Hewlett Packard Enterprise 7500 FlexNetwork Switch Command Reference
Hirdetés
Hirdetés
HPE FlexNetwork 7500 Switch Series
Fundamentals Command Reference
Part number: 5998-7461R
Software version: 7500-CMW710-R7178
Document version: 6W100-20160129
© Copyright 2016 Hewlett Packard Enterprise Development LP
The information contained herein is subject to change without notice. The only warranties for Hewlett Packard
Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett
Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software
Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise website.
Acknowledgments
Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the
United States and other countries.
Microsoft® and Windows® are trademarks of the Microsoft group of companies.
Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.
Java and Oracle are registered trademarks of Oracle and/or its affiliates.
UNIX® is a registered trademark of The Open Group.
Contents
Basic CLI commands ······················································································ 1
RBAC commands ························································································· 12
Login management commands ····································································· 46
i
FTP commands ····························································································· 83
ii
TFTP commands ························································································ 121
File system management commands ························································· 128
Configuration file management commands ················································· 153
iii
Software upgrade commands ····································································· 177
ISSU commands ························································································· 186
Emergency shell commands ······································································· 221
iv
Device management commands ································································ 242
v
Tcl commands ····························································································· 318
Password recovery control command ························································· 320
Python commands ······················································································ 322
Document conventions and icons ······························································· 324
Support and other resources ······································································ 326
Index ··········································································································· 329
vi
Basic CLI commands
command-alias enable
Use command-alias enable to enable the command keyword alias feature.
Use undo command-alias enable to disable the command keyword alias feature.
Syntax
command-alias enable undo command-alias enable
Default
The command keyword alias feature is disabled.
Views
System view
Predefined user roles
network-admin mdc-admin
Usage guidelines
Configured command keyword aliases take effect only when the command keyword alias feature is enabled.
Disabling the command keyword alias feature does not delete configured aliases.
Examples
# Enable the command keyword alias feature.
<Sysname> system-view
[Sysname] command-alias enable
Related commands command-alias mapping display command-alias
command-alias mapping
Use command-alias mapping to configure a command keyword alias.
Use undo command-alias mapping to delete a command keyword alias.
Syntax
command-alias mapping cmdkey alias
undo command-alias
mapping cmdkey
Default
A command keyword has no alias.
Views
System view
1
Predefined user roles
network-admin mdc-admin
Parameters
cmdkey
: Specifies the first keyword of a non-undo command or the second keyword of an undo command. You must enter the keyword in its complete form.
alias
: Specifies an alias for the keyword. It must be different from the first keyword of any non-undo command and the second keyword of any undo command.
Usage guidelines
You can configure an alias for the first keyword of a non-undo command or the second keyword of an
undo
command. Then, when you execute a command that starts with the keyword or the undo keyword plus the keyword, you can use the alias. For example, if you configure show as the alias for the display keyword, you can enter show clock to execute the display clock command.
A command keyword can have only one alias.
To use configured command keyword aliases, make sure the command-alias enable command is configured.
Examples
# Define show as the alias of the display keyword.
<Sysname> system-view
[Sysname] command-alias mapping display show
Related commands command-alias enable display command-alias
display | { begin | exclude | include }
Use display | { begin | exclude | include } to filter the output from a display command with a regular expression.
Syntax
display command
| { begin | exclude | include } regular-expression
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
command
: Specifies the keywords and arguments of a display command. To display available keywords and arguments, enter display ?.
begin
: Displays the first line matching the specified regular expression and all subsequent lines.
exclude
: Displays all lines not matching the specified regular expression.
include
: Displays all lines matching the specified regular expression.
2
regular-expression
: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Usage guidelines
Use the | { begin | exclude | include } regular-expression option with a display command to filter the command output. For more information about regular expressions, see Fundamentals
Configuration Guide
.
Examples
# Display the lines that contain vlan in the running configuration.
<Sysname> display current-configuration | include vlan vlan 1 vlan 999
port access vlan 999
display | by-linenum
Use display | by-linenum to number each output line for a display command.
Syntax
display command
| by-linenum
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
command
: Specifies the keywords and arguments of a display command. To display available keywords and arguments, enter display ?.
Usage guidelines
By numbering each output line from a display command, you can easily identify the lines of interest.
Each line number is displayed as a 5-character string and might be followed by a colon (:) or hyphen
(-). If you specify both | by-linenum and | begin regular-expression for a display command, a hyphen is displayed for all lines that do not match the regular expression.
Examples
# Display VLAN 999 settings, with each output line identified by a number.
<Sysname> display vlan 999 | by-linenum
1: VLAN ID: 999
2: VLAN type: Static
3: Route interface: Configured
4: IP address: 192.168.2.1
5: Subnet mask: 255.255.255.0
6: Description: For LAN Access
7: Name: VLAN 0999
8: Tagged ports: None
9: Untagged ports:
3
10: GigabitEthernet1/0/1
# Display the first line that begins with user-group in the running configuration and all of the following lines.
<Sysname> display current-configuration | by-linenum begin user-group
114: user-group system
115- #
116- return
display >
Use display > to save the output from a display command to a separate file.
Syntax display
command > filename
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
command
: Specifies the keywords and arguments of a display command. To display available keywords and arguments, enter display ?.
filename
: Specifies the name of the file that is used to save the output, a string of 1 to 63 characters.
Usage guidelines
The display commands show the configuration, statistics, and states of the device. You can use the
display
> command to save the output to a file.
If the specified file does not exist, the system creates the file and saves the output to the file. If the file already exists, the system overwrites the file.
Examples
# Save VLAN 1 settings to a separate file named vlan.txt.
<Sysname> display vlan 1 > vlan.txt
# Verify the content of the vlan.txt file.
<Sysname> more vlan.txt
VLAN ID: 1
VLAN type: Static
Route interface: Not configured
Description: VLAN 0001
Name: VLAN 0001
Tagged ports: None
Untagged ports:
GigabitEthernet1/0/2
4
display >>
Use display >> to append the output from a display command to the end of a file.
Syntax display
command >> filename
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
command
: Specifies the keywords and arguments of a display command. To display available keywords and arguments, enter display ?.
filename
: Specifies the name of the file that is used to save the output, a string of 1 to 63 characters.
Usage guidelines
The display commands show the configuration, statistics, and states of the device. You can use
display
>> to save the output to a file.
If the specified file does not exist, the system creates the file and saves the output to the file. If the file already exists, the system appends the output to the end of the file.
Examples
# Append the VLAN 999 settings to the end of the vlan.txt file.
<Sysname> display vlan 999 >> vlan.txt
<Sysname>
# Check the content of the vlan.txt file.
<Sysname> more vlan.txt
VLAN ID: 1
VLAN type: Static
Route interface: Not configured
Description: VLAN 0001
Name: VLAN 0001
Tagged ports: None
Untagged ports:
GigabitEthernet1/0/2
VLAN ID: 999
VLAN type: Static
Route interface: Configured
IP address: 192.168.2.1
Subnet mask: 255.255.255.0
Description: For LAN Access
Name: VLAN 0999
Tagged ports: None
5
Untagged ports:
GigabitEthernet1/0/1
display command-alias
Use display command-alias to display the status of the command keyword alias feature and the configured command keyword alias.
Syntax display command-alias
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display command keyword alias information.
<Sysname> display command-alias
Command alias is enabled
Index Alias Command key
1 ping1 ping
2 ssh1 ssh
Related commands command-alias enable command-alias mapping
display history-command
Use display history-command to display all commands that are saved in the command history buffer for the current CLI session.
Syntax display history-command
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Usage guidelines
The system automatically saves commands you have successfully executed to the command history buffer for the current CLI session. You can view them and execute them again.
6
By default, the system can save up to 10 commands in the buffer. You can use the
history-command max-size
command to change the buffer size.
Examples
# Display all commands saved in the command history buffer for the current CLI session.
<Sysname> display history-command
system-view
vlan 2
quit
Related commands history-command max-size
display history-command all
Use display history-command all to display all commands saved in the command history buffer for all CLI sessions.
Syntax display history-command all
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Usage guidelines
The system automatically saves commands successfully executed by users to the command history buffer for all CLI sessions. Users can view them and execute them again.
Up to 1024 commands can be saved in the command history buffer. When this number is reached, the system deletes the earliest commands to make room for newly executed commands.
Examples
# Display all commands saved in the command history buffer for all CLI sessions.
<Sysname> display history-command all
Date Time Terminal Ip User
07/28/2014 20:03:33 vty0 192.168.1.26 **
Cmd:dis his all
07/28/2014 20:03:29 vty0 192.168.1.26 **
Cmd:sys
Related commands display history-command
display hotkey
Use display hotkey to display hotkey information.
7
Syntax display hotkey
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display hotkey information.
<Sysname> display hotkey
----------------- Hotkeys -----------------
-Defined command hotkeys-
CTRL_G display current-configuration
CTRL_L display ip routing-table
CTRL_O undo debugging all
-Undefined command hotkeys-
CTRL_T NULL
CTRL_U NULL
-System-reserved hotkeys-
CTRL_A Move the cursor to the beginning of the line.
CTRL_B Move the cursor one character to the left.
CTRL_C Stop the current command.
CTRL_D Erase the character at the cursor.
CTRL_E Move the cursor to the end of the line.
CTRL_F Move the cursor one character to the right.
CTRL_H Erase the character to the left of the cursor.
CTRL_K Abort the connection request.
CTRL_N Display the next command in the history buffer.
CTRL_P Display the previous command in the history buffer.
CTRL_R Redisplay the current line.
CTRL_V Paste text from the clipboard.
CTRL_W Delete the word to the left of the cursor.
CTRL_X Delete all characters from the beginning of the line to the cursor.
CTRL_Y Delete all characters from the cursor to the end of the line.
CTRL_Z Return to the User View.
CTRL_] Kill incoming connection or redirect connection.
ESC_B Move the cursor back one word.
ESC_D Delete all characters from the cursor to the end of the word.
ESC_F Move the cursor forward one word.
Related commands hotkey
8
hotkey
Use hotkey to assign a command to a configurable hotkey.
Use undo hotkey to restore the default.
Syntax hotkey
{ ctrl_G | ctrl_L | ctrl_O | ctrl_T | ctrl_U } command
undo hotkey
{ ctrl_G | ctrl_L | ctrl_O | ctrl_T | ctrl_U }
Default
• Ctrl_G: display current-configuration (display the running configuration).
• Ctrl_L: display ip routing-table (display the IPv4 routing table information).
•
Ctrl_O: undo debugging all (disable all debugging functions).
•
Ctrl_T: No command is assigned to this hotkey.
• Ctrl_U: No command is assigned to this hotkey.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters ctrl_G
: Assigns a command to Ctrl+G.
ctrl_L
: Assigns a command to Ctrl+L.
ctrl_O
: Assigns a command to Ctrl+O.
ctrl_T
: Assigns a command to Ctrl+T.
ctrl_U
: Assigns a command to Ctrl+U.
command
: Specifies the command to be assigned to the hotkey.
Usage guidelines
The system defines some hotkeys and provides five configurable command hotkeys. Pressing a hotkey executes the command assigned to the hotkey.
To display system-defined and configurable hotkeys, use the display hotkey command.
Examples
# Assign the display tcp statistics command to the hotkey Ctrl+T.
<Sysname> system-view
[Sysname] hotkey ctrl_T display tcp statistics
Related commands display hotkey
quit
Use quit to return to the upper-level view.
9
Syntax quit
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Usage guidelines
Executing this command in user view disconnects you from the device.
Examples
# Return from GigabitEthernet 1/0/1 interface view to system view and then to user view.
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] quit
<Sysname>
return
Use return to return to user view from any other view.
Syntax return
Views
Any view except user view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Usage guidelines
Pressing Ctrl+Z has the same effect as the return command.
Examples
# Return to user view from GigabitEthernet 1/0/1 interface view.
[Sysname-GigabitEthernet1/0/1] return
<Sysname>
screen-length disable
Use screen-length disable to disable pausing between screens of output for the current session.
Use undo screen-length disable to enable pausing between screens of output for the current session.
10
Syntax screen-length disable undo screen-length disable
Default
The default depends on the configuration of the screen-length command in user line view.
The following are the default settings for the screen-length command:
•
Pausing between screens of output.
•
Displaying up to 24 lines on a screen.
Views
User view
Predefined user roles
network-admin mdc-admin
Usage guidelines
If you disable pausing between screens of output, all output is displayed. The screen is refreshed continuously until the final screen is displayed.
This command takes effect only for the current session. When you are logged out, the default is restored.
Examples
# Disable pausing between screens of output for the current session.
<Sysname> screen-length disable
Related commands screen-length
system-view
Use system-view to enter system view from user view.
Syntax system-view
Views
User view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Enter system view from user view.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname]
11
RBAC commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide.
description
Use description to configure a description for a user role.
Use undo description to delete the description of a user role.
Syntax
description text
undo description
Default
A user role does not have a description.
Views
User role view
Predefined user roles
network-admin mdc-admin
Parameters
text
: Configures a user role description, a case-sensitive string of 1 to 128 characters.
Examples
# Configure the description as labVIP for the user role role1.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] description labVIP
Related commands display role role
display role
Use display role to display user role information.
Syntax display role
[ name role-name ]
Views
Any view
Predefined user roles
network-admin network-operator
12
mdc-admin mdc-operator
Parameters
name role-name
: Specifies a user role name, a case-sensitive string of 1 to 63 characters. If you do not specify a user role name, the command displays information about all user roles, including the predefined user roles.
Examples
# Display information about the user role 123.
<Sysname> display role name 123
Role: 123
Description: new role
VLAN policy: deny
Permitted VLANs: 1 to 5, 7 to 8
Interface policy: deny
Permitted interfaces: GigabitEthernet1/0/1 to GigabitEthernet1/0/2, Vlan-interface1 to
Vlan-interface20
VPN instance policy: deny
Permitted VPN instances: vpn, vpn1, vpn2
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
1 permit RWX feature-group abc
2 deny -W- feature ldap
3 permit command system ; radius sc *
4 permit R-- xml-element -
5 permit RW- oid 1.2.1
R:Read W:Write X:Execute
# Display information about all user roles.
<Sysname> display role
Role: network-admin
Description: Predefined network admin role has access to all commands on the d evice
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
sys-1 permit command *
sys-2 permit RWX web-menu -
sys-3 permit RWX xml-element -
sys-4 deny command display security-logfile summary
sys-5 deny command system-view ; info-center securi
ty-logfile directory *
sys-6 deny command security-logfile save
sys-7 permit RW- oid 1
R:Read W:Write X:Execute
13
Role: network-operator
Description: Predefined network operator role has access to all read commands on the device
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
sys-1 permit command display *
sys-2 permit command xml
sys-3 deny command display history-command all
sys-4 deny command display exception *
sys-5 deny command display cpu-usage configuration
*
sys-6 deny command display kernel exception *
sys-7 deny command display kernel deadloop *
sys-8 deny command display kernel starvation *
sys-9 deny command display kernel reboot *
sys-10 deny command display memory trace *
sys-11 deny command display kernel memory *
sys-12 permit command system-view ; local-user *
sys-13 permit command system-view ; switchto *
sys-14 permit R-- web-menu -
sys-15 permit R-- xml-element -
sys-16 deny command display security-logfile summary
sys-17 deny command system-view ; info-center securi
ty-logfile directory *
sys-18 deny command security-logfile save
sys-19 permit R-- oid 1
R:Read W:Write X:Execute
Role: mdc-admin
Description: Predefined MDC admin role has access to all commands within an MD
C
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
sys-1 permit command *
sys-2 permit RWX web-menu -
sys-3 permit RWX xml-element -
sys-4 deny RWX feature mdc
sys-5 permit command display mdc *
sys-7 deny command display security-logfile summary
14
sys-8 deny command system-view ; info-center securi
ty-logfile directory *
sys-9 deny command security-logfile save
sys-10 permit RW- oid 1
R:Read W:Write X:Execute
Role: mdc-operator
Description: Predefined MDC operator role has access to all read commands with in an MDC
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
sys-1 permit command display *
sys-2 permit command xml
sys-3 deny command display history-command all
sys-4 deny command display exception *
sys-5 deny command display cpu-usage configuration
*
sys-6 deny command display kernel exception *
sys-7 deny command display kernel deadloop *
sys-8 deny command display kernel starvation *
sys-9 deny command display kernel reboot *
sys-10 deny command display memory trace *
sys-11 deny command display kernel memory *
sys-12 permit command system-view ; local-user *
sys-15 permit R-- web-menu -
sys-16 permit R-- xml-element -
sys-17 deny command display security-logfile summary
sys-18 deny command system-view ; info-center securi
ty-logfile directory *
sys-19 deny command security-logfile save
sys-20 permit R-- oid 1
R:Read W:Write X:Execute
Role: level-0
Description: Predefined level-0 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
sys-1 permit command tracert *
sys-2 permit command telnet *
sys-3 permit command ping *
15
sys-4 permit command ssh2 *
sys-5 permit command super *
R:Read W:Write X:Execute
Role: level-1
Description: Predefined level-1 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
sys-1 permit command tracert *
sys-2 permit command telnet *
sys-3 permit command ping *
sys-4 permit command ssh2 *
sys-5 permit command display *
sys-6 permit command super *
sys-7 deny command display history-command all
R:Read W:Write X:Execute
Role: level-2
Description: Predefined level-2 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-3
Description: Predefined level-3 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-4
Description: Predefined level-4 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-5
Description: Predefined level-5 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-6
Description: Predefined level-6 role
VLAN policy: permit (default)
16
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-7
Description: Predefined level-7 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-8
Description: Predefined level-8 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-9
Description: Predefined level-9 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
sys-1 permit RWX feature -
sys-2 deny RWX feature device
sys-3 deny RWX feature filesystem
sys-4 permit command display *
sys-5 deny command display history-command all
R:Read W:Write X:Execute
Role: level-10
Description: Predefined level-10 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-11
Description: Predefined level-11 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-12
Description: Predefined level-12 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
17
Role: level-13
Description: Predefined level-13 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-14
Description: Predefined level-14 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
Role: level-15
Description: Predefined level-15 role
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
sys-1 permit command *
sys-2 permit RWX web-menu -
sys-3 permit RWX xml-element -
sys-4 deny command display security-logfile summary
sys-5 deny command system-view ; info-center securi
ty-logfile directory *
sys-6 deny command security-logfile save
sys-7 permit RW- oid 1
R:Read W:Write X:Execute
Role: security-audit
Description: Predefined security audit role only has access to commands for th e security log administrator
VLAN policy: permit (default)
Interface policy: permit (default)
VPN instance policy: permit (default)
-------------------------------------------------------------------
Rule Perm Type Scope Entity
-------------------------------------------------------------------
sys-1 deny command *
sys-2 permit command display security-logfile summary
sys-3 permit command system-view ; info-center securi
ty-logfile directory *
sys-4 permit command security-logfile save
sys-5 permit command cd *
sys-6 permit command copy *
sys-7 permit command delete *
sys-8 permit command dir *
18
sys-9 permit command mkdir *
sys-10 permit command more *
sys-11 permit command move *
sys-12 permit command rmdir *
sys-13 permit command pwd
sys-14 permit command rename *
sys-15 permit command undelete *
sys-16 permit command ftp *
sys-17 permit command sftp *
R:Read W:Write X:Execute
Table 1 Command output
Field Description
Role
User role name.
Predefined user role names:
• network-admin.
• network-operator.
• mdc-admin.
• mdc-operator.
• level-n (where n represents an integer in the range of 0 to 15).
• security-audit.
Description User role description you have configured for easy identification.
VLAN policy
Permitted VLANs
Interface policy
Permitted interfaces
VPN instance policy
Permitted VPN instances
Security zone policy
Rule
VLAN policy of the user role:
•
deny
—Denies access to any VLAN except permitted VLANs.
•
permit (default)
—Default VLAN policy, which enables the user role to access any VLAN.
VLANs accessible to the user role.
Interface policy of the user role:
•
deny
—Denies access to any interface except permitted interfaces.
•
permit (default)
—Default interface policy, which enables the user role to access any interface.
Interfaces accessible to the user role.
VPN instance policy of the user role:
•
deny
—Denies access to any VPN instance except permitted
VPN instances.
•
permit (default)
—Default VPN instance policy, which enables the user role to access any VPN instance.
VPN instances accessible to the user role.
Security zone policy of the user role.
The value permit (default) represents the default security zone policy, which enables the user role to access any security zone.
This field is not supported in the current software version.
User role rule number.
A user role rule specifies access permissions for items, including commands, feature-specific commands, XML elements, and MIB nodes.
Predefined user role rules are identified by sys-n, where n represents an integer.
19
Field Description
Perm
Access control type:
•
permit
—User role has access to the specified items.
•
deny
—User role does not have access to the specified items.
Type
Scope
Entity
Controlled type:
•
R
—Read-only.
•
W
—Write.
•
X
—Execute.
Rule control scope:
•
command
—Controls access to the command or commands, as specified in the Entity field.
•
feature
—Controls access to the commands of the feature, as specified in the Entity field.
•
feature-group
—Controls access to the commands of the features in the feature group, as specified in the Entity field.
•
xml-element
—Controls access to XML elements.
•
oid
—Controls access to MIB nodes.
Command string, feature name, feature group, XML element, or OID specified in the user role rule:
•
An en dash (–) represents any feature.
•
An asterisk (*) represents zero or more characters.
Related commands role
display role feature
Use display role feature to display features available in the system.
Syntax display role feature
[ name feature-name | verbose ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
name feature-name
: Displays the commands of a feature. The feature-name argument specifies the feature name, and all letters must be in lower case.
verbose
: Displays the commands of each feature.
Usage guidelines
If you specify neither the name feature-name option nor the verbose keyword, the command displays only the list of features available in the system.
20
Examples
# Display the list of feature names.
<Sysname> display role feature
Feature: device (Device configuration related commands)
Feature: interface (Interface related commands)
Feature: syslog (Syslog related commands)
…
# Display the commands of each feature.
<Sysname> display role feature verbose
Feature: device (Device configuration related commands)
display clock (R)
debugging dev (W)
display debugging dev (R)
display device * (R)
display diagnostic-information * (R)
display environment * (R)
display fan * (R)
display alarm * (R)
display power * (R)
display system-working-mode (R)
display current-configuration * (R)
display saved-configuration * (R)
display default-configuration * (R)
display startup (R)
display this * (R)
display archive configuration (R)
display bootrom-access (R)
clock datetime * (W)
reboot * (W)
save * (W)
repeat * (W)
archive configuration (W)
backup startup-configuration to * (W)
restore startup-configuration from * (W)
reset saved-configuration * (W)
startup saved-configuration * (W)
display transceiver * (R)
bootrom-access * (W)
bootrom * (W)
restore factory-default (W)
system-view ; temperature-limit * (W)
system-view ; sysname * (W)
system-view ; clock timezone * (W)
system-view ; clock summer-time * (W)
system-view ; configuration replace file * (W)
system-view ; transceiver * (W)
…
# Display the commands of the aaa feature.
21
<Sysname> display role feature name aaa
Feature: aaa (AAA related commands)
system-view ; domain * (W)
system-view ; header * (W)
system-view ; aaa * (W)
display domain * (R)
system-view ; user-group * (W)
system-view ; local-user * (W)
display local-user * (R)
display user-group * (R)
display debugging local-server (R)
debugging local-server * (W)
super * (X)
display password-control * (R)
reset password-control * (W)
system-view ; password-control * (W)
Table 2 Command output (display role feature name aaa)
Field Description
Feature Displays the name and brief function description of the feature. system-view ; domain * system-view ; header * system-view ; aaa * display domain * system-view ; user-group * system-view ; local-user * display user-group * display debugging local-server debugging local-server * super * display password-control * reset password-control * system-view ; password-control *
(W)
(R)
All commands that start with the domain keyword in system view, and all commands in ISP domain view.
All commands that start with the header keyword in system view.
All commands that start with the aaa keyword in system view.
All commands that start with the display domain keywords in user view.
All commands that start with the user-group keyword in system view, and all commands in user group view.
All commands that start with the local-user keyword in system view, and all commands in local user view.
All commands that start with the display user-group keywords in user view.
All commands that start with the display debugging local-server keywords in user view.
All commands that start with the debugging local-server keywords in user view.
All commands that start with the super keyword in user view.
All commands that start with the display password-control keywords in user view.
All commands that start with the reset password-control keywords in user view.
All commands that start with the password-control keyword in system view.
Command type is Write. A write command configures the system.
Command type is Read. A read command displays configuration or maintenance information.
22
Field Description
(X)
Command type is Execute. An execute command executes a specific function.
Related commands feature
display role feature-group
Use display role feature-group to display feature group information.
Syntax display role feature-group
[ name feature-group-name ] [ verbose ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
name feature-group-name
: Specifies a feature group. The feature-group-name argument represents the feature group name, a case-sensitive string of 1 to 31 characters. If you do not specify a feature group, the command displays information about all feature groups.
verbose
: Displays the commands of each feature in the specified feature group. If you do not specify a feature group, the keyword enables displaying the commands of each feature in every feature group. If you do not specify this keyword, the command displays only the feature lists of feature groups.
Usage guidelines
Feature groups L2 and L3 are predefined feature groups in the system.
Examples
# Display the feature lists of feature groups.
<Sysname> display role feature-group
Feature group: L2
Feature: igmp-snooping (IGMP-Snooping related commands)
Feature: mld-snooping (MLD-Snooping related commands)
Feature: lacp (LACP related commands)
Feature: stp (STP related commands)
Feature: lldp (LLDP related commands)
Feature: dldp (DLDP related commands)
Feature: cfm (CFM related commands)
Feature: eoam (EOAM related commands)
Feature: smart-link (Smart-link related commands)
Feature: monitor-link (Monitor-link related commands)
Feature: loopbk-detect (Loopback-detection related commands)
23
Feature: vlan (Virtual LAN related commands)
Feature: evb (EVB related commands)
Feature: oap (OAP related commands)
Feature: trill (TRILL related commands)
Feature: evi (EVI related commands)
Feature: mvrp (MVRP related commands )
Feature: oap (OAP related commands)
Feature: rrpp (RRPP related commands)
Feature: ofp (OFP related commands)
Feature: port-security (Port-security related commands)
Feature: macsec (MACSEC related commands)
Feature group: L3
Feature: route (Route management related commands)
Feature: usr (Unicast static route related commands)
Feature: ospf (Open Shortest Path First protocol related commands)
Feature: rip (Routing Information Protocol related commands)
Feature: isis (ISIS protocol related commands)
Feature: bgp (Border Gateway Protocol related commands)
Feature: l3vpn (Layer 3 Virtual Private Network related commands)
Feature: route-policy (Routing Policy related commands)
Feature: multicast (Multicast related commands)
Feature: pim (Protocol Independent Multicast related commands)
Feature: igmp (Internet Group Management Protocol related commands)
Feature: mld (Multicast Listener Discovery related commands)
Feature: mcast-domain (Multicast Domain related commands)
Feature: msdp (Multicast Source Discovery Protocol related commands)
# Display the commands in each feature group. For more information about the wildcards and marks used in the command list, see
<Sysname> display role feature-group verbose
Feature group: L2
Feature: igmp-snooping (IGMP-Snooping related commands)
system-view ; multicast-vlan * (W)
system-view ; vlan * ; igmp-snooping * (W)
system-view ; vlan * ; pim-snooping * (W)
system-view ; interface * ; igmp-snooping * (W)
system-view ; interface * ; port multicast-vlan * (W)
display igmp-snooping * (R)
display pim-snooping * (R)
display multicast-vlan * (R)
reset igmp-snooping * (W)
reset pim-snooping * (W)
reset multicast-vlan * (W)
debugging igmp-snooping * (W)
display debugging igmp-snooping * (R)
system-view ; probe ; debugging system internal igmp-snooping * (W)
Feature: mld-snooping (MLD-Snooping related commands)
system-view ; ipv6 multicast-vlan * (W)
24
system-view ; vlan * ; mld-snooping * (W)
system-view ; vlan * ; ipv6 pim-snooping * (W)
system-view ; interface * ; mld-snooping * (W)
system-view ; interface * ; ipv6 port multicast-vlan * (W)
display mld-snooping * (R)
…
Feature group: L3
Feature: route (Route management related commands)
display debugging rib * (R)
display ip routing-table * (R)
display ipv6 routing-table * (R)
display router id * (R)
display rib * (R)
display ipv6 rib * (R)
reset ip routing-table statistics * (W)
reset ipv6 routing-table statistics * (W)
debugging rib * (W)
debugging ipv6 rib * (W)
system-view ; router id * (W)
system-view ; rib * (W)
system-view ; probe ; display system internal rib * (R)
system-view ; probe ; display system internal ipv6 rib * (R)
system-view ; probe ; reset rib * (W)
system-view ; probe ; reset ipv6 rib * (W)
Feature: usr (Unicast static route related commands)
display debugging route-static * (R)
display route-static * (R)
display ipv6 route-static * (R)
display route-direct * (R)
display ipv6 route-direct * (R)
debugging route-static * (W)
debugging ipv6 route-static * (W)
debugging route-direct * (W)
debugging ipv6 route-direct * (W)
system-view ; ip route-static * (W)
system-view ; ipv6 route-static * (W)
system-view ; delete static-routes * (W)
system-view ; delete ipv6 static-routes * (W)
system-view ; delete vpn-instance * (W)
system-view ; delete ipv6 vpn-instance * (W)
system-view ; probe ; display system internal route-static * (R)
system-view ; probe ; display system internal ipv6 route-static * (R)
system-view ; probe ; display system internal route-direct * (R)
system-view ; probe ; display system internal ipv6 route-direct * (R)
system-view ; probe ; reset route-static * (W)
system-view ; probe ; reset route-direct * (W)
system-view ; probe ; reset ipv6 route-static * (W)
system-view ; probe ; reset ipv6 route-direct * (W)
25
system-view ; probe ; generate-ipv4-static-routes * (W)
system-view ; probe ; generate-ipv6-static-routes * (W)
…
# Display the feature list of the L3 feature group.
<Sysname> display role feature-group name L3
Feature group: L3
Feature: route (Route management related commands)
Feature: usr (Unicast static route related commands)
Feature: ospf (Open Shortest Path First protocol related commands)
Feature: rip (Routing Information Protocol related commands)
Feature: isis (ISIS protocol related commands)
Feature: bgp (Border Gateway Protocol related commands)
Feature: l3vpn (Layer 3 Virtual Private Network related commands)
Feature: route-policy (Routing Policy related commands)
Feature: multicast (Multicast related commands)
Feature: pim (Protocol Independent Multicast related commands)
Feature: igmp (Internet Group Management Protocol related commands)
Feature: mld (Multicast Listener Discovery related commands)
Feature: mcast-domain (Multicast Domain related commands)
Feature: msdp (Multicast Source Discovery Protocol related commands)
Related commands feature role feature-group
feature
Use feature to add a feature to a feature group.
Use undo feature to remove a feature from a feature group.
Syntax
feature feature-name
undo feature feature-name
Default
A user-defined feature group does not have any features.
Views
Feature group view
Predefined user roles
network-admin mdc-admin
Parameters
feature-name
: Specifies a feature name. You must enter the feature name exactly as the feature name is displayed, including the case.
Usage guidelines
Repeat the feature command to add multiple features to a feature group.
26
Examples
# Add the security features AAA and ACL to the security group security-features.
<Sysname> system-view
[Sysname] role feature-group name security-features
[Sysname-featuregrp-security-features] feature aaa
[Sysname-featuregrp-security-features] feature acl
Related commands display role feature display role feature-group role feature-group
interface policy deny
Use interface policy deny to enter user role interface policy view.
Use undo interface policy deny to restore the default user role interface policy.
Syntax interface policy deny undo interface policy deny
Default
A user role has access to any interface.
Views
User role view
Predefined user roles
network-admin mdc-admin
Usage guidelines
To restrict the interface access of a user role to a set of interfaces, perform the following tasks:
1.
Use interface policy deny to enter user role interface policy view.
2.
Use permit interface to specify accessible interfaces.
NOTE:
The interface policy deny command denies the access of the user role to all interfaces if the
permit interface
command is not configured.
To configure an interface, make sure the interface is permitted by the user role interface policy in use.
You can perform the following tasks on an accessible interface:
•
Create, remove, or configure the interface.
•
Enter the interface view.
•
Specify the interface in feature commands.
The create and remove operations are available only for logical interfaces.
Any change to a user role interface policy takes effect only on users who log in with the user role after the change.
27
Examples
# Enter user role interface policy view of role1, and deny the user role to access any interface.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] interface policy deny
[Sysname-role-role1-ifpolicy] quit
# Enter user role interface policy view of role1, and deny the user role to access any interface except
GigabitEthernet 1/0/1 to GigabitEthernet 1/0/5.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] interface policy deny
[Sysname-role-role1-ifpolicy] permit interface gigabitethernet 1/0/1 to gigabitethernet
1/0/5
Related commands display role permit interface role
permit interface
Use permit interface to configure a list of interfaces accessible to a user role.
Use undo permit interface to disable the access of a user role to specific interfaces.
Syntax
permit interface interface-list
undo permit interface
[ interface-list ]
Default
No permitted interfaces are configured in user role interface policy view.
Views
User role interface policy view
Predefined user roles
network-admin mdc-admin
Parameters
interface interface-list
: Specifies a space-separated list of up to 10 interface items. Each interface item specifies one interface in the interface-type interface-number form or a range of interfaces in the
interface-type
interface-number to interface-type interface-number form. If you specify an interface range, the end interface must meet the following requirements:
•
Be the same type as the start interface.
•
Have a higher interface number than the start interface.
Usage guidelines
To permit a user role to access an interface after you configure the interface policy deny command, you must add the interface to the permitted interface list of the policy. With the user role, you can perform the following tasks to the interfaces in the permitted interface list:
•
Create, remove, or configure the interfaces.
28
•
Enter the interface views.
•
Specify the interfaces in feature commands.
The create and remove operations are available only for logical interfaces.
You can repeat the permit interface command to add permitted interfaces to a user role interface policy.
The undo permit interface command removes the entire list of permitted interfaces if you do not specify an interface.
Any change to a user role interface policy takes effect only on users who log in with the user role after the change.
Examples
1.
Configure user role role1:
# Permit the user role role1 to execute all commands available in interface view and VLAN view.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] rule 1 permit command system-view ; interface *
[Sysname-role-role1] rule 2 permit command system-view ; vlan *
# Permit the user role to access GigabitEthernet 1/0/1, and GigabitEthernet 1/0/5 to
GigabitEthernet 1/0/7.
[Sysname-role-role1] interface policy deny
[Sysname-role-role1-ifpolicy] permit interface gigabitethernet 1/0/1 gigabitethernet 1/0/5 to gigabitethernet 1/0/7
[Sysname-role-role1-ifpolicy] quit
[Sysname-role-role1] quit
2.
Verify that you cannot use the user role to work on any interfaces except GigabitEthernet 1/0/1 and GigabitEthernet 1/0/5 to GigabitEthernet 1/0/7:
# Verify that you can enter GigabitEthernet 1/0/1 interface view.
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] quit
# Verify that you can assign GigabitEthernet 1/0/5 to VLAN 10. In this example, the user role can access any VLAN because the default VLAN policy of the user role is used.
[Sysname] vlan 10
[Sysname-vlan10] port gigabitethernet 1/0/5
[Sysname-vlan10] quit
# Verify that you cannot enter GigabitEthernet 1/0/2 interface view.
[Sysname] interface gigabitethernet 1/0/2
Permission denied.
Related commands display role interface policy deny role
permit vlan
Use permit vlan to configure a list of VLANs accessible to a user role.
Use undo permit vlan to remove the permission for a user role to access specific VLANs.
29
Syntax
permit vlan vlan-id-list
undo permit vlan
[ vlan-id-list ]
Default
No permitted VLANs are configured in user role VLAN policy view.
Views
User role VLAN policy view
Predefined user roles
network-admin mdc-admin
Parameters
vlan-id-list
: Specifies a space-separated list of up to 10 VLAN items. Each VLAN item specifies a
VLAN by VLAN ID or specifies a range of VLANs in the form of vlan-id1 to vlan-id2. The value range for the VLAN IDs is 1 to 4094. If you specify a VLAN range, the value for the vlan-id2 argument must be greater than the value for the vlan-id1 argument.
Usage guidelines
To permit a user role to access a VLAN after you configure the vlan policy deny command, you must add the VLAN to the permitted VLAN list of the policy. With the user role, you can perform the following tasks on the VLANs in the permitted VLAN list:
•
Create, remove, or configure the VLANs.
•
Enter the VLAN views.
•
Specify the VLANs in feature commands.
You can repeat the permit vlan command to add permitted VLANs to a user role VLAN policy.
The undo permit vlan command removes the entire list of permitted VLANs if you do not specify a
VLAN.
Any change to a user role VLAN policy takes effect only on users who log in with the user role after the change.
Examples
1.
Configure user role role1:
# Permit the user role role1 to execute all commands available in interface view and VLAN view.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] rule 1 permit command system-view ; interface *
[Sysname-role-role1] rule 2 permit command system-view ; vlan *
# Permit the user role role1 to access VLANs 2, 4, and 50 to 100.
[Sysname-role-role1] vlan policy deny
[Sysname-role-role1-vlanpolicy] permit vlan 2 4 50 to 100
[Sysname-role-role1-vlanpolicy] quit
[Sysname-role-role1] quit
2.
Verify that you cannot use the user role to work on any VLAN except VLANs 2, 4, and 50 to 100:
# Verify that you can create VLAN 100 and enter the VLAN view.
[Sysname] vlan 100
[Sysname-vlan100] quit
30
# Verify that you can add port GigabitEthernet 1/0/1 to VLAN 100 as an access port.
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port access vlan 100
[Sysname-GigabitEthernet1/0/1] quit
# Verify that you cannot create VLAN 101 or enter the VLAN view.
[Sysname] vlan 101
Permission denied.
Related commands display role role vlan policy deny
permit vpn-instance
Use permit vpn-instance to configure a list of MPLS L3VPN instances accessible to a user role.
Use undo permit vpn-instance to disable the access of a user role to specific MPLS L3VPN instances.
Syntax
permit vpn-instance vpn-instance-name
&<1-10>
undo permit vpn-instance
[ vpn-instance-name&<1-10> ]
Default
No permitted VPN instances are configured in user role VPN instance policy.
Views
User role VPN instance policy view
Predefined user roles
network-admin mdc-admin
Parameters
vpn-instance-name
&<1-10>: Specifies a space-separated list of up to 10 MPLS L3VPN instance names. Each name is a case-sensitive string of 1 to 31 characters.
Usage guidelines
To permit a user role to access an MPLS L3VPN instance after you configure the vpn-instance
policy deny
command, you must add the VPN instance to the permitted VPN instance list of the policy. With the user role, you can perform the following tasks on the VPN instances in the permitted
VPN instance list:
•
Create, remove, or configure the VPN instances.
•
Enter the VPN instance views.
•
Specify the VPN instances in feature commands.
You can repeat the permit vpn-instance command to add permitted VPN instances to a user role
VPN instance policy.
The undo permit vpn-instance command removes the entire list of permitted VPN instances if you do not specify a VPN instance.
Any change to a user role VPN instance policy takes effect only on users who log in with the user role after the change.
31
Examples
1.
Configure user role role1:
# Permit the user role to execute all commands available in system view and in the child views of system view.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] rule 1 permit command system-view ; *
# Permit the user role to access the VPN instance vpn1.
[Sysname-role-role1] vpn policy deny
[Sysname-role-role1-vpnpolicy] permit vpn-instance vpn1
[Sysname-role-role1-vpnpolicy] quit
[Sysname-role-role1] quit
2.
Verify that you cannot use the user role role1 to work on any VPN instance except vpn1:
# Verify that you can enter the view of vpn1.
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] quit
# Verify that you can specify the primary accounting server at 10.110.1.2 in the VPN instance
vpn1
for the RADIUS scheme radius1.
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary accounting 10.110.1.2 vpn-instance vpn1
[Sysname-radius-radius1] quit
# Verify that you cannot create the VPN instance vpn2 or enter the VPN instance view.
[Sysname] ip vpn-instance vpn2
Permission denied.
Related commands display role role vpn-instance policy deny
role
Use role to create a user role and enter user role view. If the user role has been created, you directly enter user role view.
Use undo role to delete a user role.
Syntax role name
role-name
undo role name role-name
Default
The system has the following predefined user roles: network-admin, network-operator, mdc-admin, mdc-operator, level-n (where n represents an integer in the range of 0 to 15), and security-audit.
Views
System view
Predefined user roles
network-admin
32
mdc-admin
Parameters
name role-name
: Specifies a username. The role-name argument is a case-sensitive string of 1 to
63 characters.
Usage guidelines
You can create a maximum of 64 user roles in addition to the predefined user roles.
To change the permissions assigned to a user role, you must first enter the user role view.
You cannot delete the predefined user roles or change the permissions assigned to network-admin, network-operator, mdc-admin, mdc-operator, level-15, or security-audit.
You cannot assign the security-audit user role to non-AAA authentication users.
Level-0 to level-14 users can modify their own permissions for any commands except for the display
history-command all
command.
Examples
# Create the user role role1 and enter the user role view.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1]
Related commands display role interface policy deny rule vlan policy deny vpn-instance policy deny
role default-role enable
Use role default-role enable to enable the default user role feature for remote AAA users.
Use undo role default-role enable to restore the default.
Syntax role default-role enable
[ role-name ]
undo role default-role enable
Default
The default user role feature is disabled. AAA users who do not have a user role cannot log in to the device.
Views
System view
Predefined user roles
network-admin mdc-admin
33
Parameters
role-name
: Specifies a user role by its name for the default user role. The user role must already exist. The argument is a case-sensitive string of 1 to 63 characters. If you do not specify a user role, the following default user role settings apply:
•
For login to the default MDC, the default user role is network-operator.
•
For login to a non-default MDC, the default user role is mdc-operator.
Usage guidelines
The default user role feature allows AAA-authenticated users to access the system if the AAA server does not authorize any user roles to the users.
This feature enables AAA-authenticated users who have not been assigned any user role to log in with the default user role.
If AAA users have been assigned user roles, they log in with the user roles.
Examples
# Enable the default user role feature.
<Sysname> system-view
[Sysname] role default-role enable
Related commands role
role feature-group
Use role feature-group to create a user role feature group and enter user role feature group view.
Use undo role feature-group to delete a user role feature group.
Syntax
role feature-group name feature-group-name
undo role feature-group name feature-group-name
Default
Two user role feature groups, L2 and L3, are created.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
name feature-group-name
: Specifies a feature group name. The feature-group-name argument is a case-sensitive string of 1 to 31 characters.
Usage guidelines
The L2 feature group includes all Layer 2 feature commands, and the L3 feature group includes all
Layer 3 feature commands. These predefined feature groups are not user configurable.
In addition to the predefined feature groups L2 and L3, you can create a maximum of 64 user role feature groups.
34
After you create a user role feature group, you can use the display role feature command to display the features available in the system. Then you can use the feature command to add features to the feature group.
Examples
# Create the feature group security-features.
<Sysname> system-view
[Sysname] role feature-group name security-features
[Sysname-featuregrp-security-features]
Related commands display role feature-group display role feature feature
rule
Use rule to create or change a user role rule for controlling command, XML element, or MIB node access.
Use undo rule to delete a user role rule.
Syntax rule
number { deny | permit } { command command-string | { execute | read | write } * { feature
[ feature-name ] | feature-group feature-group-name | oid oid-string | web-menu [ web-string ] |
xml-element
[ xml-string ] } }
undo rule
{ number | all }
Default
A user-defined user role does not have any rules and cannot access any command, XML element, or
MIB node.
Views
User role view
Predefined user roles
network-admin mdc-admin
Parameters
number
: Specifies a rule number in the range of 1 to 256.
deny
: Denies access to any specified commands, XML elements, or MIB nodes.
permit
: Permits access to any specified commands, XML elements, or MIB nodes.
command command-string
: Specifies a command string. The command-string argument is a case-sensitive string of 1 to 128 characters, including the following characters:
•
The wildcard asterisk (*).
•
The delimiters space and tab.
