or mm. This argument
can consist up to 6 characters. When in the hh:mm format, mm must be in the range of 0 to 59. When
in the mm format, this argument must be equal to or greater than 1 minute.
month-date [ month-day | last ]: Specifies a day in a month, in the range 1 to 31. The last keyword
indicates the last day of a month. If you specify a day that does not exist in a month, the configuration
takes effect on that day in the next month.
week-day week-day&<1-7>: Specifies a space-separated list of up to seven week days. Valid values
include Mon, Tue, Wed, Thu, Fri, Sat, and Sun.
Usage guidelines
The time repeating [ at time [ date ] ] interval interval-time command configures the device to execute a
schedule at an interval from the specified time on.
The time repeating at time [ month-date [ month-day | last ] | week-day week-day&<1-7> ] command
configures the device to execute a schedule at the specified time on every specified day in a month or
week.
253
The time at command, the time once command, and the time repeating command overwrite one another,
whichever is configured most recently takes effect.
Examples
# Configure the device to execute schedule saveconfig once an hour from 8:00 a.m. on.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time repeating at 8:00 interval 60
# Configure the device to execute schedule saveconfig at 12:00 p.m. every day.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time repeating at 12:00
# Configure the device to execute schedule saveconfig at 8:00 a.m. on the 5th of every month.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time repeating at 8:00 month-date 5
# Configure the device to execute schedule saveconfig at 8:00 a.m. on the last day of every month.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time repeating at 8:00 month-date last
# Configure the device to execute schedule saveconfig at 8:00 a.m. every Friday and Saturday.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time repeating at 8:00 week-day fri sat
Related commands
scheduler schedule
user-role
Use user-role to assign user roles to a schedule.
Use undo user-role to remove user roles from a schedule.
Syntax
user-role role-name
undo user-role role-name
Default
A schedule has the user roles of the schedule creator.
Views
Schedule view
Predefined user roles
network-admin
mdc-admin
254
Parameters
role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role can be
user-defined or predefined. Predefined user roles include network-admin, network-operator, level-0 to
level-15, and security-audit).
Usage guidelines
By assigning user roles to and removing user roles from a schedule, you can control the commands to be
executed in the schedule.
A schedule must have a minimum of one user role, and can have up to 64 user roles. A command in a
schedule can be executed if it is permitted by one or more user roles of the schedule.
You must have the network-admin user role to assign user roles to or remove user roles from a schedule.
You can assign only user roles lower than your own user role.
For more information about user roles, see the RBAC configuration in Fundamentals Configuration
Guide.
Examples
# Assign user role rolename to schedule test.
<Sysname> system-view
[Sysname] scheduler schedule test
[Sysname-schedule-test] user-role rolename
[Sysname-schedule-test] display this
#
scheduler schedule test
user-role network-admin
user-role network-operator
user-role rolename
#
return
Related commands
•
command
•
scheduler schedule
255
MDC commands
MDC commands for the default MDC
This section describes the MDC commands that you can use after logging in to the default MDC (the
physical device).
The term "MDC view" refers to the view of a non-default MDC. To enter MDC view, use the mdc
command. You can enter the view of the default MDC by using the mdc admin command, but the
commands for MDC view are not available.
Unless otherwise stated, the term "MDC" in this section refers to a non-default MDC.
allocate interface
Use allocate interface to assign a physical interface to an MDC.
Use undo allocate interface to reclaim a physical interface assigned to an MDC.
Syntax
allocate interface interface-list
undo allocate interface interface-list
Default
All physical interfaces on the device belong to the default MDC. A non-default MDC cannot use any
physical interfaces.
Views
MDC view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-list: Specifies a space-separated list of up to 24 interface items. Each item specifies an interface
by its type and number, or a range of interfaces in the form of interface-type start-interface-number to
interface-type end-interface-number. The two interface-type arguments must have the same value. All
interfaces in the range must be on the same LPU.
Usage guidelines
You can assign multiple physical interfaces to a non-default MDC. A physical interface must meet the
following requirements to be assigned to a non-default MDC:
•
The interface must belong to the default MDC. To assign a physical interface that belongs to one
non-default MDC to another non-default MDC, you must remove the existing assignment by using
the undo allocate interface command.
256
•
The interface must not be the console port. The console port of the device belongs to the default
MDC. You cannot assign them to a non-default MDC.