•
All printable characters.
execute
: Specifies the execute commands, XML elements, or MIB nodes. An execute command (for example, ping), XML element, or MIB node executes a specific function or program.
35
read
: Specifies the read commands, XML elements, or MIB nodes. A read command (for example,
display
, dir, more, or pwd), XML element, or MIB node displays configuration or maintenance information.
write
: Specifies the write commands, XML elements, or MIB nodes. A write command (for example,
ssh server enable
), XML element, or MIB node configures the system.
feature
[ feature-name ]: Specifies one or all features. The feature-name argument specifies a feature name. If you do not specify a feature name, you specify all the features in the system. When you specify a feature, the feature name must be the same, including the case, as the name displayed by the display role feature command.
feature-group
feature-group-name: Specifies a user-defined or predefined feature group. The
feature-group-name
argument represents the feature group name, a case-sensitive string of 1 to 31 characters. If the feature group has not been created, the rule takes effect after the group is created.
To display the feature groups that have been created, use the display role feature-group command.
oid
oid-string: Specifies an OID of a MIB node. The oid-string argument represents the OID, a case-insensitive string of 1 to 255 characters. The OID is a dotted numeric string that uniquely identifies the path from the root node to this node. For example, 1.3.6.1.4.1.25506.8.35.14.19.1.1.
web-menu
[ web-string ]: Specifies a Web menu. The web-string argument represents the ID path of the Web menu, a case-insensitive string of 1 to 255 characters. Use the forward slash (/) to separate
ID items, for example, M_DEVICE/I_BASIC_INFO/I_reboot. If you do not specify a Web menu, the rule applies to all Web items. To verify the ID path of a Web menu, use the display web menu command. This option is reserved for future support.
xml-element
[ xml-string ]: Specifies an XML element. The xml-string argument represents the
XPath of the XML element, a case-insensitive string of 1 to 255 characters. Use the forward slash (/) to separate Xpath items, for example, Interfaces/Index/Name. If you do not specify an XML element, the rule applies to all XML elements.
all
: Deletes all the user role rules.
Usage guidelines
You can define the following types of rules for different access control granularities:
• Command
—Controls access to a command or a set of commands that match a regular expression.
• Feature
—Controls access to the commands of a feature by command type.
•
Feature group rule
—Controls access to the commands of a group of features by command type.
•
XML element rule
—Controls access to XML elements.
• OID
—Controls access to the specified MIB node and its child nodes.
A user role can access the set of permitted commands, XML elements, and MIB nodes specified in the user role rules. User role rules include predefined and user-defined user role rules. Predefined user role rules are identified by sys-n, where n represents an integer.
The following guidelines apply to non-OID rules:
•
If two user-defined rules of the same type conflict, the rule with the higher ID takes effect. For example, a user role can use the tracert command but not the ping command if the user role contains rules configured by using the following commands:
{
{
rule 1 permit command ping rule 2 permit command tracert
{
rule 3 deny command ping
•
If a predefined user role rule and a user-defined user role rule conflict, the user-defined user role rule takes effect.
The following guidelines apply to OID rules:
36
•
The system compares an OID with the OIDs specified in rules, and it uses the longest match principle to select a rule for the OID. For example, a user role cannot access the MIB node with
OID 1.3.6.1.4.1.25506.141.3.0.1 if the user role contains rules configured by using the following commands:
{
{
rule 1 permit read write oid 1.3.6
rule 2 deny read write oid 1.3.6.1.4.1
{
rule 3 permit read write oid 1.3.6.1.4
•
If the same OID is specified in multiple rules, the rule with the higher ID takes effect. For example, a user role can access the MIB node with OID 1.3.6.1.4.1.25506.141.3.0.1 if the user role contains rules configured by using the following commands:
{
{
{
rule 1 permit read write oid 1.3.6
rule 2 deny read write oid 1.3.6.1.4.1
rule 3 permit read write oid 1.3.6.1.4.1
You can configure a maximum of 256 user-defined rules for a user role. The total number of user-defined user role rules cannot exceed 1024.
Any rule modification, addition, or removal for a user role takes effect only on the users who log in with the user role after the change.
Access to the file system commands is controlled by both the file system command rules and the file system feature rule.
A command with output redirection to the file system is permitted only when the command type write is assigned to the file system feature.
When you specify a command string, follow the guidelines in Table 3 .
Table 3 Command string configuration rules
Rule Guidelines
Semicolon (;) is the delimiter.
Use a semicolon to separate the command of each view that you must enter before you access a command or a set of commands. However, do not use a semicolon to separate commands available in user view or any view, for example, display and dir.
Each semicolon-separated segment must have a minimum of one printable character.
To specify the commands in a view but not the commands in the view's subviews, use a semicolon as the last printable character in the last segment. To specify the commands in a view and the view's subviews, the last printable character in the last segment must not be a semicolon.
For example, you must enter system view before you enter interface view. To specify all commands starting with the ip keyword in any interface view, you must use the "system ; interface * ; ip * ;" command string.
For another example, the "system ; radius scheme * ;" command string represents all commands that start with the radius scheme keywords in system view. The "system ; radius scheme *" command string represents all commands that start with the radius scheme keywords in system view and all commands in RADIUS scheme view.
37
Rule Guidelines
Asterisk (*) is the wildcard.
An asterisk represents zero or multiple characters.
In a non-last segment, you can use an asterisk only at the end of the segment.
In the last segment, you can use an asterisk in any position of the segment. If the asterisk appears at the beginning, you cannot specify a printable character behind the asterisk.
For example, the "system ; *" command string represents all commands available in system view and all subviews of the system view. The
"debugging * event" command string represents all event debugging commands available in user view.
Keyword abbreviation is allowed.
You can specify a keyword by entering the first few characters of the keyword. Any command that starts with this character string matches the rule.
For example, "rule 1 deny command dis arp source" denies access to the commands display arp source-mac interface and display arp
source-suppression
.
To control the access to a command, you must specify the command immediately after the view that has the command.
To control access to a command, you must specify the command immediately behind the view to which the command is assigned. The rules that control command access for any subview do not apply to the command.
For example, the "rule 1 deny command system ; interface * ; *" command string disables access to any command that is assigned to interface view. However, you can still execute the acl number command in interface view, because this command is assigned to system view rather than interface view. To disable access to this command, use "rule 1 deny command system ; acl *;".
Do not include the vertical bar (|), greater-than sign (>), or double greater-than sign (>>) when you specify display commands in a user role command rule.
The system does not treat the redirect signs and the parameters that follow the signs as part of command lines. However, in user role command rules, these redirect signs and parameters are handled as part of command lines. As a result, no rule that includes any of these signs can find a match.
For example, "rule 1 permit command display debugging > log" can never find a match. This is because the system has a display
debugging
command but not a display debugging > log command.
Examples
# Permit the user role role1 to execute the display acl command.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] rule 1 permit command display acl
# Permit the user role role1 to execute all commands that start with the display keyword.
[Sysname-role-role1] rule 2 permit command display *
# Permit the user role role1 to execute the radius scheme aaa command in system view and use all commands assigned to RADIUS scheme view.
[Sysname-role-role1] rule 3 permit command system ; radius scheme aaa
# Deny the access of role1 to any read or write command of any feature.
[Sysname-role-role1] rule 4 deny read write feature
# Deny the access of role1 to any read command of the aaa feature.
[Sysname-role-role1] rule 5 deny read feature aaa
# Permit role1 to access all read, write, and execute commands of the feature group
security-features
.
38
[Sysname-role-role1] rule 6 permit read write execute feature-group security-features
# Permit role1 to access all read and write MIB nodes starting from the node with OID 1.1.2.
[Sysname-role-role1] rule 7 permit read write oid 1.1.2
Related commands display role display role feature display role feature-group role
super
Use super to obtain another user role without reconnecting to the device.
Syntax super
[ rolename ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
rolename
: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system and cannot be security-audit. If you do not specify a user role, you obtain the default target user role.
Usage guidelines
The obtained user role is a temporary user role, because this command is effective only on the current login. The next time you are logged in with the user account, the original user role settings take effect.
To enable a user to obtain another user role without reconnecting to the device, you must configure user role authentication.
•
If no local password is configured in the local password authentication (local), an AUX user can obtain the user role by either entering a string or not entering anything.
•
If no local password is configured in the local-then-remote authentication (local scheme), the following rules apply:
{
{
A VTY user performs remote authentication.
An AUX user can obtain user role authorization by either entering a string or not entering anything.
Examples
# Obtain the user role network-operator.
<Sysname> super network-operator
Password:
User privilege role is network-admin, and only those commands that authorized to
the role can be used.
Related commands authentication super
(Security Command Reference)
39
super authentication-mode super password
super authentication-mode
Use super authentication-mode to set an authentication mode for temporary user role authorization.
Use undo super authentication-mode to restore the default.
Syntax super authentication-mode
{ local | scheme } *
undo super authentication-mode
Default
Local password authentication applies.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters local
: Enables local password authentication.
scheme
: Enables remote AAA authentication.
Usage guidelines
For local password authentication, use the super password command to set a password.
For remote AAA authentication, set the username and password on the RADIUS or HWTACACS server.
If you specify both local and scheme keywords, the keyword first entered in the command takes precedence.
• scheme
—Enables remote-then-local authentication mode. The device first performs AAA authentication to obtain a temporary user role. Local password authentication is performed if the remote HWTACACS or RADIUS server does not respond, or if the AAA configuration on the device is invalid.
• local
—Enables local-then-remote authentication mode. The device first performs local password authentication. If no password is configured for the user role, the device performs remote authentication.
For more information about AAA, see Security Configuration Guide.
Examples
# Enable local-only authentication for temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode local
# Enable remote-then-local authentication for temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode scheme local
40
Related commands authentication super
(Security Command Reference)
super password
super default role
Use super default role to specify the default target user role for temporary user role authorization.
Use undo super default role to restore the default.
Syntax super default role
rolename
undo super default role
Default
If you log in to the default MDC, the default target user role is network-admin.
If you log in to a non-default MDC, the default target user role is mdc-admin.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
rolename
: Specifies the name of the default target user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system and cannot be security-audit.
Usage guidelines
The default target user role is applied to the super or super password command when you do not specify a user role for the command.
Examples
# Specify the default target user role as network-operator for temporary user role authorization.
<Sysname> system-view
[Sysname] super default role network-operator
Related commands super super password
super password
Use super password to set a password for a user role.
Use undo super password to restore the default.
Syntax
In non-FIPS mode:
super password
[ role rolename ] [ { hash | simple } password ]
undo super password
[ role rolename ]
41
In FIPS mode:
super password
[ role rolename ]
undo super password
[ role rolename ]
Default
No password is set for a user role.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
role rolename
: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role must exist in the system and cannot be security-audit. If you do not specify a user role, the command sets a password for the default target user role.
hash
: Sets a hashed password.
simple
: Sets a plaintext password. This password will be saved in hashed text for security purposes.
password
: Specifies the password string. This argument is case sensitive.
•
In non-FIPS mode:
{
If the simple keyword is specified, the password must be a string of 1 to 63 characters.
{
If the hash keyword is specified, the password must be a string of 1 to 110 characters.
•
In FIPS mode, the password must be a string of 15 to 63 characters. The string must contain four character types including digits, uppercase letters, lowercase letters, and special characters.
Usage guidelines
If you do not specify any parameters, you specify a plaintext password in the interactive mode.
The FIPS mode supports only the interactive mode for setting a password.
Set a password if you configure local password authentication for temporary user role authorization.
It is a good practice to specify different passwords for different user roles.
Examples
# Set the password to 123456TESTplat&! for the user role network-operator.
<Sysname> system-view
[Sysname] super password role network-operator simple 123456TESTplat&!
# Set the password to 123456TESTplat&! in the interactive mode for the user role network-operator.
<Sysname> system-view
[Sysname] super password role network-operator
Password:
Confirm :
Updating user information. Please wait... ...
Related commands super authentication-mode super default role
42
vlan policy deny
Use vlan policy deny to enter user role VLAN policy view.
Use undo vlan policy deny to restore the default user role VLAN policy.
Syntax vlan policy deny undo vlan policy deny
Default
A user role has access to any VLAN.
Views
User role view
Predefined user roles
network-admin mdc-admin
Usage guidelines
To restrict the VLAN access of a user role to a set of VLANs, perform the following tasks:
1.
Use vlan policy deny to enter user role VLAN policy view.
2.
Use permit vlan to specify accessible VLANs.
NOTE:
The vlan policy deny command denies the access of the user role to all VLANs if the permit vlan command is not configured.
To configure a VLAN, make sure the VLAN is permitted by the user role VLAN policy in use. You can perform the following tasks on an accessible VLAN:
•
Create, remove, or configure the VLAN.
•
Enter the VLAN view.
•
Specify the VLAN in feature commands.
Any change to a user role VLAN policy takes effect only on users who log in with the user role after the change.
Examples
# Enter user role VLAN policy view of role1, and deny the access of role1 to any VLAN.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] vlan policy deny
[Sysname-role-role1-vlanpolicy] quit
# Enter user role VLAN policy view of role1, and deny the access of role1 to any VLAN except
VLANs 50 to 100.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] vlan policy deny
[Sysname-role-role1-vlanpolicy] permit vlan 50 to 100
43
Related commands display role permit vlan role
vpn-instance policy deny
Use vpn-instance policy deny to enter user role VPN instance policy view.
Use undo vpn-instance policy deny to restore the default user role VPN instance policy.
Syntax vpn-instance policy deny undo vpn-instance policy deny
Default
A user role has access to any VPN instance.
Views
User role view
Predefined user roles
network-admin mdc-admin
Usage guidelines
To restrict the VPN instance access of a user role to a set of VPN instances, perform the following tasks:
1.
Use vpn-instance policy deny to enter user role VPN instance policy view.
2.
Use permit vpn-instance to specify accessible VPN instances.
NOTE:
The vpn-instance policy deny command denies the access of the user role to all VPN instances if the permit vpn-instance command is not configured.
To configure a VPN instance, make sure the VPN instance is permitted by the user role VPN instance policy in use. You can perform the following tasks on an accessible VPN instance:
•
Create, remove, or configure the VPN instance.
•
Enter the VPN instance view.
•
Specify the VPN instance in feature commands.
Any change to a user role VPN instance policy takes effect only on users who log in with the user role after the change.
Examples
# Enter user role VPN instance policy view of role1, and deny the access of user role role1 to any
VPN instance.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] vpn-instance policy deny
[Sysname-role-role1-vpnpolicy] quit
44
# Enter user role VPN instance policy view of role1, and deny the access of user role role1 to any
VPN instance except vpn2.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] vpn-instance policy deny
[Sysname-role-role1-vpnpolicy] permit vpn-instance vpn2
Related commands display role permit vpn-instance role
45
Login management commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide.
Some login management commands are available in both user line view and user line class view. For these commands, the device uses the following rules to determine the settings to be activated:
•
A setting in user line view is applied only to the user line. A setting in user line class view is applied to all user lines of the class.
•
A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view.
•
A setting in user line class view takes effect only for users who log in after the configuration is completed. It does not affect online users.
activation-key
Use activation-key to specify the shortcut key for starting a terminal session.
Use undo activation-key to restore the default.
Syntax activation-key
key-string
undo activation-key
Default
Pressing Enter starts a terminal session.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Parameters
key-string
: Specifies a shortcut key. It can be a string of 1 to 3 characters, or an ASCII code value in the range of 0 to 127. If you enter a number that is greater than 127, or enter a string that is not a number, the first character is used as the shortcut key. For example, if you configure activation-key
987
, the shortcut key is 9. If you configure activation-key abc, the shortcut key is a.
Usage guidelines
This command is not supported in VTY line view or VTY line class view.
This command is available in both user line view and user line class view. A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view.
To display the current shortcut key, use the display current-configuration | include activation-key command.
Examples
# Configure character s as the shortcut key for starting a terminal session on AUX 1.
<Sysname> system-view
46
[Sysname] line aux 1
[Sysname-line-aux1] activation-key s
To verify the configuration:
1.
Exit the console session.
[Sysname-line-aux1] return
<Sysname> quit
2.
Log in again through the AUX line.
The following message appears:
Press ENTER to get started.
3.
Press Enter.
Pressing Enter does not start a session.
4.
Enter s.
A terminal session is started.
<Sysname>
authentication-mode
Use authentication-mode to set the authentication mode for a user line.
Use undo authentication-mode to restore the default.
Syntax
In non-FIPS mode:
authentication-mode
{ none | password | scheme }
undo authentication-mode
In FIPS mode:
authentication-mode
scheme
undo authentication-mode
Default
In non-FIPS mode, the authentication mode is password for VTY lines, and none for AUX lines.
In FIPS mode, the authentication mode is scheme.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Parameters none
: Disables authentication.
password
: Performs local password authentication.
scheme
: Performs AAA authentication. For more information about AAA, see Security Configuration
Guide.
Usage guidelines
When the authentication mode is none, a user can log in without authentication. To improve device security, use the password or scheme authentication mode.
47
In VTY line view, this command is associated with the protocol inbound command. If you specify a non-default value for only one of the two commands in VTY line view, the other command uses the default setting, regardless of the setting in VTY line class view.
In user line view, the configuration takes effect only for users who log in through the line after the configuration is completed.
Examples
# Enable the none authentication mode for the user line VTY 0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode none
# Enable password authentication for the user line VTY 0 and set the password to 321.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode password
[Sysname-line-vty0] set authentication password simple 321
# Enable scheme authentication for the user line VTY 0. Configure local user 123 and set the password to 321. Assign the Telnet service and the user role network-admin to the user.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode scheme
[Sysname-line-vty0] quit
[Sysname] local-user 123
[Sysname-luser-manage-123] password simple 321
[Sysname-luser-manage-123] service-type telnet
[Sysname-luser-manage-123] authorization-attribute user-role network-admin
Related commands set authentication password
auto-execute command
Syntax
CAUTION:
After configuring this command for a user line, you might be unable to access the CLI through the user line. Make sure you can access the CLI through a different user line before you configure this command and save the configuration.
Use auto-execute command to specify the command to be automatically executed for login users.
Use undo auto-execute command to delete the configuration.
auto-execute command command
undo auto-execute command
Default
Command auto-execution is disabled.
Views
User line view, user line class view
48
Predefined user roles
network-admin mdc-admin
Parameters
command
: Specifies the command to be automatically executed.
Usage guidelines
This command is not supported in AUX line view or AUX line class view.
This command is available in both user line view and user line class view. A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view. In user line view, the configuration takes effect only for users who log in through the line after the configuration is completed.
The device automatically executes the specified command when a user logs in through the user line, and closes the user connection after the command is executed. If the command triggers another task, the device does not close the user connection until the task is completed.
Typically, you configure the auto-execute command telnet X.X.X.X command on the device so the device redirects a Telnet user to the host at X.X.X.X. In this case, the connection to the current device is closed when the user terminates the Telnet connection to X.X.X.X.
Examples
# Configure the device to automatically Telnet to 192.168.1.41 after a user logs in through user line
VTY 0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] auto-execute command telnet 192.168.1.41
This action will lead to configuration failure through line-vty0. Are you sure?
[Y/N]:y
[Sysname-line-vty0]
# To verify the configuration, Telnet to 192.168.1.40.
The device automatically Telnets to 192.168.1.41, and the following output is displayed:
C:\> telnet 192.168.1.40
******************************************************************************
* Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
<Sysname>
Trying 192.168.1.41 ...
Press CTRL+K to abort
Connected to 192.168.1.41 ...
******************************************************************************
* Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
<Sysname.41>
49
This operation is the same as directly logging in to the device at 192.168.1.41 through Telnet. When you close the Telnet connection to 192.168.1.41, the Telnet connection to 192.168.1.40 is closed at the same time.
command accounting
Use command accounting to enable command accounting.
Use undo command accounting to restore the default.
Syntax command accounting undo command accounting
Default
Command accounting is disabled, and the accounting server does not record executed commands.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Usage guidelines
When command accounting is enabled but command authorization is not, every executed command is recorded on the HWTACACS server.
When both command accounting and command authorization are enabled, only authorized commands that are executed are recorded on the HWTACACS server.
Invalid commands are not recorded.
In user line view, the configuration takes effect only for users who log in through the line after the configuration is completed.
If you configure the command accounting command in user line class view, command accounting is enabled on all user lines in the class.
You cannot configure the undo command accounting command in the view of a user line in the class.
Examples
# Enable command accounting for the user line VTY 0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] command accounting
Related commands accounting command
(Security Command Reference)
command authorization
command authorization
Use command authorization to enable command authorization.
Use undo command authorization to restore the default.
50
Syntax command authorization undo command authorization
Default
Command authorization is disabled. Logged-in users can execute commands without authorization.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Usage guidelines
When command authorization is enabled, a user can only use commands that are permitted by both the AAA scheme and user role.
In user line view, the configuration takes effect only for users who log in through the line after the configuration is completed.
If you configure the command authorization command in user line class view, command authorization is enabled on all user lines in the class. You cannot configure the undo command
authorization
command in the view of a user line in the class.
Examples
# Enable command authorization for VTY 0 so the VTY 0 user can execute only authorized commands that are permitted by the user role.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] command authorization
Related commands authorization command
(Security Command Reference)
command accounting
databits
Use databits to specify the number of data bits for a character.
Use undo databits to restore the default.
Syntax databits
{ 5 | 6 | 7 | 8 }
undo databits
Default
Eight data bits are used for a character.
Views
User line view
Predefined user roles
network-admin mdc-admin
51
Parameters
5
: Uses five data bits for a character.
6
: Uses six data bits for a character.
7
: Uses seven data bits for a character.
8
: Uses eight data bits for a character.
Usage guidelines
This command is not supported in VTY line view.
This setting must be the same as the setting on the configuration terminal.
Examples
# Configure AUX 1 to use five data bits for a character.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] databits 5
display line
Use display line to display user line information.
Syntax display line
[ number1 | { aux | vty } number2 ] [ summary ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
number1
: Specifies the absolute number of a user line. The value range is 0 to 71 in standalone mode and 0 to 6453 in IRF mode.
aux
: Specifies the AUX line.
vty
: Specifies the VTY line.
number2
: Specifies the relative number of a user line. For AUX lines, the value range is 0 to 7 in standalone mode and 0 to 6389 in IRF mode. For VTY lines, the value range is 0 to 63.
summary
: Displays summary information about user lines. If you do not specify this keyword, the detailed information is displayed.
Examples
# Display information about user line 1.
<Sysname> display line 1
Idx Type Tx/Rx Modem Auth Int Location
1 AUX 1/1 9600 - N - 1/7/0
+ : Line is active.
52
F : Line is active and in async mode.
Idx : Absolute index of line.
Type : Type and relative index of line.
Auth : Login authentication mode.
Int : Physical port of the line.
A : Authentication use AAA.
N : No authentication is required.
P : Password authentication.
Table 4 Command output
Field Description
Modem
Whether the modem allows calling in or out. By default, this attribute is not configured and this field displays a hyphen (-). The device does not support this field.
Int Physical port for the line. For AUX and VTY lines, this field displays a hyphen (-).
Location
Physical position of the line, in the form slot number/CPU number in standalone mode or
chassis number
/slot number/CPU number in IRF mode.
# (In IRF mode.) Display summary information about all user lines.
<Sysname> display line summary
Line type : [AUX]
0:XUXX XXXX XXXX XXXX
Line type : [VTY]
6390:UUUX XXXX XXXX XXXX
6406:XXXX XXXX XXXX XXXX
6422:XXXX XXXX XXXX XXXX
6438:XXXX XXXX XXXX XXXX
4 lines used. (U)
6450 lines not used. (X)
Table 5 Command output
Fields Description
number
:status
number
: Absolute number of the first user line in the user line class.
status
: User line status.
X is for unused and U is for used.
For example, if "0:XUXX XXXX XXXX XXXX" is displayed, there are 16 user lines of the user line class, which use the absolute numbers 0 through 15. User line 1 is in use, and the other user lines are not.
display telnet client
Use display telnet client to display the packet source setting for the Telnet client.
Syntax display telnet client
Views
Any view
53
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display the packet source setting for the Telnet client.
<Sysname> display telnet client
The source IP address is 1.1.1.1.
Related commands telnet client source
display user-interface
Use display user-interface to display user line information.
Syntax display user-interface
[ number1 | { aux | vty } number2 ] [ summary ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
number1
: Specifies the absolute number of a user line. The value range is 0 to 71 in standalone mode and 0 to 6453 in IRF mode.
aux
: Specifies the AUX line.
vty
: Specifies the VTY line.
number2
: Specifies the relative number of a user line. For AUX lines, the value range is 0 to 7 in standalone mode and 0 to 6389 in IRF mode. For VTY lines, the value range is 0 to 63.
summary
: Displays summary information about user lines. If you do not specify this keyword, the detailed information is displayed.
Usage guidelines
This command is an older version reserved for backward compatibility purposes. It has the same functionality and output as the display line command. As a best practice, use the display line command.
Examples
# Display information about user line 1.
<Sysname> display user-interface 1
Idx Type Tx/Rx Modem Auth Int Location
F 1 AUX 1/1 9600 - N - 1/7/0
54
+ : Line is active.
F : Line is active and in async mode.
Idx : Absolute index of line.
Type : Type and relative index of line.
Auth : Login authentication mode.
Int : Physical port of the line.
A : Authentication use AAA.
N : No authentication is required.
P : Password authentication.
Table 6 Command output
Field Description
Modem
Whether the modem allows calling in or out. By default, this attribute is not configured and this field displays a hyphen (-). The device does not support this field.
Int Physical port for the line. For AUX and VTY lines, this field displays a hyphen (-).
Location
Physical position of the line, in the form slot number/CPU number in standalone mode or
chassis number
/slot number/CPU number in IRF mode.
# (In IRF mode.) Display summary information about all user lines.
<Sysname> display user-interface summary
Line type : [AUX]
0:XUXX XXXX XXXX XXXX
16:XXXX XXXX XXXX XXXX
32:XXXX XXXX XXXX XXXX
48:XXXX XXXX XXXX XXXX
Line type : [VTY]
6390:UUUX XXXX XXXX XXXX
6406:XXXX XXXX XXXX XXXX
6422:XXXX XXXX XXXX XXXX
6438:XXXX XXXX XXXX XXXX
4 lines used. (U)
6450 lines not used. (X)
Table 7 Command output
Fields Description
number
:status
number
: Absolute number of the first user line in the user line class.
status
: User line status.
X is for unused and U is for used.
For example, if "0:XUXX XXXX XXXX XXXX" is displayed, there are 16 user lines of the user line class, which use the absolute numbers 0 through 15. User line 1 is in use, and the other user lines are not.
display users
Use display users to display online CLI user information.
55
Syntax display users
[ all ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters all
: Displays all user lines supported by the device.
Examples
# Display online user information.
<Sysname> display users
Idx Line Idle Time Pid Type
10 VTY 0 00:10:49 Jun 11 11:27:32 320 TEL
+ 11 VTY 1 00:00:00 Jun 11 11:39:40 334 TEL
Following are more details.
VTY 0 :
Location: 192.168.1.12
VTY 1 :
Location: 192.168.1.26
+ : Current operation user.
F : Current operation user works in async mode.
The output shows that two users have logged in to the device: one is using user line VTY 0 and the other (yourself) is using VTY 1. Your IP address is 192.168.1.26.
Table 8 Command output
Field Description
Idx Absolute number of the user line.
Line
Idle
Time
Pid
Type
+
Location
Type and relative number of the user line.
Time elapsed after the user's most recent input, in the hh:mm:ss format.
Login time of the user.
Process ID of the user session.
User type, such as Telnet or SSH.
User line you are using.
IP address of the user.
escape-key
Use escape-key to set the escape key.
Use undo escape-key to disable the escape key.
56
Syntax escape-key
{ key-string | default }
undo escape-key
Default
Pressing Ctrl+C terminates a task.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Parameters
key-string
: Specifies a shortcut key. It can be a string of 1 to 3 characters, or an ASCII code value in the range of 0 to 127. If you enter a number that is greater than 127, or enter a string that is not a number, the first character is used as the shortcut key. For example, if you configure escape-key
987
, the shortcut key is 9. If you configure escape-key abc, the shortcut key is a.
default
: Restores the default escape key sequence Ctrl+C.
Usage guidelines
You can use this shortcut key to abort a command that is being executed. For example, you can press this shortcut key to abort a ping or tracert command.
Whether a command can be aborted by Ctrl+C by default depends on the software implementation of the command. For more information, see the usage guidelines for the command.
As a best practice, use a key sequence as the shortcut key. If you define a single character as the shortcut key, pressing the key while a command is being executed stops the command. If no command is being executed, the result depends on the following situations:
•
If you are managing the local device, pressing the key enters the character as a common character.
•
If you Telnet to another device and manage the remote device, pressing the key does not do anything.
If you execute this command multiple times, the most recent setting takes effect. To display the current escape key, use the display current-configuration command.
This command is available in both user line view and user line class view. A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view.
Examples
# Define character a as the escape key for AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] escape-key a
To verify the configuration:
1.
Ping IP address 192.168.1.49, specifying the -c keyword to set the number of ICMP echo request packets to 20.
<Sysname> ping -c 20 192.168.1.49
PING 192.168.1.49: 56 data bytes, press a to break
Reply from 192.168.1.49: bytes=56 Sequence=1 ttl=255 time=3 ms
Reply from 192.168.1.49: bytes=56 Sequence=2 ttl=255 time=3 ms
57
2.
Press a.
The system aborts the command and returns to user view.
--- 192.168.1.49 ping statistics ---
2 packet(s) transmitted
2 packet(s) received
0.00% packet loss
round-trip min/avg/max = 3/3/3 ms
<Sysname>
flow-control
Use flow-control to configure the flow control mode.
Use undo flow-control to restore the default.
Syntax flow-control
{ hardware | none | software }
undo flow-control
Default
The flow control mode is none.
Views
User line view
Predefined user roles
network-admin mdc-admin
Parameters hardware
: Performs hardware flow control.
none
: Disables flow control.
software
: Performs software flow control.
Usage guidelines
This command is not supported in VTY line view.
The device supports flow control in both the inbound and outbound directions.
•
For flow control in the inbound direction, the local device listens to flow control information from the remote device.
•
For flow control in the outbound direction, the local device sends flow control information to the remote device.
The flow control setting takes effect in both directions.
To communicate, two devices must operate in the same flow control mode.
Examples
# Configure software flow control in the inbound and outbound directions for the user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] flow-control software
58
free line
Use free line to release a user line.
Syntax
free line
{ number1 | { aux | vty } number2 }
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
number1
: Specifies the absolute number of a user line. The value range is 0 to 71 in standalone mode and 0 to 6453 in IRF mode.
aux
: Specifies the AUX line.
vty
: Specifies the VTY line.
number2
: Specifies the relative number of a user line. For AUX lines, the value range is 0 to 7 in standalone mode and 0 to 6389 in IRF mode. For VTY lines, the value range is 0 to 63.
Usage guidelines
This command does not release the line you are using.
Examples
# Release the user line VTY 1:
1.
Display online users.
<Sysname> display users
Idx Line Idle Time Pid Type
10 VTY 0 00:10:49 Jun 11 11:27:32 320 TEL
+ 11 VTY 1 00:00:00 Jun 11 11:39:40 334 TEL
Following are more details.
VTY 0 :
Location: 192.168.1.12
VTY 1 :
Location: 192.168.1.26
+ : Current operation user.
F : Current operation user works in async mode.
2.
If the operations of the user on VTY 1 impact your operations, log out the user.
<Sysname> free line vty 1
Are you sure to free line vty1? [Y/N]:y
[OK]
free user-interface
Use free user-interface to release a user line.
Syntax
free user-interface
{ number1 | { aux | vty } number2 }
59
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
number1
: Specifies the absolute number of a user line. The value range is 0 to 71 in standalone mode and 0 to 6453 in IRF mode.
aux
: Specifies the AUX line.
vty
: Specifies the VTY line.
number2
: Specifies the relative number of a user line. For AUX lines, the value range is 0 to 7 in standalone mode and 0 to 6389 in IRF mode. For VTY lines, the value range is 0 to 63.
Usage guidelines
This command does not release the line you are using.
This command is an older version reserved for backward compatibility purposes. It has the same functionality and output as the free line command. As a best practice, use the free line command.
Examples
# Release the user line VTY 1:
1.
Display online users.
<Sysname> display users
Idx LINE Idle Time Pid Type
10 VTY 0 00:10:49 Jun 11 11:27:32 320 TEL
+ 11 VTY 1 00:00:00 Jun 11 11:39:40 334 TEL
Following are more details.
VTY 0 :
Location: 192.168.1.12
VTY 1 :
Location: 192.168.1.26
+ : Current operation user.
F : Current operation user works in async mode.
2.
If the operations of the user on VTY 1 impact your operations, log out the user.
<Sysname> free user-interface vty 1
Are you sure to free line vty1? [Y/N]:y
[OK]
history-command max-size
Syntax
history-command max-size size-value
undo history-command max-size
Default
Use history-command max-size to set the size of the command history buffer for a user line.
Use undo history-command max-size to restore the default.
The buffer for a user line saves up to 10 history commands.
60
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Parameters
size-value
: Specifies the maximum number of history commands the buffer can store, in the range of
0 to 256.
Usage guidelines
Each user line uses a separate command history buffer to save commands successfully executed by its user. The buffer size determines how many history commands the buffer can store.
To display history commands in the buffer for your session, press the up or down arrow key, or execute the display history-command command.
Terminating a CLI session clears the commands in the history buffer.
This command is available in both user line view and user line class view. A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view.
Examples
# Set the command history buffer size to 20 for the user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] history-command max-size 20
idle-timeout
Use idle-timeout to set the CLI connection idle-timeout timer.
Use undo idle-timeout to restore the default.
Syntax
idle-timeout minutes
[ seconds ]
undo idle-timeout
Default
The CLI connection idle-timeout timer is 10 minutes.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Parameters
minutes
: Specifies the number of minutes for the timer, in the range of 0 to 35791. The default is 10 minutes.
seconds
: Specifies the number of seconds for the timer, in the range of 0 to 59. The default is 0 seconds.
61
Usage guidelines
The system automatically terminates a user connection if no information interaction occurs on the connection within the idle-timeout interval.
Setting the idle-timeout timer to 0 disables the idle-timeout feature.
This command is available in both user line view and user line class view. A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view.
Examples
# Set the CLI connection idle-timeout timer to 1 minute and 30 seconds for the user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] idle-timeout 1 30
line
Use line to enter one or multiple user line views.
Syntax line
{ first-number1 [ last-number1 ] | { aux | vty } first-number2 [ last-number2 ] }
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
first-number1
: Specifies the absolute number of the first user line. The value range is 0 to 71 in standalone mode and 0 to 6453 in IRF mode.
last-number1
: Specifies the absolute number of the last user line. The value range is 0 to 71 in standalone mode and 0 to 6453 in IRF mode. This number cannot be smaller than first-number1.
aux
: Specifies the AUX line.
vty
: Specifies the VTY line.
first-number2
: Specifies the relative number of the first user line. For AUX lines, the value range is 0 to 7 in standalone mode and 0 to 6389 in IRF mode. For VTY lines, the value range is 0 to 63.
last-number2
: Specifies the relative number of the last user line. For AUX lines, the value range is 0 to 7 in standalone mode and 0 to 6389 in IRF mode. For VTY lines, the value range is 0 to 63. This number cannot be smaller than first-number2.
Usage guidelines
To configure settings for a single user line, use this command to enter the user line view.
To configure the same settings for multiple user lines, use this command to enter multiple user line views.
Examples
# Enter the view of user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1]
62
# Enter the views of user lines VTY 0 to VTY 4.
<Sysname> system-view
[Sysname] line vty 0 4
[Sysname-line-vty0-4]
Related commands line class
line class
Use line class to enter user line class view.
Syntax line class
{ aux | vty }
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters aux
: Specifies the AUX line class view.
vty
: Specifies the VTY line class view.
Usage guidelines
To configure the same settings for all user lines of a line class, use this command to enter the user line class view.
For commands that are available in both user line view and user line class view, the device uses the following rules to determine the settings to be activated:
•
A setting in user line view is applied only to the user line. A setting in user line class view is applied to all user lines of the class.
•
A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view.
•
A setting in user line class view takes effect only for users who log in after the configuration is completed. It does not affect online users.
Examples
# Set the CLI connection idle-timeout timer to 15 minutes in VTY line class view.
<Sysname> system-view
[Sysname] line class vty
[Sysname-line-class-vty] idle-timeout 15
# In AUX line class view, configure character s as the shortcut key for starting a terminal session.
<Sysname> system-view
[Sysname] line class aux
[Sysname-line-class-aux] activation-key s
[Sysname-line-class-aux] quit
# In AUX line view, restore the default shortcut key for starting a terminal session.
[Sysname] line aux 1
63
[Sysname-line-aux1] undo activation-key
Alternatively, you can use the following command:
[Sysname-line-aux1] activation-key 13
To verify the configuration:
1.
Exit the console session.
[Sysname-line-aux1] return
<Sysname> quit
2.
Log in again through the AUX line.
The following message appears:
Press ENTER to get started.
3.
Press Enter.
Pressing Enter does not start a session.
4.
Enter s.
A terminal session is started.
<Sysname>
Related commands line
lock
Use lock to lock the current user line. This method prevents unauthorized users from using the user line.
Syntax lock
Default
By default, the system does not lock any user lines.
Views
User view
Predefined user roles
network-admin mdc-admin
Usage guidelines
This command is not supported in FIPS mode.
This command requires you to enter a password for unlocking the user line. The user line is locked after you enter a password and confirm the password.
To unlock the user line, press Enter and enter the correct password.
Examples
# Lock the current user line and then unlock it.
<Sysname> lock
Please input password<1 to 16> to lock current line:
Password:
Again:
64
locked !
// The user line is locked. To unlock it, press Enter and enter the password:
Password:
<Sysname>
parity
Use parity to specify a parity check mode.
Use undo parity to restore the default.
Syntax parity
{ even | mark | none | odd | space }
undo parity
Default
The setting is none, and no parity check is performed.
Views
User line view
Predefined user roles
network-admin mdc-admin
Parameters even
: Performs even parity check.
mark
: Performs mark parity check.
none
: Disables parity check.
odd
: Performs odd parity check.
space
: Performs space parity check.
Usage guidelines
This command is not supported in VTY line view.
The configuration terminal and the device must be configured with the same parity check mode to communicate.
Examples
# Configure user line AUX 1 to perform odd parity check.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] parity odd
protocol inbound
Use protocol inbound to enable a user line to support Telnet, SSH, or both protocols.
Use undo protocol inbound to restore the default.
Syntax
In non-FIPS mode:
protocol inbound
{ all | ssh | telnet }
65
undo
protocol inbound
In FIPS mode:
protocol inbound
ssh
undo
protocol inbound
Default
In non-FIPS mode, both Telnet and SSH are supported.
In FIPS mode, SSH is supported.
Views
VTY line view, VTY line class view
Predefined user roles
network-admin mdc-admin
Parameters all
: Supports both Telnet and SSH.
ssh
: Supports SSH only.
telnet
: Supports Telnet only.
Usage guidelines
In VTY line view, the configuration takes effect only for users who log in through the user line after the configuration is completed.
Before configuring a user line to support SSH, set the authentication mode to scheme for the user line. For more information, see authentication-mode.
In VTY line view, this command is associated with the authentication-mode command. If you specify a non-default value for only one of the two commands in VTY line view, the other command uses the default setting, regardless of the setting in VTY line class view.
Examples
# Enable user lines VTY 0 through VTY 4 to support only SSH.
<Sysname> system-view
[Sysname] line vty 0 4
[Sysname-line-vty0-4] authentication-mode scheme
[Sysname-line-vty0-4] protocol inbound ssh
# Enable SSH support and set the authentication mode to scheme in VTY line class view. Enable user lines VTY 0 through VTY 4 to support all protocols and disable authentication for the user lines.
<Sysname> system-view
[Sysname] line class vty
[Sysname-line-class-vty] authentication-mode scheme
[Sysname-line-class-vty] protocol inbound ssh
[Sysname-line-class-vty] line vty 0 4
[Sysname-line-vty0-4] authentication-mode none
To verify the configuration:
1.
Telnet to the device.
<Client> telnet 192.168.1.241
Trying 192.168.1.241 ...
Press CTRL+K to abort
66
Connected to 192.168.1.241 ...
******************************************************************************
* Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
<Server>
You are logged in without authentication.
2.
Display online CLI user information.
<Server> display users
Idx Line Idle Time Pid Type
+ 50 VTY 0 00:00:00 Jan 17 15:29:27 189 TEL
Following are more details.
VTY 0 :
Location: 192.168.1.186
+ : Current operation user.
F : Current operation user works in async mode.
The output shows that you are using VTY 0. The configuration in user line view is effective.
screen-length
Use screen-length to set the maximum number of lines to be displayed on a screen.
Use undo screen-length to restore the default.
Syntax screen-length
screen-length
undo screen-length
Default
Up to 24 lines are displayed on a screen.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Parameters
screen-length
: Specifies the maximum number of lines to be displayed on a screen, in the range of 0 to 512. Setting this argument to 0 disables pausing between screens of output.
Usage guidelines
This command sets the maximum number of lines that can be displayed on one screen when the screen pause feature is enabled. If the screen pause feature is disabled, the system displays command output without a pause.
The actual number of lines that can be displayed on a screen is restricted by the display specification of the configuration terminal. For example, if you set the maximum number of lines for a screen to 40,
67
the device sends 40 lines to the screen at a time. If the display specification is 24 lines, only the last
24 lines are displayed on the screen. To view the previous 16 lines, you must press PgUp.
The screen pause feature is enabled by default. To disable this feature, execute the screen-length 0 command or the screen-length disable command.
This command is available in both user line view and user line class view. A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view.
Examples
# Set the maximum number of lines to be displayed on a screen to 30 for the user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] screen-length 30
Related commands screen-length disable
send
Use send to send messages to user lines.
Syntax send
{ all | number1 | { aux | vty } number2 }
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters all
: Specifies all user lines.
number1
: Specifies the absolute number of a user line. The value range is 0 to 71 in standalone mode and 0 to 6453 in IRF mode.
aux
: Specifies the AUX line.
vty
: Specifies the VTY line.
number2
: Specifies the relative number of a user line. For AUX lines, the value range is 0 to 7 in standalone mode and 0 to 6389 in IRF mode. For VTY lines, the value range is 0 to 63.
Usage guidelines
To end a message, press Enter. To cancel a message and return to user view, press Ctrl+C.
Examples
# Before you restart the device, send a notification to VTY 1 to inform the user.
<Sysname> send vty 1
Input message, end with Enter; abort with CTRL+C:
Your attention, please. I will reboot the system in 3 minutes.
Send message? [Y/N]:y
The message should appear on the screen of the user's configuration terminal, as shown in the following example:
68
[Sysname]
***
***
***Message from vty0 to vty1
***
Your attention, please. I will reboot the system in 3 minutes.
set authentication password
Use set authentication password to set a password for local password authentication.
Use undo set authentication password to delete the password.
Syntax set authentication password
{ hash | simple } password
undo set authentication password
Default
No password is set for local password authentication.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Parameters hash
: Sets a hashed password.
simple
: Sets a plaintext password.
password
: Specifies the password string. This argument is case sensitive. If simple is specified, it must be a string of 1 to 16 characters. If hash is specified, it must be a string of 1 to 110 characters.
Usage guidelines
This command is not supported in FIPS mode.
For security purposes, the password is hashed before being saved, whether you specify the hash or
simple
keyword.
This command is available in both user line view and user line class view. A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view.
In user line view, the configuration takes effect only for users who log in through the line after the configuration is completed.
Examples
# Set the password for local password authentication on user line AUX 1 to hello.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] authentication-mode password
[Sysname-line-aux1] set authentication password simple hello
When you log in again through user line, you must enter the password hello to pass authentication.
69
Related commands authentication-mode
shell
Use shell to enable the terminal service for a user line.
Use undo shell to disable the terminal service for a user line.
Syntax shell undo shell
Default
The terminal service is enabled on all user lines.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Usage guidelines
The undo shell command is not supported in AUX line view or AUX line class view.
You cannot disable the terminal service on the user line you are using.
When the device acts as a Telnet or SSH server, you cannot configure the undo shell command.
If the undo shell command is configured in user line class view, you cannot configure the shell command in the view of a user line in the class.
Examples
# Disable the terminal service for user lines VTY 0 through VTY 4 so no user can log in to the device through the user lines.
<Sysname> system-view
[Sysname] line vty 0 4
[Sysname-line-vty0-4] undo shell
Disable ui-vty0-4 , are you sure? [Y/N]:y
[Sysname-line-vty0-4]
speed
Use speed to set the transmission rate (also called the baud rate) on a user line.
Use undo speed to restore the default.
Syntax
speed speed-value
undo speed
Default
The transmission rate on a user line is 9600 bps.
70
Views
User line view
Predefined user roles
network-admin mdc-admin
Parameters
speed-value
: Specifies the transmission rate in bps. Supported transmission rates depend on the configuration environment. The transmission rates for asynchronous serial interfaces might include:
•
300 bps.
•
600 bps.
•
1200 bps.
•
2400 bps.
•
4800 bps.
•
9600 bps.
•
19200 bps.
•
38400 bps.
•
57600 bps.
•
115200 bps.
Usage guidelines
This command is not supported in VTY line view.
The configuration terminal and the device must be configured with the same transmission rate to communicate.
Examples
# Set the transmission rate to 19200 bps for the user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] speed 19200
stopbits
Use stopbits to specify the number of stop bits for a character.
Use undo stopbits to restore the default.
Syntax stopbits
{ 1 | 1.5 | 2 }
undo stopbits
Default
One stop bit is used.
Views
User line view
Predefined user roles
network-admin
71
mdc-admin
Parameters
1
: Uses one stop bit.
1.5
: Uses one and a half stop bits. The device does not support using one and a half stop bits. If you specify this keyword, two stop bits are used.
2
: Uses two stop bits.
Usage guidelines
This command is not supported in VTY line view.
The configuration terminal and the device must be configured to use the same number of stop bits to communicate.
Examples
# Set the number of stop bits to 1 for the user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] stopbits 1
telnet
Use telnet to Telnet to a host in an IPv4 network.
Syntax telnet
remote-host [ service-port ] [ vpn-instance vpn-instance-name ] [ source { interface
interface-type interface-number
| ip ip-address } ] [ dscp dscp-value ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
remote-host
: Specifies the IPv4 address or host name of a remote host. A host name can be a case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits, hyphens (-), underscores (_), and dots (.).
service-port
: Specifies the TCP port number for the Telnet service on the remote host. The value range is 0 to 65535 and the default is 23.
vpn-instance
vpn-instance-name: Specifies the VPN instance to which the remote host belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the remote host belongs to the public network, do not specify this option.
source
: Specifies a source IPv4 address or source interface for outgoing Telnet packets.
interface
interface-type interface-number: Specifies the source interface. The primary IPv4 address of the interface will be used as the source IPv4 address for outgoing Telnet packets.
ip
ip-address: Specifies the source IPv4 address for outgoing Telnet packets.
dscp
dscp-value: Specifies the DSCP value for IP to use in outgoing Telnet packets to indicate the packet transmission priority. The value range is 0 to 63. The default is 48.
72
Usage guidelines
This command is not supported in FIPS mode.
To terminate the current Telnet connection, press Ctrl+K or execute the quit command.
The source address or interface specified by this command is applied only to the current Telnet connection.
Examples
# Telnet to host 1.1.1.2, using 1.1.1.1 as the source IP address for outgoing Telnet packets.
<Sysname> telnet 1.1.1.2 source ip 1.1.1.1
Related commands telnet client source
telnet client source
Use telnet client source to specify a source IPv4 address or source interface for outgoing Telnet packets when the device acts as a Telnet client.
Use undo telnet client source to delete the configuration.
Syntax telnet client source
{ interface interface-type interface-number | ip ip-address }
undo telnet client source
Default
No source IPv4 address or source interface is specified for outgoing Telnet packets. The source IPv4 address is the primary IPv4 address of the outbound interface.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters interface
interface-type interface-number: Specifies a source interface. The primary IPv4 address of the interface will be used as the source IPv4 address for outgoing Telnet packets.
ip
ip-address: Specifies a source IPv4 address.
Usage guidelines
This command is not supported in FIPS mode.
The setting configured by this command applies to all Telnet connections but has a lower precedence than the source setting specified for the telnet command.
Examples
# Set the source IPv4 address for outgoing Telnet packets to 1.1.1.1 when the device acts as a Telnet client.
<Sysname> system-view
[Sysname] telnet client source ip 1.1.1.1
Related commands display telnet client configuration
73
telnet ipv6
Use telnet ipv6 to Telnet to a host in an IPv6 network.
Syntax telnet
ipv6 remote-host [ -i interface-type interface-number ] [ port-number ] [ vpn-instance
vpn-instance-name
] [ dscp dscp-value ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
remote-host
: Specifies the IP address or host name of a remote host. A host name can be a case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits, hyphens (-), underscores (_), and dots (.).
-i
interface-type interface-number: Specifies the outbound interface for sending Telnet packets. This option is required when the server address is a link-local address.
port-number
: Specifies the TCP port number for the Telnet service on the remote host. The value range is 0 to 65535 and the default is 23.
vpn-instance
vpn-instance-name: Specifies the VPN instance to which the remote host belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the remote host belongs to the public network, do not specify this option.
dscp
dscp-value: Specifies the DSCP value for IPv6 to use in outgoing Telnet packets to indicate the packet transmission priority. The value range is 0 to 63. The default is 48.
Usage guidelines
This command is not supported in FIPS mode.
To terminate the current Telnet connection, press Ctrl+K or execute the quit command.
Examples
# Telnet to the host at 5000::1.
<Sysname> telnet ipv6 5000::1
telnet server acl
Use telnet server acl to apply an ACL to filter Telnet logins.
Use undo telnet server acl to restore the default.
Syntax
Default
No ACL is used to filter Telnet logins.
Views
telnet server acl acl-number
undo telnet server acl
System view
74
Predefined user roles
network-admin mdc-admin
Parameters
acl-number
: Specifies an ACL by its number. The following are the value ranges:
•
Basic ACL—2000 to 2999.
•
Advanced ACL—3000 to 3999.
• Ethernet frame header ACL—4000 to 4999.
Usage guidelines
This command is not supported in FIPS mode.
Only one ACL can be used to filter Telnet logins, and only users permitted by the ACL can Telnet to the device.
This command does not take effect on existing Telnet connections.
You can specify an ACL that has not been created yet in this command. The command takes effect after the ACL is created.
For more information about ACL, see ACL and QoS Configuration Guide.
Examples
# Permit only the user at 1.1.1.1 to Telnet to the device.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 1.1.1.1 0
[Sysname-acl-basic-2001] quit
[Sysname] telnet server acl 2001
telnet server dscp
Use telnet server dscp to set the DSCP value for IPv4 to use for outgoing Telnet packets on a Telnet server.
Use undo telnet server dscp to restore the default.
Syntax
telnet server dscp dscp-value
undo telnet server dscp
Default
IPv4 uses the DSCP value 48 for outgoing Telnet packets on a Telnet server.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
dscp-value
: Specifies a DSCP value in the range of 0 to 63.
75
Usage guidelines
This command is not supported in FIPS mode.
The DSCP value is carried in the ToS field of an IP packet to indicate the transmission priority of the packet.
Examples
# Set the DSCP value for IPv4 to use for outgoing Telnet packets to 30 on a Telnet server.
<Sysname> system-view
[Sysname] telnet server dscp 30
telnet server ipv6 acl
Use telnet server ipv6 acl to apply an IPv6 ACL to filter IPv6 Telnet logins.
Use undo telnet server ipv6 acl to restore the default.
Syntax telnet server ipv6 acl
[ ipv6 ] acl-number
undo telnet server ipv6 acl
Default
No IPv6 ACL is used to filter IPv6 Telnet logins.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
acl-number
: Specifies an IPv6 ACL by its number. The following are the value ranges:
• Basic ACL—2000 to 2999. The ipv6 option is required.
• Advanced ACL—3000 to 3999. The ipv6 option is required.
•
Ethernet frame header ACL—4000 to 4999. Do not specify the ipv6 option.
Usage guidelines
This command is not supported in FIPS mode.
If the ACL does not exist or does not have a rule, all users are permitted to Telnet to the device.
When the ACL exists and has rules, only users permitted by the ACL can Telnet to the device.
This command is not effective for existing Telnet connections.
If you execute this command multiple times, the most recent configuration takes effect.
For more information about ACL, see ACL and QoS Configuration Guide.
Examples
# Permit only the user at 2000::1 to Telnet to the device.
<Sysname> system-view
[Sysname] acl ipv6 number 2001
[Sysname-acl6-basic-2001] rule permit source 2000::1 128
[Sysname-acl6-basic-2001] quit
76
[Sysname] telnet server ipv6 acl ipv6 2001
telnet server ipv6 dscp
Use telnet server ipv6 dscp to set the DSCP value for IPv6 to use for outgoing Telnet packets on a
Telnet server.
Use undo telnet server ipv6 dscp to restore the default.
Syntax
telnet server ipv6 dscp dscp-value
undo telnet server ipv6 dscp
Default
IPv6 uses the DSCP value 48 for outgoing Telnet packets on a Telnet server.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
dscp-value
: Specifies a DSCP value in the range of 0 to 63.
Usage guidelines
This command is not supported in FIPS mode.
The DSCP value is carried in the Traffic class field of an IPv6 packet to indicate the transmission priority of the packet.
Examples
# Set the DSCP value for IPv6 to use for outgoing Telnet packets to 30 on a Telnet server.
<Sysname> system-view
[Sysname] telnet server ipv6 dscp 30
telnet server enable
Use telnet server enable to enable the Telnet server feature.
Use undo telnet server enable to disable the Telnet server feature.
Syntax telnet server enable undo telnet server enable
Default
The Telnet server feature is disabled.
Views
System view
Predefined user roles
network-admin
77
mdc-admin
Usage guidelines
This command is not supported in FIPS mode.
Administrators can Telnet to the device only when the Telnet server feature is enabled.
Examples
# Enable the Telnet server feature.
<Sysname> system-view
[Sysname] telnet server enable
terminal type
Use terminal type to specify the terminal display type.
Use undo terminal type to restore the default.
Syntax terminal type
{ ansi | vt100 }
undo terminal type
Default
The terminal display type is ANSI.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Parameters ansi
: Specifies the terminal display type ANSI.
vt100
: Specifies the terminal display type VT100.
Usage guidelines
The device supports two terminal display types: ANSI and VT100. As a best practice, set the display type to VT100 on both the device and the configuration terminal. If either side uses the ANSI type, a display problem such as cursor positioning error might occur when a command line has more than
80 characters.
Examples
# Set the terminal display type to VT100.
<Sysname> system-view
[Sysname] line vty 1
[Sysname-line-vty1] terminal type vt100
user-interface
Use user-interface to enter one or multiple user line views.
Syntax user-interface
{ first-number1 [ last-number1 ] | { aux | vty } first-number2 [ last-number2 ] }
78
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
first-number1
: Specifies the absolute number of the first user line. The value range is 0 to 71 in standalone mode and 0 to 6453 in IRF mode.
last-number1
: Specifies the absolute number of the last user line. The value range is 0 to 71 in standalone mode and 0 to 6453 in IRF mode. This number cannot be smaller than first-number1.
aux
: Specifies the AUX line.
vty
: Specifies the VTY line.
first-number2
: Specifies the relative number of the first user line. For AUX lines, the value range is 0 to 7 in standalone mode and 0 to 6389 in IRF mode. For VTY lines, the value range is 0 to 63.
last-number2
: Specifies the relative number of the last user line. For AUX lines, the value range is 0 to 7 in standalone mode and 0 to 6389 in IRF mode. For VTY lines, the value range is 0 to 63. This number cannot be smaller than first-number2.
Usage guidelines
To configure settings for a single user line, use this command to enter the user line view.
To configure the same settings for multiple user lines, use this command to enter multiple user line views.
This command is an older version reserved for backward compatibility purposes. It has the same functionality and output as the line command. As a best practice, use the line command.
Examples
# Enter the view of user line AUX 1.
<Sysname> system-view
[Sysname] user-interface aux 1
[Sysname-line-aux1]
# Enter the views of user lines VTY 0 to VTY 4.
<Sysname> system-view
[Sysname] user-interface vty 0 4
[Sysname-line-vty0-4]
Related commands user-interface class
user-interface class
Use user-interface class to enter user line class view.
Syntax user-interface class
{ aux | vty }
Views
System view
79
Predefined user roles
network-admin mdc-admin
Parameters aux
: Specifies the AUX line class view.
vty
: Specifies the VTY line class view.
Usage guidelines
This command is an older version reserved for backward compatibility purposes. It has the same functionality and output as the line class command. As a best practice, use the line class command.
To configure the same settings for all user lines of a line class, you can use this command to enter the user line class view.
For commands that are available in both user line view and user line class view, the device uses the following rules to determine the settings to be activated:
•
A setting in user line view is applied only to the user line. A setting in user line class view is applied to all user lines of the class.
•
A non-default setting in either view takes precedence over a default setting in the other view. A non-default setting in user line view takes precedence over a non-default setting in user line class view.
•
A setting in user line class view takes effect only for users who log in after the configuration is completed. It does not affect online users.
Examples
# Set the CLI connection idle-timeout timer to 15 minutes in VTY line class view.
<Sysname> system-view
[Sysname] user-interface class vty
[Sysname-line-class-vty] idle-timeout 15
# In AUX line class view, configure character s as the shortcut key for starting a terminal session.
<Sysname> system-view
[Sysname] user-interface class aux
[Sysname-line-class-aux] activation-key s
[Sysname-line-class-aux] quit
# In AUX line view, restore the default shortcut key for starting a terminal session.
[Sysname] line aux 1
[Sysname-line-aux1] undo activation-key
Alternatively, you can use the following command:
[Sysname-line-aux1] activation-key 13
To verify the configuration:
1.
Exit the console session.
[Sysname-line-aux1] return
<Sysname> quit
2.
Log in again through the AUX line.
The following message appears:
Press ENTER to get started.
3.
Press Enter.
Pressing Enter does not start a session.
80
4.
Enter s.
A terminal session is started.
<Sysname>
Related commands user-interface
user-role
Use user-role to assign a user role to a user line so users logged in through the user line get the user role at login.
Use undo user-role to remove a user role or restore the default.
Syntax user-role
role-name
undo
user-role [ role-name ]
Default
An AUX line user of the default MDC is assigned the user role network-admin. Users of other default
MDC user lines are assigned the user role network-operator.
A non-default MDC user switched from the default device by using the switchto mdc command is assigned the user role mdc-admin. Other non-default MDC users are assigned the user role mdc-operator.
Views
User line view, user line class view
Predefined user roles
network-admin mdc-admin
Parameters
role-name
: Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role can be user-defined or predefined (network-admin, network-operator, mdc-admin, mdc-operator, or level-0 to level-15). If you do not specify this argument, the undo user-role command restores the default user role.
Usage guidelines
This command is not supported in FIPS mode.
In user line view, the configuration takes effect only for users who log in through the line after the configuration is completed.
You can assign up to 64 user roles to a user line. A user logged in through the user line gets all the user roles.
The security-audit user role is available only in local user view. You cannot use this command to assign the user role.
For more information about user roles, see "Configuring RBAC."
Examples
# Assign user role network-admin through the user line AUX 1.
<Sysname> system-view
[Sysname] line aux 1
[Sysname-line-aux1] user-role network-admin
81
82
FTP commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide.
FTP is not supported in FIPS mode.
FTP server commands
display ftp-server
Use display ftp-server to display FTP server configuration and status information.
Syntax display
ftp-server
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display FTP server configuration and status information.
<Sysname> display ftp-server
FTP server is running.
User count: 1
Idle-timeout timer (in minutes): 30
Table 9 Command output
Field Description
User count Number of the current logged-in users.
Idle-timeout timer (in minutes)
If no packet is exchanged between the FTP server and client during this period, the FTP connection is closed.
Related commands ftp
server enable
ftp
timeout
display ftp-user
Use display ftp-user to display detailed information about logged-in FTP users.
83
Syntax display
ftp-user
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display detailed information about logged-in FTP users.
<Sysname> display ftp-user
UserName HostIP Port HomeDir root 192.168.20.184 46539 flash:
A field value is wrapped if its length exceeds the limit. The wrapped value is left justified.
The limits for fields are as follows:
• UserName—10 characters.
• HostIP—15 characters.
• HomeDir—37 characters.
<Sysname> display ftp-user
UserName HostIP Port HomeDir user2 2000:2000:2000: 1499 flash:/user2
2000:2000:2000:
2000:2000 administra 100.100.100.100 10001 flash:/123456789/123456789/123456789/ tor 123456789/123456789/123456789/1234567
89/123456789
Table 10 Command output
Field Description
UserName Name of the user.
HostIP
Port
HomeDir
IP address of the user.
Port number of the user.
Authorized directory for the user.
free ftp user
Use free ftp user to manually release the FTP connections established by using a specific user account.
Syntax free
ftp user username
84
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
username
: Specifies a username. You can use the display ftp-user command to display FTP user information.
Examples
# Release the FTP connections established by using the user account ftpuser.
<Sysname> free ftp user ftpuser
Are you sure to free FTP connection? [Y/N]:y
<Sysname>
free ftp user-ip
Use free ftp user-ip to manually release the FTP connections established from a specific IPv4 address.
Syntax free
ftp user-ip ipv4-address [ port port ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
ipv4-address
: Specifies the source IP address of an FTP connection. You can use the display
ftp-user
command to view the source IP addresses of FTP connections.
port
port: Specifies the source port of an FTP connection. You can use the display ftp-user command to view the source ports of FTP connections.
Examples
# Release the FTP connections established from IP address 192.168.20.184.
<Sysname> free ftp user-ip 192.168.20.184
Are you sure to free FTP connection? [Y/N]:y
<Sysname>
free ftp user-ip ipv6
Use free ftp user-ip ipv6 to manually release the FTP connections established from a specific IPv6 address.
Syntax free
ftp user-ip ipv6 ipv6-address [ port port ]
85
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
ipv6-address
: Specifies the source IPv6 address of an FTP connection. You can use the display
ftp-user
command to view the source IPv6 addresses of FTP connections.
port
port: Specifies the source port of an FTP connection. You can use the display ftp-user command to view the source ports of FTP connections.
Examples
# Release the FTP connections established from IPv6 address 2000::154.
<Sysname> free ftp user-ip ipv6 2000::154
Are you sure to free FTP connection? [Y/N]:y
<Sysname>
ftp server acl
Use ftp server acl to use an ACL to control FTP clients' access to the FTP server.
Use undo ftp server acl to restore the default.
Syntax ftp
server acl { acl-number | ipv6 acl-number6 }
undo
ftp server acl [ ipv6 ]
Default
No ACL is used to control FTP clients' access to the FTP server.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
acl-number
: Specifies an IPv4 ACL number in the range of 2000 to 3999.
ipv6
acl-number6: Specifies an IPv6 ACL number in the range of 2000 to 3999.
Usage guidelines
You can use this command to permit only FTP requests from specific FTP clients. This configuration takes effect only for FTP connections to be established. It does not impact existing FTP connections.
If you execute the command multiple times, the most recently specified ACL takes effect.
Examples
# Use ACL 2001 to allow only client 1.1.1.1 to access the FTP server.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule 0 permit source 1.1.1.1 0
86
[Sysname-acl-basic-2001] rule 1 deny source any
[Sysname-acl-basic-2001] quit
[Sysname] ftp server acl 2001
ftp server dscp
Use ftp server dscp to set the DSCP value for IPv4 to use for outgoing FTP packets on an FTP server.
Use undo ftp server dscp to restore the default.
Syntax
ftp server dscp dscp-value
undo ftp server dscp
Default
IPv4 uses the DSCP value 0 for outgoing FTP packets on an FTP server.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
dscp-value
: Specifies a DSCP value in the range of 0 to 63.
Usage guidelines
The DSCP value is carried in the ToS field of an IP packet, and it indicates the transmission priority of the packet.
Examples
# Set the DSCP value for IPv4 to use for outgoing FTP packets to 30 on an FTP server.
<Sysname> system-view
[Sysname] ftp server dscp 30
ftp server enable
Use ftp server enable to enable the FTP server.
Use undo ftp server enable to disable the FTP server.
Syntax ftp
server enable
undo
ftp server enable
Default
The FTP server is disabled.
Views
System view
Predefined user roles
network-admin
87
mdc-admin
Examples
# Enable the FTP server.
<Sysname> system-view
[Sysname] ftp server enable
ftp server ipv6 dscp
Use ftp server ipv6 dscp to set the DSCP value for IPv6 to use for outgoing FTP packets on an FTP server.
Use undo ftp server ipv6 dscp to restore the default.
Syntax
ftp server ipv6 dscp dscp-value
undo ftp server ipv6 dscp
Default
IPv6 uses the DSCP value 0 for outgoing FTP packets on an FTP server.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
dscp-value
: Specifies a DSCP value in the range of 0 to 63.
Usage guidelines
The DSCP value is carried in the Traffic class field of an IPv6 packet, and it indicates the transmission priority of the packet.
Examples
# Set the DSCP value for IPv6 to use for outgoing FTP packets to 30 on an FTP server.
<Sysname> system-view
[Sysname] ftp server ipv6 dscp 30
ftp server ssl-server-policy
Use ftp server ssl-server-policy to associate an SSL server policy with the FTP server.
Use undo ftp server ssl-server-policy to remove the association.
Syntax
ftp server ssl-server-policy policy-name
undo ftp server ssl-server-policy
Default
No SSL server policy is associated with the FTP server.
Views
System view
88
Predefined user roles
network-admin mdc-admin
Parameters
policy-name
: Specifies an SSL server policy by its name, a string of 1 to 31 characters.
Usage guidelines
After you associate an SSL server policy with the FTP server, a client that supports SFTP will establish a secure connection to the device to ensure data security.
Examples
# Associate SSL server policy myssl with the FTP server.
<Sysname> system-view
[Sysname] ftp server ssl-server-policy myssl
Related commands ftp server enable ssl server-policy
(Security Command Reference)
ftp timeout
Use ftp timeout to set the FTP connection idle-timeout timer.
Use undo ftp timeout to restore the default.
Syntax ftp
timeout minute
undo
ftp timeout
Default
The FTP connection idle-timeout timer is 30 minutes.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
Minute
: Specifies a time interval in the range of 1 to 35791 minutes.
Usage guidelines
If no data transfer occurs on an FTP connection within the idle-timeout interval, the FTP server closes the FTP connection to release resources.
Examples
# Set the FTP connection idle-timeout timer to 36 minutes.
<Sysname> system-view
[Sysname] ftp timeout 36
89
FTP client commands
Before executing FTP client configuration commands, make sure you have configured authorization settings for users on the FTP server. Authorized operations include viewing the files in the working directory, reading/downloading/uploading/renaming/removing files, and creating directories.
The FTP client commands in this section are supported by the device, but whether they can be executed successfully depends on the FTP server.
append
Use append to add the content of a file on the FTP client to a file on the FTP server.
Syntax append
localfile [ remotefile ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
localfile
: Specifies a local file on the FTP client.
remotefile
: Specifies a remote file on the FTP server.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Append the content of the local a.txt file to the b.txt file on the FTP server. ftp> append a.txt b.txt local: a.txt remote: b.txt
150 Connecting to port 50190
226 File successfully transferred
1657 bytes sent in 0.000736 seconds (2.15 Mbyte/s)
ascii
Use ascii to set the file transfer mode to ASCII.
Syntax ascii
Default
The file transfer mode is binary.
Views
FTP client view
Predefined user roles
network-admin
90
mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
FTP transfers files in either of the following modes:
• Binary
—Transfers non-text files.
• ASCII
—Transfers text files.
When the device acts as the FTP server, the transfer mode is determined by the FTP client. When the device acts as the FTP client, you can set the transfer mode. The transfer mode is binary by default.
Examples
# Set the file transfer mode to ASCII. ftp> ascii
200 TYPE is now ASCII
Related commands binary
binary
Use binary to set the file transfer mode to binary, which is also called the flow mode.
Syntax binary
Default
The file transfer mode is binary.
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
FTP transfers files in either of the following modes:
• Binary
—Transfers program file or pictures.
• ASCII
—Transfers text files.
When the device acts as the FTP server, the transfer mode is determined by the FTP client. When the device acts as the FTP client, you can set the transfer mode. The default transfer mode is binary.
Examples
# Set the file transfer mode to binary. ftp> binary
200 TYPE is now 8-bit binary
Related commands ascii
91
bye
Use bye to terminate the connection to the FTP server and return to user view.
If no connection is established between the device and the FTP server, use this command to return to user view.
Syntax bye
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Examples
# Terminate the connection to the FTP server and return to user view. ftp> bye
221-Goodbye. You uploaded 2 and downloaded 2 kbytes.
221 Logout.
<Sysname>
Related commands quit
cd
Use cd to change the current working directory to another directory on the FTP server.
Syntax cd
{ directory | .. | / }
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
directory
: Specifies the name of the target directory in the [drive:][/]path format, where drive represents the storage medium name. If the target directory does not exist, the cd command does not change the current working directory. If no drive information is provided, the argument represents a folder or subfolder in the current directory. For more information about the drive and path arguments, see Fundamentals Configuration Guide.
..
: Returns to the upper directory. Executing the cd .. command is the same as executing the cdup command. If the current working directory is the FTP root directory, the cd .. command does not change the current working directory.
/
: Returns to the FTP root directory.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
92
The directory that can be accessed must be authorized by the FTP server.
Examples
# Change the working directory to the subdirectory logfile of the current directory. ftp> cd logfile
250 OK. Current directory is /logfile
# Change the working directory to the subdirectory folder of the FTP root directory. ftp> cd /folder
250 OK. Current directory is /folder
# Change the working directory to the upper directory of the current directory. ftp> cd ..
250 OK. Current directory is /
# Change the working directory to the FTP root directory. ftp> cd /
250 OK. Current directory is /
Related commands cdup pwd
cdup
Use cdup to enter the upper directory of the FTP server.
This command does not change the working directory if the current directory is the FTP root directory.
Syntax cdup
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Change the working directory to the upper directory. ftp> pwd
257 "/ftp/subdir" is your current location ftp> cdup
250 OK. Current directory is /ftp ftp> pwd
257 "/ftp" is your current location
Related commands cd pwd
93
close
Use close to terminate the connection to the FTP server without exiting FTP client view.
Syntax close
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Terminate the connection to the FTP server without exiting the FTP client view. ftp> close
221-Goodbye. You uploaded 0 and downloaded 0 kbytes.
221 Logout. ftp>
Related commands disconnect
debug
Use debug to enable or disable FTP client debugging.
Syntax debug
Default
FTP client debugging is disabled.
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Usage guidelines
When FTP client debugging is enabled, executing this command disables FTP client debugging.
When FTP client debugging is disabled, executing this command enables FTP client debugging.
Examples
# Enable and then disable FTP client debugging. ftp> debug
Debugging on (debug=1). ftp> debug
94
Debugging off (debug=0).
# When the device acts as the FTP client, enable FTP client debugging and download file a.txt from the current directory of the FTP server. ftp> debug
Debugging on (debug=1). ftp> get a.txt local: a.txt remote: a.txt
---> EPRT |2|8::124|50198|
200 PORT command successful
---> RETR a.txt
150 Connecting to port 50198
226 File successfully transferred
1569 bytes received in 0.0104 seconds (147.2 kbyte/s)
Table 11 Command output
Field Description
---> EPRT |2|8::124|50198|
FTP command.
•
2
—IPv6 (1 for IPv4).
•
8::124
—IPv6 address of the FTP server.
•
50198
—Port number of the FTP server.
200 PORT command successful
Received FTP reply code. 200 represents the reply code, defined in RFC 959.
---> RETR a.txt Downloads file a.txt.
delete
Use delete to permanently delete a file on the FTP server.
Syntax delete
remotefile
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
remotefile
: Specifies the name of a file on the FTP server.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
To perform this operation, you must have delete permission on the FTP server.
Examples
# Delete file b.txt. ftp> delete b.txt
250 Deleted b.txt
95
dir
Use dir to display detailed information about the files and subdirectories in the current directory on the FTP server.
Use dir remotefile to display detailed information about a file or directory on the FTP server.
Use dir remotefile localfile to save detailed information about a file or directory on the FTP server to a local file.
Syntax dir
[ remotefile [ localfile ] ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
remotefile
: Specifies the name of a file or directory on the FTP server.
localfile
: Specifies the name of the local file used for saving the displayed information.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
In FTP client view, executing the dir command is the same as executing the ls command.
Examples
# Display detailed information about the files and subdirectories in the current directory on the FTP server. ftp> dir
150 Connecting to port 50201
-rwxr-xr-x 1 0 0 1481 Jul 7 15:36 a.txt
-rwxr-xr-x 1 0 0 0 Sep 27 2010 base.bin drwxr-xr-x 2 0 0 8192 Jul 2 14:33 diagfile drwxr-xr-x 3 0 0 8192 Jul 7 15:21 ftp
-rwxr-xr-x 1 0 0 0 Sep 27 2010 kernel.bin drwxr-xr-x 2 0 0 8192 Jul 5 09:15 logfile drwxr-xr-x 2 0 0 8192 Jul 2 14:33 seclog
-rwxr-xr-x 1 0 0 40808448 Jul 2 14:33 simware-cmw710-sys tem-a1801.bin
-rwxr-xr-x 1 0 0 3050 Jul 7 12:26 startup.cfg
-rwxr-xr-x 1 0 0 54674 Jul 4 09:24 startup.mdb
-rwxr-xr-x 1 0 0 1481 Jul 7 12:34 x.cfg
226 11 matches total
# Save detailed information about file a.txt to s.txt. ftp> dir a.txt s.txt output to local-file: s.txt ? [Y/N]y
150 Connecting to port 50203
226-Glob: a.txt
# Display the content of file s.txt.
96
ftp> bye
221-Goodbye. You uploaded 0 and downloaded 2 kbytes.
221 Logout.
<Sysname> more s.txt
-rwxr-xr-x 1 0 0 1481 Jul 7 12:34 a.txt
Related commands ls
disconnect
Use disconnect to terminate the connection to the FTP server without exiting FTP client view.
Syntax disconnect
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Terminate the connection to the FTP server without exiting the FTP client view. ftp> disconnect
221-Goodbye. You uploaded 0 and downloaded 0 kbytes.
221 Logout. ftp>
Related commands close
display ftp client source
Use display ftp client source to display the source address settings on the FTP client.
Syntax display ftp client source
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
97
Examples
# Display the source address settings on the FTP client.
<Sysname> display ftp client source
The source IP address of the FTP client is 1.1.1.1.
The source IPv6 address of the FTP client is 2001::1.
ftp
Use ftp to log in to an FTP server and enter FTP client view.
Syntax ftp
[ ftp-server [ service-port ] [ vpn-instance vpn-instance-name ] [ dscp dscp-value | source
{ interface interface-type interface-number | ip source-ip-address } ] ] *
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
ftp-server
: Specifies the IPv4 address or host name of an FTP server. A host name can be a case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits, hyphens (-), underscores (_), and dots (.).
service-port
: Specifies the TCP port number of the FTP server, in the range of 0 to 65535. The default value is 21.
vpn-instance
vpn-instance-name: Specifies the VPN instance to which the FTP server belongs. The
vpn-instance-name
argument is a case-sensitive string of 1 to 31 characters. If the FTP server belongs to the public network, do not specify this option.
dscp
dscp-value: Specifies the DSCP value for IPv4 to use in outgoing FTP packets to indicate the packet transmission priority. The value range is 0 to 63. The default is 0.
source
{ interface interface-type interface-number | ip source-ip-address }: Specifies the source address used to establish the FTP connection.
• interface interface-type interface-number: Specifies an interface by its type and number. The device will use the interface's primary IPv4 address as the source address. To establish the
FTP connection successfully, make sure the interface is up and has the primary IPv4 address configured.
• ip source-ip-address: Specifies an IPv4 address. To establish the FTP connection successfully, make sure this address is the IPv4 address of an interface in up state on the device.
Usage guidelines
This command is only applicable to IPv4 networks.
If no parameters are specified, this command enters the FTP client view without logging in to the FTP server.
If the server parameters are specified, you are prompted to enter the username and password for logging in to the FTP server.
Examples
# Log in to the FTP server 192.168.0.211. Use the source IPv4 address of 192.168.0.212 for outgoing FTP packets.
98
<Sysname>ftp 192.168.0.211 source ip 192.168.0.212
Press CTRL+C to abort.
Connected to 192.168.0.211 (192.168.0.211).
220 WFTPD 2.0 service (by Texas Imperial Software) ready for new user
User (192.168.0.211:(none)): abc
331 Give me your password, please
Password:
230 Logged in successfully
Remote system type is MSDOS. ftp>
ftp client ipv6 source
Use ftp client ipv6 source to specify the source IPv6 address for FTP packets sent to the IPv6 FTP server.
Use undo ftp client ipv6 source to restore the default.
Syntax ftp client ipv6 source
{ interface interface-type interface-number | ipv6 source-ipv6-address }
undo
ftp client ipv6 source
Default
No source address is specified for FTP packets sent to the IPv6 FTP server. The device automatically selects a source IPv6 address as defined in RFC 3484.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
interface interface-type interface-number
: Specifies an interface by its type and number. The device will use the interface's IPv6 address as the source address. For successful FTP packet transmission, make sure the interface is up and is configured with an IPv6 address.
ipv6 source-ipv6-address
: Specifies an IPv6 address. For successful FTP packet transmission, make sure this address is the IPv6 address of an interface in up state on the device.
Usages guidelines
If you execute this command multiple times, the most recent configuration takes effect.
The source address specified with the ftp ipv6 command takes precedence over the source address specified with the ftp client ipv6 source command.
The source address specified with the ftp client ipv6 source command applies to all FTP connections. The source address specified with the ftp ipv6 command applies only to the current
FTP connection.
Examples
# Specify the source IPv6 address of 2000::1 for outgoing FTP packets.
<Sysname> system–view
[Sysname] ftp client ipv6 source ipv6 2000::1
99
Related commands ftp ipv6
ftp client source
Use ftp client source to specify the source IPv4 address for FTP packets sent to the IPv4 FTP server.
Use undo ftp client source to restore the default.
Syntax ftp
client source { interface interface-type interface-number | ip source-ip-address }
undo
ftp client source
Default
No source IPv4 address is specified for FTP packets sent to the IPv4 FTP server. The device uses the primary IPv4 address of the output interface for the route to the server as the source address.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
interface interface-type interface-number
: Specifies an interface by its type and number. The device will use the interface's primary IPv4 address as the source address. For successful FTP packet transmission, make sure the interface is up and has the primary IPv4 address configured.
ip
source-ip-address: Specifies an IPv4 address. For successful FTP packet transmission, make sure this address is the IPv4 address of an interface in up state on the device.
Usages guidelines
If you execute this command multiple times, the most recent configuration takes effect.
The source address specified with the ftp command takes precedence over the source address specified with the ftp client source command.
The source address specified with the ftp client source command applies to all FTP connections.
The source address specified with the ftp command applies only to the current FTP connection.
Examples
# Specify the source IPv4 address of 192.168.20.222 for outgoing FTP packets.
<Sysname> system-view
[Sysname] ftp client source ip 192.168.20.222
Related commands ftp
ftp ipv6
Use ftp ipv6 to log in to an FTP server and enter FTP client view.
100
Syntax ftp
ipv6 [ ftp-server [ service-port ] [ vpn-instance vpn-instance-name ] [ dscp dscp-value | source
{ ipv6 source-ipv6-address | interface interface-type interface-number } ] * [ -i interface-type
interface-number
] ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
ftp-server
: Specifies the IPv6 address or host name of an FTP server. A host name can be a case-insensitive string of 1 to 253 characters. Valid characters for a host name include letters, digits, hyphens (-), underscores (_), and dots (.).
service-port
: Specifies the TCP port number of the FTP server, in the range of 0 to 65535. The default value is 21.
dscp
dscp-value: Specifies the DSCP value for IPv6 to use in outgoing FTP packets to indicate the packet transmission priority. The value range is 0 to 63. The default is 0.
source
{ ipv6 source-ipv6-address | interface interface-type interface-number }: Specifies the source address used to establish the FTP connection.
• interface interface-type interface-number: Specifies an interface by its type and number. The device will use the interface's IPv6 address as the source address. To establish the FTP connection successfully, make sure the interface is up and is configured with an IPv6 address.
• ipv6 source-ipv6-address: Specifies an IPv6 address. To establish the FTP connection successfully, make sure this address is the IPv6 address of an interface in up state on the device.
vpn-instance
vpn-instance-name: Specifies the VPN instance to which the FTP server belongs. The
vpn-instance-name
argument is a case-sensitive string of 1 to 31 characters. If the FTP server belongs to the public network, do not specify this option.
-i
interface-type interface-number: Specifies an output interface by its type and number. This option can be used only when the FTP server address is a link local address and the specified output interface has a link local address. For more information about link local addresses, see Layer 3—IP
Services Configuration Guide
.
Usage guidelines
This command is only applicable to IPv6 networks.
If no parameters are specified, this command enters the FTP client view.
If the FTP server parameters are specified, you are prompted to enter the username and password for logging in to the FTP server.
Examples
# Log in to the FTP server 2000::154.
<Sysname>ftp ipv6 2000::154
Press CTRL+C to abort.
Connected to 2000::154 (2000::154).
220 FTP service ready.
User (2000::154): root
331 Password required for root.
Password:
101
230 User logged in
Remote system type is UNIX
get
Use get to download a file from the FTP server and save the file.
Syntax get
remotefile [ localfile ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
remotefile
: Specifies the name of the file to be downloaded.
localfile
: Specifies a name for the downloaded file.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
To save the downloaded file to the working directory accessed by the ftp command, perform one of the following tasks:
•
Execute the command without specifying the localfile argument.
•
Specify a file name without the path for the localfile argument, for example, a.cfg.
To save the downloaded file to some other directory, you must specify a fully qualified file name for the localfile argument, for example, flash:/subdirectory/a.cfg.
Examples
# Download file a.txt and save it as b.txt in the working directory accessed by the ftp command. ftp> get a.txt b.txt local: b.txt remote: a.txt
150 Connecting to port 47457
226 File successfully transferred
1569 bytes received in 0.00527 seconds (290.6 kbyte/s)
# Download file a.txt to the folder test from the working directory accessed by the ftp command. ftp> get a.txt flash:/test/b.txt local: flash:/test/b.txt remote: a.txt
150 Connecting to port 47457
226 File successfully transferred
1569 bytes received in 0.00527 seconds (290.6 kbyte/s)
# (In standalone mode.) Download file a.txt to the root directory of the flash memory on the standby
MPU (in slot 1). Save the file as c.txt. ftp> get a.txt slot1#flash:/c.txt local: slot1#flash:/c.txt remote: a.txt
150 Connecting to port 47460
226 File successfully transferred
1569 bytes received in 0.0564 seconds (27.2 kbyte/s)
102
# (In IRF mode.) Download file a.txt to the root directory of the flash memory on the MPU that resides in slot 1 of member device 1. Save the file as c.txt. ftp> get a.txt chassis1#slot1#flash:/c.txt
local: chassis1#slot1#flash:/c.txt remote: a.txt
150 Connecting to port 47460
226 File successfully transferred
1569 bytes received in 0.0564 seconds (27.2 kbyte/s)
Related commands put
help
Use help to display all commands supported by an FTP client.
Use help command-name to display the help information of a command.
Syntax help
[ command-name ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
command-name
: Specifies a command supported by the FTP client.
Usage guidelines
In FTP client view, executing the help command is the same as entering?.
Examples
# Display all commands supported by the FTP client. ftp> help
Commands may be abbreviated. Commands are:
$ dir mkdir pwd status account disconnect mls quit struct append form mode quote system ascii get modtime recv sunique bell glob mput reget tenex binary hash newer rstatus trace bye help nmap rhelp type case idle nlist rename user cd image ntrans reset umask cdup lcd open restart verbose chmod ls passive rmdir ? close macdef prompt runique cr mdelete proxy send delete mdir sendport site
103
debug mget put size
# Display the help information for the dir command. ftp> help dir dir list contents of remote directory
Related commands
?
lcd
Use lcd to display the local working directory of the FTP client.
Use lcd directory to change the local working directory of the FTP client to the specified directory.
Use lcd / to change the local working directory of the FTP client to the local root directory.
Syntax lcd
[ directory | / ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
directory
: Specifies a local directory of the FTP client. There must be a slash sign (/) before the name of the storage medium, for example, /flash:/logfile.
/
: Specifies the root directory of the FTP client.
Examples
# Display the local working directory. ftp> lcd
Local directory now /flash:
# Change the local working directory to flash:/logfile. ftp> lcd /flash:/logfile
Local directory now /flash:/logfile
ls
Syntax ls
[ remotefile [ localfile ] ]
Views
Use ls to display detailed information about the files and subdirectories under the current directory on the FTP server.
Use ls remotefile to display detailed information about a file or directory on the FTP server.
Use ls remotefile localfile to save detailed information about a file or directory on the FTP server to a local file.
FTP client view
104
Predefined user roles
network-admin mdc-admin
Parameters
remotefile
: Specifies the file name or directory on the FTP server.
localfile
: Specifies the local file used to save the displayed information.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
In FTP client view, executing the ls command is the same as executing the dir command.
Examples
# Display detailed information about the files and subdirectories under the current directory on the
FTP server. ftp> ls
150 Connecting to port 50201
-rwxr-xr-x 1 0 0 1481 Jul 7 15:36 a.txt
-rwxr-xr-x 1 0 0 0 Sep 27 2010 base.bin drwxr-xr-x 2 0 0 8192 Jul 2 14:33 diagfile drwxr-xr-x 3 0 0 8192 Jul 7 15:21 ftp
-rwxr-xr-x 1 0 0 0 Sep 27 2010 kernel.bin drwxr-xr-x 2 0 0 8192 Jul 5 09:15 logfile drwxr-xr-x 2 0 0 8192 Jul 2 14:33 seclog
-rwxr-xr-x 1 0 0 40808448 Jul 2 14:33 simware-cmw710-sys tem-a1801.bin
-rwxr-xr-x 1 0 0 3050 Jul 7 12:26 startup.cfg
-rwxr-xr-x 1 0 0 54674 Jul 4 09:24 startup.mdb
-rwxr-xr-x 1 0 0 1481 Jul 7 12:34 x.cfg
226 11 matches total
# Save detailed information about file a.txt to s.txt. ftp> ls a.txt s.txt output to local-file: s.txt ? [Y/N]y
150 Connecting to port 50203
226-Glob: s.txt
# Display the content of file s.txt. ftp> bye
221-Goodbye. You uploaded 0 and downloaded 2 kbytes.
221 Logout.
<Sysname> more s.txt
-rwxr-xr-x 1 0 0 1481 Jul 7 12:34 a.txt
Related commands dir
mkdir
Use mkdir to create a subdirectory in the current directory on the FTP server.
105
Syntax mkdir
directory
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
directory
: Specifies the name of the directory to be created.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
You must have permission to perform this operation on the FTP server.
Examples
# Create subdirectory newdir in the current directory of the remote FTP server. ftp> mkdir newdir
257 "newdir" : The directory was successfully created
newer
Use newer to update a local file by using a remote file on the FTP server.
Syntax newer
remotefile [ localfile ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
remotefile
: Specifies the name of the remote file on the FTP server.
localfile
: Specifies the name of the local file to be updated.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
If the local file does not exist, this command downloads the file from the FTP server and saves it locally.
If the remote file on the FTP server is not newer than the local file, this command does not update the local file.
Examples
# Update the local file with the file a.txt on the FTP server. ftp> newer a.txt local: a.txt remote: a.txt
150 Connecting to port 63513
106
226 File successfully transferred
1573 bytes received in 0.0293 seconds (52.3 kbyte/s)
open
Use open to log in to the FTP server in FTP client view.
Syntax open
server-address [ service-port ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
server-address
: Specifies the IP address or host name of the FTP server.
service-port
: Specifies the TCP port number of the FTP server, in the range of 0 to 65535. The default value is 21.