•
The interface must not be the management Ethernet interface. The physical management Ethernet
interface of the device belongs to the default MDC and cannot be assigned to a non-default MDC.
When a non-default MDC is created, the system automatically creates a virtual management
Ethernet interface for the MDC. All the virtual management Ethernet interfaces use the same
interface type and number and the same physical port and link as the physical management
Ethernet interface. However, you must assign different IP addresses to the virtual management
Ethernet interfaces so MDC administrators can access and manage their respective MDCs. The IP
addresses for the management Ethernet interfaces do not need to belong to the same network
segment.
All interfaces on an LPU for the switch must be assigned to the same MDC.
Assigning or reclaiming a physical interface restores the settings of the interface to the defaults. If the
MDC administrator configures the interface during the assigning or reclaiming operation, settings made
before the operation is completed are lost.
To configure a physical interface assigned to an MDC, you must log in to the MDC.
Examples
# Assign interface FortyGigE 1/0/1 to MDC sub1.
<Sysname> system-view
[Sysname] mdc sub1
[Sysname-mdc-2-sub1] allocate interface fortygige 1/0/1
Configuration of the interfaces will be lost. Continue? [Y/N]:y
Group error: all interfaces of one group must be allocated to the same mdc.
FortyGigE1/0/1
Port list of group 4:
FortyGigE1/0/1
FortyGigE1/0/2
FortyGigE1/0/3
FortyGigE1/0/4
FortyGigE1/0/5
FortyGigE1/0/6
FortyGigE1/0/7
FortyGigE1/0/8
FortyGigE1/0/9
FortyGigE1/0/10
FortyGigE1/0/11
FortyGigE1/0/12
The output shows that FortyGigE 1/0/1 through FortyGigE 1/0/12 must be assigned to the same MDC
at the same time. To assign the interfaces to MDC sub1, use the following command:
[Sysname-mdc-2-sub1] allocate interface FortyGigE 1/0/1 to FortyGigE 1/0/12
Configuration of the interfaces will be lost. Continue? [Y/N]:y
display mdc
Use display mdc to display MDCs and their status.
Syntax
display mdc [ name mdc-name ]
Views
Any view
257
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
name mdc-name: Specifies an MDC by its name, a case-insensitive string of 1 to 15 characters. If you do
not specify this option, the command displays all MDCs.
Examples
# Display all MDCs.
<Sysname> display mdc
ID
Name
Status
--------------------------------1
Admin
active
2
sub1
inactive
Table 41 Command output
Field
Description
Status of the MDC:
Status
•
•
•
•
inactive—The MDC is stopped or not started yet.
starting—The device is executing the mdc start command to start the MDC.
active—The MDC is operating correctly.
updating—The device is executing the location command to authorize the MDC to
use an LPU.
• stopping—The device is executing the undo mdc start command to stop the MDC.
Related commands
mdc
display mdc interface
Use display mdc interface to display the interfaces of MDCs.
Syntax
display mdc [ name mdc-name ] interface
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
258
Parameters
name mdc-name: Specifies an MDC by its name, a case-insensitive string of 1 to 15 characters. If you do
not specify this option, the command displays the interfaces of all MDCs.
Examples
# Display the interfaces of all MDCs.
<Sysname> display mdc interface
MDC Admin's interface(s):
M-GigabitEthernet0/0/0
FortyGigE2/0/1
FortyGigE2/0/2
FortyGigE2/0/3
FortyGigE2/0/4
FortyGigE2/0/5
FortyGigE2/0/6
FortyGigE2/0/7
FortyGigE2/0/8
FortyGigE2/0/9
FortyGigE2/0/10
FortyGigE2/0/11
FortyGigE2/0/12
MDC sub1's interface(s):
FortyGigE1/0/1
FortyGigE1/0/2
FortyGigE1/0/3
FortyGigE1/0/4
FortyGigE1/0/5
FortyGigE1/0/6
FortyGigE1/0/7
FortyGigE1/0/8
FortyGigE1/0/9
FortyGigE1/0/10
FortyGigE1/0/11
FortyGigE1/0/12
Related commands
allocate interface
display mdc resource
Use display mdc resource to display the CPU, disk space, and memory usage of MDCs.