Usage guidelines
After you issue this command, the system will prompt you to enter the username and password.
After you log in to one FTP server, you must disconnect from the server before you can use the open command to log in to another server.
Examples
# In FTP client view, log in to the FTP server 192.168.40.7.
<Sysname>ftp ftp> open 192.168.40.7
Press CTRL+C to abort.
Connected to 192.168.40.7 (192.168.40.7).
220 FTP service ready.
User (192.168.40.7:(none)): root
331 Password required for root.
Password:
230 User logged in.
Remote system type is UNIX. ftp>
passive
Use passive to set the FTP operation mode to passive.
Syntax passive
Default
The FTP operation mode is passive.
107
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Usage guidelines
FTP can operate in either of the following modes:
• Active
—The FTP server initiates the TCP connection.
• Passive
—The FTP client initiates the TCP connection.
You can use this command multiple times to change between active and passive modes.
This command is mainly used together with a firewall to control FTP session establishment between private network users and public network users.
Examples
# Set the FTP operation mode to passive. ftp> passive
Passive mode on. ftp> passive
Passive mode off.
put
Use put to upload a file on the client to the remote FTP server.
Syntax put
localfile [ remotefile ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
localfile
: Specifies the name of the local file to be uploaded.
remotefile
: Specifies the file name for saving the uploaded file on the FTP server.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
To upload a file in the current working directory, specify a file name without the path for the localfile argument, for example, a.cfg.
To upload a file in some other directory, specify a fully qualified file name for the localfile argument, for example, flash:/subdirectory/a.cfg.
Examples
# Upload the file a.txt in the working directory accessed by the ftp command. Save the file as b.txt on the FTP server. ftp> put a.txt b.txt
108
local: a.txt remote: b.txt
150 Connecting to port 47461
226 File successfully transferred
1569 bytes sent in 0.000671 seconds (2.23 Mbyte/s)
# Upload the file a.txt in the folder test from the working directory accessed by the ftp command.
Save the file as b.txt on the FTP server. ftp> put flash:/test/a.txt b.txt local: flash:/test/a.txt remote: b.txt
150 Connecting to port 47461
226 File successfully transferred
1569 bytes sent in 0.000671 seconds (2.23 Mbyte/s)
# (In standalone mode.) Upload the file a.txt in the root directory of the storage medium on the standby MPU (in slot 1). Save the file as b.txt on the FTP server. ftp> put slot1#flash:/test/a.txt b.txt local: slot1#flash:/test/a.txt remote: b.txt
150 Connecting to port 47461
226 File successfully transferred
1569 bytes sent in 0.000671 seconds (2.23 Mbyte/s)
# (In IRF mode.) Upload the file a.txt in the root directory of the storage medium on MPU 1 of member device 1. Save the file as b.txt on the FTP server. ftp> put chassis1#slot1#flash:/test/a.txt b.txt local: chassis1#slot1#flash:/test/a.txt remote: b.txt
150 Connecting to port 47461
226 File successfully transferred
1569 bytes sent in 0.000671 seconds (2.23 Mbyte/s)
Related commands get
pwd
Use pwd to display the currently accessed directory on the FTP server.
Syntax pwd
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Display the currently accessed directory on the remote FTP server. ftp> cd subdir
250 OK. Current directory is /subdir ftp> pwd
109
257 "/subdir" is your current location
quit
Use quit to terminate the connection to the FTP server and return to user view.
Syntax quit
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Examples
# Terminate the connection to the FTP server and return to user view ftp> quit
221-Goodbye. You uploaded 0 and downloaded 0 kbytes.
221 Logout.
<Sysname>
Related commands bye
reget
Use reget to get the missing part of a file from the FTP server.
Syntax reget
remotefile [ localfile ]
Views
FTP client view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
remotefile
: Specifies the name of the file on the FTP server.
localfile
: Specifies the name of the local file.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
If a file download is not completed due to network or storage space problems, use this command to get the part that has not been downloaded yet.
110
Examples
# Get the part of the s.bin file that is missing due to transmission interruption. ftp> reget s.bin local: s.bin remote: s.bin
350 Restarting at 1749706
150-Connecting to port 47429
150 38143.3 kbytes to download
226 File successfully transferred
39058742 bytes received in 66.2 seconds (576.1 kbyte/s)
rename
Use rename to rename a file.
Syntax rename
[ oldfilename [ newfilename ] ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
oldfilename
: Specifies the original file name.
newfilename
: Specifies the new file name.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Rename the file a.txt as b.txt.
•
Method 1: ftp> rename
(from-name) a.txt
(to-name) b.txt
350 RNFR accepted - file exists, ready for destination
250 File successfully renamed or moved
•
Method 2: ftp> rename a.txt
(to-name) b.txt
350 RNFR accepted - file exists, ready for destination
250 File successfully renamed or moved
•
Method 3: ftp> rename a.txt b.txt
350 RNFR accepted - file exists, ready for destination
250 File successfully renamed or moved
111
reset
Use reset to clear the reply information received from the FTP server in the buffer.
Syntax reset
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Examples
# Clear the reply information received from the FTP server. ftp> reset
restart
Use restart to specify the file retransmission offset.
Syntax restart
marker
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
marker
: Specifies the retransmission offset, in bytes.
Usage guidelines
Use this command to continue with a file transmission. The file retransmission starts from the
(offset+1)th byte.
You can perform this operation only after you log in to the FTP server.
Support for this command depends on the FTP server.
Examples
# Set retransmission offset to 2 bytes and retransmit the file h.c. The file has 82 bytes in total. ftp> restart 2 restarting at 2. execute get, put or append to initiate transfer ftp> put h.c h.c local: h.c remote: h.c
350 Restart position accepted (2).
150 Ok to send data.
226 File receive OK.
80 bytes sent in 0.000445 seconds (175.6 kbyte/s) ftp> dir
112
150 Here comes the directory listing.
-rw-r--r-- 1 0 0 80 Jul 18 02:58 h.c
rhelp
Use rhelp to display the FTP-related commands supported by the FTP server.
Use rhelp protocol-command to display the help information of an FTP-related command supported by the FTP server.
Syntax rhelp
[ protocol-command ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
protocol
-command: Specifies an FTP-related command.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Display the FTP-related commands supported by the FTP. ftp> rhelp
214-The following FTP commands are recognized
USER PASS NOOP QUIT SYST TYPE
HELP CWD XCWD PWD CDUP XCUP
XPWD LIST NLST MLSD PORT EPRT
PASV EPSV REST RETR STOR APPE
DELE MKD XMKD RMD XRMD ABOR
SIZE RNFR RNTO
4 UNIX Type: L8
Table 12 Command output
Field Description
USER Username.
PASS Password.
CWD
XCWD
PWD
CDUP
Changes the current working directory.
Extended command with the meaning of CWD.
Prints the working directory.
Changes the directory to the upper directory.
113
Field Description
XCUP Extended command with the meaning of CDUP.
XPWD Extended command with the meaning of PWD.
NLST
MLSD
PORT
EPRT
Lists brief file description.
Lists file content.
Active mode (IPv4).
Active mode (IPv6).
REST Restarts.
XMKD
XRMD
ABOR
SIZE
Extended command with the meaning of MKD.
Extended command with the meaning of RMD.
Aborts the transmission.
Size of the transmission file.
rmdir
Use rmdir to permanently delete a directory from the FTP server.
Syntax rmdir
directory
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
directory
: Specifies the name of a directory on the remote FTP server.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
114
To perform this operation, you must have delete permission on the FTP server.
Delete all files and subdirectories in a directory before you delete the directory. For more information about how to delete files, see the delete command.
The rmdir command does not delete the files of the specified directory from the recycle bin.
Examples
# Delete the empty directory subdir1. ftp>rmdir subdir1
250 The directory was successfully removed
Related commands delete
rstatus
Use rstatus to display FTP server status.
Use rstatus remotefile to display detailed information about a directory or file on the FTP server.
Syntax rstatus
[ remotefile ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
remotefile
: Specifies a directory or file on the FTP server.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Support for this command depends on the FTP server.
Examples
# Display FTP server status. ftp> rstatus
211-FTP server status:
Connected to 192.168.20.177
Logged in as root
TYPE: ASCII
No session bandwidth limit
Session timeout in seconds is 300
Control connection is plain text
Data connections will be plain text
At session startup, client count was 1
vsFTPd 2.0.6 - secure, fast, stable
211 End of status
115
Table 13 Command output
Filed Description
211-FTP server status:
Beginning of the display of FTP server status, where
211 specifies the FTP command.
Connected to 192.168.20.177
Logged in as root
TYPE: ASCII
Session timeout in seconds is 300
Control connection is plain text
Data connections will be plain text
At session startup, client count was 1
IP address of the FTP client.
Login username root.
File transfer mode ASCII.
Timeout interval is 300 seconds.
Control connection type is plain text.
Data connection type is plain text.
FTP connection number is 1. vsFTPd 2.0.6 - secure, fast, stable
211 End of status
# Display file a.txt. ftp> rstatus a.txt
FTP version is 2.0.6.
End of the display of FTP server status.
213-Status follows:
-rw-r--r-- 1 0 0 80 Jul 18 02:58 a.txt
213 End of status
Table 14 Command output
Field Description
213-Status follows: Beginning of the display of the file, where 213 specifies the FTP command.
-rw-r--r--
1
0
0
80
Jul 18 02:58
The first bit specifies the file type.
•
-—Common.
•
B—Block.
• c—Character.
• d—Directory.
• l—Symbol connection file.
• p—Pipe.
• s—socket.
The second bit through the tenth bit are divided into three groups. Each group contains three characters, representing the access permission of the owner, group, and other users.
•
-—No permission.
• r—Read permission.
• w—Write permission.
• x—Execution permission.
Number of connections.
Name of the file owner.
Group number of the file owner.
File size, in bytes.
Date and time when the file was most recently modified.
116
Field Description
213 End of status End of the display of the file information.
status
Use status to display FTP status.
Syntax status
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Examples
# Display FTP status. ftp> status
Connected to 192.168.1.56.
No proxy connection.
Not using any security mechanism.
Mode: stream; Type: ascii; Form: non-print; Structure: file
Verbose: on; Bell: off; Prompting: on; Globbing: off
Store unique: off; Receive unique: off
Case: off; CR stripping: on
Ntrans: off
Nmap: off
Hash mark printing: off; Use of PORT cmds: on
Table 15 Command output
Field Description
Connected to 192.168.1.56.
IP address of the FTP server that is connected to the
FTP client.
Verbose: on; Bell: off; Prompting: on; Globbing: off Displays debugging information.
Store unique: off; Receive unique: off
The name of the file on the FTP server is unique and the name of the local file is unique.
Case: off; CR stripping: on
Ntrans: off
Nmap: off
Hash mark printing: off; Use of PORT cmds: on
Does not support obtaining multiple files once and deletes "\r" when downloading text files.
Does not use the input-output transmission table.
The file name does not use the input-to-output mapping template.
Does not end with a pound sign (#) and uses
"PORT" data transmission.
117
system
Use system to display the system information of the FTP server.
Syntax system
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Usage guidelines
You can perform this operation only after you log in to the FTP server.
Examples
# Display the system information of the FTP server. ftp> system
5 UNIX Type: L8
user
Use user to change to another user account after login.
Syntax user
username [ password ]
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
username
: Specifies the username of the target user account.
password
: Specifies the password of the target user account.
Usage guidelines
You can perform this operation only after you log in to the FTP server.
The username and password of the target user account must have already been configured.
Otherwise, the user account change operation fails and the FTP connection is closed.
Examples
# After logging in to the FTP server, use the username ftp and password 123456 to log in again to the FTP server.
•
Method 1: ftp> user ftp 123456
331 Password required for ftp.
230 User logged in.
118
•
Method 2: ftp> user ftp
331 Password required for ftp.
Password:
230 User logged in.
verbose
Use verbose to enable or disable the device to display detailed information about FTP operations.
Syntax verbose
Default
The device displays detailed information about FTP operations.
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Usage guidelines
This command affects only the current FTP session.
Examples
# Disable the device from displaying detailed information about FTP operations. ftp> verbose
Verbose mode off.
# Execute the get command. ftp> get a.cfg 1.cfg
# Enable the device to display detailed information about FTP operations. ftp> verbose
Verbose mode on.
# Execute the get command. ftp> get a.cfg 2.cfg
227 Entering Passive Mode (192,168,1,58,68,14)
150-Accepted data connection
150 The computer is your friend. Trust the computer
226 File successfully transferred
3796 bytes received in 0.00762 seconds (486.5 kbyte/s)
?
Use ?
to display all commands supported by an FTP client.
Use ?
command-name to display the help information for a command.
Syntax
?
[ command-name ]
119
Views
FTP client view
Predefined user roles
network-admin mdc-admin
Parameters
command-name
: Specifies a command supported by the FTP client.
Usage guidelines
In FTP client view, entering ? is the same as executing the help command.
Examples
# Display all commands supported by the FTP client. ftp> ?
Commands may be abbreviated. Commands are:
$ dir mkdir pwd status account disconnect mls quit struct append form mode quote system ascii get modtime recv sunique bell glob mput reget tenex binary hash newer rstatus trace bye help nmap rhelp type case idle nlist rename user cd image ntrans reset umask cdup lcd open restart verbose chmod ls passive rmdir ? close macdef prompt runique cr mdelete proxy send delete mdir sendport site debug mget put size
# Display the help information for the dir command. ftp> ? dir dir list contents of remote directory
Related commands help
120
TFTP commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide.
TFTP is not supported in FIPS mode.
tftp
Use tftp to download a file from a TFTP server or upload a file to a TFTP server in an IPv4 network.
Syntax
tftp tftp-server
{ get | put | sget } source-filename [ destination-filename ] [ vpn-instance
vpn-instance-name
] [ dscp dscp-value | source { interface interface-type interface-number | ip
source-ip-address
} ] *
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
tftp-server
: Specifies the IPv4 address or host name of a TFTP server. The host name can be a case-insensitive string of 1 to 253 characters and can contain only letters, digits, hyphens (-), underscores (_), and dots (.).
get
: Downloads a file and writes the file directly to the destination folder. If the destination folder already has a file with the same name, the system deletes the existing file before starting the download operation. The existing file is permanently deleted even if the download operation fails.
put
: Uploads a file.
sget
: Downloads a file and saves the file to memory before writing it to the destination folder. The system starts to write the file to the destination folder only after the file is downloaded and saved to memory successfully. If the destination folder already has a file with the same name, the system overwrites the existing file. If the download or save-to-memory operation fails, the existing file in the destination folder is not overwritten.
source-filename
: Specifies the source file name, a case-insensitive string of 1 to 1 to 255 characters.
destination-filename
: Specifies the destination file name, a case-insensitive string of 1 to 255 characters. If this argument is not specified, the file uses the source file name.
vpn-instance
vpn-instance-name: Specifies the VPN instance to which the TFTP server belongs.
The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the TFTP server belongs to the public network, do not specify this option.
dscp
dscp-value: Specifies the DSCP value for IPv4 to use for outgoing TFTP packets to indicate the packet transmission priority. The value range is 0 to 63. The default is 0.
source
{ interface interface-type interface-number | ip source-ip-address }: Specifies the source address for outgoing TFTP packets. If you do not specify this option, the device uses the primary
IPv4 address of the output interface for the route to the TFTP server as the source address.
• interface interface-type interface-number: Specifies an interface by its type and number. The device will use the interface's primary IPv4 address as the source IPv4 address. For successful
121
TFTP packet transmission, make sure the interface is up and has the primary IPv4 address configured.
• ip source-ip-address: Specifies an IPv4 address. For successful TFTP packet transmission, make sure this address is the IPv4 address of an interface in up state on the device.
Usages guidelines
The source address specified with the tftp command takes precedence over the source address specified with the tftp client source command.
The source address specified with the tftp client source command applies to all TFTP connections.
The source address specified with the tftp command applies only to the current TFTP connection.
Examples
# Download the new.bin file from the TFTP server at 192.168.1.1 and save it as new.bin.
<Sysname> tftp 192.168.1.1 get new.bin
Press CTRL+C to abort.
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 13.9M 100 13.9M 0 0 1206k 0 0:00:11 0:00:11 --:--:-- 1206k
<System>
Table 16 Command output
Field Description
% Percentage of file transmission progress.
Total Size of files to be transmitted, in bytes.
%
Received
%
Xferd
Average Dload
Speed Upload
Related commands tftp client source
Percentage of received file size to total file size.
Received file size, in bytes.
Percentage of sent file size to total file size.
Sent file size, in bytes.
Average download speed, in bps.
Average upload speed, in bps.
tftp client ipv6 source
Use tftp client ipv6 source to specify the source IPv6 address for TFTP packets sent to the IPv6
TFTP server.
Use undo tftp client ipv6 source to restore the default.
Syntax tftp client ipv6 source
{ interface interface-type interface-number | ipv6 source-ipv6-address }
undo
tftp client ipv6 source
Default
No source address is specified for TFTP packets sent to the IPv6 TFTP server. The device automatically selects a source IPv6 address as defined in RFC 3484.
122
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
interface interface-type interface-number
: Specifies an interface by its type and number. The device will use the interface's IPv6 address as the source address. For successful TFTP packet transmission, make sure the interface is up and is configured with an IPv6 address.
ipv6 source-ipv6-address
: Specifies an IPv6 address . For successful TFTP packet transmission, make sure this address is the IPv6 address of an interface in up state on the device.
Usages guidelines
If you execute this command multiple times, the most recent configuration takes effect.
The source address specified with the tftp ipv6 command takes precedence over the source address specified with the tftp client ipv6 source command.
The source address specified with the tftp client ipv6 source command applies to all TFTP connections. The source address specified with the tftp ipv6 command applies only to the current
TFTP connection.
Examples
# Specify the source IPv6 address of 2000::1 for outgoing TFTP packets.
<Sysname> system–view
[Sysname] tftp client ipv6 source ipv6 2000::1
Related commands tftp ipv6
tftp client source
Use tftp client source to specify the source IPv4 address for TFTP packets sent to the IPv4 TFTP server.
Use undo tftp client source to restore the default.
Syntax tftp
client source { interface interface-type interface-number | ip source-ip-address }
undo
tftp client source
Default
No source IPv4 address is specified for TFTP packets sent to the IPv4 TFTP server. The device uses the primary IPv4 address of the output interface for the route to the server as the source address.
Views
System view
Predefined user roles
network-admin mdc-admin
123
Parameters
interface interface-type interface-number
: Specifies an interface by its type and number. The device will use the interface's primary IPv4 address as the source address. For successful TFTP packet transmission, make sure the interface is up and has the primary IPv4 address configured.
ip
source-ip-address: Specifies an IPv4 address. For successful TFTP packet transmission, make sure this address is the IPv4 address of an interface in up state on the device.
Usages guidelines
If you execute this command multiple times, the most recent configuration takes effect.
The source address specified with the tftp command takes precedence over the source address specified with the tftp client source command.
The source address specified with the tftp client source command applies to all TFTP connections.
The source address specified with the tftp command applies only to the current TFTP connection.
Examples
# Specify the source IP address of 192.168.20.222 for outgoing TFTP packets.
<Sysname> system-view
[Sysname] tftp client source ip 192.168.20.222
Related commands tftp
tftp ipv6
Use tftp ipv6 to download a file from a TFTP server or upload a file to a TFTP server in an IPv6 network.
Syntax
tftp ipv6 tftp-server
[ -i interface-type interface-number ] { get | put | sget } source-filename
[ destination-filename ] [ vpn-instance vpn-instance-name ] [ dscp dscp-value | source { interface
interface-type interface-number
| ipv6 source-ipv6-address } ] *
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
tftp-server
: Specifies the IPv6 address or host name of a TFTP server. The host name can be a case-insensitive string of 1 to 253 characters and can contain only letters, digits, hyphens (-), underscores (_), and dots (.).
-i
interface-type interface-number: Specifies an output interface by its type and number. This option can be used only when the TFTP server address is a link local address and the specified output interface has a link local address. For link local address configuration, see Layer 3—IP Services
Configuration Guide
.
get
: Downloads a file and writes the file directly to the destination folder. If the destination folder already has a file with the same name, the system deletes the existing file before starting the download operation. The existing file is permanently deleted even if the download operation fails.
put
: Uploads a file.
124
sget
: Downloads a file and saves the file to memory before writing it to the destination folder. The system starts to write the file to the destination folder only after the file is downloaded and saved to memory successfully. If the destination folder already has a file using the same name, the system overwrites the existing file. If the download or save-to-memory operation fails, the existing file in the destination folder is not overwritten.
source-file
: Specifies the source file name, a case-insensitive string of 1 to 255 characters.
destination-file
: Specifies the destination file name, a case-insensitive string of 1 to 255 characters. If this argument is not specified, the file uses the source file name.
vpn-instance
vpn-instance-name: Specifies the VPN instance to which the TFTP server belongs.
The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the TFTP server belongs to the public network, do not specify this option.
dscp
dscp-value: Specifies the DSCP value for IPv6 to use in outgoing TFTP packets to indicate the packet transmission priority. The value range is 0 to 63. The default is 0.
source
{ interface interface-type interface-number | ipv6 source-ipv6-address }: Specifies the source address for outgoing TFTP packets. If you do not specify this option, the device uses the primary IPv6 address of the route for the route to the TFTP server as the source address.
• interface interface-type interface-number: Specifies an interface by its type and number. The device will use the interface's IPv6 address as the source IPv6 address. For successful TFTP packet transmission, make sure the interface is up and is configured with an IPv6 address.
• ipv6 source-ipv6-address: Specifies an IPv6 address. For successful TFTP packet transmission, make sure this address is the IPv6 address of an interface in up state on the device.
Usages guidelines
The source address specified with the tftp ipv6 command takes precedence over the source address specified with the tftp client ipv6 source command.
The source address specified with the tftp client ipv6 source command applies to all TFTP connections. The source address specified with the tftp ipv6 command applies only to the current
TFTP connection.
Examples
# Download the new.bin file from the TFTP server at 2001::1 and save it as new.bin.
<Sysname> tftp ipv6 2001::1 get new.bin new.bin
Press CTRL+C to abort.
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 13.9M 100 13.9M 0 0 1206k 0 0:00:11 0:00:11 --:--:-- 1206k
For more information about the command output, see Table 16
.
tftp-server acl
Use tftp-server acl to use an ACL to control the device's access to TFTP servers in an IPv4 network.
Use undo tftp-server acl to restore the default.
Syntax tftp-server acl
acl-number
undo
tftp-server acl
Default
No ACL is used to control the device's access to TFTP servers.
125
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
acl-number
: Specifies the number of a basic ACL, in the range of 2000 to 2999.
Usages guidelines
You can use an ACL to deny or permit the device's access to specific TFTP servers.
Examples
# Allow the device to access only the TFTP server at 1.1.1.1.
<Sysname> System-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 1.1.1.1 0
[Sysname-acl-basic-2000] quit
[Sysname] tftp-server acl 2000
tftp-server ipv6 acl
Use tftp-server ipv6 acl to use an ACL to control the device's access to TFTP servers in an IPv6 network.
Use undo tftp-server ipv6 acl to restore the default.
Syntax tftp-server ipv6
acl acl-number
undo
tftp-server ipv6 acl
Default
No ACL is used to control the device's access to TFTP servers.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
acl-number
: Specifies the number of a basic ACL, in the range of 2000 to 2999.
Usages guidelines
You can use an ACL to deny or permit the device's access to specific TFTP servers.
Examples
# Allow the device to access only the TFTP server at 2001::1.
<Sysname> System-view
[Sysname] acl ipv6 number 2001
[Sysname-acl6-basic-2001] rule permit source 2001::1/128
126
[Sysname-acl6-basic-2001] quit
[Sysname] tftp-server ipv6 acl 2001
127
File system management commands
IMPORTANT:
• Before managing storage media, file systems, directories, and files, make sure you know the possible impacts.
• A file or directory whose name starts with a period (.) is considered a hidden file or directory. Do not give a common file or directory a name that starts with a period.
• Some system files and directories are hidden.
A file name must be specified in one of the file name formats allowed. For more information, see
Fundamentals Configuration Guide
.
Before you use the copy, delete, fixdisk, format, gunzip, gzip, mkdir, move, rename, rmdir, or
undelete
command on a USB disk, make sure the disk is not write protected.
You cannot access a storage medium that is being partitioned, or a file system that is being formatted or repaired. To access a storage medium after it is partitioned or a file system after it is formatted or repaired, use one of the following methods:
•
Use the absolute path to specify a file or directory. For example, use the dir flash:/ command to display the files and directories in the flash: file system.
•
Use the cd command to change the working directory to the root directory of the file system before accessing a file or directory in the file system. For example, to display the files and directories in the root directory of the flash: file system, perform the following tasks:
a.
Use the cd flash:/ command to change the working directory to the root directory of the file system.
b.
Execute the dir command.
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide.
cd
Use cd to change the current working directory.
Syntax cd
{ directory | .. }
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
directory
: Specifies the destination directory.
..
: Specifies the parent directory. If the current working directory is the root directory, an error message appears when you execute the cd .. command. No online help information is available for this keyword.
128
Examples
# Access the test directory after logging in to the device.
<Sysname> cd test
# Return to the upper directory.
<Sysname> cd ..
# (In standalone mode.) Change to the test directory in the root directory of the active MPU:
1.
Display the number of the slot where the standby MPU resides.
Slot No. Brd Type Brd Status Subslot Sft Ver Patch Ver
0 LSQM2MPUD0 Master 0 7500-7178 None
1 NONE Absent 0 NONE None
2 LSQ1GP48EB Normal 0 7500-7178 None
3 NONE Absent 0 NONE None
4 NONE Absent 0 NONE None
5 NONE Absent 0 NONE None
6 NONE Absent 0 NONE None
7 NONE Absent 0 NONE None
The output shows that the slot number of the standby MPU is 1.
2.
Access the root directory of the flash memory on the standby MPU.
<Sysname> cd slot1#flash:/
3.
Change to the test directory in the root directory of the active MPU.
<Sysname> cd flash:/test
# (In IRF mode.) Change to the root directory of the flash memory on the global standby MPU that resides in slot 1 of member device 2. Then, change to the test directory in the root directory of the flash memory on the global active MPU:
4.
Display the member IDs and slot numbers of all MPUs.
<Sysname> display irf
MemberID Slot Role Priority CPU-Mac Description
*+1 7 Master 1 00e0-fc0f-8c08 ---
--------------------------------------------------
* indicates the device is the master.
+ indicates the device through which the user logs in.
The Bridge MAC of the IRF is: 0000-fc00-2500
Auto upgrade : yes
Mac persistent : always
Domain ID : 0
Auto merge : yes
The output shows that the IRF fabric has two members and four MPUs.
{
The global active MPU resides in slot 5 of member device 3.
{
The three global standby MPUs reside in slot 0 and slot 1 of member device 2, and slot 6 of member device 3.
5.
Access the test directory in the root directory of the flash memory on the global active MPU.
<Sysname> cd flash:/test
6.
Change to the root directory of the flash memory on the global standby MPU that resides in slot
1 of member device 2.
<Sysname> cd chassis2#slot1#flash:/
7.
Change to the test directory in the root directory of the flash memory on the global active MPU.
129
<Sysname> cd flash:/
copy
Use copy to copy a file.
Syntax
In non-FIPS mode:
copy source-file
{ dest-file | dest-directory } [ vpn-instance vpn-instance-name ] [ source interface
interface-type interface-number
]
In FIPS mode:
copy source-file
{ dest-file | dest-directory }
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
source-file
: Specifies the name or URL of the file to be copied in non-FIPS mode, and specifies the name of the file to be copied in FIPS mode. If the file resides on an FTP, TFTP, or HTTP server rather than on the device, specify the URL of the file. Whether a URL is case sensitive depends on the server.
dest-file
: Specifies the name or URL for the destination file in non-FIPS mode, and specifies the name for the destination file in FIPS mode. To copy the source file to an FTP, TFTP, or HTTP server, specify a URL. Whether a URL is case sensitive depends on the server.
dest-directory
: Specifies the destination directory or URL in non-FIPS mode, and specifies the destination directory in FIPS mode. To copy the source file to an FTP, TFTP, or HTTP server, specify a URL. The device copies the source file to the destination location and saves the file with its original file name. Whether a URL is case sensitive depends on the server.
vpn-instance vpn-instance-name
: Specifies the MPLS L3VPN instance to which the destination
FTP, TFTP, or HTTP server belongs. The vpn-instance-name argument represents the VPN instance name, a case-sensitive string of 1 to 31 characters. If the server belongs to the public network, do not specify this option.
source interface
interface-type interface-number: Specifies the source interface used to connect to the server. After you specify the source interface, the device uses the primary IP address of the source interface as the source IP address for outgoing packets. If you do not specify this option, the device uses the outgoing interface as the source interface.
Usage guidelines
In FIPS mode, the copy command can only copy a local file and save it locally.
In non-FIPS mode, you can use the copy command to perform the following tasks:
•
Copy a local file and save it locally.
•
Copy a local file and save it to an FTP or TFTP server.
•
Copy a file from an FTP, TFTP, or HTTP server and save it locally.
To specify a file or directory, use the following guidelines:
130
Remarks
On the device
Use the file name guidelines in
Fundamentals Configuration Guide
.
N/A
On an FTP server
On a TFTP server
Enter the URL in the format of
ftp://FTP
username
[:password]@server
address
[:port number]/file path[/file
name
].
Enter the URL in the format of
tftp://server address
[:port
number
]/file path[/file name].
The username and password must be the same as the username and password configured on the FTP server. If the server authenticates users only by the username, you are not required to enter the password.
For example, to use the username a and password 1 and specify the startup.cfg file in the authorized working directory on the FTP server
1.1.1.1, enter ftp://a:[email protected]/startup.cfg.
To specify an IPv6 address, enclose the IPv6 address in square brackets ([ ]), for example, ftp://test:test@[2001::1]:21/test.cfg.
For example, to specify the startup.cfg file in the working directory on TFTP server 1.1.1.1, enter the URL tftp://1.1.1.1/startup.cfg.
To enter an IPv6 address, enclose the IPv6 address in square brackets ([ ]), for example, tftp://[2001::1]:21/test.cfg.
On an HTTP server
Enter the URL in the format of
http://
[HTTP
username
[:password]@ ]server
address
[:port number]/filepath[/file
name
].
The username and password in the URL must be the same as the username and password configured on the server.
If only the username is required for authentication, you do not need to enter the password. If authentication is not required, you do not need to enter the username or password.
For example, the startup.cfg file is saved in the authorized directory on the HTTP server at
1.1.1.1. The HTTP account username and password are a and 1, respectively. To copy the file, enter the URL http://a:[email protected]/startup.cfg.
If authentication is not required, enter the URL http://1.1.1.1/startup.cfg.
To enter an IPv6 address, enclose the IPv6 address in square brackets ([ ]), for example, http://test:test@[2001::1]:21/test.cfg.
Examples
# Copy the test.cfg file in the current directory and save it to the current directory as
testbackup.cfg
.
<Sysname> copy test.cfg testbackup.cfg
Copy flash:/test.cfg to flash:/testbackup.cfg? [Y/N]:y
Copying file flash:/test.cfg to flash:/testbackup.cfg...Done.
# Copy test.cfg from the working directory on FTP server 1.1.1.1. Save the copy to the local current directory as testbackup.cfg. In this example, the FTP username and password are user and
private
.
<Sysname> copy ftp://user:[email protected]/test.cfg testbackup.cfg
Copy ftp://user:[email protected]/test.cfg to flash:/testbackup.cfg? [Y/N]:y
Copying file ftp://user:[email protected]/test.cfg to flash:/testbackup.cfg... Done.
# Copy test.cfg from the current directory. Save the copy to the working directory on FTP server
1.1.1.1 as testbackup.cfg. In this example, the FTP username and password are user and private, respectively.
131
<Sysname> copy test.cfg ftp://user:[email protected]/testbackup.cfg
Copy flash:/test.cfg to ftp://user:[email protected]/testbackup.cfg? [Y/N]:y
Copying file flash:/test.cfg to ftp://user:[email protected]/testbackup.cfg... Done.
# Copy test.cfg from the working directory on TFTP server 1.1.1.1. Save the copy to the local current directory as testbackup.cfg.
<Sysname> copy tftp://1.1.1.1/test.cfg testbackup.cfg
Copy tftp://1.1.1.1/test.cfg to flash:/testbackup.cfg? [Y/N]:y
Copying file tftp://1.1.1.1/test.cfg to flash:/testbackup.cfg... Done.
# Copy test.cfg from the current directory. Save the copy to the working directory on TFTP server
1.1.1.1 as testbackup.cfg.
<Sysname> copy test.cfg tftp://1.1.1.1/testbackup.cfg
Copy flash:/test.cfg to tftp://1.1.1.1/testbackup.cfg? [Y/N]:y
Copying file flash:/test.cfg to tftp://1.1.1.1/testbackup.cfg... Done.
# Copy test.cfg from the working directory on FTP server 2001::1. Save the copy to the local current directory as testbackup.cfg. In this example, the FTP username and password are user and
private
, respectively.
<Sysname> copy ftp://user:private@[2001::1]/test.cfg testbackup.cfg
Copy ftp://user:private@[2001::1]/test.cfg to flash:/testbackup.cfg? [Y/N]:y
Copying file ftp://user:private@[2001::1]/test.cfg to flash:/testbackup.cfg... Done.
# Copy test.cfg from the working directory on TFTP server 2001::1. Save the copy to the local current directory as testbackup.cfg.
<Sysname> copy tftp://[2001::1]/test.cfg testbackup.cfg
Copy tftp://[2001::1]/test.cfg to flash:/testbackup.cfg? [Y/N]:y
Copying file tftp://[2001::1]/test.cfg to flash:/testbackup.cfg... Done.
# (In standalone mode.) Copy the active MPU's configuration file test.cfg to the root directory of the flash memory on the standby MPU.
<Sysname> copy test.cfg slot1#flash:/
Copy flash:/test.cfg to slot1#flash:/test.cfg? [Y/N]:y
Copying file flash:/test.cfg to slot1#flash:/test.cfg...Done.
# (In IRF mode.) Copy a configuration file of the global active MPU. Save the copy to the root directory of the flash memory on the global standby MPU that resides in slot 1 of member device 1.
<Sysname> copy test.cfg chassis1#slot1#flash:/
Copy flash:/test.cfg to chassis1#slot1#flash:/test.cfg? [Y/N]:y
Copying file flash:/test.cfg to chassis1#slot1#flash:/test.cfg...Done.
# (In IRF mode.) Copy a configuration file of the global standby MPU that resides in slot 1 of member device 1. Save the copy to the root directory of the flash memory on the global standby MPU that resides in slot 1 of member device 2.
<Sysname> copy chassis1#slot1#flash:/test.cfg chassis2#slot1#flash:/
Copy chassis1#slot1#flash:/test.cfg to chassis2#slot1#flash:/test.cfg? [Y/N]:y
Copying file chassis1#slot1#flash:/test.cfg to chassis2#slot1#flash:/test.cfg...Done.
delete
Use delete to delete a file.
Syntax delete
[ /unreserved ] file
132
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
/unreserved: Permanently deletes the specified file. If you do not specify this keyword, the command moves the file to the recycle bin.
file
: Specifies the name of the file to be deleted. Asterisks (*) are acceptable as wildcards. For example, to remove files with the .txt extension in the current directory, enter delete *.txt.
Usage guidelines
Use the delete /unreserved file command with caution. You cannot restore a file that was deleted with this command.
The delete file command (without /unreserved) moves the specified file to the recycle bin, except in the following two situations, where the file is permanently deleted:
•
The device is running out of storage space.
•
You are logged in to the default MDC and are using this command to delete a file from a non-default MDC.
A file moved to the recycle bin can be restored by using the undelete command.
Do not use the delete command to delete files from the recycle bin. To delete files from the recycle bin, use the reset recycle-bin command.
If you delete two files that have the same name from different directories, both files are retained in the recycle bin. If you successively delete two files that have the same name from the same directory, only the most recently deleted file is retained in the recycle bin.
Examples
# (In standalone mode.) Remove file 1.cfg from the root directory of the active MPU's flash memory.
<Sysname> delete 1.cfg
Delete flash:/1.cfg? [Y/N]:y
Deleting file flash:/1.cfg...Done.
# (In standalone mode.) Permanently delete file 2.cfg from the root directory of the active MPU's flash memory.
<Sysname> delete /unreserved 2.cfg
The file cannot be restored. Delete flash:/2.cfg? [Y/N]:y
Deleting the file permanently will take a long time. Please wait...
Deleting file flash:/2.cfg...Done.
# (In standalone mode.) Remove file 1.cfg from the root directory of the flash memory on the standby
MPU (in slot 1).
•
Method 1:
<Sysname> delete slot1#flash:/1.cfg
Delete slot1#flash:/1.cfg? [Y/N]:y
Deleting file slot1#flash:/1.cfg...Done.
•
Method 2:
<Sysname> cd slot1#flash:/
<Sysname> delete 1.cfg
Delete slot1#flash:/1.cfg? [Y/N]:y
133
Deleting file slot1#flash:/1.cfg...Done.
# (In IRF mode.) Remove file 1.cfg from the root directory of the flash memory on the global active
MPU.
<Sysname> delete 1.cfg
Delete flash:/1.cfg? [Y/N]:y
Deleting file flash:/1.cfg...Done.
# (In IRF mode.) Permanently delete file 2.cfg from the root directory of the flash memory on the global active MPU.
<Sysname> delete /unreserved 2.cfg
The file cannot be restored. Delete flash:/2.cfg? [Y/N]:y
Deleting the file permanently will take a long time. Please wait...
Deleting file flash:/2.cfg...Done.
# (In IRF mode.) Remove file 1.cfg from the root directory of the flash memory on the global standby
MPU that resides in slot 1 of member device 1.
•
Method 1:
<Sysname> delete chassis1#slot1#flash:/1.cfg
Delete chassis1#slot1#flash:/1.cfg? [Y/N]:y
Deleting file chassis1#slot1#flash:/1.cfg...Done.
•
Method 2:
<Sysname> cd chassis1#slot1#flash:/
<Sysname> delete 1.cfg
Delete chassis1#slot1#flash:/1.cfg? [Y/N]:y
Deleting file chassis1#slot1#flash:/1.cfg...Done.
Related commands undelete reset recycle-bin
dir
Use dir to display files or directories.
Syntax dir
[ /all ] [ file | directory | /all-filesystems ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
/all
: Displays all files and directories in the current directory, visible or hidden. If you do not specify this option, only visible files and directories are displayed.
file
: Displays a specific file. This argument can use the asterisk (*) as a wildcard. For example, to display files with the .txt extension in the current directory, enter dir *.txt.
directory
: Displays a specific directory.
/all-filesystems
: Displays files and directories in the root directories of all file systems on the device.
134
Usage guidelines
If no option is specified, the command displays all visible files and directories in the current directory.
The directory name of the recycle bin is .trash. To display files in the recycle bin, use either of the following methods:
•
Execute the dir /all
.trash command.
•
Execute the cd .trash command and then the dir command.
Examples
# (In standalone mode.) Display information about all files and directories in the current directory.
<Sysname> dir /all
Directory of flash:/
...
# (In standalone mode.) Display files and directories in the root directories of all file systems on the device.
<Sysname> dir /all-filesystems
Directory of flash:/
...
Directory of slot7#flash:/
...
# (In standalone mode.) Display information about all files and directories in the file systems of the standby MPU (in slot 1).
<Sysname> cd slot1#flash:/
<Sysname> dir /all
Directory of slot1#flash:/
...
# (In IRF mode.) Display information about all files and directories in the file systems of the global active MPU.
<Sysname> dir /all
Directory of flash:/
...
# (In IRF mode.) Display files and directories in the root directory of every file system in the IRF fabric.
<Sysname> dir /all-filesystems
Directory of flash:/
...
Directory of chassis1#slot1#flash:/
...
# (In IRF mode.) Display information about all files and directories in the file systems of the global standby MPU that resides in slot 1 of member device 1.
•
Method 1:
<Sysname> dir /all chassis1#slot1#flash:/
Directory of chassis1#slot1#flash:/
...
•
Method 2:
<Sysname> cd chassis1#slot1#flash:/
<Sysname> dir /all
Directory of chassis1#slot1#flash:/
135
...
Table 17 Command output
Field Description
Directory of Current directory.
0 -rwh 3144 Apr 26
2008 13:45:28 xx.xx
File or directory information:
•
0
—File or directory number, which is automatically allocated by the system.
•
-rwh
—Attributes of the file or directory. The first character is the directory indicator ( d for directory and – for file). The second character indicates whether the file or directory is readable ( r for readable). The third character indicates whether the file or directory is writable ( w for writable). The fourth character indicates whether the file or directory is hidden ( h for hidden, - for visible). Modifying, renaming, or deleting hidden files might affect functions.
•
3144
—File size in bytes. For a directory, a hyphen (-) is displayed.
•
Apr 26 2008 13:45:28
—Last date and time when the file or directory was modified.
•
xx.xx
—File or directory name.
fdisk
Use fdisk to partition a storage medium.
Syntax fdisk
medium [ partition-number ]
Views
User view
Predefined user roles
network-admin
Parameters
medium:
Specifies the name of the storage medium to be partitioned.
partition-number:
Specifies the number of partitions, in the range of 1 to 4. If you specify this argument, the storage medium is divided evenly into the specified number of partitions. To customize the sizes of partitions, do not provide this argument.
Usage guidelines
This command is supported only on the default MDC.
The flash memory cannot be partitioned. A partition cannot be partitioned.
The actual partition size and the specified partition size might have a difference of less than 5% of the storage medium's total size.
Before partitioning a USB disk, perform the following tasks:
•
Back up the files in the storage medium. The partition operation clears all data on the medium.
•
Make sure no other users are accessing the medium.
•
Make sure the USB disk to be partitioned is not write protected. If the USB disk is write protected, the operation will fail, and you must remount or reinstall the disk to restore access to the USB disk.
136
Examples
# Divide the USB disk on the device evenly into three partitions.
<Sysname> fdisk usba: 3
Capacity of usba: : 245M bytes usba: will be divided into the following partition(s):
DeviceName Capacity usba0: 78MB usba1: 78MB usba2: 88MB
All data on usba : will be lost, continue? [Y/N]:y
Partitioning usba:...Done.
# Divide the USB disk on the device into one partition.
<Sysname> fdisk usba:
Capacity of usba: : 245M bytes
Partition 1 (32MB~213MB, 245MB. Press CTRL+C to quit or Enter to use all availab le space):
// Press Enter or enter 245. usba: will be divided into the following partition(s):
DeviceName Capacity usba0: 245MB
All data on usba: will be lost, continue? [Y/N]:y
Partitioning usba:....... Done.
# Divide the USB disk on the device into three partitions and specify the size for each partition:
<Sysname> fdisk usba:
Capacity of usba: : 245M bytes
Partition 1 (32MB~213MB, 245MB. Press CTRL+C to quit or Enter to use all availab le space): 128
// Enter 128 to set the size of the first partition to 128 MB.
Partition 2 (32MB~85MB, 117MB. Press CTRL+C to quit or Enter to use all availabl e space): 31
// Enter 31 to set the size of the second partition to 31 MB.
The partition size must be greater than or equal to 32MB.
Partition 2 (32MB~85MB, 117MB. Press CTRL+C to quit or Enter to use all availabl e space): 1000
// Enter 1000 to set the size of the second partition to 1000 MB.
The partition size should be less than or equal to 117MB.
Partition 2 (32MB~85MB, 117MB. Press CTRL+C to quit or Enter to use all availabl e space): 56
// Enter 56 to set the size of the second partition to 56 MB.
Partition 3 (61MB. Press CTRL+C to quit or Enter to use all available space): 61
// Press Enter to assign the remaining space to the third partition. usba: will be divided into the following partition(s):
DeviceName Capacity usba0: 125MB usba1: 54MB usba2: 65MB
137
All data on usba: will be lost, continue? [Y/N]:y
Partitioning usba:............ Done.
file prompt
Use file prompt to set the operation mode for files and directories.
Use undo file prompt to restore the default.
Syntax file prompt
{ alert | quiet }
undo file prompt
Default
The operation mode is alert. The system prompts for confirmation when you perform a destructive file or directory operation.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters alert
: Prompts for confirmation when a destructive file or directory operation is being performed.
quiet
: Gives no confirmation prompt for file or directory operations.
Usage guidelines
In quiet mode, the system does not prompt for confirmation when a user performs a file or directory operation. The alert mode provides an opportunity to cancel a disruptive operation.
Examples
# Set the file and directory operation mode to alert.
<Sysname> system-view
[Sysname] file prompt alert
fixdisk
Use fixdisk to check a file system for damage and repair any damage.
Syntax fixdisk
filesystem
Views
User view
Predefined user roles
network-admin
Parameters
filesystem
: Specifies the name of a file system.
138
Usage guidelines
This command is supported only on the default MDC.
Use this command to fix a file system when space on the medium cannot be used or released due to abnormal operations.
You can repair a file system only when no other users are accessing the medium.
Examples
# Repair the flash: file system.
<Sysname> fixdisk flash:
Restoring flash: may take some time...
Restoring flash:...Done.
format
Use format to format a file system.
Syntax format
filesystem
Views
User view
Predefined user roles
network-admin
Parameters
filesystem
: Specifies the name of a file system.
Usage guidelines
This command is supported only on the default MDC.
Formatting a file system permanently deletes all files on the file system. If a startup configuration file exists on the file system, back it up if necessary.
You can format a file system only when no other users are accessing the file system.
Examples
# Format the flash: file system.
<Sysname> format flash:
All data on flash: will be lost, continue? [Y/N]:y
Formatting flash:... Done.
gunzip
Use gunzip to decompress a file.
Syntax
gunzip file
Views
User view
Predefined user roles
network-admin
139
mdc-admin
Parameters
file
: Specifies the name of the file to be decompressed. This argument must have .gz as the extension.
Usage guidelines
This command deletes the specified file after decompressing it.
Examples
# Decompress the system.bin.gz file:
1.
Before decompressing the file, you can display files whose names start with the system. string.
<Sysname> dir system.*
Directory of flash:
1 -rw- 20 Jun 14 2012 10:18:53 system.bin.gz
472972 KB total (472840 KB free)
2.
Decompress the system.bin.gz file.
<Sysname> gunzip system.bin.gz
Decompressing file flash:/system.bin.gz..... Done.
3.
Verify the decompress operation.
<Sysname> dir system.*
Directory of flash:
1 -rw- 0 May 30 2012 11:42:25 system.bin
472972 KB total (472844 KB free)
gzip
Use gzip to compress a file.
Syntax
gzip file
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
file
: Specifies the name of the file to be compressed. The compressed file will be saved to file
filename
.gz.
Usage guidelines
This command saves the compressed file to the file.gz file and deletes the source file.
Examples
# Compress the system.bin file:
1.
Before compressing the file, you can display files whose names start with system.
<Sysname> dir system.*
Directory of flash:
1 -rw- 0 May 30 2012 11:42:24 system.bin
140
472972 KB total (472844 KB free)
2.
Compress the system.bin file.
<Sysname> gzip system.bin
Compressing file flash:/system.bin..... Done.
3.
Verify the compress operation.
<Sysname> dir system.*
Directory of flash:
1 -rw- 20 Jun 14 2012 10:18:53 system.bin.gz
472972 KB total (472840 KB free)
md5sum
Use md5sum to use the MD5 algorithm to calculate the digest of a file.
Syntax md5sum
file
Views
User view
Predefined user roles
network-admin network-operator
Parameters
file
: Specifies the name of a file.
Usage guidelines
You can use file digests to verify file integrity.
Examples
# Use the MD5 algorithm to calculate the digest of file system.bin.
<Sysname> md5sum system.bin
MD5 digest:
4f22b6190d151a167105df61c35f0917
mkdir
Use mkdir to create a directory in the current directory.
Syntax mkdir
directory
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
directory
: Specifies the name of a directory.
141
Usage guidelines
The name of the directory to be created must be unique in the specified directory.
You can create a directory only in an existing directory. For example, to create the flash:/test/mytest directory, make sure the test directory already exists.
Examples
# Create the test directory in the current directory.
<Sysname> mkdir test
Creating directory flash:/test... Done.
# Create the test/subtest directory in the current directory.
<Sysname> mkdir test/subtest
Creating directory flash:/test/subtest... Done.
# (In standalone mode.) Create the test directory on the standby MPU (in slot 1).
<Sysname> mkdir slot1#flash:/test
Creating directory slot1#flash:/test... Done.
# (In IRF mode.) Create the test directory on the global active MPU.
<Sysname> mkdir test
Creating directory flash:/test... Done.
# (In IRF mode.) Create the test directory on the global standby MPU that resides in slot 1 of member device 2.
<Sysname> mkdir chassis2#slot1#flash:/test
Creating directory chassis2#slot1#flash:/test... Done.
more
Use more to display the contents of a text file.
Syntax more
file
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
file
: Specifies a file name.
Examples
# Display the contents of the test.txt file.
<Sysname> more test.txt
Have a nice day.
# Display the contents of the testcfg.cfg file.
<Sysname> more testcfg.cfg
#
version 7.1.045, Feature 2110L06
#
142
mdc Admin id 1
#
sysname Sysname
# telnet server enable
#
---- More ----
<Sysname>
# (In standalone mode.) Display the contents of the testcfg.cfg file on the standby MPU (in slot 1).
<Sysname> more slot1#flash:/testcfg.cfg
#
version 7.1.045, Feature 2110L06
#
mdc Admin id 1
#
# sysname Test
---- More ----
# (In IRF mode.) Display the contents of the testcfg.cfg file on the global active MPU.
<Sysname> more testcfg.cfg
# version 7.1.045, Feature 2110L06
#
mdc Admin id 1
#
# sysname Sysname
---- More ----
# (In IRF mode.) Display the contents of the testcfg.cfg file on the global standby MPU that resides in slot 1 of member device 2.
<Sysname> more chassis2#slot1#flash:/testcfg.cfg
#
version 7.1.045, Feature 2110L06
#
mdc Admin id 1
#
sysname Sysname
#
---- More ----
mount
Use mount to mount a file system.
143
Syntax mount
filesystem
Views
User view
Predefined user roles
network-admin
Parameters
filesystem
: Specifies the name of a file system.
Usage guidelines
This command is supported only on the default MDC.
Generally, file systems on a hot-swappable storage medium are automatically mounted when the storage medium is connected to the device. If the system cannot recognize a file system, however, you must mount the file system before you can access it.
To avoid file system corruption, do not perform the following tasks while the system is mounting a file system:
•
Install or remove storage media.
•
Install or remove cards.
•
Perform an active/standby switchover. (In standalone mode.)
•
Perform a switchover between the global active MPU and a global standby MPU. (In IRF mode.)
To avoid file system corruption, do not create, delete, start, or stop an MDC while the system is mounting or unmounting a file system.
Examples
# (In standalone mode.) Mount the usba0: file system on the active MPU.
<Sysname> mount usba0:
Mount usba0: successfully.
# (In standalone mode.) Mount the usba0: file system on the standby MPU (in slot 6).
<Sysname> mount slot6#usba0:
Mount slot6#usba0: successfully.
# (In IRF mode.) Mount the usba0: file system on the global MPU.
<Sysname> mount usba0:
Mount usba0: successfully.
# (In IRF mode.) Mount the usba0: file system on the global standby MPU that resides in slot 6 of member device 2.
<Sysname> mount chassis2#slot6#usba0:
Mount chassis2#slot6#usba0: successfully.
Related commands umount
move
Use move to move a file.
144
Syntax
move source-file
{ dest-file | dest-directory }
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
source-file
: Specifies the name of the source file.
dest-file
: Specifies the name of the destination file.
dest-directory
: Specifies the name of the destination directory.
Usage guidelines
If you specify a destination directory, the system moves the source file to the specified directory without changing the file name.
Examples
# Move the flash:/test/sample.txt file to flash:/, and save it as 1.txt.
<Sysname> move test/sample.txt 1.txt
Move flash:/test/sample.txt to flash:/1.txt? [Y/N]:y
Moving file flash:/test/sample.txt to flash:/1.txt ...Done.
# Move the b.cfg file to the test2 directory.
<Sysname> move b.cfg test2
Move flash:/b.cfg to flash:/test2/b.cfg? [Y/N]:y
Moving file flash:/b.cfg to flash:/test2/b.cfg... Done.
pwd
Use pwd to display the working directory.
Syntax pwd
Views
User view
Predefined user roles
network-admin mdc-admin
Examples
# Display the working directory.
<Sysname> pwd flash:
rename
Use rename to rename a file or directory.
145
Syntax
rename
{ source-file | source-directory } { dest-file | dest-directory }
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
source-file
: Specifies the name of the source file.
source-directory
: Specifies the name of the source directory.
dest-file
: Specifies the name of the destination file.
dest-directory
: Specifies the name of the destination directory.
Usage guidelines
This command is not executed if the destination file or directory name is already used by an existing file or directory in the working directory.
Examples
# Rename the copy.cfg file as test.cfg.
<Sysname> rename copy.cfg test.cfg
Rename flash:/copy.cfg as flash:/test.cfg? [Y/N]:y
Renaming flash:/copy.cfg as flash:/test.cfg... Done.
reset recycle-bin
Use reset recycle-bin to delete files from the recycle bin.
Syntax reset recycle-bin
[ /force ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
/force
: Deletes all files in the recycle bin without prompting for confirmation. If you do not specify this option, the command prompts you to confirm the deletion operation for each file.
Usage guidelines
The delete file command only moves a file to the recycle bin. To permanently delete the file, use the
reset recycle-bin
command to clear the recycle bin.
If a file is corrupted, you might not be able to delete the file by using the reset recycle-bin command.
In this case, use the reset recycle-bin /force command.
Examples
# Empty the recycle bin. (In this example there are two files in the recycle bin.)
146
<Sysname> reset recycle-bin
Clear flash:/a.cfg? [Y/N]:y
Clearing file flash:/a.cfg... Done.
Clear flash:/b.cfg? [Y/N]:y
Clearing file flash:/b.cfg... Done.
# Delete the b.cfg file from the recycle bin. (In this example there are two files in the recycle bin.)
<Sysname> reset recycle-bin
Clear flash:/a.cfg? [Y/N]:n
Clear flash:/b.cfg? [Y/N]:y
Clearing file flash:/b.cfg... Done.
Related commands delete
rmdir
Use rmdir to delete a directory.
Syntax rmdir
directory
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
directory
: Specifies a directory name.
Usage guidelines
To delete a directory, you must delete all files and subdirectories in the directory permanently or move them to the recycle bin. If you move them to the recycle bin, executing the rmdir command permanently deletes them.
Examples
# Delete the subtest directory.
<Sysname>rmdir subtest/
Remove directory flash:/test/subtest and the files in the recycle-bin under this directory will be deleted permanently. Continue? [Y/N]:y
Removing directory flash:/test/subtest... Done.
sha256sum
Use sha256sum to use the SHA-256 algorithm to calculate the digest of a file.
Syntax sha256sum
file
Views
User view
147
Predefined user roles
network-admin mdc-admin
Parameters
file
: Specifies the name of a file.
Usage guidelines
You can use file digests to verify file integrity.
Examples
# Use the SHA-256 algorithm to calculate the digest of file system.bin.
<Sysname> sha256sum system.bin
SHA256 digest:
0851e0139f2770e87d01ee8c2995ca9e59a8f5f4062e99af14b141b1a36ca152
tar create
Use tar create to archive files and directories.
Syntax tar create
[ gz ] archive-file dest-file [ verbose ] source { source-file | source-directory }&<1-5>
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters gz
: Uses gzip to compress the files and directories before archiving them. If you do not specify this keyword, the command archives the files and directories without compressing them.
archive-file dest-file
: Specifies the archive file name. If you specified the gz keyword, the suffix of the archive file name must be .tar.gz. If you did not specify the gz keyword, the suffix of the archive file name must be .tar.
verbose
: Displays the names of the successfully archived files and directories. If you do not specify this keyword, the command does not display the names of the successfully archived files and directories.
source
{ source-file | source-directory }&<1-5>: Specifies the files and directories to be archived.
The argument can be a space-separated list of up to five items. Each item can be a file or directory name.
Examples
# Archive the 1.cfg and 2.cfg files and the test directory to file a.tar.
<Sysname> tar create archive-file a.tar source 1.cfg 2.cfg test
Creating archive flash:/a.tar Done.
# Compress and archive the 1.cfg and 2.cfg files and the test directory to b.tar.gz.
<Sysname> tar create gz archive-file b.tar.gz source 1.cfg 2.cfg test
Creating archive flash:/b.tar.gz Done.
# Compress and archive files and directories, and display the successfully archived files and directories.
148
<Sysname> tar create gz archive-file c.tar.gz verbose source 1.cfg 2.cfg test
1.cfg
2.cfg test/ test/a.log test/subtest/ test/subtest/aa.log
Related commands tar extract tar list
tar extract
Use tar extract to extract files and directories.
Syntax tar extract
archive-file file [ verbose ] [ screen | to directory ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
archive-file file
: Specifies the archive file name. The suffix can be .tar or .tar.gz.
verbose
: Displays the names of the successfully extracted files and directories.
screen
: Displays the content of the extracted files and directories on the screen. The extracted files are not saved.
to directory
: Saves the extracted files and directories to a different directory. The directory argument specifies the directory.
Usage guidelines
If you do not specify the screen keyword or the to directory option, the command saves the extracted files and directories to the working directory.
The command saves the extracted files and directories by using their original names. If a file or directory that has the same name as an extracted file or directory already exists in the destination directory, the file or directory is overwritten.
Examples
# Extract files and directories from archive file a.tar.
<Sysname> tar extract archive-file a.tar
Extracting archive flash:/a.tar Done.
# Extract files and directories from archive file a.tar, and display the names of the successfully extracted files and directories.
<Sysname> tar extract archive-file b.tar.gz verbose
1.cfg
2.cfg test/
149
test/a.log test/subtest/ test/subtest/aa.log
# Extract files and directories from archive file a.tar, and display the content of the files on the screen.
<Sysname> tar extract archive-file c.tar.gz screen
#
version 7.1.045, Feature 2110L06
#
sysname Sysname
#
...
Related commands tar create tar list
tar list
Use tar list to display the names of archived files and directories.
Syntax
tar list archive-file file
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
archive-file file
: Specifies the archive file name. The suffix can be .tar or .tar.gz.
Examples
# Display the names of archived files and directories.
<Sysname> tar list archive-file a.tar
1.cfg
2.cfg test/ test/a.log test/subtest/ test/subtest/aa.log
Related commands tar create tar extract
umount
Use umount to unmount a file system.
150
Syntax
umount filesystem
Views
User view
Predefined user roles
network-admin
Parameters
filesystem
: Specifies the name of a file system.
Usage guidelines
This command is supported only on the default MDC.
File systems on a storage medium are automatically mounted when the storage medium is connected to the device. To remove a hot-swappable storage medium from the device, you must first unmount all file systems on the storage medium. Removing a mounted hot-swappable storage medium might damage files on the storage medium or even the storage medium.
You can unmount a file system only when no other users are accessing the file system.
To avoid file system corruption, do not perform the following tasks while the system is unmounting a file system:
•
Install or remove storage media or cards.
•
Perform active/standby switchover. (In standalone mode.)
•
Perform a switchover between the global active MPU and a global standby MPU. (In IRF mode.)
Examples
# (In standalone mode.) Unmount the usba0: file system from the active MPU.
<Sysname> umount usba0:
Umount usba0: successfully.
# (In standalone mode.) Unmount the usba0: file system from the standby MPU (in slot 6).
<Sysname> umount slot7#usba0:
Umount slot7#usba0: successfully.
# (In IRF mode.) Unmount the usba0: file system from the global active MPU.
<Sysname> umount usba0:
Umount usba0: successfully.
# (In IRF mode.) Unmount the usba0: file system from the global standby MPU that resides in slot 6 of member device 2.
<Sysname> umount chassis2#slot6#usba0:
Umount chassis2#slot6#usba0: successfully.
Related commands mount
undelete
Use undelete to restore a file from the recycle bin.
Syntax undelete
file
151
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
file
: Specifies the name of the file to be restored.
Usage guidelines
If a file with the same name already exists in the directory, the system prompts whether or not you want to overwrite the existing file. If you enter Y, the existing file is overwritten. If you enter N, the command is not executed.
Examples
# Restore the copy.cfg file, which was moved from the flash: directory to the recycle bin.
<Sysname>undelete copy.cfg
Undelete flash:/copy.cfg? [Y/N]:y
Undeleting file flash:/copy.cfg... Done.
# Restore the startup.cfg file, which was moved from the flash:/seclog directory to the recycle bin.
•
Method 1:
<Sysname>undelete seclog/startup.cfg
Undelete flash:/seclog/startup.cfg? [Y/N]:y
Undeleting file flash:/seclog/startup.cfg... Done.
<Sysname>
•
Method 2:
<Sysname> cd seclog
<Sysname> undelete startup.cfg
Undelete flash:/seclog/startup.cfg? [Y/N]:y
Undeleting file flash:/seclog/startup.cfg... Done.
152
Configuration file management commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide.
archive configuration
Use archive configuration to manually archive the running configuration to the configuration archive directory.
Syntax archive configuration
Views
User view
Predefined user roles
network-admin mdc-admin
Usage guidelines
Before manually archiving the running configuration, you must use the archive configuration
location
command to specify a directory and a name prefix for the configuration archives.
Configuration archive facilitates configuration rollback. It provides manual and automatic methods for saving the running configuration as checkpoint references. For more information about the archiving mechanism, see the section about configuration rollback in Fundamentals Configuration
Guide
.
Examples
# Archive the running configuration.
<Sysname> archive configuration
Save the running configuration to an archive file. Continue? [Y/N]: Y
The archive configuration file myarchive_1.cfg is saved.
Related commands archive configuration interval archive configuration location archive configuration max display archive configuration
archive configuration interval
Use archive configuration interval to enable automatic running-configuration archiving and set the archiving interval.
Use undo archive configuration interval to restore the default.
153
Syntax
archive configuration interval minutes
undo archive configuration interval
Default
The system does not automatically archive the running configuration.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
minutes
: Specifies the interval (in minutes) for automatically saving the running configuration. The value range is 10 to 525600 (365 days).
Usage guidelines
Before enabling automatic configuration archiving, use the archive configuration location command to specify the configuration archive directory and archive file name prefix.
Configuration archive is a function that facilitates configuration rollback. It provides manual and automatic methods for saving the running configuration.
Automatic configuration archiving enables the system to periodically save the running configuration to the archive directory automatically. After the system finishes an automatic archive, it resets the archiving interval timer. For more information about the archiving mechanism, see the section about configuration rollback in Fundamentals Configuration Guide.
Examples
# Configure the system to archive the running configuration every 60 minutes.
<Sysname> system-view
[Sysname] archive configuration interval 60
Archive files will be saved every 60 minutes.
Related commands archive configuration archive configuration location archive configuration max display archive configuration
archive configuration location
Use archive configuration location to configure the directory and file name prefix for archiving the running configuration.
Use undo archive configuration location to restore the default.
Syntax
archive configuration location directory
filename-prefix filename-prefix
undo archive configuration location
154
Default
No configuration archive directory or configuration archive file name prefix has been set.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
directory
: Specifies the name of a configuration archive directory, a case-insensitive string of 1 to 63 characters. The value for this argument must take the format storage-medium-name:/folder-name.
The directory must already exist on the active MPU in standalone mode or exist on the global active
MPU in IRF mode.
filename-prefix
: Specifies a file name prefix for configuration archives, a case-insensitive string of 1 to 30 characters. Valid characters are letters, digits, underscores (_), and hyphens (-).
Usage guidelines
Before archiving the running configuration, either manually or automatically, you must configure a directory and file name prefix for configuration archives.
In standalone mode, the configuration archive function saves the running configuration only on the active MPU. In IRF mode, the function saves the running configuration only on the active MPU in the master device. To make sure the system can archive running configuration after an active/standby or master/subordinate switchover, create the configuration archive directory on all MPUs.
Configuration archives take the file name format prefix_serial number.cfg, for example,
20080620archive_1.cfg
and 20080620archive_2.cfg. The serial number is automatically assigned from 1 to 1000, increasing by 1. After the serial number reaches 1000, it restarts from 1.
After you change the file directory or file name prefix, or reboot the device, all of the following events occur:
•
The old configuration archives are regarded as common configuration files.
•
The configuration archive counter is reset.
•
The display archive configuration command no longer displays the old configuration archives.
•
The serial number for new configuration archives starts at 1.
The undo archive configuration location command removes the configuration archive directory and file name prefix settings. The command also performs the following operations:
•
Disables the configuration archive function (both manual and automatic methods).
•
Restores the default settings of the archive configuration interval and archive
configuration max
commands.
•
Clears the configuration archive information displayed by using the display archive
configuration
command.
Examples
# Configure the configuration archive directory as flash:/archive/ and the archive file name prefix as
my_archive
.
<Sysname> mkdir flash:/archive
Creating directory flash:/archive... Done.
<Sysname> system-view
[Sysname] archive configuration location flash:/archive filename-prefix my_archive
155
Related commands archive configuration archive configuration location archive configuration max display archive configuration
archive configuration max
Use archive configuration max to set the maximum number of configuration archives.
Use undo archive configuration max to restore the default.
Syntax
archive configuration max file-number
undo archive configuration max
Default
Up to five configuration archives can be saved.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
file-number
: Specifies the maximum number of configuration archives that can be saved. The value range is 1 to 10. Adjust the setting depending on the amount of storage space available.
Usage guidelines
Before you can set a limit on configuration archives, use the archive configuration location command to specify a configuration archive directory and archive file name prefix.
After the maximum number of configuration archives is reached, the system deletes the oldest archive for the new archive.
Changing the limit setting to a lower value does not cause immediate deletion of excess archives.
Instead, the configuration archive function deletes the oldest n files when a new archive is manually or automatically saved, where n = current archive count – new archive limit + 1.
Suppose seven configuration archives have been saved before the archive limit is set to four. When saving a new configuration archive, the system first deletes the oldest four (7 – 4 + 1) archives.
If you execute the undo archive configuration location command, the default archive limit is restored.
Examples
# Set the maximum number of configuration archives to 10.
<Sysname> system-view
[Sysname] archive configuration max 10
Related commands archive configuration archive configuration location
156
archive configuration interval display archive configuration
backup startup-configuration
Use backup startup-configuration to back up the main next-startup configuration file to a TFTP server.
Syntax backup startup-configuration to
tftp-server [ dest-filename ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
tftp-server
: Specifies a TFTP server by its IPv4 address or host name. The host name is a case-insensitive string of 1 to 253 characters. Valid characters include letters, digits, hyphens (-), underscores (_), and dots (.).
dest-filename
: Specifies the target file name used for saving the file on the server, a case-insensitive string of 1 to 255 characters. The file name must use the .cfg extension. If you do not specify a target file name, the source file name is used.
Usage guidelines
This command is not supported in FIPS mode.
Examples
# Back up the main next-startup configuration file to the TFTP server at 2.2.2.2, and set the target file name to 192-168-1-26.cfg.
<Sysname> backup startup-configuration to 2.2.2.2 192-168-1-26.cfg
Backup next startup-configuration file to 2.2.2.2, please wait…finished
Related commands restore startup-configuration
configuration commit
Use configuration commit to commit the settings configured after the configuration commit
delay
command was executed.
Syntax configuration commit
Views
System view
Predefined user roles
network-admin mdc-admin
157
Usage guidelines
You must execute the configuration commit delay command before executing this command.
As a best practice, enable the information center and configure the information center to output logs to the console. Determine whether to commit the settings depending on the logs. For more information about the information center, see Network Management and Monitoring Configuration
Guide
.
Examples
# Set the allowed delay time to 10 minutes for a manual commit to keep the settings configured subsequently in effect.
<Sysname> system-view
[Sysname] configuration commit delay 10
# Commit the settings configured after the configuration commit delay command was executed.
[Sysname] configuration commit
# Commit the settings configured after the configuration commit delay command was executed. In this example, the commit operation fails, because the allowed delay time has expired. The device is rolling back the configuration to the settings before the configuration commit delay command was executed.
[Sysname] configuration commit
The system is rolling back configuration. Please wait…
configuration commit delay
Use configuration commit delay to set the allowed delay time for a manual commit to keep the settings configured subsequently in effect.
Syntax configuration commit delay
delay-time
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
delay-time
: Sets the allowed delay time in the range of 1 to 65535 minutes.
Usage guidelines
Configure this command in a single-user environment.
If you do not execute the configuration commit command within the delay time, the device rolls back the configuration to the settings before the configuration commit delay command was executed. The device outputs logs to notify the user of the rollback operation. The user cannot perform other operations before the rollback is finished.
As a best practice, set the allowed delay time in the following situations:
•
The user configures the device remotely. The user might be disconnected from the device because of a setting. If the configuration commit delay command is configured and the setting is not committed, the user can reconnect to the device after the delay time expires.
•
The user is not familiar with the device configuration. If any parameters are configured incorrectly, the rollback mechanism can remove the incorrect settings after the delay time expires.
158
You can change the allowed delay time before the previous configured delay time expires. The new delay time configuration overwrites the previous delay time configuration after you enter Y to confirm the change. The allowed delay time is re-set.
Examples
# Set the allowed delay time to 10 minutes for a manual commit to keep the settings configured subsequently in effect.
<Sysname> system-view
[Sysname] configuration commit delay 10
# Re-set the allowed delay time to 60 minutes for a manual commit to keep the settings configured subsequently in effect.
[Sysname] configuration commit delay 60
The commit delay already set 10 minutes, overwrite it? [Y/N]:y
# Re-set the allowed delay time to 20 minutes for a manual commit to keep the settings configured subsequently in effect. In this example, the configuration fails, because the previous configured delay time has expired. The device is rolling back the configuration to the settings before the
configuration commit delay
command was executed the previous time.
[Sysname] configuration commit delay 20
The system is rolling back configuration. Please wait…
configuration encrypt
Use configuration encrypt to enable configuration encryption.
Use undo configuration encrypt to restore the default.
Syntax configuration encrypt
{ private-key | public-key }
undo configuration encrypt
Default
Configuration encryption is disabled. The running configuration is saved to a configuration file without encryption.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters private-key
: Encrypts configuration with a private key. All HPE devices running Comware 7 software use the same private key.
public-key
: Encrypts configuration with a public key. All HPE devices running Comware 7 software use the same public key.
Usage guidelines
Configuration encryption enables the device to automatically encrypt a configuration file when saving the running configuration to the file.
Only HPE devices running Comware 7 software can decrypt the encrypted configuration file.
159
Examples
# Enable the public-key method for configuration encryption.
<Sysname> system-view
[Sysname] configuration encrypt public-key
configuration replace file
Use configuration replace file to perform configuration rollback.
Syntax configuration replace file
filename
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
filename
: Specifies the name of the replacement configuration file for configuration rollback. The file name must use the .cfg extension. Excluding the .cfg extension, the file name is a case-insensitive string of 1 to 255 characters and can include path information. The file and file path must be valid.
Usage guidelines
To replace the running configuration with the configuration in a configuration file without rebooting the device, use the configuration rollback function. This function helps you revert to a previous configuration state or adapt the running configuration to different network environments.
To ensure a successful rollback, follow these guidelines:
•
Make sure the replacement configuration file is created by using the configuration archive function or the save command on the device.
•
If the configuration file is not created on the device, make sure the command lines in the configuration file are fully compatible with the device.
•
Make sure the replacement configuration file is not encrypted.
Examples
# Replace the running configuration with the configuration in the my_archive_1.cfg configuration file.
<Sysname> system-view
[Sysname] configuration replace file my_archive_1.cfg
Current configuration will be lost, save current configuration? [Y/N]:n
Now replacing the current configuration. Please wait...
Succeeded in replacing current configuration with the file my_archive_1.cfg.
display archive configuration
Use display archive configuration to display configuration archive information, including the archive directory, archive prefix, archive interval, maximum number of archives, and saved archives.
Syntax display archive configuration
160
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display configuration archive information.
<Sysname> display archive configuration
Location: flash:/archive
Filename prefix: my_archive
Archive interval in minutes: 120
Maximum number of archive files: 10
Saved archive files:
No. TimeStamp FileName
1 Wed Jan 15 14:20:18 2014 my_archive_1.cfg
2 Wed Jan 15 14:33:10 2014 my_archive_2.cfg
# 3 Wed Jan 15 14:49:37 2014 my_archive_3.cfg
'#' indicates the most recent archive file.
Next archive file to be saved: my_archive_4.cfg
Table 18 Command output
Field Description
Location
Absolute path of the directory for saving running-configuration archives.
Filename prefix
Archive interval in minutes
Maximum number of archive files
Saved archive files
TimeStamp
File name prefix for configuration archives.
Interval (in minutes) for the system to automatically archive the running configuration.
If automatic configuration saving is disabled, this field is not available.
Maximum number of configuration archives that can be saved.
Configuration archives that have been saved.
Time when the configuration archive was created.
Related commands archive configuration archive configuration interval archive configuration location archive configuration max
display current-configuration
Use display current-configuration to display the running configuration.
161
Syntax display current-configuration
[ configuration [ module-name ] | interface [ interface-type
[ interface-number ] ] ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters configuration
[ module-name ]: Displays feature configuration. The module-name argument specifies a feature module. If you do not specify a feature module, the command displays all feature settings you have made.
interface
[ interface-type [ interface-number ] ]: Displays interface configuration. The interface-type argument represents the interface type and the interface-number argument represents the interface number. If you do not specify the interface-type interface-number arguments, the command displays the running configuration for all interfaces. If you specify only the interface-type argument, the command displays the running configuration for all interfaces of this type.
Usage guidelines
Use this command to verify the configuration you have made.
If the system has automatically changed the setting you have made for a parameter, this command displays the effective setting instead of the configured one. An automatic change typically occurs because of system restrictions.
This command does not display parameters that are using the default settings.
Examples
# Display local user configuration.
<Sysname> display current-configuration configuration local-user
# local-user hpzlkf class manage
password hash $h$6$k4IOwRxDRlPA4zyu$gY/YPyrnHrTXodkyVyV13LZQ6dVY1wiWIP44gGtD9fY
0dKwfuQq14os/EWe/VHZ+Kx6aeveAOb4lICMpTPiQJg==
service-type ftp
authorization-attribute idle-cut 120
authorization-attribute work-directory flash:/
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
# Display GigabitEthernet interface configuration.
<Sysname> display current-configuration interface gigabitethernet
# interface GigabitEthernet1/0/1
port link-mode bridge
#
Return
162
display current-configuration diff
Use display current-configuration diff to display the configuration differences between the running configuration and the next-startup configuration file.
Syntax display current-configuration diff
Views
Any view
Predefined user roles
network-admin network-operator
Examples
# Display the configuration differences between the running configuration and the next-startup configuration file.
<Sysname> display current-configuration diff
--- Startup configuration
+++ Current configuration
@@ -12,6 +12,11 @@
irf member 1 priority 1
irf mode enhanced
#
+isis 1
+ auto-cost enable
+ cost-style compatible
+ default-route-advertise route-policy n
+#
lldp global enable
#
system-working-mode standard
<Sysname>
Table 19 Command output
Field Description
- - - A
+++ B
•
A
displays Startup configuration, Current configuration, or the name of the source configuration file with its directory information.
•
B
displays Current configuration, Startup configuration, or the name of the target configuration file with its directory information.
@@ -linenumber1,number1
+linenumber2,number2 @@
Location summary for a command line difference:
•
-linenumber1,number1—A total number of number1 lines are excerpted from line number linenumber1 in A. These lines contain a command line difference.
•
+linenumber2,number2—A total number of number2 lines are excerpted from line number linenumber2 in B. These lines contain a command line difference.
cmd1
- cmd2
+ cmd3
Command line difference:
•
cmd1
and cmd4 provide a context for locating the different command lines.
163
Field Description
cmd4
• -
represents the different command line in A.
• +
represents the different command line in B.
Related commands display current-configuration display diff display saved-configuration
display default-configuration
Use display default-configuration to display the factory defaults.
Syntax display default-configuration
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Usage guidelines
The device is shipped with some basic settings called factory defaults. These default settings ensure that the device can start up and run correctly when it does not have any startup configuration file or the configuration file is corrupt.
Examples
# Display the factory defaults.
<Sysname> display default-configuration
display diff
Use display diff to display the configuration differences between two configuration files or between a configuration file and the running configuration.
Syntax display
diff configfile file-name-s { configfile file-name-d | current-configuration |
startup-configuration
}
display
diff current-configuration { configfile file-name-d | startup-configuration }
display
diff startup-configuration { configfile file-name-d | current-configuration }
Views
Any view
Predefined user roles
network-admin
164
network-operator
Parameters configfile
file-name-s: Specifies the source configuration file for comparison.
configfile
file-name-d: Specifies the target configuration file for comparison.
current-configuration
: Specifies the running configuration. In the display diff
current-configuration
command, this keyword specifies the source configuration for comparison. In the display diff configfile file-name-s and display diff startup-configuration commands, this keyword specifies the target configuration.
startup-configuration
: Specifies the next-startup configuration file. In the display diff
startup-configuration
command, this keyword specifies the source configuration file for comparison. In the display diff configfile file-name-s and display diff current-configuration commands, this keyword specifies the target configuration file.
Examples
# Display the configuration differences between startup.cfg and test.cfg.
<Sysname> display diff configfile startup.cfg configfile test.cfg
--- flash:/startup.cfg
+++ flash:/test.cfg
@@ -10,7 +10,7 @@
irf auto-merge enable
undo irf link-delay
irf member 1 priority 1
- irf mode normal
+ irf mode enhanced
#
lldp global enable
#
@@ -19,6 +19,9 @@
#
vlan 1
#
...
<Sysname>
The output shows that startup.cfg contains the command line irf mode normal while test.cfg contains the command line irf mode enhanced.
# Display the configuration differences between the running configuration and the next-startup configuration file.
<Sysname> display diff current-configuration startup-configuration
--- Current configuration
+++ Startup configuration
@@ -12,11 +12,6 @@
irf member 1 priority 1
irf mode enhanced
#
-isis 1
- auto-cost enable
- cost-style compatible
- default-route-advertise route-policy n
-#
165
+ lldp global enable
#
system-working-mode standard
<Sysname>
The output shows that the running configuration contains the command lines isis 1, auto-cost
enable
, cost-style compatible, and default-route-advertise route-policy n. The next-startup configuration file contains the command line lldp global enable.
For command output, see Table 19 .
Related commands display current-configuration display current-configuration diff display saved-configuration
display saved-configuration
Use display saved-configuration to display the contents of the configuration file for the next system startup.
Syntax display saved-configuration
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Usage guidelines
Use this command to verify that important settings have been saved to the configuration file for the next system startup.
This command selects the configuration file to display in the following order:
1.
If the main startup configuration file is available, this command displays the contents of the main startup configuration file.
2.
If only the backup startup configuration file is available, this command displays the contents of the backup file.
3.
If both the main and backup startup configuration files are not available, this command does not display anything.
Examples
# Display the contents of the configuration file for the next system startup.
<Sysname> display saved-configuration
#
version 7.1.045, Alpha 714101
# mdc Admin id 1
#
166
sysname Sysname
#
ftp server enable
#
telnet server enable
#
domain default enable system
# vlan 1
# domain system
#
---- More ----
Related commands reset saved-configuration save
display startup
Use display startup to display the names of the current startup configuration file and the next-startup configuration files.
Syntax display startup
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Usage guidelines
Current startup configuration file is the configuration file that has been loaded. Next-startup configuration file is the configuration file used at the next startup.
In standalone mode:
The standby MPU always uses the same current startup configuration file as the active MPU. After an active/standby switchover, it is normal that the current startup configuration files on the MPUs are displayed as NULL. This is because the new active MPU continues to run with the running configuration rather than rebooting with a startup configuration file.
In IRF mode:
The global standby MPUs always use the same current startup configuration file as the global active
MPU. After an active/standby switchover, it is normal that the current startup configuration files on all
MPUs are displayed as NULL. This is because the new global active MPU continues to run with the running configuration rather than rebooting with a startup configuration file.
Examples
# (In standalone mode.) Display names of the startup configuration files.
167
<Sysname> display startup
MainBoard:
Current startup saved-configuration file: flash:/startup.cfg
Next main startup saved-configuration file: flash:/startup.cfg
Next backup startup saved-configuration file: NULL
Slot 6:
Current startup saved-configuration file: flash:/startup.cfg
Next main startup saved-configuration file: flash:/startup.cfg
Next backup startup saved-configuration file: NULL
Table 20 Command output
Field Description
MainBoard Displays the startup configuration files on the active MPU.
Current startup saved-configuration file
Next main startup saved-configuration file
Next backup startup saved-configuration file
Configuration file that the active MPU has started up with.
Primary startup configuration file to be used at the next startup.
Backup startup configuration file to be used at the next startup.
Slot n Displays the startup configuration files on the MPU in slot n.
# (In IRF mode.) Display names of the startup configuration files.
<Sysname> display startup
MainBoard:
Current startup saved-configuration file: NULL
Next main startup saved-configuration file: flash:/startup.cfg
Next backup startup saved-configuration file: flash:/startup2.cfg
Chassis 2 Slot 6:
Current startup saved-configuration file: NULL
Next main startup saved-configuration file: flash:/startup.cfg
Next backup startup saved-configuration file: flash:/startup2.cfg
Table 21 Command output
Field Description
MainBoard
Displays the startup configuration files on the IRF master device.
Current startup saved-configuration file
Configuration file that the global active MPU has started up with.
Next main startup saved-configuration file Primary configuration file to be used at the next startup.
Next backup startup saved-configuration file Backup configuration file to be used at the next startup.
(This file does not exist.)
If the specified next-startup configuration file has been deleted, this comment appears next to the file name.
Displays the startup configuration files on the MPU in slot n of IRF member x.
Chassis x Slot n
Related commands startup saved-configuration
168
display this
Use display this to display the running configuration in the current view.
Syntax display
this
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Usage guidelines
Use this command to verify the configuration you have made in a certain view.
This command does not display parameters that are using the default settings.
Some parameters can be successfully configured even if their dependent features are not enabled.
For these parameters, this command displays their settings after the dependent features are enabled.
This command can be executed in any user line view to display the running configuration of all user lines.
Examples
# Display the running configuration on interface GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] display this
# interface GigabitEthernet1/0/1
port link-mode bridge
# return
# Display the running configuration on user lines.
<Sysname> system-view
[Sysname] line vty 1
[Sysname-line-vty1] display this
# line aux 1
user-role network-admin
# line vty 0 63
authentication-mode none
user-role network-admin
user-role network-operator
idle-timeout 0 0
#
169
return
reset saved-configuration
Use reset saved-configuration to delete next-startup configuration files.
Syntax reset saved-configuration
[ backup | main ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters backup
: Deletes the backup next-startup configuration file.
main
: Deletes the main next-startup configuration file.
Usage guidelines
CAUTION:
Use this command with caution. This command permanently deletes the next-startup configuration file from each MPU.
You can delete the main file, the backup file, or both.
To delete a file that is set as both main and backup next-startup configuration files, you must execute both the reset saved-configuration backup command and the reset saved-configuration main command. Using only one of the commands removes the specified file attribute instead of deleting the file.
For example, if the reset saved-configuration backup command is executed, the backup next-startup configuration file setting is set to NULL. However, the file is still used as the main file. To delete the file, you must also execute the reset saved-configuration main command.
If you do not specify a configuration file attribute, the reset saved-configuration command deletes the main next-startup configuration file.
Examples
# (In standalone mode.) Delete the main next-startup configuration file.
<Sysname> reset saved-configuration
The saved configuration file will be erased. Are you sure? [Y/N]:y
Configuration file in flash: is being cleared.
Please wait ...
..
MainBoard:
Configuration file is cleared.
Slot 6:
Erase next configuration file successfully
# (In IRF mode.) Delete the backup next-startup configuration file.
<Sysname> reset saved-configuration backup
The saved configuration file will be erased. Are you sure? [Y/N]:y
Configuration file in flash: is being cleared.
170
Please wait ...
..
MainBoard:
Configuration file is cleared.
Chassis 2 Slot 6:
Erase next configuration file successfully
Related commands display saved-configuration
restore startup-configuration
Use restore startup-configuration to download a configuration file from a TFTP server and specify it as the main next-startup configuration file.
Syntax restore startup-configuration from
tftp-server src-filename
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
tftp-server:
Specifies a TFTP server's IPv4 address or host name. The host name is a case-insensitive string of 1 to 253 characters. Valid characters include letters, digits, hyphens (-), underscores (_), and dots (.).
src-filename
: Specifies the file name of the configuration file to be downloaded.
Usage guidelines
This command is not supported in FIPS mode.
Before restoring the configuration file for the next startup, make sure the following requirements are met:
•
The server is reachable.
•
The server is enabled with TFTP service.
•
You have read and write permissions to the server.
This command provides an easy method for configuration file restoration by automatically performing all operations required for restoring the main next-startup configuration file.
The configuration file is automatically saved to the root directory of the default storage medium on each MPU.
If the USB disk is used and partitioned, the configuration file is saved on the first partition.
This command assumes that all MPUs use the same type of storage medium. If a standby MPU uses a different type of storage medium than the active MPU, the command cannot propagate the configuration file to the standby MPU. For example, the standby MPU uses a USB disk, but the active MPU uses a flash memory. In this situation, you must manually restore the next-startup configuration file on the standby MPU.
171
Examples
# (In standalone mode.) Download the configuration file config.cfg from the TFTP server at 2.2.2.2, and specify the file as the main next-startup configuration file.
<Sysname> restore startup-configuration from 2.2.2.2 config.cfg
Restoring the next startup-configuration file from 2.2.2.2. Please wait...finished.
Now restoring the next startup-configuration file from main board to backup board. Please wait...finished.
# (In IRF mode.) Download the configuration file config.cfg from the TFTP server at 2.2.2.2 and specify the file as the main next-startup configuration file.
<Sysname> restore startup-configuration from 2.2.2.2 config.cfg
Restoring the next startup-configuration file from 2.2.2.2. Please wait...finished.
Now restoring the next startup-configuration file from main board to backup board. Please wait...finished.
Related commands backup startup-configuration
save
In standalone mode:
Use save file-url [ all | slot slot-number ] to save the running configuration to a configuration file, without specifying the file as a next-startup configuration file.
Use save [ safely ] [ backup | main ] [ force ] [ mdc-all ] to save the running configuration to a file in the root directory of the default storage medium. This command applies to each MDC or the MDC where you are logged in. It specifies the file as a next-startup configuration file at the same time.
In IRF mode:
Use save file-url [ all | chassis chassis-number slot slot-number ] to save the running configuration to a configuration file, without specifying the file as a next-startup configuration file.
Use save [ safely ] [ backup | main ] [ force ] [ mdc-all ] to save the running configuration to a file in the root directory of the default storage medium. This command applies to each MDC or the MDC where you are logged in. It specifies the file as a next-startup configuration file at the same time.