Syntax
In standalone mode:
display mdc [ name mdc-name ] resource [ cpu | disk | memory ] [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display mdc [ name mdc-name ] resource [ cpu | disk | memory ] [ chassis chassis-number slot
slot-number [ cpu cpu-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
259
Parameters
name mdc-name: Specifies an MDC by its name, a case-insensitive string of 1 to 15 characters. If you do
not specify this option, the command displays the usage of all MDCs.
cpu: Displays the CPU usage.
disk: Displays the disk space usage.
memory: Displays the memory space usage.
slot slot-number: Specifies a card. If you do not specify this option, the command displays the usage on
all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. If you do not specify
this option, the command displays the usage on all cards in the IRF fabric. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. If you do not specify this option, the command displays
the usage on CPU 0.
Examples
# In standalone mode, display the CPU, disk space, and memory usage of all MDCs on all cards.
<Sysname> display mdc resource
Memory usage:
Slot 9 CPU 0:
Used 35.2MB, Free 1279.5MB, Total 1314.7MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------1
Admin
1314.7
35.2
1279.5
Slot 10 CPU 0:
Used 34.0MB, Free 1280.7MB, Total 1314.7MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------1
Admin
1314.7
34.0
1280.7
Slot 11 CPU 0:
Used 34.0MB, Free 1284.7MB, Total 1318.7MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------1
Admin
1318.7
34.0
1284.7
Slot 17 CPU 0:
Used 583.5MB, Free 7289.1MB, Total 7872.6MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------1
Admin
7872.6
583.5
7289.1
2
sub1
7872.6
0.0
7289.1
Weight
Usage(%)
CPU usage:
Slot 9 CPU 0:
ID
Name
------------------------------------------------1
Admin
10
7
Weight
Usage(%)
Slot 10 CPU 0:
ID
Name
-------------------------------------------------
260
1
Admin
10
0
Weight
Usage(%)
Slot 11 CPU 0:
ID
Name
------------------------------------------------1
Admin
10
1
Weight
Usage(%)
Slot 17 CPU 0:
ID
Name
------------------------------------------------1
Admin
10
0
2
sub1
10
0
Disk usage:
Slot 17 CPU 0:
flash:: Used 474.1MB, Free 17.9MB, Total 492.0MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
-------------------------------------------------------------1
Admin
492.0
474.1
17.9
2
sub1
492.0
0.0
17.9
# In IRF mode, display the CPU, disk space, and memory space usage of all MDCs on all cards in the
IRF fabric.
<sub1> display mdc resource
Memory usage:
Chassis 1 Slot 9 CPU 0:
Used 39.6MB, Free 1275.0MB, Total 1314.7MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------1
Admin
1314.7
39.6
1275.0
Chassis 1 Slot 10 CPU 0:
Used 39.2MB, Free 1275.5MB, Total 1314.7MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------1
Admin
1314.7
39.2
1275.5
Chassis 1 Slot 11 CPU 0:
Used 39.2MB, Free 1279.5MB, Total 1318.7MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------1
Admin
1318.7
39.2
1279.5
Chassis 1 Slot 17 CPU 0:
Used 585.6MB, Free 7287.0MB, Total 7872.6MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------1
Admin
7872.6
585.6
Weight
Usage(%)
7287.0
CPU usage:
Chassis 1 Slot 9 CPU 0:
ID
Name
------------------------------------------------1
Admin
10
11
Weight
Usage(%)
Chassis 1 Slot 10 CPU 0:
ID
Name
261
------------------------------------------------1
Admin
10
0
Weight
Usage(%)
Chassis 1 Slot 11 CPU 0:
ID
Name
------------------------------------------------1
Admin
10
20
Weight
Usage(%)
Chassis 1 Slot 17 CPU 0:
ID
Name
------------------------------------------------1
Admin
10
0
Disk usage:
Chassis 1 Slot 17 CPU 0:
flash:: Used 316.9MB, Free 175.1MB, Total 492.0MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
-------------------------------------------------------------1
Admin
492.0
316.9
175.1
Table 42 Command output
Field
Description
Slot x CPU y
Usage on the specified CPU of the specified card. (In standalone mode.)
Chassis x Slot y
CPU z
Usage on the specified CPU of the specified card in the specified CPU IRF member device.
(In IRF mode.)
Weight
CPU weight.
Quota (MB)
Maximum amount of memory or disk space for the MDC, in MB.
Available(MB)
Available amount of memory or disk space for the MDC, in MB.
limit-resource cpu
Use limit-resource cpu to specify a CPU weight for an MDC.
Use undo limit-resource cpu to restore the default.
Syntax
limit-resource cpu weight weight-value
undo limit-resource cpu
Default
Each MDC has a CPU weight of 10.
Views
MDC view
Predefined user roles
network-admin
mdc-admin
Parameters
weight weight-value: Specifies a CPU weight value in the range of 1 to 10.
262
Usage guidelines
All MDCs share the CPU resources on the MPUs in the system. The amount of CPU resources available for
an MDC varies by CPU weight settings for all MDCs. For example, if three MDCs share the same CPU,
setting their weights to 10, 10, and 5 is equivalent to setting their weights to 2, 2, and 1.
•
The two MDCs with the same weight can use the CPU for approximately the same period of time.
•
The third MDC can use the CPU for about half of the time for each of the other two MDCs.
You can use this command to change the CPU weight for a non-default MDC. The CPU weight for the
default MDC cannot be changed.
Examples
# Set the CPU weight of MDC sub1 to 2.
<Sysname> system-view
[Sysname] mdc sub1
[Sysname-mdc-2-sub1] limit-resource cpu weight 2
limit-resource disk
Use limit-resource disk to specify a disk space percentage for an MDC.
Use undo limit-resource disk to restore the default.
Syntax
In standalone mode:
limit-resource disk slot slot-number [ cpu cpu-number ] ratio limit-ratio
undo limit-resource disk slot slot-number [ cpu cpu-number ]
In IRF mode:
limit-resource disk chassis chassis-number slot slot-number [ cpu cpu-number ] ratio limit-ratio
undo limit-resource disk chassis chassis-number slot slot-number [ cpu cpu-number ]
Default
All MDCs share the disk space on the MPUs in the system, and an MDC can use all the free disk space.
Views
MDC view
Predefined user roles
network-admin
mdc-admin
Parameters
slot slot-number: Specifies an MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies an MPU on an IRF member device. (In IRF mode.)
ratio limit-ratio: Specifies the ratio of the disk space an MDC can use on the specified MPU to the total
disk space of the MPU. The value range is 1 to 100.
cpu cpu-number: Specifies a CPU by its number. If you do not specify this option, the command specifies
a disk space percentage for CPU 0.
263
Usage guidelines
Before you specify a disk space percentage for an MDC, use the display mdc resource command to view
how much disk space the MDC is using. Make sure the disk space you assign to an MDC is greater than
the disk space the MDC is using. Otherwise, the MDC cannot apply for more disk space and no
additional folders or files can be created or saved for the MDC.
Examples
# In standalone mode, allow MDC sub1 to use up to 30 percent of the disk space on the MPU in slot 17.
<Sysname> system-view
[Sysname] mdc sub1
[Sysname-mdc-2-sub1] limit-resource disk slot 17 ratio 30
# In IRF mode, allow MDC sub1 to use up to 30 percent of the disk space on the MPU in slot 17 on IRF
member device 2.
<Sysname> system-view
[Sysname] mdc sub1
[Sysname-mdc-2-sub1] limit-resource disk chassis 2 slot 17 ratio 30
limit-resource memory
Use limit-resource memory to specify an MPU memory space percentage for an MDC.
Use undo limit-resource memory to restore the default.
Syntax
In standalone mode:
limit-resource memory slot slot-number [ cpu cpu-number ] ratio limit-ratio
undo limit-resource memory slot slot-number [ cpu cpu-number ]
In IRF mode:
limit-resource memory chassis chassis-number slot slot-number [ cpu cpu-number ] ratio limit-ratio
undo limit-resource memory chassis chassis-number slot slot-number [ cpu cpu-number ]
Default
All MDCs share the memory space of the MPUs in the system, and an MDC can use all the free memory
space.
Views
MDC view
Predefined user roles
network-admin
Parameters
slot slot-number: Specifies an MPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies an MPU on an IRF member device. (In IRF mode.)
ratio limit-ratio: Specifies the ratio of the memory space that an MDC can use on the specified MPU to
the total memory space of the MPU. The value range is 1 to 100.
cpu cpu-number: Specifies a CPU by its number. If you do not specify this option, the command specifies
a memory space percentage for CPU 0.
264
Usage guidelines
This command sets the maximum amount of memory space that an MDC can use. Make sure this amount
is sufficient for the MDC to operate correctly.
Examples
# In standalone mode, allow MDC sub1 to use up to 30 percent of the memory space on the MPU in slot
17.