Syntax
In standalone mode:
save
file-url [ all | slot slot-number ]
save
[ safely ] [ backup | main ] [ force ] [ mdc-all ]
In IRF mode:
save
file-url [ all | chassis chassis-number slot slot-number ]
save
[ safely ] [ backup | main ] [ force ] [ mdc-all ]
Views
Any view
Predefined user roles
network-admin mdc-admin
172
Parameters
file-url
: Saves the running configuration to the specified file, without specifying the file as a next-startup configuration file. The file name must use the extension .cfg and can include path information. If you specify the all keyword or an MPU slot, the file path cannot include a chassis or slot number. If the file path includes a folder name, the folder must already exist.
all
: Saves the running configuration to both MPUs. If you do not specify this keyword or the slot
slot-number
option, the command saves the running configuration only to the active MPU. (In standalone mode.)
all
: Saves the running configuration to all MPUs. If you do not specify this keyword or the chassis
chassis-number slot slot-number option, the command saves the running configuration only to the global active MPU in the IRF fabric. (In IRF mode.)
slot slot-number
: Saves the running configuration to the standby MPU. If you do not specify this option or the all keyword, the command saves the running configuration only to the active MPU. (In standalone mode.)
chassis
chassis-number slot slot-number: Saves the running configuration to a standby MPU. If you do not specify this option or the all keyword, the command saves the running configuration only to the global active MPU in the IRF fabric. (In IRF mode.)
safely
: Saves the configuration file in safe mode. If you do not specify this keyword, the device saves the configuration file in fast mode. Safe mode is slower than fast mode, but more secure. As a best practice, specify the safely keyword for the command.
backup
: Saves the running configuration to a configuration file, and specifies the file as the backup next-startup configuration file. If you do not specify this keyword or the main keyword, the command specifies the saved file as the main next-startup configuration file.
main
: Saves the running configuration to a configuration file, and specifies the file as the main next-startup configuration file. If you do not specify this keyword or the backup keyword, the command specifies the saved file as the main next-startup configuration file.
force
: Saves the running configuration without prompting for confirmation. If you do not specify this keyword, the system prompts you to confirm the operation. If you do not confirm the operation within
30 seconds, the system automatically aborts the operation. If you enter Y within the time limit, you can continue the save process and change the target file name during the process.
mdc-all
: Saves the running configuration for each MDC. This keyword is available only on the default MDC. If this keyword is not available or you do not specify this keyword, the save command saves the running configuration only for the MDC where you are logged in.
Usage guidelines
If the file specified for the command does not exist, the system creates the file before saving the configuration. If the file already exists, the system prompts you to confirm whether to overwrite the file. If you choose to not overwrite the file, the system cancels the save operation.
If you do not specify the file-url option for the command, the command saves the running configuration to an .mdb binary file as well as a .cfg text file. The two files use the same file name.
An .mdb file takes less time to load than a .cfg file.
If you specify the file-url option for the command, the command only saves the running configuration to the specified .cfg file.
In safe mode, the system saves configuration in a temporary file and starts overwriting the target next-startup configuration file after the save operation is complete. If a reboot, power failure, or out of memory event occurs during the save operation, the next-startup configuration file is retained.
In fast mode, the device directly overwrites the target next-startup configuration file. If a reboot, power failure, or out of memory event occurs during this process, the next-startup configuration file is lost.
173
Examples
# Save the running configuration to the configuration file backup.cfg, without specifying the file as the next-startup configuration file.
<Sysname> save backup.cfg
The current configuration will be saved to flash:/backup.cfg. Continue? [Y/N]:y
Now saving current configuration to the device.
Saving configuration flash:/backup.cfg. Please wait...
Configuration is saved to flash successfully.
# Save the running configuration to the main next-startup configuration file without any confirmation required.
<Sysname> save force
Validating file. Please wait....
Configuration is saved to device successfully.
# (In standalone mode.) Save the running configuration to a file in the root directory of the default storage medium, and specify the file as the main next-startup configuration file.
<Sysname> save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
Slot 6:
Save next configuration file successfully.
# (In IRF mode.) Save the running configuration to a file in the root directory of the default storage medium, and specify the file as the main next-startup configuration file.
<Sysname> save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
Chassis 1 Slot 6:
Save next configuration file successfully.
# Save the running configuration to a file in the root directory of the default storage medium for each
MDC, and specify the file as the main next-startup configuration file.
<Sysname> save mdc-all
Save current configuration in MDC Admin? [Y/N]:y
Please input the file name(*.cfg)[flash:/1.cfg]
(To leave the existing filename unchanged, press the enter key): flash:/1.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
Chassis 1 Slot 6:
Save next configuration file successfully.
Save current configuration in MDC mdc1? [Y/N]:y
Please input the file name(*.cfg)[flash:/mdc1.cfg]
(To leave the existing filename unchanged, press the enter key):
174
flash:/mdc1.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.
Chassis 1 Slot 6:
Save next configuration file successfully.
Related commands display current-configuration display saved-configuration
startup saved-configuration
In standalone mode:
Use startup saved-configuration to specify a file as a next-startup configuration file for both active
MPU and standby MPU.
Use undo startup saved-configuration to configure the active MPU and the standby MPU to start up with factory defaults at the next startup.
In IRF mode:
Use startup saved-configuration to specify a file as a next-startup configuration file for all MPUs in the IRF fabric.
Use undo startup saved-configuration to configure all MPUs to start up with the factory defaults at the next startup.
Syntax startup
saved-configuration cfgfile [ backup | main ]
undo startup saved-configuration
Default
No next-startup configuration file is specified.
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
cfgfile
: Specifies the name of a .cfg file. This .cfg file must already exist in the root directory of the default storage medium.
backup
: Specifies the configuration file as the backup next-startup configuration file.
main
: Specifies the configuration file as the main next-startup configuration file. This is the primary configuration file that the device attempts to load at startup. If the loading attempt fails, the device tries the backup next-startup configuration file.
Usage guidelines
CAUTION:
In an IRF fabric, use the undo startup saved-configuration command with caution. This command can cause an IRF split after the IRF fabric or an IRF member reboots.
175
The startup saved-configuration command applies to all MPUs. To successfully configure the command, make sure the following conditions are met:
•
In standalone mode, the specified file already exists in the root directory of the default storage medium on both active MPU and standby MPU.
•
In IRF mode, the specified file already exists in the root directory of the default storage medium on each MPU.
•
All MPUs use the same type of storage medium as the default storage medium.
If the USB disk is used to store the next-startup configuration files, do not remove the USB disk during the startup process. If you remove the USB disk on a device, one of the following consequences occurs:
•
In standalone mode, the device starts up with the factory defaults.
•
In IRF mode, the device leaves the IRF fabric at the startup and runs with the factory defaults.
If you do not specify either backup or main, the startup saved-configuration command specifies the main next-startup configuration file.
Even though the main and backup next-startup configuration files can be the same one, specify them as separate files for high availability.
The undo startup saved-configuration command changes the file attribute of the main and backup next-startup configuration files to NULL. However, the command does not delete the two configuration files.
You can also specify a configuration file as a next startup file when you use the save command to save the running configuration to it.
Examples
# Specify the main next-startup configuration file.
<Sysname> startup saved-configuration testcfg.cfg
Please wait ....
... Done!
Related commands display startup
176
Software upgrade commands
Unless otherwise stated, the term "IRF system" refers to IRF fabrics. The term "IRF fabric" refers to a standalone IRF fabric.
The switch starts up from the default storage medium. The default storage medium can be the built-in flash memory or a USB disk. To change the default storage medium setting, access the
BootWare menu. For more information, see the release notes for the switch.
As a best practice, store the startup images in the flash memory and specify the flash memory as the default storage medium.
If the switch is starting up from a USB disk, do not remove the USB disk.
boot-loader file
Use boot-loader file to specify startup software image files.
Syntax
In standalone mode:
boot-loader file boot
boot-package system system-package [ feature feature-package&<1-30> ]
{ all | slot slot-number } { backup | main }
boot-loader file ipe-filename
{ all | slot slot-number } { backup | main }
In IRF mode:
boot-loader file boot
boot-package system system-package [ feature feature-package&<1-30> ]
{ all | chassis chassis-number slot slot-number } { backup | main }
boot-loader file ipe-filename
{ all | chassis chassis-number slot slot-number } { backup | main }
Views
User view
Predefined user roles
network-admin
Parameters boot
boot-package: Specifies the file path of a .bin boot image file, a case-insensitive string. The file must be stored in the root directory of the default storage medium in the system. The maximum length is 63 characters for the storage-medium:/base-filename.bin segments of the file path. For more information about specifying a file, see "Managing the file system."
system
system-package: Specifies the file path of a .bin system image file, a case-insensitive string.
The file must be stored in the root directory of the default storage medium in the system. The maximum length is 63 characters for the storage-medium:/base-filename.bin segments of the file path. For more information about specifying a file, see "Managing the file system."
feature
feature-package: Specifies a space-separated list of up to 30 .bin feature image file paths.
The file paths are case insensitive. The files must be stored in the root directory of the default storage medium in the system. The maximum length is 63 characters for the
storage-medium:/base-filename.bin segments of a file path. For more information about specifying a file, see "Managing the file system."
ipe-filename
: Specifies the file path of an .ipe image package file, a case-insensitive string. The file must be stored in the root directory of the default storage medium in the system. The maximum length is 63 characters for the storage-medium:/base-filename.ipe segments of the file path.
177
all
: Specifies startup images for all cards. If you specify this keyword, the system copies the card-specific images automatically to the root directory of the storage medium on each card. For a successful upgrade, make sure the specified files include the upgrade images for all cards.
slot slot-number
: Specifies the slot number of an MPU. (In standalone mode.)
chassis chassis-number slot slot-number
: Specifies an MPU. The chassis-number argument represents the IRF member ID of the device that holds the MPU. The slot-number argument represents the slot number of the MPU.(In IRF mode.)
backup
: Specifies the files as backup startup image files. Backup images are used only when main images are not available.
main
: Specifies the files as main startup image files. The device always first attempts to start up with main startup files.
Usage guidelines
Use this command to upgrade the startup software images on all MPUs. To upgrade only standby
MPUs, you can also use the boot-loader update command.
The upgrade file must be saved in the root directory of the default storage medium on the active MPU
(in standalone mode) or the global active MPU (in IRF mode).
The system automatically copies the upgrade file to the flash memory on the MPU you are upgrading, and sets images in the file as startup images. If a file with the same name as the upgrade file already exists, you must choose whether to overwrite the existing file. If you specify an .ipe file, the system prompts for a choice to delete or retain the .ipe file after it successfully sets the .bin startup images.
To delete the .ipe file, enter y at the prompt.
The boot-loader file command overwrites the entire startup software image list. To add new startup feature images, specify all feature image files, including feature image files in the old startup software image list. The new startup software image list will contain only the feature image files that are specified in the command.
Examples
# (In standalone mode.) Specify flash:/all.ipe as the main startup image file for the MPU in slot 6.
<Sysname> boot-loader file flash:/all.ipe slot 6 main
Verifying the IPE file and the images............Done.
Images in IPE:
boot.bin
system.bin
This command will set the main startup software images. Continue? [Y/N]:Y
Add images to target slot.
File flash:/boot.bin already exists on slot 6.
File flash:/system.bin already exists on slot 6.
Overwrite the existing files? [Y/N]:Y
Decompressing file boot.bin to flash:/boot.bin........................Done.
Decompressing file system.bin to flash:/system.bin...............................Done.
The images that have passed all examinations will be used as the main startup so ftware images at the next reboot on slot 6.
# (In IRF mode.) Specify flash:/all.ipe as the main startup image file for the MPU in slot 6 on IRF member device 1.
<Sysname> boot-loader file flash:/all.ipe chassis 1 slot 6 main
Verifying the IPE file and the images............Done.
Images in IPE:
boot.bin
system.bin
178
This command will set the main startup software images. Continue? [Y/N]:Y
Add images to target slot.
File flash:/boot.bin already exists on chassis 1 slot 6.
File flash:/system.bin already exists on chassis 1 slot 6.
Overwrite the existing files? [Y/N]:Y
Decompressing file boot.bin to flash:/boot.bin........................Done.
Decompressing file system.bin to flash:/system.bin...............................Done.
The images that have passed all examinations will be used as the main startup so ftware images at the next reboot on chassis 1 slot 6.
Related commands display boot-loader
boot-loader update
Use boot-loader update to synchronize startup images.
Syntax
In standalone mode:
boot-loader update
{ all | slot slot-number }
In IRF mode:
boot-loader update
{ all | chassis chassis-number slot slot-number }
Views
User view
Predefined user roles
network-admin
Parameters all
: Upgrades the standby MPU. (In standalone mode.)
all
: Upgrades all standby MPUs in the IRF fabric. (In IRF mode.)
slot slot-number
: Specifies the slot number of the standby MPU. (In standalone mode.)
chassis
chassis-number slot slot-number: Specifies a standby MPU of the global active MPU. The
chassis-number
argument represents the IRF member ID of the device that holds the standby MPU.
The slot-number argument represents the slot number of the standby MPU. (In IRF mode.)
Usage guidelines
You can use this command to synchronize startup images after adding new MPUs.
In standalone mode, this command synchronizes startup images from the active MPU to the standby
MPU. In IRF mode, this command synchronizes startup images from the global active MPU to standby MPUs.
The images used for synchronization are in the main or backup startup software images list instead of the current software images list (see the display boot-loader command).
•
The main images list is used if the active MPU (in standalone mode) or global active MPU (in
IRF mode) started up with the main startup images.
•
The backup image list is used if the active MPU (in standalone mode) or global active MPU (in
IRF mode) started up with the main startup images.
The startup images synchronized to the standby MPU are set as main startup images, regardless of whether the source startup images are main or backup.
179
To guarantee a successful synchronization and software consistency across the MPUs, perform the following before synchronization:
•
Verify that the current image list on the active MPU or global active MPU contains the same images as the source image list used for synchronization.
•
Make sure that all source startup images are valid.
If an ISSU patch installation or software upgrade has been performed, use the install commit command to update the main startup images on the active MPU (in standalone mode) or global active MPU (in IRF mode) before software synchronization. This command ensures startup image consistency between MPUs.
Examples
# (In standalone mode.) Synchronize startup images from the active MPU to the standby MPU in slot
7.
<Sysname> boot-loader update slot 7
This command will update the specified standby MPU. Continue? [Y/N]:y
Updating. Please wait...
Copying main startup software images to slot 7. Please wait...
Done.
Setting copied images as main startup software images for slot 7...
Done.
Successfully updated the startup software images of slot 7.
# (In IRF mode.) Synchronize startup images from the global active MPU to the MPU in slot 1 on IRF member device 1.
<Sysname> boot-loader update chassis 1 slot 1
This command will update the specified standby MPU. Continue? [Y/N]:y
Updating. Please wait...
Copying main startup software images to chassis 1 slot 1. Please wait...
Done.
Setting copied images as main startup software images for chassis 1 slot 1...
Done.
Successfully updated the startup software images of chassis 1 slot 1.
Related commands display boot-loader install commit
bootrom update
Syntax
In standalone mode:
bootrom update
file file-url slot slot-number-list [ subslot subslot-number-list ]
In IRF mode:
bootrom update
file file-url chassis chassis-number slot slot-number-list [ subslot
subslot-number-list
]
Views
Use bootrom update to load the BootWare image in the default storage medium to the Normal area of BootWare.
User view
180
Predefined user roles
network-admin
Parameters
file file-url
: Specifies the file that contains the BootWare image. The file-url argument represents the file name, a string of 1 to 63 characters.
slot slot-number-list
: Specifies a space-separated list of up to seven slot number items. Each item specifies a card by its slot number or a range of cards in the form of start-slot-number to
end-slot-number
. For example, slot 0 to 1 2. (In standalone mode.)
chassis chassis-number
: Specifies an IRF member device by its member ID. (In IRF mode.)
slot slot-number-list
: Specifies a space-separated list of up to seven slot number items. Each item specifies a card by its slot number or a range of cards in the form of start-slot-number to
end-slot-number
on the specified IRF member device. For example, slot 0 to 1 2. (In IRF mode.)
subslot subslot-number-list
: Specifies a list of up to seven subslot number items. Each item specifies a subcard by its slot number or a range of subcards in the form of start-subslot-number to
end-subslot-number
. If you do not specify subcards, the BootWare image for subcards is not loaded.
This option is not supported in the current software version.
Usage guidelines
If a software upgrade requires upgrading the BootWare image, first use this command to preload the new BootWare image in the default storage medium to the BootWare. This command helps shorten the subsequent upgrade time, reducing the risk of upgrade failure caused by unexpected electricity failure.
To complete the upgrade, reboot the device.
To save space, you can delete the BootWare image from the default storage medium after completing the BootWare image upgrade.
Examples
# Use the file a.bin in the root directory of the flash memory to upgrade the BootWare image.
<Sysname> bootrom update file flash:/a.bin slot 3
This command will update the Boot ROM file on the specified board(s), Continue? [Y/N]:y
Now updating the Boot ROM, please wait...
.............Done.
Related commands boot-loader file
bootrom-update security-check enable
Use bootrom-update security-check enable to enable BootWare image validity check.
Use undo bootrom-update security-check enable to disable BootWare image validity check.
Syntax
Default
BootWare image validity check is enabled.
Views bootrom-update security-check enable undo bootrom-update security-check enable
System view
181
Predefined user roles
network-admin
Usage guidelines
Before a BootWare image upgrade starts, this feature examines the upgrade BootWare image for file validity and incompatibility with hardware. If the BootWare image passes the check, the upgrade process starts. If the image check fails, the system does not perform the upgrade.
Examples
# Enable BootWare image validity check.
<Sysname> system-view
[Sysname] bootrom-update security-check enable
display boot-loader
Use display boot-loader to display current software images and startup software images.
Syntax
In standalone mode:
display boot-loader
[ slot slot-number ]
In IRF mode:
display boot-loader
[ chassis chassis-number [ slot slot-number ] ]
Views
Any view
Predefined user roles
network-admin network-operator
Parameters
slot slot-number
: Specifies the slot number of an MPU. If you do not specify an MPU, this command displays the software images on each MPU. (In standalone mode.)
chassis chassis-number
[ slot slot-number ]: Specifies an IRF member device or an MPU in an IRF member device. The chassis-number argument represents the IRF member ID of the device, and the
slot-number
argument represents the slot number of the MPU on the device. If you do not specify an
IRF member device, this command displays the software images on each MPU in the IRF fabric. If you specify an IRF member device without specifying an MPU, this command displays the software images on each MPU on the specified member device. (In IRF mode.)
Examples
# (In standalone mode.) Display the current software images and startup software images.
<Sysname> display boot-loader
Software images on slot 7:
Current software images:
flash:/7500-cmw710-boot-R7178.bin
flash:/7500-cmw710-system-R7178.bin
Main startup software images:
flash:/7500-cmw710-boot-R7178.bin
flash:/7500-cmw710-system-R7178.bin
Backup startup software images:
None
182
# (In IRF mode.) Display current software images and startup software images.
<Sysname> display boot-loader
Software images on chassis 1 slot 7:
Current software images:
flash:/7500-cmw710-boot-R7178.bin
flash:/7500-cmw710-system-R7178.bin
Main startup software images:
flash:/7500-cmw710-boot-R7178.bin
flash:/7500-cmw710-system-R7178.bin
Backup startup software images:
None
Table 22 Command output
Field Description
Software images on slot slot-number
In standalone mode, this field displays the Comware images on the MPU in the specified slot.
Software images on chassis chassis-id slot slot-number
Current software images
In IRF mode, this field displays the Comware images on the specified MPU. The chassis ID represents the IRF member ID, and the slot number represents the MPU's slot number.
Comware images that have been loaded.
Main startup software images
Backup startup software images
Main Comware images for the next startup.
Backup Comware images for the next startup.
Related commands boot-loader file
version auto-update enable
Use version auto-update enable to enable software synchronization from the active MPU to the standby MPU at startup.
Use undo version auto-update enable to disable this feature.
Syntax version auto-update enable undo version auto-update enable
Default
If software inconsistency is detected at startup, the standby MPU loads the current software images of the active MPU.
Views
System view
Predefined user roles
network-admin
Usage guidelines
This command is available in standalone mode.
183
To ensure that the standby MPU always runs the same software images as the active MPU, configure both the version auto-update enable command and the undo version check ignore command.
The startup software version check feature examines the standby MPU's startup software images for version inconsistency with the active MPU's current software images at startup. If their software versions are different, the standby MPU performs the following operations:
1.
Copies the current software images of the active MPU.
2.
Specifies them as main startup software images
3.
Reboots with these images.
To ensure a successful synchronization in a multiuser environment, make sure no one reboots or swaps MPUs during the software synchronization process. You can configure the information center to output the synchronization status to configuration terminals (see Network Management and
Monitoring Configuration Guide
).
Examples
# Enable software auto-update for the standby MPU.
<Sysname> system-view
[Sysname] version auto-update enable
Related commands version check ignore
version check ignore
Use version check ignore to disable startup software version check for the standby MPU at startup.
Use undo version check ignore to enable this feature.
Syntax version check ignore undo version check ignore
Default
The startup software images on the standby MPU are checked for version inconsistency with the current software images on the active MPU.
Views
System view
Predefined user roles
network-admin
Usage guidelines
This command is available in standalone mode.
When the standby MPU starts up, this command disables the system to examine the standby MPU's startup software images for version inconsistency with the active MPU's current software images.
The standby MPU can start up with a different software version than the active MPU.
As a best practice, use ISSU instead of this command to upgrade software, if possible. The startup software version check feature might fail to work because the software versions of the MPUs are incompatible.
To avoid problems, do not disable startup software version check for the standby MPU unless for software upgrade.
184
To ensure that the standby MPU always runs the same software images as the active MPU, use both the version auto-update enable command and the undo version check ignore command.
Examples
# Enable startup software version check for the standby MPU.
<Sysname> system-view
[Sysname] undo version check ignore
Related commands version auto-update enable
185
ISSU commands
display install active
Use display install active to display active software images.
Syntax
In standalone mode:
display install active
[ slot slot-number ] [ verbose ]
In IRF mode:
display install active
[ chassis chassis-number slot slot-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin network-operator
Parameters
slot slot-number
: Specifies a card by its slot number. If you do not specify this option, the command is applied to all cards in the device. (In standalone mode.)
chassis chassis-number slot slot-number
: Specifies a card on an IRF member. If you do not specify this option, the command is applied to all cards in the IRF fabric. (In IRF mode.)
verbose
: Displays detailed information. If you do not specify this keyword, the command displays only image names.
Examples
# (In standalone mode.) Display active software images.
<Sysname> display install active
Active packages on slot 6:
flash:/boot.bin
flash:/system.bin
flash:/feature.bin
# (In IRF mode.) Display active software images.
<Sysname> display install active
Active packages on chassis 1 slot 6:
flash:/boot.bin
flash:/system.bin
flash:/feature.bin
# (In standalone mode.) Display detailed information about active software images.
<Sysname> display install active verbose
Active packages on slot 6: flash:/boot.bin
[Package]
Vendor: XXX
Product: xxxx
186
Service name: boot
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu
[Component]
Component: boot
Description: boot package flash:/system.bin
[Package]
Vendor: XXX
Product: xxxx
Service name: system
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu
[Component]
Component: system
Description: system package flash:/feature.bin
[Package]
Vendor: XXX
Product: xxxx
Service name: test
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu
[Component]
Component: test
Description: test package
# (In IRF mode.) Display detailed information about active software images.
<Sysname> display install active verbose
Active packages on chassis 1 slot 6: flash:/boot.bin
[Package]
Vendor: xxx
Product: xxxx
Service name: boot
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu
[Component]
Component: boot
Description: boot package flash:/system.bin
[Package]
187
Vendor: xxx
Product: xxxx
Service name: system
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu
[Component]
Component: system
Description: system package flash:/feature.bin
[Package]
Vendor: xxx
Product: xxxx
Service name: test
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu
[Component]
Component: test
Description: test package
Table 23 Command output
Field Description
Active packages on xxx Active software images on the specified slot.
[Package]
Service name
Supported board
[Component]
Related commands install active
display install backup
Detailed information about the software image.
Image type:
•
boot
—Boot image.
•
system
—System image.
•
patch
—Patch image.
•
Any other value indicates a feature image.
Cards supported by the software image:
•
mpu
—MPU.
•
lc
—LPU.
Information about components included in the image file.
Use display install backup to display backup startup software images.
Syntax
In standalone mode:
display install backup
[ slot slot-number ] [ verbose ]
188
In IRF mode:
display install backup
[ chassis chassis-number slot slot-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin network-operator
Parameters
slot slot-number
: Specifies a card by its slot number. If you do not specify this option, the command is applied to all cards in the device. (In standalone mode.)
chassis chassis-number slot slot-number
: Specifies a card on an IRF member. If you do not specify this option, the command is applied to all cards in the IRF fabric. (In IRF mode.)
verbose
: Displays detailed information. If you do not specify this keyword, the command displays only image names.
Usage guidelines
Backup startup images are used only when the main boot or system image is missing or corrupt. For more information, see Fundamental Configuration Guide.
To modify the backup startup image list, you must use the boot-loader file command.
Examples
# (In standalone mode.) Display the backup startup software images.
<Sysname> display install backup
Backup startup software images on slot 6:
flash:/boot-r7178.bin
flash:/system-r7178.bin
# (In IRF mode.) Display the backup startup software images.
<Sysname> display install backup
Backup startup software images on chassis 1 slot 6:
flash:/boot-r7178.bin
flash:/system-r7178.bin
# Display detailed information about backup startup software images.
<Sysname> display install backup verbose
Backup startup software images on slot 6:
flash:/boot-r7178.bin
[Package]
Vendor: HPE
Product: 7500
Service name: boot
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu lpu
[Component]
Component: boot
Description: boot package
flash:/system-r7178.bin
189
[Package]
Vendor: HPE
Product: 7500
Service name: system
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu lpu
[Component]
Component: system
Description: system package
For information about the command output, see Table 23 .
Related commands boot-loader file display install committed
display install committed
Use display install committed to display main startup software images.
Syntax
In standalone mode:
display install committed
[ slot slot-number ] [ verbose ]
In IRF mode:
display install committed
[ chassis chassis-number slot slot-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin network-operator
Parameters
slot slot-number
: Specifies a card by its slot number. If you do not specify this option, the command is applied to all cards in the device. (In standalone mode.)
chassis chassis-number slot slot-number
: Specifies a card on an IRF member. If you do not specify this option, the command is applied to all cards in the IRF fabric. (In IRF mode.)
verbose
: Displays detailed information. If you do not specify this keyword, the command displays only image names.
Usage guidelines
After you execute the install commit command, use the display install committed command to verify that the main startup image list has been updated with the software image change.
Both the install commit and boot-loader file commands modify the main startup software image list.
Examples
# Display the main startup software images.
<Sysname> display install committed
190
Committed packages on slot 6:
flash:/boot-r7178.bin
flash:/system-r7178.bin
flash:/feature.bin
# Display detailed information about main startup software images.
<Sysname> display install committed verbose
Committed packages on slot 6:
flash:/boot-r7178.bin
[Package]
Vendor: HPE
Product: 7500
Service name: boot
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu lpu
[Component]
Component: boot
Description: boot package
flash:/system-r7178.bin
[Package]
Vendor: HPE
Product: 7500
Service name: system
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu lpu
[Component]
Component: system
Description: system package flash:/ssh-feature.bin
[Package]
Vendor: HPE
Product: 7500
Service name: ssh
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu lpu
[Component]
Component: ssh
Description: ssh package
For information about the command output, see Table 23 .
Related commands boot-loader file display install backup install commit
191
display install inactive
Use display install inactive to display inactive software images.
Syntax
In standalone mode:
display install inactive
[ slot slot-number ] [ verbose ]
In IRF mode:
display install inactive
[ chassis chassis-number slot slot-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin network-operator
Parameters
slot slot-number
: Specifies a card by its slot number. If you do not specify this option, the command is applied to all cards in the device. (In standalone mode.)
chassis chassis-number slot slot-number
: Specifies a card on an IRF member. If you do not specify this option, the command is applied to all cards in the IRF fabric. (In IRF mode.)
verbose
: Displays detailed information. If you do not specify this keyword, the command displays only image names.
Usage guidelines
This command displays inactive images in the root directories of the storage media.
Examples
# Display brief information about inactive software images in the root directories of the storage media.
<Sysname> display install inactive
Inactive packages on slot 6:
flash:/ssh-feature.bin
# Display detailed information about inactive software images in the root directories of the storage media.
<Sysname> display install inactive verbose
Inactive packages on slot 6: flash:/ssh-feature.bin
[Package]
Vendor: HPE
Product: 7500
Service name: ssh
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu lpu
[Component]
Component: ssh
Description: ssh package
For information about the command output, see Table 23 .
192
Related commands install deactivate
display install ipe-info
Use display install ipe-info to display the software images included in an .ipe file.
Syntax display install ipe-info
ipe-filename
Views
Any view
Predefined user roles
network-admin network-operator
Parameters
ipe-filename
: Specifies the file path of an .ipe image package file, a case-insensitive string. The file must be stored in the root directory of a storage medium in the system. The maximum length is 1 to
63 characters for the storage-medium:/base-filename.ipe segments of the file path. This length limit does not include the IRF member ID or slot number segment in front of the storage medium segment.
For more information about specifying a file path, see "Managing the file system."
Examples
# Display information about the .ipe file flash:/test.ipe.
<Sysname> display install ipe-info flash:/test.ipe
Verifying the file flash:/test.ipe on slot 6.....Done.
HPE Device images in IPE:
boot.bin
system.bin
Related commands display install package
display install job
Use display install job to display ongoing ISSU activate and deactivate operations.
Syntax display install job
Views
Any view
Predefined user roles
network-admin network-operator
Examples
# (In standalone mode.) Display ongoing ISSU activate and deactivate operations.
<Sysname> display install job
JobID:5
193
Action:install activate flash:/ssh-feature.bin on slot 6
The output shows that the device is executing the install activate flash:/ssh-feature.bin slot 6 command.
# (In IRF mode.) Display ongoing ISSU activate and deactivate operations.
<Sysname> display install job
JobID:5
Action:install activate flash:/ssh-feature.bin on chassis 1 slot 6
The output shows that the device is executing the install activate flash:/ssh-feature.bin chassis 1
slot 6
command.
display install log
Use display install log to display ISSU log information.
Syntax display install log
[ log-id ] [ verbose ]
Views
Any view
Predefined user roles
network-admin network-operator
Parameters
log-id
: Specifies a log entry by its ID. If you do not specify this argument, the command displays all software upgrade-related log entries.
verbose
: Displays detailed ISSU log information. If you do not specify this keyword, the command displays brief ISSU log information.
Usage guidelines
The device creates one log entry for each ISSU operation to track the process and operation result.
The ISSU log can contain a maximum of 50 entries. The latest entry overwrites the oldest entry if the log is full.
Examples
# Display all ISSU log entries.
<Sysname> display install log
Install job 1 started by user root at 04/28/2001 08:39:29.
Job 1 completed successfully at 04/28/2001 08:39:30.
Install job 1 started by user root at 04/28/2001 08:39:29.
Install activate flash:/ssh.bin on slot 7
Job 1 completed successfully at 04/28/2001 08:39:30.
Install job 1 started by user root at 04/28/2001 08:39:29.
Job 1 completed successfully at 04/28/2001 08:39:30.
-----------------------------------------------------------
Install job 2 started by user root at 04/28/2001 08:40:29.
Job 2 completed successfully at 04/28/2001 08:40:30.
Install job 2 started by user root at 04/28/2001 08:40:29.
Install activate flash:/route.bin on slot 7
Job 2 completed successfully at 04/28/2001 08:40:30.
194
Install job 2 started by user root at 04/28/2001 08:40:29.
Job 2 completed successfully at 04/28/2001 08:40:30.
# Displays detailed information about ISSU log entry 1.
<Sysname> display install log 1 verbose
Install job 1 started by user root at 04/28/2001 08:39:29.
Job 1 completed successfully at 04/28/2001 08:39:30.
Install job 1 started by user root at 04/28/2001 08:39:29.
Install activate flash:/ssh.bin on slot 7
Job 1 completed successfully at 04/28/2001 08:39:30.
Install job 1 started by user root at 04/28/2001 08:39:29.
Job 1 completed successfully at 04/28/2001 08:39:30.
Detail of activating packages on slot 7.
Get upgrade policy successfully.
Detail of activating packages on slot 7.
Uncompress package to system successfully.
Remove files from system successfully.
Related commands reset install log-history oldest
display install package
Use display install package to display software image file information.
Syntax display install package
{ filename | all } [ verbose ]
Views
Any view
Predefined user roles
network-admin network-operator
Parameters
filename
: Specifies the file path of a .bin software image file, a case-insensitive string. The file must be stored in the root directory of a storage medium in the system. The maximum length is 1 to 63 characters for the storage-medium:/base-filename.ipe segments of the file path. This length limit does not include the IRF member ID or slot number segment in front of the storage medium segment.
For more information about specifying a file path, see "Managing the file system."
all
: Specifies all software image files in the root directories of the active MPU's storage media. (In standalone mode.)
all
: Specifies all software image files in the root directories of the storage media on the global active
MPU. (In IRF mode.)
verbose
: Displays detailed information. If you do not specify this keyword, the command displays only basic software image information.
Examples
# Display information about system.bin.
<Sysname> display install package flash:/system.bin
flash:/system.bin
195
[Package]
Vendor: HPE
Product: 7500
Service name: system
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu
# Display detailed information about system.bin.
<Sysname> display install package flash:/system.bin verbose
flash:/system.bin
[Package]
Vendor: HPE
Product: 7500
Service name: system
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu
[Component]
Component: system
Description: system package
For more information about the command output, see Table 23
.
display install which
Use display install which to display all software image files that include a specific component or file.
Syntax
In standalone mode:
display install which
{ component name | file filename } [ slot slot-number ]
In IRF mode:
display install which
{ component name | file filename } [ chassis chassis-number slot
slot-number
]
Views
Any view
Predefined user roles
network-admin network-operator
Parameters
component name
: Specifies a component name.
file
filename: Specifies a file name in base-filename.extension format, a case-insensitive string of 1 to 63 characters. It cannot contain path information.
slot slot-number
: Specifies a card by its slot number. If you do not specify this option, the command is applied to all cards in the device. (In standalone mode.)
chassis chassis-number slot slot-number
: Specifies a card on an IRF member. If you do not specify this option, the command is applied to all cards in the IRF fabric. (In IRF mode.)
196
Usage guidelines
A component is a collection of features. The features of a component are installed or uninstalled at the same time.
When the system displays a component or file error, use this command to identify the relevant image files before you make a software upgrade decision.
This command searches only the root directory of the storage medium.
Examples
# Display all software image files that include sshc.cli.
<Sysname> display install which file sshc.cli
File sshc.cli is in following packages on slot 6:
Verifying the file flash:/system.bin on slot 6...Done.
Verifying the file flash:/boot.bin on slot 6...Done.
flash:/system.bin
[Package]
Vendor: xxx
Product: xxxx
Service name: ssh
Platform version: 7.1.045
Product version: Release 7178
Supported board: mpu, lc, sfc
Table 24 Command output
Field Description
Verifying the file The system was verifying the validity of the file.
For more information about other fields in the command output, see
display issu state
Use display issu state to display ISSU status information.
Syntax display issu state
Views
Any view
Predefined user roles
network-admin network-operator
Usage guidelines
During an ISSU that uses issu commands, you can use this command to verify the ISSU status and determine what to do next.
This command does not apply to an ISSU that uses install commands, because the ISSU state machine is not involved.
Examples
# Display ISSU status information when no upgrade is taking place.
197
<Sysname> display issu state
ISSU state: Init
Compatibility: Unknown
Work state: Independent active
Upgrade method: Chassis by chassis
Upgraded chassis:
chassis 2
Current upgrading chassis: None
Previous version list:
boot: 7.1.045, Release 7148
system: 7.1.045, Release 7148
ssh: 7.1.045, Release 7148
Previous software images:
flash:/boot.bin
flash:/system.bin
flash:/ssh.bin
Upgrade version list:
system: 7.1.045, Release 7178
ssh: 7.1.045, Release 7178
Upgrade software images:
flash:/system04.bin
flash:/ssh04.bin
# Display ISSU status information while the issu load command is being executed.
<Sysname> display issu state
ISSU state: Loading
Compatibility: Incompatible
Work state: Independent active
Upgrade method: Chassis by chassis
Upgraded chassis:
chassis 2
Current upgrading chassis: None
Previous version list:
boot: 7.1.045, Release 7148
system: 7.1.045, Release 7148
ssh: 7.1.045, Release 7148
Previous software images:
flash:/boot.bin
flash:/system.bin
flash:/ssh.bin
Upgrade version list:
system: 7.1.045, Release 7178
ssh: 7.1.045, Release 7178
Upgrade software images:
flash:/system04.bin
flash:/ssh04.bin
# Display ISSU status information on the original master after the issu load command is completed.
<Sysname> display issu state
ISSU state: Loaded
198
Compatibility: Incompatible
Work state: Independent active
Upgrade method: Chassis by chassis
Upgraded chassis:
chassis 2
Current upgrading chassis: None
Previous version list:
boot: 7.1.045, Release 7148
system: 7.1.045, Release 7148
ssh: 7.1.045, Release 7148
Previous software images:
flash:/boot.bin
flash:/system.bin
flash:/ssh.bin
Upgrade version list:
system: 7.1.045, Release 7178
ssh: 7.1.045, Release 7178
Upgrade software images:
flash:/system04.bin
flash:/ssh04.bin
Table 25 Command output
Field Description
ISSU state
ISSU status:
•
Init
—The ISSU process has not started or has finished.
•
Loading
—The system is executing the issu load command.
•
Loaded
—The issu load command is completed.
•
Switching
—The system is executing the issu run switchover command.
•
Switchover
—The issu run switchover command is completed.
•
Accepted
—The issu accept command is completed.
•
Committing
—The system is executing the issu commit command.
•
Unknown
—An upgrade is in process. This value might appear when you execute the command on an original standby MPU.
Compatibility
Work state
Upgrade method
Previous version list
Version compatibility:
•
Compatible
.
•
Incompatible
.
•
Unknown
—No upgrade is in process.
Operating state of the device:
•
Normal
—The device is operating correctly.
•
Independent active
—When you perform an ISSU for an incompatible version, the standby MPU that is upgraded first enters this state. In this state, the two
MPUs of the device are running different software versions.
Upgrade mode. The value can be Chassis by chassis.
On a multichassis IRF fabric, one or more subordinate members are upgraded first, and then the original master and the remaining subordinate members are upgraded.
Software versions running on the device before the ISSU.
If you execute this command on an original standby MPU during an ISSU for an incompatible version, the value of this field is Unknown.
199
Field Description
Previous software images
Software images running on the device before the ISSU.
If you execute this command on an original standby MPU during an ISSU for an incompatible version, the value of this field is Unknown.
Upgrade version list
Upgrade software images
Software versions to upgrade to.
If you execute this command on an original standby MPU during an ISSU for an incompatible version, the value of this field is Unknown.
Software images used for the upgrade.
If you execute this command on an original standby MPU during an ISSU for an incompatible version, the value of this field is Unknown.
Related commands issu accept issu commit issu load issu run switchover
display version comp-matrix
Use display version comp-matrix to display version compatibility information and identify the upgrade method.
Syntax display version comp-matrix display version comp-matrix file
{ boot filename | system filename | feature filename&<1-30> } *
display version comp-matrix file ipe ipe-filename
Views
Any view
Predefined user roles
network-admin network-operator
Parameters boot
: Specifies a boot image file.
system
: Specifies a system image file.
feature
: Specifies feature image files. You can specify a space-separated list of up to 30 feature image files.
filename
: Specifies the name of a software image file on the active MPU (in standalone mode) or global active MPU (in IRF mode), in the format storage-medium:/base-filename.bin. It must be a case-insensitive string of 1 to 63 characters and cannot contain chassis or slot information.
ipe ipe-filename
: Specifies the name of an .ipe file on the active MPU (in standalone mode) or global active MPU (in IRF mode), in the format storage-medium:/base-filename.ipe. It must be a case-insensitive string of 1 to 63 characters and cannot contain chassis or slot information.
Examples
# Display compatibility information for the running images.
<Sysname> display version comp-matrix
200
Boot image: flash:/cmw710-boot-r7178.bin
Version:
7.1.045
System image: flash:/cmw710-system-r7178.bin
Version:
V700R001B45D001
Version compatibility list:
V700R001B45D001
Version dependency boot list:
7.1.045
Feature image: flash:/cmw710-cfa-a7178.bin
Version:
V700R001B45D003
Version compatibility list:
V700R001B45D003
Version dependency system list:
V700R001B45D001
V700R001B45D002
# Display compatibility information for flash:/boot-e2205.bin, flash:/system-e2205.bin, and
flash:/dhcp-e2205.re.bin
, as well as the recommended ISSU method. (In this example, the specified images are incompatible with the running images.)
<Sysname> display version comp-matrix file boot flash:/boot-e2205.bin system flash:/system-e2205.bin feature flash:/dhcp-e2205.re.bin
Verifying the flash:/dhcp-e2205.re.bin on slot 7............Done.
Verifying the file flash:/boot-e2205.bin on slot 7............Done.
Verifying the file flash:/system-e2205.bin on slot 7............Done.
Boot image: flash:/boot-e2205.bin
Version:
7.1.045
System image: flash:/system-e2205.bin
Version:
V200R001B45D012
Version compatibility list:
V200R001B45D012
Version dependency boot list:
7.1.045
Feature image: flash:/dhcp-e2205.re.bin
Version:
V200R001B45D012
Version compatibility list:
V200R001B45D012
Version dependency system list:
V200R001B45D012
V200R001B45D014
Incompatible upgrade.
201
# (In standalone mode.) Display compatibility information for cmw710-cfa-r7178.bin and the recommended ISSU methods. (In this example, the specified image is compatible with the running images.)
<Sysname> display version comp-matrix file feature flash:/cmw710-cfa-r7178.bin
Verifying the file flash:/boot-e2205.bin system on slot 6............Done.
Feature image: flash:/cmw710-cfa-r7178.bin
Version:
V700R001B45D002
Version compatibility list:
V700R001B45D001
V700R001B45D002
Version dependency system list:
V700R001B45D001
V700R001B45D002
Slot Upgrade Way
6 Service Upgrade
7 Service Upgrade
Influenced service according to following table on slot 6: flash:/cmw710-cfa-a7125.bin
CFA
Influenced service according to following table on slot 7: flash:/cmw710-cfa-a7125.bin
CFA
# (In IRF mode.) Display compatibility information for cmw710-cfa-r7178.bin and the recommended
ISSU methods. (In this example, the specified image is compatible with the running images.)
<Sysname> display version comp-matrix file feature flash:/cmw710-cfa-r7178.bin
Verifying the file flash:/cmw710-cfa-r7178.bin system on chassis 1 slot 6............Done.
Feature image: flash:/cmw710-cfa-r7178.bin
Version:
V700R001B45D002
Version compatibility list:
V700R001B45D001
V700R001B45D002
Version dependency system list:
V700R001B45D001
V700R001B45D002
Chassis Slot Upgrade Way
1 6 Service Upgrade
1 7 Service Upgrade
2 6 Service Upgrade
2 7 Service Upgrade
Influenced service according to following table on chassis 1 slot 6: flash:/cmw710-cfa-r7178.bin
CFA
202
Influenced service according to following table on chassis 1 slot 7: flash:/cmw710-cfa-r7178.bin
CFA
Influenced service according to following table on chassis 2 slot 6: flash:/cmw710-cfa-r7178.bin
CFA
Influenced service according to following table on chassis 2 slot 7: flash:/cmw710-cfa-r7178.bin
CFA
Table 26 Command output
Field Description
Verifying the file
Version compatibility list
The system was verifying the validity of the file.
•
Under a system image, this field shows all system image versions that are compatible with the system image.
•
Under a feature image, this field shows all feature image versions that are compatible with the feature image.
Version dependency boot list
Boot image versions that support the system image. To install the system image, you must install one of the boot image versions that are in the list.
Version dependency system list
Influenced service according to following table
Incompatible upgrade
Chassis
Slot
Upgrade Way
System image versions that support the feature image. To install the feature image, you must install one of the system image versions that is in the list.
Services that will be affected by the upgrade.
This field is displayed only for compatible versions.
You are upgrading the software to an incompatible version.
Member ID of the device in the IRF fabric. This field is displayed only for compatible versions in IRF mode.
Slot number of the card. This field is displayed only for compatible versions.
ISSU method to be used for a compatible version:
•
Service Upgrade
—Service-level incremental upgrade.
•
File Upgrade
—File-level incremental upgrade.
•
Reboot
—Upgrades software by rebooting both data and control planes. This method disrupts services.
This field is displayed only for compatible versions.
For more information about ISSU methods, see Fundamentals
Configuration Guide
.
Related commands issu load
install abort
Use install abort to abort an ISSU operation.
Syntax install
abort [ job-id ]
203
Views
User view
Predefined user roles
network-admin
Parameters
job-id
: Specifies the job ID of an ISSU operation. If you do not specify this argument, the command aborts all ongoing software image activate and deactivate operations.