<Sysname> system-view
[Sysname] mdc sub1
[Sysname-mdc-2-sub1] limit-resource memory slot 17 ratio 30
# In IRF mode, allow MDC sub1 to use up to 30 percent of the memory space on the MPU in slot 17 on
IRF member device 2.
<Sysname> system-view
[Sysname] mdc sub1
[Sysname-mdc-2-sub1] limit-resource memory chassis 2 slot 17 ratio 30
location
Use location to assign an LPU to an MDC.
Use undo location to reclaim an LPU assigned to an MDC.
Syntax
In standalone mode:
location slot slot-number
undo location slot slot-number
In IRF mode:
location chassis chassis-number slot slot-number
undo location chassis chassis-number slot slot-number
Default
All LPUs of the device belong to the default MDC. A non-default MDC cannot use any LPUs.
Views
MDC view
Predefined user roles
network-admin
mdc-admin
Parameters
slot slot-number: Specifies an LPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies an LPU on an IRF member device. (In IRF mode.)
Usage guidelines
To assign physical interfaces to an MDC, you must first assign the MDC the LPUs to which the physical
interfaces belong.
265
To assign an LPU to an MDC, you must first reclaim the LPU from the MDC that owns it, including the
default MDC.
An LPU for the switch can be assigned only to one MDC.
Examples
# In standalone mode, authorize MDC sub1 to use the LPU in slot 3.
<Sysname> system-view
[Sysname] mdc Admin
[Sysname-mdc-1-Admin] undo location slot 3
The configuration associated with the specified slot of MDC will be lost. Continue? [Y/N]:y
[Sysname-mdc-1-Admin] quit
[Sysname] mdc sub1
[Sysname-mdc-2-sub1] location slot 3
# In IRF mode, authorize MDC sub1 to use the LPU in slot 3 on IRF member device 2.
<Sysname> system-view
[Sysname] mdc Admin
[Sysname-mdc-1-Admin] undo location chassis 2 slot 3
The configuration associated with the specified slot of MDC will be lost. Continue? [Y/N]:y
[Sysname] mdc sub1
[Sysname-mdc-2-sub1] location chassis 2 slot 3
switchto mdc
Use switchto mdc to log in to a non-default MDC from the system view of the default MDC and enter
MDC user view.
Syntax
switchto mdc mdc-name
Views
System view
Predefined user roles
network-admin
network-operator
Parameters
mdc-name: Specifies the MDC name, a case-insensitive string of 1 to 15 characters. The MDC must have
already been started.
Usage guidelines
You use this command to log in only to an MDC that is in active state.
Examples
# Log in to MDC sub1 from the system view of the default MDC.
<Sysname> system-view
[Sysname] switchto mdc sub1
******************************************************************************
* Copyright (c) 2010-2014 Hewlett-Packard Development Company, L.P.
*
* Without the owner's prior written consent,
*
266
* no decompiling or reverse-engineering shall be allowed.
*
******************************************************************************
Automatic configuration is running, press CTRL_D to break or press CTRL_B to
switch back to the default MDC.
<Sysname>
<Sysname> display mdc
ID
Name
Status
2
sub1
active
Related commands
switchback
mdc
Use mdc to create an MDC and enter MDC view. If the MDC already exists, you enter the MDC view
directly.
Use undo mdc to delete an MDC.
Syntax
mdc mdc-name [ id mdc-id ]
undo mdc mdc-name
Default
There is a default MDC with the name Admin and the ID 1.
Views
System view
Predefined user roles
network-admin
Parameters
mdc-name: Specifies the MDC name, a case-sensitive string of 1 to 15 characters.
id mdc-id: Specifies the MDC ID in the range of 1 to 9. If you do not specify this option, the system assigns
the lowest ID number among the available IDs to the MDC.
Usage guidelines
The default MDC is system predefined. You cannot delete it.
You can create up to eight MDCs.
To enter the view of an existing MDC, you can specify the MDC name, or specify both the MDC name
and the MDC ID. If you specify both the MDC name and the MDC ID, make sure the two arguments
identify the same MDC.
Delete an MDC with caution. Deleting an MDC removes all configurations and hard disk files of the
MDC, and the configurations and files cannot be restored.
Examples
# Create an MDC named sub1.
<Sysname> system-view
267
[Sysname] mdc sub1
It will take some time to create MDC...
MDC created successfully.
Related commands
display mdc
mdc start
Use mdc start to start an MDC.
Use undo mdc start to stop an MDC.
Syntax
mdc start
undo mdc start
Views
MDC view
Predefined user roles
network-admin
Usage guidelines
After an MDC is started, administrators of the MDC can log in to the MDC for MDC configuration and
maintenance.
Stop an MDC with caution. Stopping an MDC interrupts all services on the MDC and logs out all login
users on the MDC.
To avoid configuration loss, save the running configuration of an MDC before stopping the MDC.
Examples
# Start MDC sub1.
<Sysname> system-view
[Sysname] mdc sub1
[Sysname-mdc-2-sub1] mdc start
It will take some time to start MDC...
MDC started successfully.
MDC commands for non-default MDCs
This section describes the MDC commands that you can use after logging in to a non-default MDC.
display mdc
Use display mdc to display the ID, name, and status of the current MDC.
Syntax
display mdc
268
Views
Any view
Predefined user roles
mdc-admin
mdc-operator
Examples
# Display the ID, name, and status of the current MDC.
<sub1> display mdc
ID
Name
Status
2
sub1
active
Table 43 Command output
Field
Description
MDC status:
Status
•
•
•
•
inactive—The MDC is stopped or not started yet.
starting—The device is executing the mdc start command to start the MDC.
active—The MDC is operating correctly.
updating—The device is executing the location command to authorize the MDC to
use an LPU.
• stopping—The device is executing the undo mdc start command to stop the MDC.
display mdc interface
Use display mdc interface to display the interfaces of the current MDC.
Syntax
display mdc interface
Views
Any view
Predefined user roles
mdc-admin
mdc-operator
Examples
# Display the interfaces of the current MDC.
<sub1> display mdc interface
MDC sub1's interface(s):
M-GigabitEthernet0/0/0
display mdc resource
Use display mdc resource to display the CPU, disk space, and memory usage of the current MDC.
269
Syntax
In standalone mode:
display mdc resource [ cpu | disk | memory ] [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display mdc resource [ cpu | disk | memory ] [ chassis chassis-number slot slot-number [ cpu
cpu-number ] ]
Views
Any view
Predefined user roles
mdc-admin
mdc-operator
Parameters
cpu: Displays the CPU usage.
disk: Displays the disk space usage.
memory: Displays the memory space usage.
slot slot-number: Specifies a card. If you do not specify this option, the command displays the usage on
all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. If you do not specify
this option, the command displays the usage on all cards in the IRF fabric. (In IRF mode.)
cpu cpu-number: Specifies a CPU by its number. If you do not specify this option, the command displays
the usage on CPU 0.
Examples
# In standalone mode, display the CPU, disk space, and memory space usage of the MDC on all cards.
<sub1> display mdc resource
Memory usage:
Slot 17 CPU 0:
Used 688.8MB, Free 7183.8MB, Total 7872.6MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------2
sub1
7872.6
50.2
Weight
Usage(%)
7183.8
CPU usage:
Slot 17 CPU 0:
ID
Name
------------------------------------------------2
sub1
10
0
Disk usage:
Slot 17 CPU 0:
flash:: Used 474.1MB, Free 17.9MB, Total 492.0MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
-------------------------------------------------------------2
sub1
492.0
0.0
270
17.9
# In IRF mode, display the CPU, disk space, and memory space usage of the MDC on all cards in the IRF
fabric.
<sub1> display mdc resource
Memory usage:
Chassis 1 Slot 9 CPU 0:
Used 37.0MB, Free 1277.7MB, Total 1314.7MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------2
sub1
1314.7
8.2
1277.7
Chassis 1 Slot 17 CPU 0:
Used 711.3MB, Free 7161.3MB, Total 7872.6MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
---------------------------------------------------------------2
sub1
2361.8
50.6
Weight
Usage(%)
2311.2
CPU usage:
Chassis 1 Slot 9 CPU 0:
ID
Name
------------------------------------------------2
sub1
10
0
Weight
Usage(%)
Chassis 1 Slot 17 CPU 0:
ID
Name
------------------------------------------------2
sub1
10
0
Disk usage:
Chassis 1 Slot 17 CPU 0:
flash:: Used 317.0MB, Free 175.0MB, Total 492.0MB:
ID
Name
Quota(MB)
Used(MB)
Available(MB)
-------------------------------------------------------------2
sub1
492.0
0.0
175.0
Table 44 Command output
Field
Description
Slot x CPU y
Usage on the specified CPU of the specified card. (In standalone mode.)