Usage guidelines
The system creates a software image management job each time you use the install activate,
install add
, install commit, install deactivate, or install remove command. Each job represents one command and is assigned a unique job ID. You can abort only ongoing activate and deactivate operations.
To obtain the ID of a job, use the display install job command.
Examples
# Abort a software image operation.
<Sysname> install abort
Related commands display install job
install activate
Use install activate to activate software images, or identify the ISSU method and possible impact on the device.
Syntax
In standalone mode:
install activate
{ boot filename | system filename | feature filename&<1-30> } * slot slot-number
[ test ]
install activate patch filename
{ all | slot slot-number }
In IRF mode:
install activate
{ boot filename | system filename | feature filename&<1-30> } * chassis
chassis-number
slot slot-number [ test ]
install
activate patch filename { all | chassis chassis-number slot slot-number }
Views
User view
Predefined user roles
network-admin
Parameters boot
: Specifies a boot image file. This option is not supported in the current software version.
system
: Specifies a system image file. This option is not supported in the current software version.
feature
: Specifies feature image files. You can specify a space-separated list of up to 30 feature image files.
patch
: Specifies a patch image file.
204
filename
: Specifies the file path of a .bin software image file, a case-insensitive string. The file must be stored in the root directory of a storage medium in the system. The maximum length is 1 to 63 characters for the storage-medium:/base-filename.bin segments of the file path. This length limit does not include the IRF member ID or slot number segment in front of the storage medium segment.
For more information about specifying a file path, see "Managing the file system."
all
: Specifies all cards.
slot slot-number
: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number
: Specifies a card on an IRF member. (In IRF mode.)
test
: Only identifies the ISSU method to be used for the upgrade. If you do not specify this keyword, the command activates the specified software images.
Usage guidelines
Images run in memory immediately after they are activated. However, only images activated by using the install activate patch filename all command still run in memory after a reboot. For other images to take effect after a reboot, you must commit the software change by using the install
commit
command.
In standalone mode, follow these guidelines:
•
If you specify the active MPU, the command takes effect on the active MPU and all LPUs.
•
If you specify the standby MPU, the command takes effect only on the standby MPU.
•
If the specified files are not saved on the MPU to be upgraded, the command copies the images to the MPU automatically.
In IRF mode, follow these guidelines:
•
If you specify the global active MPU, the command takes effect on the global active MPU and all
LPUs.
•
If you specify a standby MPU, the command takes effect on the standby MPU.
•
If the specified files are not saved on the MPU to be upgraded, the command copies the images to the MPU automatically.
At reboot, a subordinate device automatically synchronizes the master device's configuration and status data. You must wait for the synchronization to complete before using the install activate command on the subordinate device. To check the synchronization progress, use the display
device
and display mdc commands. The synchronization is completed when the following conditions are met:
•
All cards of the subordinate device are in normal state.
•
All MDCs are in active state.
Examples
# (In standalone mode.) Identify the ISSU method for feature upgrade with ssh2.bin on the standby
MPU (in slot 7) and the upgrade impact.
<Sysname> install activate feature flash:/ssh2.bin slot 7 test
Copying file flash:/ssh2.bin to slot7#flash:/ssh2.bin......Done.
Verifying the file flash:/ssh2.bin on slot 7.....Done.
Upgrade summary according to following table: flash:/ssh2.bin
Running Version New Version
Release 7148 Release 7178
Slot Upgrade Way
7 Service Upgrade
205
Influenced service according to following table: flash:/ssh2.bin
SSH IFMGR CFA LAGG
The output shows that a service upgrade is recommended. The SSH, IFMGR, CFA, and LAGG modules will be rebooted during the upgrade.
# (In IRF mode.) Identify the ISSU method for feature upgrade with ssh2.bin on the standby MPU in slot 7 of IRF member 1 and the upgrade impact.
<Sysname>install activate feature flash:/ssh2.bin chassis 1 slot 7 test
Copying file flash:/ssh2.bin to chassis1#slot7#flash:/ssh2.bin......Done.
Verifying the file flash:/ssh2.bin on chassis1 slot 7.....Done.
Upgrade summary according to following table: flash:/ssh2.bin
Running Version New Version
Release 7148 Release 7178
Chassis Slot Upgrade Way
1 7 Service Upgrade
Influenced service according to following table: flash:/ssh2.bin
SSH IFMGR CFA LAGG
The output shows that a service upgrade is recommended. The SSH, IFMGR, CFA, and LAGG modules will be rebooted during the upgrade.
# (In standalone mode.) Activate the system image in file system.bin and feature images in file
feature.bin
on the standby MPU (in slot 7).
<Sysname> install activate system flash:/system.bin feature flash:/feature.bin slot 7
Copying file flash:/system.bin to slot7#flash:/system.bin......Done.
Verifying the file flash:/system.bin on slot 7.....Done.
Copying file flash:/feature.bin to slot7#flash:/feature.bin......Done.
Verifying the file flash:/feature.bin on slot 7.....Done.
Upgrade summary according to following table: flash:/system.bin
Running Version New Version
Release 7148 Release 7178 flash:/feature.bin
Running Version New Version
None Release 7178
Slot Upgrade Way
7 Service Upgrade
Upgrading software images to compatible versions. Continue? [Y/N]:y
This operation maybe take several minutes, please wait.......................................................................Done.
206
# (In IRF mode.) Activate the feature images in file feature.bin on the standby MPU in slot 7 of IRF member 1.
<Sysname> install activate feature flash:/feature.bin chassis 1 slot 7
Copying file flash:/feature.bin to chassis1#slot7#flash:/feature.bin......Done.
Verifying the file flash:/feature.bin on chassis 1 slot 7.....Done.
Upgrade summary according to following table: flash:/route-feature.bin
Running Version New Version
None Release 7178
Chassis Slot Upgrade Way
1 7 Service Upgrade
Upgrading software images to compatible versions. Continue? [Y/N]:y
This operation maybe take several minutes, please wait.......................................................................Done.
Table 27 Command output
Field Description
Verifying the file
Upgrade summary according to following table
Running Version
The system was verifying the validity of the file.
Upgrade summary.
Version number of the running software.
New Version
Chassis
Slot
Upgrade Way
Version number of the new software.
Member ID of the device in the IRF fabric.
This field is available only in IRF mode.
Number of the slot where the card resides.
ISSU methods:
•
Service Upgrade
—Service-level incremental upgrade.
•
File Upgrade
—File-level incremental upgrade. The upgrade involves only hidden program files and does not affect the operation of the system or services.
•
Reboot
—Upgrading software by rebooting both data and control planes. This method disrupts services.
This field is displayed only for an upgrade to a compatible version.
Influenced service according to following table
Related commands display install active install commit install deactivate
Services influenced by the upgrade.
install add
Use install add to decompress an .ipe file.
207
Syntax install
add ipe-filename medium-name:
Views
User view
Predefined user roles
network-admin
Parameters
ipe-filename
: Specifies the file path of an .ipe image package file, a case-insensitive string. The file must be stored in the root directory of a storage medium in the system. The maximum length is 1 to
63 characters for the storage-medium:/base-filename.ipe segments of the file path. This length limit does not include the IRF member ID or slot number segment in front of the storage medium segment.
medium-name
: Specifies the name of the destination storage medium for the software images.
•
To specify a storage medium on the active MPU (in standalone mode) or global active MPU (in
IRF mode), specify only the storage medium, for example, flash.
•
To specify a storage medium on the standby MPU in standalone mode, use the format
slotslot-number#storage-medium
.
•
To specify a storage medium on a global standby MPU in IRF mode, use the format
chassischassis-number#slotslot-number#storage-medium
.
Usage guidelines
To use install commands for upgrade, you must use .bin image files. If the upgrade file is an .ipe file, use this command to decompress the .ipe file before you start the upgrade.
To identify software images that are included in an .ipe file, use the display install ipe-info command.
Examples
# Decompress all.ipe to the flash memory.
<Sysname> install add flash:/all.ipe flash:
Verifying the file flash:/all.ipe on slot 6...Done.
Decompressing file boot.bin to flash:/boot.bin.......................Done.
Decompressing file system.bin to flash:/system.bin.................................Done.
install commit
Use install commit to commit software changes.
Syntax install
commit
Views
User view
Predefined user roles
network-admin
Usage guidelines
This command revises the main startup software image list to be the same as the committed image list. Software changes take effect at the next startup.
208
You must execute this command after using the following commands:
•
The install activate command in an incremental upgrade.
•
The install deactivate command.
In a reboot upgrade, the install activate command revises both the current and startup software image lists. You do not need to commit software changes.
Both the install commit and boot-loader file commands change main startup software images. To change backup startup images or add inactive images as main startup images, however, you must use the boot-loader file command.
For more information about main and backup startup software images, see Fundamental
Configuration Guide
.
Examples
# Commit software changes.
<Sysname> install commit
This operation will take several minutes, please wait...........................Done.
Related commands install activate install deactivate
install deactivate
Use install deactivate to deactivate feature images and patch images.
Syntax
In standalone mode:
install deactivate
feature filename&<1-30> slot slot-number
install deactivate patch filename
{ all | slot slot-number }
In IRF mode:
install deactivate
feature filename&<1-30> chassis chassis-number slot slot-number
install
deactivate patch filename { all | chassis chassis-number slot slot-number }
Views
User view
Predefined user roles
network-admin
Parameters feature
: Specifies feature image files. You can specify a space-separated list of up to 30 feature image files.
patch
: Specifies a patch image file.
filename
: Specifies the file path of a .bin software image file on the target slot, a case-insensitive string of 1 to 63 characters in the storage-medium:/base-filename.bin format. The file must be stored in the root directory of the storage medium. The file path cannot include slot or chassis information.
all
: Specifies all cards.
slot slot-number
: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number
: Specifies a card on an IRF member. (In IRF mode.)
209
Usage guidelines
You can deactivate only active feature and patch images.
To prevent deactivated images from running after a reboot, you must commit the software changes by using the install commit command.
At reboot, a subordinate device automatically synchronizes the master device's configuration and status data. You must wait for the synchronization to complete before using the install deactivate command on the subordinate device. To check the synchronization progress, use the display
device
and display mdc commands. The synchronization is completed when the following conditions are met:
•
All cards in the subordinate device are in normal state.
•
All MDCs are in active state.
Examples
# (In standalone mode.) Deactivate the patch images in route-patch.bin on slot 6.
<Sysname> install deactivate patch flash:/route-patch.bin slot 6
# (In IRF mode.) Deactivate the patch images in route-patch.bin on slot 6 of IRF member 1.
<Sysname> install deactivate feature flash:/route-feature.bin chassis 1 slot 6
Related commands display install active display install inactive
install remove
Use install remove to delete inactive software images.
Syntax
In standalone mode:
install remove
[ slot slot-number ] { filename | inactive }
In IRF mode:
install remove
[ chassis chassis-number slot slot-number ] { filename | inactive }
Views
User view
Predefined user roles
network-admin
Parameters
slot slot-number
: Specifies a card by its slot number. If you do not specify this option, the command is applied to all cards in the device. (In standalone mode.)
chassis chassis-number slot slot-number
: Specifies a card on an IRF member. If you do not specify this option, the command is applied to all cards in the IRF fabric. (In IRF mode.)
filename
: Specifies the file path of a .bin software image file on the target slot, a case-insensitive string of 1 to 63 characters in the storage-medium:/base-filename.bin. The file must be stored in the root directory of the storage medium. The file path cannot include slot or chassis information.
inactive
: Deletes all inactive software image files in the root directories of the specified storage media.
210
Usage guidelines
This command permanently deletes the software image file from the device. You cannot use the
install
abort command to abort the operation.
Examples
# Delete inactive software image file flash:/ssh-feature.bin.
<Sysname> install remove flash:/ssh-feature.bin
install verify
Use install verify to verify the software change confirmation status and software image integrity and consistency.
Syntax install verify
Views
User view
Predefined user roles
network-admin
Usage guidelines
If some software images are not integral or some activated/deactivated software images are not confirmed, the following problems might occur:
•
A switchover might not occur as expected.
•
The MPUs might run software images of different versions after a reboot or even cannot reboot correctly.
To solve the problems, perform one of the following tasks:
•
Download and install the software images again to ensure software integrity.
•
Use the install activate, install deactivate, and install commit commands as appropriate to guarantee software image consistency.
Examples
# (In standalone mode.) Verify the software change confirmation status and software image integrity and consistency.
<Sysname> install verify
Active packages on slot 7 are the reference packages.
Packages will be compared with the reference packages.
This operation will take several minutes, please wait...
Verifying packages on slot 6:
Start to check active package completeness.
Verifying the file flash:/boot-r7178.bin on slot 6.....................Done.
flash:/boot-r7178.bin verification successful.
Verifying the file flash:/system-r7178.bin on slot 6.....................Done.
flash:/system-r7178.bin verification successful.
Start to check active package consistency.
Active packages are consistent with committed packages on their own board.
Active packages are consistent with the reference packages.
Verifying packages on slot 7:
Start to check active package completeness.
211
Verifying the file flash:/boot-r7178.bin on slot 7.....................Done.
flash:/boot-r7178.bin verification successful.
Verifying the file flash:/system-r7178.bin on slot 7.....................Done.
flash:/system-r7178.bin verification successful.
Start to check active package consistency.
Active packages are consistent with committed packages on their own board.
Active packages are consistent with the reference packages.
Verification is done.
# (In IRF mode.) Verify the software change confirmation status and software image integrity and consistency.
<Sysname> install verify
Active packages on slot 7 are the reference packages.
Packages will be compared with the reference packages.
This operation will take several minutes, please wait...
Verifying packages on chassis 1 slot 6:
Start to check active package completeness.
Verifying the file flash:/boot-r7178.bin on slot 6.....................Done.
flash:/boot-r7178.bin verification successful.
Verifying the file flash:/system-r7178.bin on slot 6.....................Done.
flash:/system-r7178.bin verification successful.
Start to check active package consistency.
Active packages are consistent with committed packages on their own board.
Active packages are consistent with the reference packages.
Verifying packages on chassis 1 slot 7:
Start to check active package completeness.
Verifying the file flash:/boot-r7178.bin on slot 6.....................Done.
flash:/boot-r7178.bin verification successful.
Verifying the file flash:/system-r7178.bin on slot 6.....................Done.
flash:/system-r7178.bin verification successful.
Start to check active package consistency.
Active packages are consistent with committed packages on their own board.
Active packages are consistent with the reference packages.
Verification is done.
issu accept
Use issu accept to accept the upgrade to a compatible version.
Syntax
issu accept
Views
User view
Predefined user roles
network-admin
Usage guidelines
You can execute the issu commit command to finish the ISSU process without executing this command.
212
The issu accept command does not apply to the ISSU to an incompatible version. The system will display an error message if you execute this command during this type of ISSU.
Examples
# Accept the upgrade to a compatible version.
<Sysname> issu accept
Related commands issu load issu run switchover
issu commit
Use issu commit to complete an ISSU upgrade to a compatible version.
Syntax
issu commit chassis chassis-number
Views
User view
Predefined user roles
network-admin
Parameters
chassis chassis-number
: Specifies the member ID of the original master or a subordinate member that has not been upgraded.
Usage guidelines
On a multichassis IRF fabric, use this command to upgrade subordinate members in turn. You must wait for the upgraded subordinate member to start up again and join the IRF fabric before upgrading another subordinate member. After all members are upgraded, the ISSU status changes to Init and the ISSU process ends.
At reboot, a subordinate device automatically synchronizes the master device's configuration and status data. You must wait for the synchronization to complete before using the issu commit command on the subordinate device. To check the synchronization progress, use the display
device
and display mdc commands. The synchronization is completed when the following requirements are met:
•
All cards in the subordinate device are in normal state.
•
All MDCs are in active state.
Examples
# Upgrade the members that have not been upgraded during an ISSU to a compatible version. (In this example, the IRF fabric has four members, and only the member with the ID 2 has been upgraded.)
<Sysname> issu commit chassis 3
Copying file flash:/feature.bin to chassis3#slot7#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 3 slot 7..............Done.
Upgrade summary according to following table: flash:/feature.bin
Running Version New Version
Release 7148 Release 7178
213
Chassis Slot Upgrade Way
3 6 Service Upgrade
3 7 Service Upgrade
Upgrading software images to compatible versions. Continue? [Y/N]:y
<Sysname> issu commit chassis 4
Copying file flash:/feature.bin to chassis4#slot6#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 4 slot 6..............Done.
Copying file flash:/feature.bin to chassis4#slot7#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 4 slot 7..............Done.
Upgrade summary according to following table: flash:/feature.bin
Running Version New Version
Release 7148 Release 7178
Chassis Slot Upgrade Way
4 6 Service Upgrade
4 7 Service Upgrade
Upgrading software images to compatible versions. Continue? [Y/N]:y
<Sysname> issu commit chassis 1
Copying file flash:/feature.bin to chassis1#slot6#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 1 slot 6..............Done.
Copying file flash:/feature.bin to chassis1#slot7#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 1 slot 7..............Done.
Upgrade summary according to following table: flash:/feature.bin
Running Version New Version
Release 7148 Release 7178
Chassis Slot Upgrade Way
1 6 Service Upgrade
1 7 Service Upgrade
Upgrading software images to compatible versions. Continue? [Y/N]:y
For information about the command output, see Table 26 .
Related commands issu accept issu load issu run switchover
issu load
Use issu load to load the upgrade images for standby MPUs as the main startup software images.
Syntax issu load file
{ boot filename | system filename | feature filename&<1-30> } * chassis
chassis-number
&<1-3>
214
issu load file ipe ipe-filename chassis
chassis-number&<1-3>
Views
User view
Predefined user roles
network-admin
Parameters boot
: Specifies a boot image file.
system
: Specifies a system image file.
feature
: Specifies feature image files. You can specify a space-separated list of up to 30 feature image files.
filename
: Specifies the file path of a .bin software image file, a case-insensitive string of 1 to 63 characters in the storage-medium:/base-filename.bin format. The file must be stored in the root directory of the storage medium on the global active MPU. If the storage medium is partitioned, the files must be saved in the root directory of the first partition. The file path cannot include chassis information.
ipe ipe-filename
: Specifies the file path of an .ipe file, a case-insensitive string of 1 to 63 characters in the format storage-medium:/base-filename.ipe. The file must be stored in the root directory of the storage medium on the global active MPU. If the storage medium is partitioned, the files must be saved in the root directory of the first partition. The file path cannot include chassis information.
chassis chassis-number
: Specifies the member ID of a subordinate member. For a compatible upgrade, you can specify only one member ID. For an incompatible upgrade, you can specify a space-separated list of up to three member IDs.
Usage guidelines
You may upgrade all or some of the software images. If you are upgrading only some of the images, make sure the new images are compatible with the images that are not to be upgraded. The upgrade will fail if a conflict exists.
For successful upgrade, perform the following tasks before you execute this command:
1.
Use the display device command to verify that all cards are not in Fault state.
2.
Use the display mdc command to verify that all MDCs are in active state.
This command checks the version compatibility and upgrades the specified MPUs with the specified software images.
Examples
# Upgrade member device 2 (a subordinate member) with the feature image file flash:/feature.bin.
(In this example, the image is compatible with the running images.)
<Sysname> issu load file feature flash:/feature.bin chassis 2
This operation will delete the rollback point information for the previous upgrade and maybe get unsaved configuration lost. Continue? [Y/N]:Y
Verifying the file flash:/feature.bin on chassis 1 slot 6...Done.
Copying file flash:/feature.bin to chassis2#slot6#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 2 slot 6...Done.
Copying file flash:/feature.bin to chassis2#slot7#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 2 slot 7...Done.
Upgrade summary according to following table: flash:/feature.bin
Running Version New Version
215
Release 7148 Release 7178
Chassis Slot Upgrade Way
2 2 Service Upgrade
2 3 Service Upgrade
2 4 Service Upgrade
2 6 Service Upgrade
2 7 Service Upgrade
Upgrading software images to compatible versions. Continue? [Y/N]:y
# Upgrade member devices 3 and 4 (subordinate members) with the feature image file
flash:/feature.bin
. (In this example, the image is incompatible with the running images.)
<Sysname>issu load file feature flash:/feature.bin chassis 3 4
This operation will delete the rollback point information for the previous upgrade and maybe get unsaved configuration lost. Continue? [Y/N]:Y
Verifying the file flash:/feature.bin on chassis 1 slot 6...Done.
Copying file flash:/feature.bin to chassis3#slot6#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 3 slot 6...Done.
Copying file flash:/feature.bin to chassis3#slot7#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 3 slot 7...Done.
Copying file flash:/feature.bin to chassis4#slot6#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 4 slot 6...Done.
Copying file flash:/feature.bin to chassis4#slot7#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 4 slot 7...Done.
Upgrade summary according to following table: flash:/feature.bin
Running Version New Version
Release 7148 Release 7178
Chassis Slot Upgrade Way
3 2 Reboot
3 3 Reboot
3 4 Reboot
3 6 Reboot
3 7 Reboot
4 2 Reboot
4 3 Reboot
4 4 Reboot
4 6 Reboot
4 7 Reboot
Upgrading software images to incompatible versions. Continue? [Y/N]:y
Table 28 Command output
Field Description
Verifying the file The system was verifying the validity of the file.
Chassis Member ID of the device in the IRF fabric.
216
Field Description
Slot Slot number of the card.
Upgrade Way
ISSU method:
•
Service Upgrade
—Service-level incremental upgrade.
•
File Upgrade
—File-level incremental upgrade.
•
Reboot
—Upgrading software by rebooting both data and control planes. This method disrupts services.
For more information about ISSU methods, see Fundamentals Configuration
Guide
.
issu rollback-timer
Use issu rollback-timer to set the automatic rollback timer.
Use undo issu rollback-timer to restore the default.
Syntax issu
rollback-timer minutes
undo issu rollback-timer
Default
The automatic rollback interval is 45 minutes.
Views
System view
Predefined user roles
network-admin
Parameters
minutes
: Specifies the automatic rollback interval in minutes, in the range of 0 to 120. Setting it to 0 disables automatic rollback.
Usage guidelines
As a best practice, do not use the automatic rollback feature. This feature is complicated.
Examples
# Disable automatic rollback.
<Sysname> system-view
[Sysname] issu rollback-timer 0
Related commands issu rollback
issu run switchover
Use issu run switchover to perform an ISSU switchover.
Syntax
issu run switchover
217
Views
User view
Predefined user roles
network-admin
Usage guidelines
For a compatible upgrade, this command performs operations depending on the ISSU method.
• Incremental
—Performs a process-level master/subordinate switchover for the processes to be upgraded.
• Reboot
or ISSU upgrade—Reboots the current master with the old software version, causing the upgraded subordinate member to be elected as the new master.
For an incompatible upgrade, this command splits the IRF fabric into two fabrics, with the upgraded members forming a new fabric. The issu run switchover command reboots the old IRF fabric's members with the upgrade images to upgrade the members. After startup, the members join the new
IRF fabric as subordinate members.
During a reboot upgrade to a compatible version, the LPUs reboot to load the new software from the upgraded MPU. A transient service outage occurs on the cards.
At reboot, a subordinate device automatically synchronizes the master device's configuration and status data. You must wait for the synchronization to complete before using the issu run switchover command on the subordinate device. To check the synchronization progress, use the display
device
and display mdc commands. The synchronization is completed when the following conditions are met:
•
All cards of the subordinate device are in normal state.
•
All MDCs are in active state.
Examples
# Perform an ISSU switchover during an ISSU to a compatible version.
<Sysname> issu run switchover
Upgrade summary according to following table: flash:/feature.bin
Running Version New Version
Release 7148 Release 7178
Chassis Slot Switchover Way
1 6 Active standby process switchover
Upgrading software images to compatible versions. Continue? [Y/N]:y
# Perform an ISSU switchover and upgrade members that have not been upgraded (member 1 and member 2) during an ISSU to an incompatible version.
<Sysname> issu run switchover
Copying file flash:/feature.bin to chassis1#slot7#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 1 slot 7...Done.
Copying file flash:/feature.bin to chassis2#slot6#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 2 slot 6...Done.
Copying file flash:/feature.bin to chassis2#slot7#flash:/feature.bin...Done.
Verifying the file flash:/feature.bin on chassis 2 slot 7...Done.
Upgrade summary according to following table: flash:/feature.bin
218
Running Version New Version
Release 7148 Release 7178
Chassis Slot Upgrade Way
1 2 Reboot
1 3 Reboot
1 4 Reboot
1 6 Reboot
1 7 Reboot
2 2 Reboot
2 3 Reboot
2 4 Reboot
2 6 Reboot
2 7 Reboot
Upgrading software images to incompatible versions. Continue? [Y/N]:y
Table 29 Command output
Field Description
Verifying the file The system was verifying the validity of the file.
Switchover Way
Switchover method:
•
Active standby process switchover
—Switch from the active process to the standby process.
•
Global active standby MPU switchover
—Switch from the global active
MPU to a global standby MPU.
For more information about the command output, see Table 26
.
Related commands issu load
reset install log-history oldest
Use reset install log-history oldest to clear ISSU log entries.
Syntax
reset install log-history oldest log-number
Views
User view
Predefined user roles
network-admin
Parameters
log-number
: Specifies the number of ISSU log entries to be deleted.
Usage guidelines
This command clears the specified number of log entries, beginning with the oldest log.
Examples
# Clear the two oldest ISSU log entries.
<Sysname> reset install log-history oldest 2
219
Related commands display install log
220
Emergency shell commands
File system names, directory names, or file names must be compliant with the naming conventions.
For more information about the naming conventions and the methods for specifying the names, see
Fundamentals Configuration Guide
.
Unless otherwise stated, a file or directory name argument in this document must contain the file system name and cannot contain file system location information. The path information can contain multiple levels of directories, each of which can have 1 to 255 characters. The file name alone
(without the path information) can have 1 to 255 characters. The entire argument can have 1 to 511 characters.
copy
Use copy to copy a file.
Syntax
copy source-file
{ dest-file | dest-directory }
Views
User view
Parameters
source-file
: Specifies the file to be copied.
dest-file
: Specifies the destination file.
dest-directory
: Specifies the destination directory. The system uses the name of the source file as the name for the destination file.
Usage guidelines
If the destination file already exists, the system prompts whether or not to overwrite it. If you enter Y, the existing file is overwritten. If you enter N, the command is not executed.
Examples
# Copy the file test.cfg. Save the copy to the file testbackup.cfg.
<boot> copy flash:/test.cfg flash:/testbackup.cfg
Copy flash:/test.cfg to flash:/testbackup.cfg?[Y/N]:y
Start to copy flash:/test.cfg to flash:/testbackup.cfg...Done.
# Copy the file test.cfg and save the copy to the file testbackup.cfg. Overwrite the existing file that has the same name as the destination file.
<boot> copy flash:/test.cfg flash:/testbackup.cfg
Copy flash:/test.cfg to flash:/testbackup.cfg?[Y/N]:y flash:/testbackup.cfg already exists. Overwrite it?[Y/N]:y
Start to copy flash:/test.cfg to flash:/testbackup.cfg...Done.
delete
Use delete to permanently delete a file.
Syntax
delete file
221
Views
User view
Parameters
file
: Specifies the file to be deleted.
Examples
# Delete the tt.cfg file.
<boot> delete flash:/tt.cfg
Delete flash:/tt.cfg? [Y/N]:y
Deleting the file permanently will take a long time. Please wait...
Start to delete flash:/tt.cfg...Done.
dir
Use dir to display files or directories.
Syntax dir
[ /all ] [ file | directory ]
Views
User view
Parameters
/all
: Displays both hidden and non-hidden files and subdirectories.
file
: Specifies a file or directory.
directory
: Specifies a directory.
Usage guidelines
Display all non-hidden files and subdirectories in the current directory.
Display all files and subdirectories in the current directory.
Display all non-hidden files and subdirectories in a directory.
Display all files and subdirectories in a directory.
dir
N/A
dir /all
N/A
dir directory
dir /all
directory
Specify a directory for the
directory
argument.
Specify a directory for the
directory
argument.
Display a file.
dir file
Specify a file for the file argument.
Examples
# Display information about all files and directories in the system.
<boot> dir /all
Directory of flash:
0 drw- - Jan 01 2012 00:06:09 01
1 drw- - Sep 15 2012 04:03:14 pki
2 drw- - Jan 01 2012 00:04:07 test
3 drw- - Aug 26 2012 02:48:00 logfile2
4 drw- - Nov 05 2012 06:45:07 logfile
222
5 -rwh 20 Oct 20 2012 09:09:52 .snmpboots
6 drw- - Nov 05 2012 05:56:22 diagfile
7 drwh - Aug 20 2012 09:23:48 .trash
8 -rw- 816 Aug 20 2012 06:15:00 ifindex.dat
9 -rw- 3231 Aug 31 2012 09:01:41 startup.cfg
10 -rw- 60620 Aug 31 2012 09:01:43 startup.mdb
11 drw- - Sep 30 2012 04:43:24 versionInfo
12 drw- - Nov 05 2012 05:56:22 seclog
13 -rwh 18 Aug 20 2012 09:09:34 .pathfile
14 -rw- 11238400 Aug 30 2012 11:06:53 boot-t2301001.bin
15 -rw- 0 Aug 31 2012 05:04:40 lauth.dat
16 -rw- 4383 Oct 20 2012 06:15:00 test.cfg
61440 KB total (11108 KB free)
# Display all unhidden files and directories in the system.
<boot> dir
Directory of flash:
0 drw- - Jan 01 2012 00:06:09 01
1 drw- - Sep 15 2012 04:03:14 pki
2 drw- - Jan 01 2012 00:04:07 test
3 drw- - Aug 26 2012 02:48:00 logfile2
4 drw- - Nov 05 2012 06:45:07 logfile
5 drw- - Nov 05 2012 05:56:22 diagfile
6 -rw- 816 Aug 20 2012 06:15:00 ifindex.dat
7 -rw- 3231 Aug 31 2012 09:01:41 startup.cfg
8 -rw- 60620 Aug 31 2012 09:01:43 startup.mdb
9 drw- - Sep 30 2012 04:43:24 versionInfo
10 drw- - Nov 05 2012 05:56:22 seclog
11 -rw- 11238400 Aug 30 2012 11:06:53 boot-t2301001.bin
12 -rw- 0 Aug 31 2012 05:04:40 lauth.dat
13 -rw- 4383 Aug 20 2012 06:15:00 test.cfg
61440 KB total (11108 KB free)
# Display information about the config.cfg file.
<boot> dir flash:/config.cfg
Directory of flash:
0 -rw- 3231 Aug 31 2012 09:01:41 startup.cfg
61440 KB total (11108 KB free)
Table 30 Command output
Field Description
Directory of Current directory.
223
Field Description
7 -rw- 3231 Aug 31
2012 09:01:41 startup.cfg
Information about a file or directory:
• 7—Index number, automatically assigned by the system.
• -rw-—Attributes of the file or directory. The first character is the directory indicator (d for directory and - for file). The second character indicates whether the file or directory is readable (r for readable). The third character indicates whether the file or directory is writable (w for writable). The last character indicates whether the file or directory is hidden (h for hidden and - for visible).
• 3231—Size of the file, in bytes. For a directory, the value of this field is a hyphen (-).
• Aug 31 2012 09:01:41—Time when the file was most recently modified.
• startup.cfg—Name of the file or directory.
61440 KB total (11108 KB free)
Total size of the storage medium and size of the free space, in kilobytes.
display copyright
Use display copyright to display copyright information.
Syntax display copyright
Views
Any view
Examples
# Display copyright information.
<boot> display copyright
...
display install package
Use display install package to display information about a software package.
Syntax
display install package package
Views
Any view
Parameters
package
: Specifies a .bin file in the filesystemname/filename.bin format, for example, flash:/a.bin.
The file must be saved in the root directory of a file system on the device. The value string is case insensitive and can have a maximum of 63 characters.
Examples
# Display information about the system.bin software package.
<boot> display install package flash:/system.bin
flash:/system.bin
[Package]
Vendor: HPE
Product: 7500
224
Service name: system
Platform version: 7.1.045
Product version: ESS 7176P04
Supported board: mpu
[Component]
Component: Comware system
Description: system package
Table 31 Command output
Field Description
Service name
Supported board
[Component]
Type of the service package:
• boot—Boot image.
• system—System image.
• patch—Patch package.
If the value of this field is not boot, system, or patch, the service packet is a feature package.
Platform version Platform version number.
Product version
Product version number. You determine whether the version of a system image matches that of a boot image by checking the value of this field.
Types of cards that the software package supports:
• mpu—MPU.
• lc—Service card.
• sfc—Switching fabric card.
Information about the components of the software package.
display interface m-eth0
Use display interface m-eth0 to display information about the management Ethernet interface
M-Eth 0.
Syntax display interface m-eth0
Views
Any view
Examples
# Display information about the management Ethernet interface M-Eth 0.
<boot> display interface m-eth0
m-eth0 current state: UP
Line protocol current state: UP
The Maximum Transmit Unit is 1500
Inet4 Address is 192.168.20.189/24
Inet6 Address is 1:1::1:1/64 Scope:Global
Inet6 Address is FE80::202:3FF:FE04:506/10 Scope:Link
IP Packet Frame Type:PKTFMT_ETHNT_2, Hardware Address: c4ca-d94c-e201
IPV6 Packet Frame Type:PKTFMT_ETHNT_2, Hardware Address: c4ca-d94c-e201
Input: 8983 packets, 0 errors, 0 dropped, 0 overruns, 2 frame
225
Output: 431 packets, 0 errors, 0 dropped, 0 overruns, 0 carrier,
0 collisions, 1000 txqueuelen
Input bytes:804168
Output bytes:30367
Table 32 Command output
Field Description
m-eth0 current state
Physical layer status of the management Ethernet interface:
• Administratively DOWN—The interface has been shut down by using the shutdown command.
• DOWN—The interface has been enabled by using the
undo shutdown
command, but its physical status is down. The interface might not have a cable connected or the cable has a problem.
• UP—The interface has been enabled by using the undo
shutdown
command, and its physical status is up.
Line protocol current state
The Maximum Transmit Unit
Inet4 Address
Inet6 Address
Link layer status of the interface.
MTU of the interface.
IPv4 address of the interface. This field is displayed only when the device is configured with an IPv4 address.
IPv6 global unicast address of the interface. This field is displayed only when the device is configured with an IPv6 address.
Inet6 Address is
FE80::202:3FF:FE04:506/10 Scope:Link
IP Packet Frame
Type:PKTFMT_ETHNT_2, Hardware
Address: c4ca-d94c-e201
IPV6 Packet Frame
Type:PKTFMT_ETHNT_2, Hardware
Address: c4ca-d94c-e201
IPv6 link-local address of the interface.
Link layer encapsulation type and hardware address for IPv4 packets.
Link layer encapsulation type and hardware address for IPv6 packets.
Statistics for received packets:
Input: 8983 packets, 0 errors, 0 dropped, 0 overruns, 2 frame
• Number of erroneous packets.
• Number of dropped packets.
• Number of packets encountering queue overflow errors.
• N umber of packets encountering frame queue errors.
Statistics for sent packets:
Output: 431 packets, 0 errors, 0 dropped, 0 overruns, 0 carrier, 0 collisions, 1000 txqueuelen
Input bytes
Output bytes
• Number of erroneous packets.
• Number of dropped packets.
• Number of packets encountering queue overflow errors.
• Number of packets encountering carrier failures.
• Number of packets with collision.
• Number of packets permitted by the queue.
Total number of received bytes.
Total number of sent bytes.
226
display ip routing-table
Use display ip routing-table to display IPv4 routing information.
Syntax display ip routing-table
Views
Any view
Examples
# Display IPv4 routing information.
<boot> display ip routing-table
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.116.0 * 255.255.255.0 U 0 0 0 m-eth0 default 192.168.116.1 0.0.0.0 UG 0 0 0 m-eth0
Table 33 Command output
Field Description
Kernel IP routing table IPv4 routing information.
Gateway
Genmask
Flags
Metric
Ref
Use
Gateway address. If no gateway is needed, the value of this field is an asterisk (*).
Subnet mask. For the default route, the value of this field is 0.0.0.0.
Flags:
• A—The route was learned from a route advertisement.
• C—The route is a cached route used to fast forward packets.
• D—The route is the default route learned through neighbor discovery.
• G—The route is a gateway route.
• H—The route is a host route.
• U—The route can be used.
Cost of the route.
Number of times the route has been referenced by other route entries.
Number of times the route has been matched.
display ipv6 routing-table
Use display ipv6 routing-table to display IPv6 routing information.
Syntax display ipv6 routing-table
Views
Any view
Examples
# Display IPv6 routing information.
227
<boot> display ipv6 routing-table
Kernel IPv6 routing table
Destination Next Hop
Flags Metric Ref Use Iface
::1/128 ::
U 0 0 1 lo
FE80::201:2FF:FE03:406/128 ::
U 0 0 1 lo
FE80::/64 ::
U 256 0 0 m-eth0
FF02::1:2/128 FF02::1:2
UC 0 2888 0 m-eth0
FF00::/8 ::
U 256 0 0 m-eth0
Table 34 Command output
Field Description
Kernel IPv6 routing table IPv6 routing information.
Flags
Metric
Ref
Use
Iface
Flags:
• A—The route was learned from a route advertisement.
• C—The route is a cached route used to fast forward packets.
• D—The route is the default route learned through neighbor discovery.
• G—The route is a gateway route.
• H—The route is a host route.
• U—The route can be used.
Cost of the route.
Number of times the route has been referenced by other route entries.
Number of times the route has been matched.
Outbound interface. If it is a loopback interface, the value of this field is lo.
display version
Use display version to display boot image version information.
Syntax display version
Views
Any view
Examples
# Display boot image version information.
<boot> display version
…
228
format
Use format to format a file system.
Syntax
format filesystem
Views
User view
Parameters
filesystem
: Specifies a file system.
Usage guidelines
Use this command with caution. This command permanently deletes all files and directories from the file system, including the startup image files and startup configuration files. The deleted files and directories cannot be restored. Without startup images, the device cannot reboot.
Examples
# Format the flash: file system.
<boot> format flash:
All data on flash: will be lost, continue?[Y/N]:y
Formatting flash:… Done.
ftp
Use ftp to access an FTP server.
Syntax ftp
{ server-ipv4-address | ipv6 server-ipv6-address } { get remote-file local-file | put local-file
remote-file
}
Views
User view
Parameters
server-ipv4-address
: Specifies the IPv4 address of the FTP server.
server-ipv6-address
: Specifies the IPv6 address of the FTP server.
get remote-file
local-file: Downloads a file from the FTP server. The remote-file argument indicates the file to be downloaded. The local-file argument indicates the name for the downloaded file.
put local-file
remote-file: Uploads a file to the FTP server. The local-file argument indicates the file to be uploaded. The remote-file argument indicates the name for the uploaded file.
Usage guidelines
If the traffic is heavy and the file transfer speed is low, you can press Ctrl+C to abort the transfer and try again later.
Examples
# Log in to FTP server 192.168.1.100. Download the 111.txt file and save it to a local file named
222.txt
.
<boot> ftp 192.168.1.100 get 111.txt flash:/222.txt
User: test
Password: ***
229
install load
Use install load to load a system image and start the Comware system.
Syntax install
load system-package
Views
User view
Parameters
system-package
: Specifies a .bin system image file in the filesystemname/filename.bin format, for example, flash:/startup-system.bin. The value string can have a maximum of 63 characters. The file must be saved in the root directory of a file system on the current MPU. The filesystemname cannot contain file system location information.
Usage guidelines
This command modifies the main startup image list to include only the boot image and system image.
The modification ensures that the device can reboot correctly.
After the Comware system starts up, you can load feature and patch images. For more information, see the chapters about software upgrade and ISSU in Fundamentals Configuration Guide.
Examples
# Load a system image and start the Comware system.
<boot> install load flash:/system.bin
Check package flash:/system.bin ...
Extracting package ...
Loading...
Line aux0 is available.
Press ENTER to get started.
interface m-eth0
Use interface m-eth0 to enter management Ethernet interface view.
Syntax interface m-eth0
Views
System view
Usage guidelines
In management Ethernet interface view, you can assign an IP address to the interface and specify a gateway.
Examples
# Enter management Ethernet interface view.
<boot> system-view
[boot] interface m-eth0
[boot-m-eth0]
230
Related commands quit
ip address
Use ip address to assign an IPv4 address to the management Ethernet interface.
Use undo ip address to restore the default.
Syntax ip
address ip-address { mask-length | mask }
undo ip address
Default
No IPv4 address is assigned to the management Ethernet interface.
Views
Management Ethernet interface view
Parameters
ip-address
: Specifies an IPv4 address in dotted decimal notation.
mask-length
: Specifies the length of the subnet mask, in the range of 1 to 31.
mask
: Specifies the subnet mask in dotted decimal notation.
Usage guidelines
If you execute this command multiple times, the most recent configuration takes effect.
When the management Ethernet interface is manually shut down, assigning it an IPv4 address or removing its IPv4 address activates it at the same time.
The IP address assigned to the management Ethernet interface must be different from the IP addresses of the other devices on the network.
Examples
# Assign the IPv4 address 192.168.1.1/24 to the management Ethernet interface.
<boot> system-view
[boot] interface m-eth0
[boot-m-eth0] ip address 192.168.1.1 24
ip gateway
Syntax ip
gateway ip-address
undo ip gateway
Default
No IPv4 gateway is specified for the management Ethernet interface.
Views
Use ip gateway to specify an IPv4 gateway for the management Ethernet interface.
Use undo ip gateway to restore the default.
Management Ethernet interface view
231
Parameters
ip-address
: Specifies the IPv4 address of an IPv4 gateway in dotted decimal notation.
Usage guidelines
When the device needs to communicate with a device on a remote IPv4 network, you must specify an IPv4 gateway for the management Ethernet interface.
If you execute this command multiple times, the most recent configuration takes effect.
Changing or removing the IPv4 address of the management Ethernet interface deletes the interface's IPv4 gateway configuration.
Examples
# Configure the management Ethernet interface to use the IPv4 gateway 192.168.1.5.
<boot> system-view
[boot] interface m-eth0
[boot-m-eth0] ip gateway 192.168.1.5
ipv6 address
Use ipv6 address to assign an IPv6 address to the management Ethernet interface.
Use undo ipv6 address to restore the default.
Syntax ipv6
address ipv6-address prefix-length
undo ipv6 address
Default
No IPv6 address is assigned to the management Ethernet interface .
Views
Management Ethernet interface view
Parameters
ipv6-address
: Specifies an IPv6 address.
prefix-length
: Specifies a prefix length in the range of 1 to 127.
Usage guidelines
If you execute this command multiple times, the most recent configuration takes effect.
When the management Ethernet interface is manually shut down, assigning it an IPv6 address or removing its IPv6 address activates it at the same time.
Examples
# Assign the IPv6 address 2001::1/64 to the management Ethernet interface.
<boot> system-view
[boot] interface m-eth0
[boot-m-eth0] ipv6 address 2001::1 64
ipv6 gateway
Use ipv6 gateway to specify an IPv6 gateway for the management Ethernet interface.
Use undo ipv6 gateway to restore the default.
232
Syntax ipv6
gateway link-local
undo ipv6
gateway
Default
No IPv6 gateway is specified for the management Ethernet interface.
Views
Management Ethernet interface view
Parameters
link-local
: Specifies the link-local address of an IPv6 gateway.
Usage guidelines
When the device needs to communicate with a device on a remote IPv6 network, you must specify an IPv6 gateway for the management Ethernet interface.
If you execute this command multiple times, the most recent configuration takes effect.
Changing or removing the IPv6 address of the management Ethernet interface deletes the interface's IPv6 gateway configuration.
Examples
# Configure the management Ethernet interface to use the IPv6 gateway
FE80::BAAF:67FF:FE27:DCD0.
<boot> system-view
[boot] interface m-eth0
[boot-m-eth0] ipv6 gateway fe80::baaf:67ff:fe27:dcd0
mkdir
Use mkdir to create a directory.
Syntax mkdir
directory
Views
User view
Parameters
directory
: Specifies a directory.