Chassis x Slot y
CPU z
Usage on the specified CPU of the specified card in the specified IRF member device. (In
IRF mode.)
Weight
CPU weight.
Quota(MB)
Maximum amount of memory or disk space for the MDC, in MB.
Available(MB)
Available amount of memory or disk space for the MDC, in MB.
switchback
Use switchback to return from a non-default MDC to the default MDC. This command will bring you from
the user view of the non-default MDC to the system view of the default MDC.
Syntax
switchback
271
Views
User view
Predefined user roles
mdc-admin
mdc-operator
Usage guidelines
You can use this command to return to the default MDC only after you use the switchto command to log
in to a non-default MDC. If you log in to a non-default MDC by using any other method (such as Telnet),
you cannot use this command to access the default MDC.
Examples
# Return from the current MDC to the default MDC.
<sub1> switchback
[Sysname]
Related commands
switchto mdc
272
Support and other resources
Contacting HP
For worldwide technical support information, see the HP support website:
http://www.hp.com/support
Before contacting HP, collect the following information:
•
Product model names and numbers
•
Technical support registration number (if applicable)
•
Product serial numbers
•
Error messages
•
Operating system type and revision level
•
Detailed questions
Subscription service
HP recommends that you register your product at the Subscriber's Choice for Business website:
http://www.hp.com/go/wwalerts
After registering, you will receive email notification of product enhancements, new driver versions,
firmware updates, and other product resources.
Related information
Documents
To find related documents, browse to the Manuals page of the HP Business Support Center website:
http://www.hp.com/support/manuals
•
For related documentation, navigate to the Networking section, and select a networking category.
•
For a complete list of acronyms and their definitions, see HP FlexNetwork Technology Acronyms.
Websites
•
HP.com http://www.hp.com
•
HP Networking http://www.hp.com/go/networking
•
HP manuals http://www.hp.com/support/manuals
•
HP download drivers and software http://www.hp.com/support/downloads
•
HP software depot http://www.software.hp.com
•
HP Education http://www.hp.com/learn
273
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention
Description
Boldface
Bold text represents commands and keywords that you enter literally as shown.
Italic
Italic text represents arguments that you replace with actual values.
[]
Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars, from
which you select one or none.
{ x | y | ... } *
Asterisk-marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk-marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n>
The argument or keyword and argument combination before the ampersand (&) sign can
be entered 1 to n times.
#
A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Description
Boldface
Window names, button names, field names, and menu items are in bold text. For
example, the New User window appears; click OK.
>
Multi-level menus are separated by angle brackets. For example, File > Create > Folder.
Convention
Description
Symbols
WARNING
An alert that calls attention to important information that if not understood or followed can
result in personal injury.
CAUTION
An alert that calls attention to important information that if not understood or followed can
result in data loss, data corruption, or damage to hardware or software.
IMPORTANT
An alert that calls attention to essential information.
NOTE
TIP
An alert that contains additional or supplementary information.
An alert that provides helpful information.
274
Network topology icons
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports
Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the switching engine
on a unified wired-WLAN switch.
Represents an access point.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security gateway, or
load-balancing device.
Represents a security card, such as a firewall, load-balancing, NetStream, SSL VPN, IPS,
or ACG card.
Port numbering in examples
The port numbers in this document are for illustration only and might be unavailable on your device.
275
Index
ABCDEFGHIJLMNOPQRSTUVW
debug,90
A
delete,129
activation-key,13
delete,91
allocate interface,256
description,51
append,85
dir,92
ascii,86
dir,131
authentication-mode,14
disconnect,93
auto-execute command,15
display | { begin | exclude | include },2
B
display | by-linenum,3
backup startup-configuration,150
display >,4
binary,87
display >>,5
boot-loader file,164
display alarm,188
boot-loader update,166
display asset-info,190
bootrom backup,167
display boot-loader,171
bootrom restore,168
display clock,192
bootrom update,169
display command-alias,6
bootrom-update security-check enable,170
display copyright,192
bye,87
display cpu-usage,193
C
display cpu-usage configuration,195
display cpu-usage history,196
cd,88
display current-configuration,151
cd,125
display default-configuration,152
cdup,89
display device,198
clock datetime,182
display device manuinfo,201
clock protocol,183
display device manuinfo chassis-only,204
clock summer-time,184
display device manuinfo fan,205
clock timezone,185
display device manuinfo power,206
close,90
display diagnostic-information,206
command,186
display environment,207
command accounting,17
display fan,209
command authorization,18
display ftp client source,93
command-alias enable,1
display ftp-server,79
command-alias mapping,1
display ftp-user,80
configuration encrypt,150
display history-command,7
copy,127
display history-command all,7
copyright-info enable,187
display hotkey,8
D
display install active,172
databits,18
display install committed,174
276
free line,26
display line,19
display mdc,257
free user-interface,27
display mdc,268
ftp,94
display mdc interface,258
ftp client ipv6 source,95
display mdc interface,269
ftp client source,96
display mdc resource,259
ftp ipv6,97
display mdc resource,269
ftp server acl,82
display memory,211
ftp server dscp,83
display memory-threshold,213
ftp server enable,83
display power,215
ftp server ipv6 dscp,84
display role,51
ftp timeout,85
display role feature,54
G
display role feature-group,57
get,98
display saved-configuration,153
gunzip,137
display scheduler job,216
gzip,137
display scheduler logfile,217
display scheduler reboot,218
H
display scheduler schedule,218
header,227
display startup,154
help,99
display switch-mode status,220
history-command max-size,28
display system-working-mode,221
hotkey,9
display telnet client,21
I
display this,155
idle-timeout,29
display transceiver alarm,221
install activate,177
display transceiver diagnosis,222
install commit,178
display transceiver interface,223
install deactivate,179
display transceiver manuinfo,224
interface policy deny,60
display user-interface,21
display users,23
J
display version,225
job,228
display version-update-record,226
L
Documents,273
lcd,100
E
limit-resource cpu,262
escape-key,24
limit-resource disk,263
F
limit-resource memory,264
line,30
fdisk,133
line class,31
feature,59
location,265
file prompt,135
lock,32
fixdisk,135
ls,101
flow-control,26
format,136
M
free ftp user,81
md5sum,138
free ftp user-ip,81
mdc,267
free ftp user-ip ipv6,82
mdc start,268
277
memory-threshold,229
rmdir,144
mkdir,139
rmdir,111
mkdir,102
role,65
monitor cpu-usage enable,230
role default-role enable,66
monitor cpu-usage interval,231
role feature-group,67
monitor handshake-timeout disable-port,232
rstatus,111
more,139
rule,68
mount,141
S
move,142
save,159
N
scheduler job,238
newer,102
scheduler logfile size,239
O
scheduler reboot at,239
scheduler reboot delay,240
open,103
scheduler schedule,241
P
screen-length,35
parity,33
screen-length disable,11
passive,104
send,36
password-recovery enable,233
set asset-info,242
permit interface,61
set authentication password,37
permit vlan,63
sha256sum,145
permit vpn-instance,64
shell,38
protocol inbound,34
shutdown-interval,244
put,104
speed,39
pwd,142
startup saved-configuration,162
pwd,106
status,113
Q
stopbits,40
Subscription service,273
quit,106
super,72
quit,10
super authentication-mode,73
R
super default role,74
reboot,233
super password,75
reget,107
switchback,271
rename,107
switch-fabric isolate,244
rename,143
switch-fabric removal-signal-suppression,245
reset,108
switch-mode,246
reset asset-info,236
switchto mdc,266
reset recycle-bin,143
sysname,247
reset saved-configuration,156
system,114
reset scheduler logfile,237
system-view,12
reset version-update-record,238
system-working-mode,248
restart,108
T
restore startup-configuration,158
tar create,145
return,11
tar extract,146
rhelp,109
tar list,147
278
telnet,40
U
telnet client source,41
umount,148
telnet ipv6,42
undelete,149
telnet server acl,43
user,115
telnet server dscp,44
user-interface,47
telnet server enable,44
user-interface class,48
telnet server ipv6 acl,45
user-role,50
telnet server ipv6 dscp,46
user-role,254
temperature-limit,249
V
terminal type,46
verbose,115
tftp,118
version auto-update enable,180
tftp client ipv6 source,119
version check ignore,181
tftp client source,120
vlan policy deny,76
tftp ipv6,121
tftp-server acl,122
vpn-instance policy deny,77
tftp-server ipv6 acl,123
W
time at,250
Websites,273
time once,251
time repeating,253
279
Download PDF
Similar pages