Usage guidelines
You can create a directory only in an existing directory. For example, to create the flash:/test/mytest directory, the directory test must already exist.
The name of the directory to be created must be unique in the parent directory.
Examples
# Create a directory named test.
<boot> mkdir flash:/test
Directory flash:/test created.
# Create a directory named subtest in the flash:/test directory.
<boot> mkdir flash:/test/subtest
Directory flash:/test/subtest created.
233
Related commands dir rmdir
more
Use more to display the contents of a text file.
Syntax
more file
Views
User view
Parameters
file
: Specifies a text file.
Examples
# Display the contents of the text file test.txt.
<boot> more flash:/test.txt
Have a nice day.
move
Use move to move a file.
Syntax
move source-file
{ dest-file | dest-directory }
Views
User view
Parameters
source-file
: Specifies the name of the file to be moved, a case-insensitive string of 1 to 63 characters.
dest-file
: Specifies the name for the destination file, a case-insensitive string of 1 to 63 characters.
dest-directory
: Specifies the name of the directory, a case-insensitive string of 1 to 63 characters.
The system moves the file without changing the file name.
Usage guidelines
If a file in the destination directory is using the destination file name, the system prompts whether or not to overwrite the existing file. If you enter Y, the existing file is overwritten. If you enter N, the command is not executed.
Examples
# Move the config.cfg file to the flash:/test directory.
<boot>move flash:/config.cfg flash:/test/
Move flash:/config.cfg to flash:/test/config.cfg?[Y/N]:y
<boot> dir flash:/test
Directory of flash:/test
0 -rw- 77065 Oct 20 1939 06:15:02 test.mdb
61440 KB total (11108 KB free)
234
ping
Use ping to check the connectivity to an IPv4 address.
Syntax ping
[ -c count | -s size ] * ip-address
Views
Any view
Parameters
-c
count: Specifies the number of ICMP echo requests to send, in the range of 1 to 2147483647. The default is 5.
-s size
: Specifies the length (in bytes) of each ICMP echo request, in the range of 20 to 8100. The default is 56.
ip-address
: Specifies the IPv4 address of the destination in dotted decimal notation.
Usage guidelines
When you execute the ping command, the device sends ICMP echo requests to the destination. You can press Ctrl+C to abort the ping operation.
Examples
# Check the connectivity to the destination 1.2.1.1.
<boot> ping 1.2.1.1
PING 1.2.1.1 (1.2.1.1): 56 data bytes
56 bytes from 1.2.1.1: seq=0 ttl=128 time=2.243 ms
56 bytes from 1.2.1.1: seq=1 ttl=128 time=0.717 ms
56 bytes from 1.2.1.1: seq=2 ttl=128 time=0.891 ms
56 bytes from 1.2.1.1: seq=3 ttl=128 time=0.745 ms
56 bytes from 1.2.1.1: seq=4 ttl=128 time=0.911 ms
--- 1.2.1.1 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 0.717/1.101/2.243 ms
Table 35 Command output
Field Description
PING 1.2.1.1 (1.2.1.1) Checking the connectivity to the device at 1.2.1.1.
56 data bytes Number of data bytes in each ICMP echo request.
56 bytes from 1.2.1.1: seq=0 ttl=128 time=2.243 ms
--- 1.2.1.1 ping statistics ---
5 packets transmitted
5 packets received
Received an ICMP reply from the device at 1.2.1.1.
Fields of the reply:
• bytes—Number of data bytes in the ICMP reply.
• seq—Sequence number of the reply. You can examine the sequence numbers of replies to determine whether packets are missing, disordered, or duplicated.
• ttl—TTL value in the ICMP reply.
• time—Response time.
Statistics for packets sent and received during the ping operation.
Number of ICMP echo requests sent.
Number of ICMP echo replies received.
235
Field Description
0% packet loss Percentage of echo requests that failed to be echoed back. round-trip min/avg/max =
0.717/1.101/2.243 ms
Minimum/average/maximum response time, in milliseconds.
ping ipv6
Use ping ipv6 to check the connectivity to an IPv6 address.
Syntax ping ipv6
[ -c count | -s size ] * ipv6-address
Views
Any view
Parameters
-c
count: Specifies the number of ICMPv6 echo requests to send, in the range of 1 to 2147483647.
The default is 5.
-s size
: Specifies the length (in bytes) of each ICMPv6 echo request, in the range of 20 to 8100. The default is 56.
Ipv6-address
: Specifies the IPv6 address of the destination.
Usage guidelines
When you execute the ping ipv6 command, the device sends ICMPv6 echo requests to the destination. You can press Ctrl+C to abort the ping operation.
Examples
# Check the connectivity to the destination 2001::2.
<boot> ping ipv6 2001::2 ping ipv6 2001::2
PING 2001::2 (2001::2): 56 data bytes
56 bytes from 2001::2: seq=0 ttl=64 time=5.420 ms
56 bytes from 2001::2: seq=1 ttl=64 time=1.140 ms
56 bytes from 2001::2: seq=2 ttl=64 time=2.027 ms
56 bytes from 2001::2: seq=3 ttl=64 time=0.887 ms
56 bytes from 2001::2: seq=4 ttl=64 time=0.791 ms
--- 2001::2 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 0.791/2.053/5.420 ms
For information about the fields, see Table 35
.
pwd
Syntax
Use pwd to display the working directory.
pwd
Views
User view
236
Examples
# Display the working directory.
<boot> pwd flash:
quit
Use quit to return to the upper-level view.
Syntax quit
Views
System view
Management Ethernet interface view
Examples
# Return from management Ethernet interface view to user view.
[boot-m-eth0] quit
[boot] quit
<boot>
reboot
Use reboot to reboot the current MPU.
Syntax reboot
Views
User view
Examples
# Reboot the current MPU.
<boot> reboot
reset ssh public-key
Use reset ssh public-key to delete all SSH server public keys saved on the device.
Syntax reset ssh public-key
Views
User view
Usage guidelines
The first time you use the ssh2 command to connect to an SSH server, the device saves the server's public key locally. The device can then use the public key to authenticate the server when you connect to the server from the device again. If the server changes its public key, the public keys will not match anymore and you cannot connect to the server. To solve this problem, use this command to delete all SSH server public keys saved on the device.
237
Examples
# Delete all SSH server public keys saved on the device.
<boot> ssh2 192.168.1.59 login as:client001
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
83:2d:b6:90:4a:1b:0e:c1:ea:af:09:3a:65:09:8a:b3.
Please contact your system administrator.
RSA host key for 192.168.1.59 has changed and you have requested strict checking
.
Host key verification failed.
<boot> reset ssh public-key
<boot> ssh2 192.168.1.59 login as:client001
The authenticity of host '192.168.1.59 (192.168.1.59)' can't be established.
RSA key fingerprint is 83:2d:b6:90:4a:1b:0e:c1:ea:af:09:3a:65:09:8a:b3.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.1.59' (RSA) to the list of known hosts. [email protected]'s password:
******************************************************************************
* Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
<Sysname.59>
rmdir
Use rmdir to delete an existing directory.
Syntax rmdir
directory
Views
User view
Parameters
directory
: Specifies the directory to be deleted.
Usage guidelines
To delete a directory, first delete the files and subdirectories in the directory. To delete files, use the
delete
command.
Examples
# Delete the mydir directory.
<boot> rmdir flash:/mydir
238
Remove directory flash:/mydir?[Y/N]:y
Directory flash:/1 removed.
Related commands delete dir mkdir
shutdown
Use shutdown to shut down the management Ethernet interface.
Use undo shutdown to bring up the management Ethernet interface.
Syntax shutdown undo shutdown
Default
The management Ethernet interface is up.
Views
Management Ethernet interface view
Usage guidelines
When the management Ethernet interface is not operating correctly, you can shut it down and then bring it up.
Examples
# Shut down the management Ethernet interface.
<boot> system-view
[boot] interface m-eth0
[boot-m-eth0] shutdown
# Bring up the management Ethernet interface.
[boot-m-eth0] undo shutdown
ssh2
Use ssh2 to log in to an SSH server.
Syntax ssh2
{ server-ipv4-address | ipv6 server-ipv6-address }
Views
User view
Parameters
server-ipv4-address
: Specifies the IPv4 address of the SSH server in dotted decimal notation.
ipv6
server-ipv6-address: Specifies the IPv6 address of the SSH server.
Usage guidelines
If the SSH server does not respond, you can press Ctrl+C to abort the login attempt and try again later.
239
Examples
# Connect to the SSH server 192.168.1.59 for the first time.
<boot> ssh2 192.168.1.59 login as:client001
The authenticity of host '192.168.1.59 (192.168.1.59)' can't be established.
RSA key fingerprint is 3d:ee:1f:f9:81:be:4f:aa:42:88:1c:ab:81:4e:95:6f.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.1.59' (RSA) to the list of known hosts. [email protected]'s password:
******************************************************************************
* Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
<Syaname.59> quit
<boot>
# Connect to the SSH server 192.168.1.59 for the second time.
<boot> ssh2 192.168.1.59 login as:client001 [email protected]'s password:
******************************************************************************
* Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
<Syaname.59>
system-view
Use system-view to enter system view from user view.
Syntax system-view
Views
User view
Examples
# Enter system view from user view.
<boot> system-view
[boot]
Related commands quit
240
telnet
Use telnet to log in to a Telnet server.
Syntax telnet
{ server-ipv4-address | ipv6 server-ipv6-address }
Views
User view
Parameters
server-ipv4-address
: Specifies the IPv4 address of the Telnet server in dotted decimal notation.
server-ipv6-address
: Specifies the IPv6 address of the Telnet server.
Usage guidelines
If the Telnet server does not respond, you can press Ctrl+K to abort the login attempt and try again later.
Examples
# Log in to the Telnet server 192.168.100.1.
<boot> telnet 192.168.100.1
tftp
Use tftp to access to a TFTP server.
Syntax tftp
server-ipv4-address { get remote-file local-file | put local-file remote-file }
tftp ipv6
server-ipv6-address { get remote-file local-file | put local-file remote-file }
Views
User view
Parameters
server-ipv4-address
: Specifies the IPv4 address of the TFTP server in dotted decimal notation.
server-ipv6-address
: Specifies the IPv6 address of the TFTP server.
get remote-file
local-file: Downloads a file from the TFTP server. The remote-file argument indicates the file to be downloaded. The local-file argument indicates the name for the downloaded file.
put local-file
remote-file: Uploads a file to the TFTP server. The local-file argument indicates the file to be uploaded. The remote-file argument indicates the name for the uploaded file.
Usage guidelines
If the traffic is heavy and the file transfer speed is low, you can press Ctrl+C to abort the transfer and try again later.
Examples
# Download the 111.txt file from the TFTP server 192.168.1.100, and save the copy to a local file named 222.txt.
<boot> tftp 192.168.1.100 get 111.txt flash:/222.txt
# Upload the startup configuration file named startup.cfg to the TFTP server 192.168.1.100.
<boot> tftp 192.168.1.100 put flash:/startup.cfg startup.cfg
241
Device management commands
clock datetime
Use clock datetime to set the UTC time.
Syntax clock datetime
time date
Default
The UTC time is the device manufacture time.
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
time
: Specifies a time in the hh:mm:ss format. The value range for hh is 0 to 23. The value range for
mm
is 0 to 59. The value range for ss is 0 to 59. The leading zero in a segment can be omitted. If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds segments are 0
(hh:00:00), you can omit both of the segments. For example, to specify 08:00:00, you can enter 8.
date
: Specifies a date in the MM/DD/YYYY or YYYY/MM/DD format. The value range for YYYY is
2000 to 2035. The value range for MM is 1 to 12. The value range for DD varies by month.
Usage guidelines
Correct system time is essential to network management and communication. You must configure the system time correctly before you run the device on the network.
The system time is determined by the UTC time, the time zone, and the daylight saving time. You can use the display clock command to view the system time.
You can use this command to specify a UTC time for the device, or configure the device to obtain the
UTC time from an NTP time source. The UTC time obtained from an NTP time source is more precise.
Examples
# Set the UTC time to 08:08:08 01/01/2012.
<Sysname> clock datetime 8:8:8 1/1/2012
# Set the UTC time to 08:10:00 01/01/2012.
<Sysname> clock datetime 8:10 2012/1/1
Related commands clock protocol clock summer-time clock timezone display clock
242
clock protocol
Use clock protocol to specify the UTC time source.
Use undo clock protocol to restore the default.
Syntax clock protocol
{ none | ntp mdc mdc-id }
undo clock protocol
Default
The device obtains the UTC time through NTP.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters none
: Uses the local UTC time set by using the clock datetime command.
ntp
: Uses NTP to obtain the UTC time. You must configure NTP correctly. For more information about NTP and NTP configuration, see Network Management and Monitoring Configuration Guide.
mdc mdc-id
: Specifies the MDC to be used for time synchronization.
Usage guidelines
Correct system time is essential to network management and communication. You must configure the system time correctly before you run the device on the network.
The system time is determined by the UTC time, the time zone, and the daylight saving time. You can use the display clock command to view the system time.
The device can obtain the UTC time from one of the following time sources:
• None—Local UTC time set by using the clock datetime command.
• NTP—NTP time source.
The UTC time obtained from an NTP time source is more precise.
If you execute this command multiple times, the most recent configuration takes effect.
All MDCs on the device use the same system time. After obtaining the system time from an MDC, the device automatically synchronizes the system time to the other MDCs. By default, the device uses the NTP time source specified on the default MDC.
Examples
# Configure the device to use the local UTC time.
<Sysname> system-view
[Sysname] clock protocol none
clock summer-time
Use clock summer-time to configure the device to use daylight saving time during a specific period of time.
Use undo clock summer-time to cancel the configuration.
243
Syntax clock summer-time
name start-time start-date end-time end-date add-time
undo clock summer-time
Default
Daylight saving time is disabled.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
name
: Specifies a name for the daylight saving time schedule, a case-sensitive string of 1 to 32 characters.
start-time
: Specifies the start time in the hh:mm:ss format. The value range for hh is 0 to 23. The value range for mm is 0 to 59. The value range for ss is 0 to 59. The leading zero in a segment can be omitted. If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds segments are 0 (hh:00:00), you can omit both of the segments. For example, to specify 08:00:00, you can enter 8.
start-date
: Specifies the start date in one of the following formats:
•
MM/DD
. The value range for MM is 1 to 12. The value range for DD varies by month.
•
month week date
, where:
{
{
month
—Takes January, February, March, April, May, June, July, August, September,
October
, November or December.
week
—Represents week of the month. It takes first, second, third, fourth, fifth, or last.
{
day
—Takes Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, or Saturday.
end-time
: Specifies the end time in the hh:mm:ss format. The value range for hh is 0 to 23. The value range for mm is 0 to 59. The value range for ss is 0 to 59. The leading zero in a segment can be omitted. If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds segments are 0 (hh:00:00), you can omit both of the segments. For example, to specify 08:00:00, you can enter 8.
end-date
: Specifies the end date in one of the following formats:
•
MM/DD
. The value range for MM is 1 to 12. The value range for DD varies by month.
•
month week date
, where:
{
month
—Takes January, February, March, April, May, June, July, August, September,
October
, November or December.
{
{
week
—Represents week of the month. It takes first, second, third, fourth, fifth, or last.
day
—Takes Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, or Saturday.
add-time
: Specifies the time to be added to the standard time, in the hh:mm:ss format. The value range for hh is 0 to 23. The value range for mm is 0 to 59. The value range for ss is 0 to 59. The leading zero in a segment can be omitted. If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds segments are 0 (hh:00:00), you can omit both of the segments. For example, to specify 08:00:00, you can enter 8.
Usage guidelines
Correct system time is essential to network management and communication. You must configure the system time correctly before you run the device on the network.
244
The system time is determined by the UTC time, the time zone, and the daylight saving time. You can use the display clock command to view the system time.
Make sure all devices on the network are using the same daylight saving time as the local time.
Examples
# Set the system time ahead 1 hour for the period between 06:00:00 on 08/01 and 06:00:00 on
09/01.
<Sysname> system-view
[Sysname] clock summer-time PDT 6 08/01 6 09/01 1
Related commands clock datetime clock timezone display clock
clock timezone
Use clock timezone to set the time zone.
Use undo clock timezone to restore the default.
Syntax clock timezone
zone-name { add | minus } zone-offset
undo clock timezone
Default
The time zone is not set.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
zone-name
: Specifies a time zone by its name, a case-sensitive string of 1 to 32 characters.
add
: Adds an offset to the UTC time.
minus
: Decreases the UTC time by an offset.
zone-offset
: Specifies an offset to the UTC time, in the hh:mm:ss format. The value range for hh is 0 to 23. The value range for mm is 0 to 59. The value range for ss is 0 to 59. The leading zero in a segment can be omitted. If the seconds segment is 0 (hh:mm:00), you can omit it. If both the minutes and seconds segments are 0 (hh:00:00), you can omit both of the segments. For example, to specify
08:00:00, you can enter 8.
Usage guidelines
Correct system time is essential to network management and communication. You must configure the system time correctly before you run the device on the network.
The system time is determined by the UTC time, the time zone, and the daylight saving time. You can use the display clock command to view the system time.
Make sure all devices on the network are using the same time zone as the local time.
245
Examples
# Set the name of the local time zone to Z5, and add 5 hours to the UTC time.
<Sysname> system-view
[Sysname] clock timezone Z5 add 5
Related commands clock datetime clock summer-time display clock
command
Use command to assign a command to a job.
Use undo command to revoke a command.
Syntax
command id command
undo command id
Default
No command is assigned to a job.
Views
Job view
Predefined user roles
network-admin mdc-admin
Parameters
id
: Specifies an ID for the command, in the range of 0 to 4294967295. A command ID uniquely identifies a command in a job. Commands in a job are executed in ascending order.
command
: Specifies the command to be assigned to the job.
Usage guidelines
To assign a command (command A) to a job, you must first assign the job the command or commands for entering the view of command A.
If you specify the ID of an existing command for another command, the existing command is replaced.
Make sure all commands in a schedule are compliant to the command syntax. The system does not examine the syntax when you assign a command to a job.
If a command requires a yes or no answer, the system always assumes that a Y or Yes is entered. If a command requires a character string input, the system assumes that either the default character string (if any) or a null string is entered.
A job cannot contain the telnet, ftp, ssh2, or monitor process command.
Examples
# Assign commands to job backupconfig to back up configuration file startup.cfg to the TFTP server at 192.168.100.11.
<Sysname> system-view
[Sysname] scheduler job backupconfig
246
[Sysname-job-backupconfig] command 2 tftp 192.168.100.11 put flash:/startup.cfg backup.cfg
# Assign commands to job shutdownGE to shut down the interface GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] scheduler job shutdownGE
[Sysname-job-shutdownGE] command 1 system-view
[Sysname-job-shutdownGE] command 2 interface gigabitethernet 1/0/1
[Sysname-job-shutdownGE] command 3 shutdown
Related commands scheduler job
copyright-info enable
Use copyright-info enable to enable copyright statement display.
Use undo copyright-info enable to disable copyright statement display.
Syntax copyright-info enable undo copyright-info enable
Default
Copyright statement display is enabled.
Views
System view
Predefined user roles
network-admin mdc-admin
Examples
# Enable copyright statement display.
<Sysname> system-view
[Sysname] copyright-info enable
•
When a Telnet user logs in, the following statement appears:
**************************************************************************
* Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
<Sysname>
•
When a console user quits user view, the system automatically restarts the session and displays the following message:
**************************************************************************
* Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
247
User interface aux0 is available.
Press ENTER to get started.
# Disable copyright statement display.
<Sysname> system-view
[Sysname] undo copyright-info enable
•
When a Telnet user logs in, the user view prompt appears as follows:
<Sysname>
•
When a console user quits user view, the system automatically restarts the session and displays the following message:
User interface aux0 is available.
Press ENTER to get started.
display alarm
Use display alarm to display alarm information.
Syntax
In standalone mode:
display alarm
[ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display alarm
[ chassis chassis-number slot slot-number ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters slot
slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays alarm information for all cards. (In standalone mode.)
chassis
chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. On an IRF fabric, this command displays information for all cards if you do not specify a card. (In IRF mode.)
Examples
# (In standalone mode.) Display alarm information.
<Sysname> display alarm
248
Slot CPU Level Info
- - INFO Power 1 is absent.
- - INFO Power 2 is absent.
- - INFO Power 3 is absent.
8 0 ERROR Board is faulty
9 0 ERROR Board is faulty
Table 36 Command output
Field Description
Slot
Slot number of the card with an alarm. If the value is a hyphen (-), the alarm was generated by the chassis. (In standalone mode.)
Level
Alarm severity. Possible values include
ERROR, WARNING, NOTICE, and INFO, in descending order. faulty The card is starting up or is faulty.
# (In IRF mode.) Display alarm information.
<Sysname> display alarm
Chassis Slot CPU Level Info
1 - - INFO Chassis 1 Power 1 is absent.
1 - - INFO Chassis 1 Power 2 is absent.
1 8 0 ERROR Chassis 1 Board is faulty
2 9 0 ERROR Chassis 2 Board is faulty
Table 37 Command output
Field Description
Chassis ID of the IRF member device with an alarm.
Slot
Level
Slot number of the card.
Alarm severity. Possible values include
ERROR, WARNING, NOTICE, and
INFO, in descending order.
The board in slot n is faulty. The card in slot n is starting up or is faulty.
display asset-info
Use display asset-info to display the asset profile for a physical component.
Syntax
In standalone mode:
display asset-info
{ chassis | fan fan-id | power power-id | slot slot-number } [ csn | custom|
department
| description | location | service-date | state ]
In IRF mode:
display asset-info
chassis chassis-number { chassis | fan fan-id | power power-id | slot
slot-number
} [ csn | custom| department | description | location | service-date | state ]
Views
Any view
249
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters chassis
: Displays the asset profile for the chassis. The device does not support this keyword.
fan fan-id
: Displays the asset profile for the specified fan tray. The device does not support this option.
power power-id
: Displays the asset profile for the specified power module. The device does not support this option.
slot
slot-number: Displays the asset profile for the card in the specified slot.
csn
: Displays the asset ID for the asset.
custom
: Displays the customized asset items.
department
: Displays the department name.
description
: Displays the asset description.
location
: Displays the asset location.
service-date
: Displays the service start date.
state
: Displays the asset usage status.
chassis chassis-number
: Specifies an IRF member device by its member ID. (In IRF mode.)
Usage guidelines
To display an item in an asset profile, specify the corresponding keyword for the command. To display all items in an asset profile, do not specify the item keywords.
If an item is not configured, the system displays an empty field.
Examples
# (In standalone mode.) Display the asset ID for slot 0.
<Sysname> system-view
[Sysname] display asset-info slot 0 csn
Type : Slot 0 csn : 123456
# (In standalone mode.) Display the asset information for slot 0.
<Sysname> system-view
[Sysname] display asset-info slot 0
Type : Slot 0 csn : 123456 description : Slot 0 location : service-date: department : MKT state : Normal custom:
# (In IRF mode.) Display the asset ID for slot 0 on IRF member device 1.
250
<system-view> system-view
[Sysname] display asset-info chassis 1 slot 0 csn
Type : Slot 0 csn : 123456
# (In IRF mode.) Display the asset information for slot 0 on IRF member device 1.
<Sysname> system-view
[Sysname] display asset-info chassis 1 slot 0
Type : Slot 0 csn : 123456 description : Slot 0 location : service-date: department : MKT state : Normal custom:
Related commands reset asset-info set asset-info
display clock
Use display clock to display the system time, date, local time zone, and daylight saving time.
Syntax display clock
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display the system time and date when the local time zone is not specified.
<Sysname> display clock
10:09:00 UTC Fri 03/16/2012
# Display the system time and date when the local time zone Z5 is specified.
<Sysname> display clock
15:10:00 Z5 Fri 03/16/2012
Time Zone : Z5 add 05:00:00
# Display the system time and date when the local time zone Z5 and daylight saving time PDT are specified.
<Sysname> display clock
15:11:00 Z5 Fri 03/16/2012
Time Zone : Z5 add 05:00:00
251
Summer Time : PDT 06:00:00 08/01 06:00:00 09/01 01:00:00
Related commands clock datetime clock timezone clock summer-time
display copyright
Use display copyright to display the copyright statement, including software and hardware copyright statements.
Syntax display copyright
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display the copyright statement.
<Sysname> display copyright
display cpu-usage
Use display cpu-usage to display the current CPU usage statistics.
Syntax
In standalone mode:
display cpu-usage
[ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display cpu-usage
[ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters slot
slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays the CPU usage statistics for all cards. (In standalone mode.)
252
chassis
chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. On an IRF fabric, this command displays CPU usage statistics for all cards if you do not specify a card. (In IRF mode.)
cpu
cpu-number: Specifies a CPU by its number. If you do not specify this option, the command displays the CPU usage statistics for the default CPU.
Usage guidelines
After startup, the device tracks the average CPU usage at the following intervals:
•
5 seconds.
•
1 minute.
•
5 minutes.
This command displays the average CPU usage values for the last 5 seconds, 1 minute, and 5 minutes.
Examples
# (In standalone mode.) Display the current CPU usage statistics.
<Sysname> display cpu-usage
Slot 3 CPU 0 CPU usage:
2% in last 5 seconds
2% in last 1 minute
2% in last 5 minutes
Slot 7 CPU 0 CPU usage:
0% in last 5 seconds
0% in last 1 minute
0% in last 5 minutes
# (In IRF mode.) Display the current CPU usage statistics for all cards.
<Sysname> display cpu-usage
Chassis 1 Slot 3 CPU 0 CPU usage:
2% in last 5 seconds
2% in last 1 minute
2% in last 5 minutes
Chassis 1 Slot 7 CPU 0 CPU usage:
0% in last 5 seconds
0% in last 1 minute
0% in last 5 minutes
Table 38 Command output
Field Description
2% in last 5 seconds Average CPU usage during the last 5-second interval.
2% in last 1 minute
2% in last 5 minutes
Slot x CPU y CPU usage
Chassis x Slot y CPU z CPU usage
Average CPU usage during the last 1-minute interval.
Average CPU usage during the last 5-minute interval.
Usage statistics for CPU y of the card in slot x. (In standalone mode.)
Usage statistics for CPU z of the card in slot y on member device x. (In
IRF mode.)
253
display cpu-usage configuration
Use display cpu-usage configuration to display CPU usage monitoring settings.
Syntax
In standalone mode:
display cpu-usage configuration
[ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display cpu-usage configuration
[ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Views
Any view
Predefined user roles
network-admin mdc-admin
Parameters slot
slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays the CPU usage monitoring settings for the active MPU. (In standalone mode.)
chassis
chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays the CPU usage monitoring settings for the global active MPU. (In IRF mode.)
cpu
cpu-number: Specifies a CPU by its number. If you do not specify this option, the command displays the CPU usage monitoring settings for the default CPU.
Examples
# Display the CPU usage monitoring settings.
<Sysname> display cpu-usage configuration
CPU usage monitor is enabled.
Current monitor interval is 60 seconds.
Current monitor threshold is 99%.
Related commands monitor cpu-usage enable monitor cpu-usage interval monitor cpu-usage threshold
display cpu-usage history
Use display cpu-usage history to display the historical CPU usage statistics in a coordinate system.
Syntax
In standalone mode:
display cpu-usage history
[ job job-id ] [ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display cpu-usage history
[ job job-id ] [ chassis chassis-number slot slot-number [ cpu
cpu-number
] ]
254
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters job
job-id: Specifies a process by its ID. If you do not specify this option, the command displays the historical statistics for the entire system's CPU usage (the total CPU usage of all processes). To view the IDs and names of the running processes, use the display process command. For more information, see Network Management and Monitoring Configuration Guide.
slot
slot-number: Specifies a card by its slot number. If you specify the job job-id option but do not specify this option, the command displays the historical CPU usage statistics for the process on the active MPU. If you do not specify any options, the command displays the historical statistics for all processes on all cards. (In standalone mode.)
chassis
chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you specify a process but do not specify a card, this command displays the statistics for the process on the global active MPU. If you do not specify any options, this command displays the statistics for all processes in the IRF fabric. (In IRF mode.)
cpu
cpu-number: Specifies a CPU by its number. If you specify the job job-id option but do not specify this option, the command displays the historical CPU usage statistics for the default CPU. If you do not specify the job job-id option or this option, the command displays the historical statistics for all CPUs.
Usage guidelines
After CPU usage monitoring is enabled, the system regularly samples CPU usage and saves the samples to the history record buffer. This command displays the most recent 60 samples in a coordinate system as follows:
•
The vertical axis represents the CPU usage. If a statistic is not a multiple of the usage step, it is rounded up or down to the closest multiple of the usage step. For example, if the CPU usage step is 5%, the statistic 53% is rounded up to 55%, and the statistic 52% is rounded down to
50%.
•
The horizontal axis represents the time.
•
Consecutive pound signs (#) indicate the CPU usage at a specific time. The value on the vertical axis for the topmost pound sign at a specific time represents the CPU usage at that time.
Examples
# Display the historical CPU usage statistics for the entire system.
<Sysname> display cpu-usage history
100%|
95%|
90%|
85%|
80%|
75%|
70%|
65%|
255
60%|
55%|
50%|
45%|
40%|
35%|
30%|
25%|
20%|
15%|
100%|
95%|
90%|
85%|
80%|
75%|
70%|
65%|
60%|
55%|
50%|
45%|
40%|
35%|
30%|
25%|
20%|
15%| #
10%| ### #
5%| ########
------------------------------------------------------------
10 20 30 40 50 60 (minutes)
cpu-usage (Chassis 1 Slot 7 CPU 0)
The output shows the following items:
•
Process name. The name
SYSTEM represents the entire system.
•
CPU that is holding the process is CPU 0 in slot 7 of member device 1.
•
Historical CPU usage statistics for the entire system during the last 60 minutes.
{
12 minutes ago: Approximately 5%.
{
{
{
{
{
{
{
13 minutes ago: Approximately 10%.
14 minutes ago: Approximately 15%.
15 minutes ago: Approximately 10%.
16 and 17 minutes ago: Approximately 5%.
18 minutes ago: Approximately 10%.
19 minutes ago: Approximately 5%.
Other time: 2% or lower than 2%.
# Display the historical CPU usage statistics for process 1.
<Sysname> display cpu-usage history job 1
256
10%|
5%| #
------------------------------------------------------------
10 20 30 40 50 60 (minutes)
cpu-usage (Chassis 1 Slot 7 CPU 0)
The output shows the following items:
•
Process name, which is scmd. A process name in a pair of square brackets ([ ]) represents a kernel process.
•
CPU that is holding the process is CPU 0 in slot 7 of member device 1.
•
Historical CPU usage statistics for process 1 in the last 60 minutes.
{
{
20 minutes ago: Approximately 5%.
Other time: 2% or lower than 2%.
Related commands monitor cpu-usage enable monitor cpu-usage interval
display device
Use display device to display device information.
Syntax
In standalone mode:
display device
[ flash ] [ slot slot-number [ subslot subslot-number ] | verbose ]
In IRF mode:
display device
[ flash ] [ chassis chassis-number [ slot slot-number [ subslot subslot-number ] ] |
verbose
]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters flash
: Specifies the flash memory.
chassis
chassis-number: Specifies an IRF member device by its member ID. On an IRF fabric, this command displays hardware information for all member devices if you do not specify a member device. (In IRF mode.)
slot slot-number
: Specifies a card by its slot number. If you do not specify a card, this command displays hardware information for all cards. (In standalone mode.)
slot slot-number
: Specifies a card by its slot number. On an IRF fabric, this command displays hardware information for all cards if you do not specify a card. (In IRF mode.)
257
subslot subslot-number
: Specifies a subcard by its subslot number. If you do not specify this option, the command does not display information about any subcards. This option is not supported in the current software version.
verbose
: Displays detailed hardware information. If you do not specify this keyword, the command displays brief information.
Examples
# (In standalone mode.) Display device information.
<Sysname> display device
Slot No. Brd Type Brd Status Subslot Sft Ver Patch Ver
0 LSQM2MPUD0 Master 0 7500-7178 None
1 NONE Absent 0 NONE None
2 LSQ1GP48EB0 Normal 0 7500-7178 None
3 NONE Absent 0 NONE None
4 NONE Absent 0 NONE None
5 NONE Absent 0 NONE None
6 NONE Absent 0 NONE None
7 NONE Absent 0 NONE None
The output shows that the device has one MPU and one interface module. The MPU is in slot 0, and the interface module is in slot 2.
Table 39 Command output
Field Description
Slot No. Slot number of the card.
Brd Type
Brd Status
Subslot
Hardware type of the card.
Card status:
•
Standby
—The card is the standby MPU.
•
Master
—The card is the active MPU.
•
Absent
—The slot is not installed with a card.
•
Fault
—The card is faulty and cannot start up.
•
Normal
—The card is an interface module and is operating correctly.
Maximum number of subcards that the base card supports. This field is not supported in the current software version.
Sft Ver Software version of the card.
Patch Ver Patch version of the card.
# (In IRF mode.) Display device information about all IRF member devices.
<Sysname> display device
Slot Type State Subslot Soft Ver Patch Ver
1/0 LSQM2MPUD0 Master 0 7500-7178 None
1/1 NONE Absent 0 NONE None
1/2 LSQ1GP48EB0 Normal 0 7500-7178 None
1/3 NONE Absent 0 NONE None
1/4 NONE Absent 0 NONE None
1/5 NONE Absent 0 NONE None
1/6 NONE Absent 0 NONE None
1/7 NONE Absent 0 NONE None
258
The output shows that the IRF fabric has one member device (with the member ID 1). The card in slot 0 is the global active MPU. The card in slot 2 is an interface module.
Table 40 Command output
Field Description
Slot
Member ID of the chassis and slot number of the card, in the member ID
/slot
number
format.
State
Subslot
Card status:
•
Absent
—No card is inserted in the slot.
•
Master
—The card is the global active MPU.
•
Standby
—The card is a global standby MPU.
•
Normal
—The card is an interface module and is operating correctly.
•
Fault
—The card is faulty.
Maximum number of subcards that the card supports. This field is not supported in the current software version.
Software version of the card.
Patch version of the card. If no patch is installed, the value of this field is
None.
Soft Ver
Patch Ver
display device manuinfo
Use display device manuinfo to display electronic label information for the device.
Syntax
In standalone mode:
display device manuinfo
[ slot slot-number [ subslot subslot-number ] ]
In IRF mode:
display device manuinfo
[ chassis chassis-number [ slot slot-number [ subslot
subslot-number
] ] ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
chassis chassis-number
: Specifies an IRF member device by its member ID. If you do not specify this option, the command displays electronic label information for all member devices. (In IRF mode.)
slot slot-number
: Specifies a card by its slot number. If you do not specify this option, the command displays electronic label information of all cards. (In standalone mode.)
slot slot-number
: Specifies a card by its slot number. If you do not specify this option, the command displays electronic label information for all cards. (In IRF mode.)
259
subslot subslot-number
: Specifies a subcard by its subslot number. If you do not specify this option, the command does not display information about any subcards. This option is not supported in the current software version.
Usage guidelines
An electronic label is a profile of a device or card. It contains the permanent configuration, including the serial number, manufacturing date, MAC address, and vendor name. The data is written to the storage component during debugging or testing.
Examples
# (In standalone mode.) Display electronic label information for the device.
<Sysname> display device manuinfo
Chassis self:
DEVICE_NAME : HP 7503 Switch Chassis JD240C
DEVICE_SERIAL_NUMBER : CN5CH5S004
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-20
VENDOR_NAME : HPE
Slot 0 CPU 0:
DEVICE_NAME : HP 7500 2.4T 8p G/10G and 2p 40G MPU JH209A
DEVICE_SERIAL_NUMBER : CN5CH4T02
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-08
VENDOR_NAME : HPE
Slot 3 CPU 0:
DEVICE_NAME : HP 7500 24p GbE/4p 10GbE SE Mod JH211A
DEVICE_SERIAL_NUMBER : CN5CH4W002
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-08
VENDOR_NAME : HPE
Slot 4 CPU 0:
DEVICE_NAME : HP 7500 24p GbE/4p 10GbE SE Mod JH211A
DEVICE_SERIAL_NUMBER : CN5CH4W002
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-08
VENDOR_NAME : HPE
Fan 0:
The operation is not supported on the specified fan.
Power 1:
DEVICE_NAME : HP 7500 1400W DC Power Supply JD208A
DEVICE_SERIAL_NUMBER : CN5CB5K002
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-20
VENDOR_NAME : HPE
Table 41 Command output
Field Description
Slot m CPU n Slot number of the card and number of the CPU.
DEVICE_NAME Device name.
260
Field Description
MAC_ADDRESS MAC address.
# (In IRF mode.) Display electronic label information for the device.
<Sysname> display device manuinfo
Chassis 1:
Chassis self:
DEVICE_NAME : HP 7503 Switch Chassis JD240C
DEVICE_SERIAL_NUMBER : CN5CH5S004
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-20
VENDOR_NAME : HPE
Slot 0 CPU 0:
DEVICE_NAME : HP 7500 2.4T 8p G/10G and 2p 40G MPU JH209A
DEVICE_SERIAL_NUMBER : CN5CH4T02
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-08
VENDOR_NAME : HPE
Slot 3 CPU 0:
DEVICE_NAME : HP 7500 24p GbE/4p 10GbE SE Mod JH211A
DEVICE_SERIAL_NUMBER : CN5CH4W002
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-08
VENDOR_NAME : HPE
Slot 4 CPU 0:
DEVICE_NAME : HP 7500 24p GbE/4p 10GbE SE Mod JH211A
DEVICE_SERIAL_NUMBER : CN5CH4W002
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-08
VENDOR_NAME : HPE
Fan 0:
The operation is not supported on the specified fan.
Power 1:
DEVICE_NAME : HP 7500 1400W DC Power Supply JD208A
DEVICE_SERIAL_NUMBER : CN5CB5K002
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-20
VENDOR_NAME : HPE
Table 42 Command output
Field Description
Chassis x Member ID of the member device
Slot y CPU z Number of the slot and number of the CPU.
261
Field Description
DEVICE_NAME Device name.
MAC_ADDRESS MAC address.
MANUFACTURING_DATE Manufacturing date.
VENDOR_NAME Vendor name.
display device manuinfo chassis-only
Use display device manuinfo chassis-only to display electronic label information for a backplane.
Syntax
In standalone mode:
display device manuinfo chassis-only
In IRF mode:
display device manuinfo chassis
chassis-number chassis-only
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters chassis
chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.)
Examples
# (In standalone mode.) Display electronic label information for the backplane.
<Sysname> display device manuinfo chassis-only
Chassis self:
DEVICE_NAME : HP 7503 Switch Chassis JD240C
DEVICE_SERIAL_NUMBER : CN5CH5S004
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-20
VENDOR_NAME : HPE
# (In IRF mode.) Display electronic label information for the backplane on IRF member device 1.
<Sysname> display device manuinfo chassis 1 chassis-only
Chassis 1:
Chassis self:
DEVICE_NAME : HP 7503 Switch Chassis JD240C
DEVICE_SERIAL_NUMBER : CN5CH5S004
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-20
VENDOR_NAME : HPE
262
display device manuinfo power
Use display device manuinfo power to display electronic label information for a power module.
Syntax
In standalone mode:
display device manuinfo power
power-id
In IRF mode:
display device manuinfo chassis
{ chassis-number | virtual-chassis-number slot slot-number }
power
power-id
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters chassis
{ chassis-number | virtual-chassis-number slot slot-number }: Specifies an IRF member device by its member ID. The virtual-chassis-number slot slot-number option is not supported in the current software version. (In IRF mode.)
power
-id: Specifies a power module by its ID.
Examples
# (In standalone mode.) Display electronic label information for power module 1.
<Sysname> display device manuinfo power 1
Power 1:
DEVICE_NAME : HP 7500 1400W DC Power Supply JD208A
DEVICE_SERIAL_NUMBER : CN5CB5K002
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-20
VENDOR_NAME : HPE
# (In IRF mode.) Display electronic label information for power module 1 on IRF member device 1.
<Sysname> display device manuinfo chassis 1 power 1
Chassis 1:
Power 1:
DEVICE_NAME : HP 7500 1400W DC Power Supply JD208A
DEVICE_SERIAL_NUMBER : CN5CB5K002
MAC_ADDRESS : NONE
MANUFACTURING_DATE : 2015-12-20
VENDOR_NAME : HPE
display diagnostic-information
Use display diagnostic-information to display or save device diagnostic information.
263
Syntax display diagnostic-information
[ hardware | infrastructure | l2 | l3 | service ] [ filename ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters hardware
: Displays hardware-related diagnostic information.
infrastructure
: Displays diagnostic information about the fundamental modules.
l2
: Displays diagnostic information about Layer 2 features.
l3
: Displays diagnostic information about Layer 3 features.
service
: Displays diagnostic information about upper-layer features.
filename
: Saves the diagnostic information to a file. The filename argument must use the .tar.gz suffix. If you do not specify this argument, the command prompts you to choose whether to save the information to a file or display the information.
Usage guidelines
If you do not specify any feature options, the command displays or saves diagnostic information about all feature modules.
This command does not support the |, >, and >> options.
You can use one of the following methods to collect device diagnostic information:
•
Use separate display commands to collect diagnostic information feature by feature or module by module.
•
Use the display diagnostic-information command to collect diagnostic information about multiple or all features and hardware modules.
If you specify the filename argument, the device also collects and saves core files to the specified file.
The file is automatically compressed to save storage space. The default file name is in the
diag_sysname_YYYYMMDD-hhmmss
.tar.gz format, for example, diag_sysname_20140829-083832.tar.gz.
To view the file content:
1.
Use the tar extract command to extract the file.
2.
Execute the more command.
Examples
# Display diagnostic information about all feature modules.
<Sysname> display diagnostic-information
===============================================
===============display clock===============
13:38:43 Z5 Wed 09/14/2157
Time Zone : Z5 add 05:00:00
=================================================
===============display version===============
264
HPE Comware Software, Version 7.1.045, Release 7178
Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP
HP 7506 uptime is 0 weeks, 0 days, 3 hours, 3 minutes
Last reboot reason : Cold reboot
Boot image: flash:/7500-CMW710-BOOT-R7178.bin
Boot image version: 7.1.045, Release 7178
Compiled Dec 20 2015 12:00:00
System image: flash:/7500-CMW710-SYSTEM-R7178.bin
System image version: 7.1.045, Release 7178
Compiled Dec 20 2015 12:00:00
...
# Save the operating statistics for all feature modules to file test.tar.gz.
•
Method 1: Specify the filename in interactive mode.
<Sysname> display diagnostic-information
Save or display diagnostic information (Y=save, N=display)? [Y/N]:y
Please input the file name(*.tar.gz)[flash:/diag_sysname_20140829-083832.tar.gz]: test.tar.gz
Diagnostic information is outputting to flash:/test.tar.gz.
Please wait...
Save successfully.
•
Method 2: Specify the filename for the command.
<Sysname> display diagnostic-information test.tar.gz
Diagnostic information is outputting to flash:/test.tar.gz.
Please wait...
Save successfully.
Related commands more tar extract
display environment
Use display environment to display the temperature statistics for the temperature sensors, including the current temperature and temperature thresholds.
Syntax
In standalone mode:
display environment
[ slot slot-number ]
In IRF mode:
display
environment [ chassis chassis-number [ slot slot-number ] ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin
265
mdc-operator
Parameters chassis
chassis-number: Specifies an IRF member device by its member ID. On an IRF fabric, this command displays temperature information for all member devices if you do not specify a member device. (In IRF mode.)
slot slot-numbe r: Specifies a card by its slot number. If you do not specify a card, this command displays information for all cards. (In standalone mode.)
slot slot-number
: Specifies a card by its slot number. On an IRF fabric, this command displays temperature information for all cards if you do not specify a card. (In IRF mode.)
Usage guidelines
In standalone mode, this command displays statistics for all temperature sensors on the device if you do not specify a card.
In IRF mode, this command displays statistics for all temperature sensors in the IRF fabric if you do not specify an IRF member device. If you specify an IRF member device but do not specify a card, this command displays statistics for all sensors on the member device.
Examples
# (In standalone mode.) Display the temperature statistics for all temperature sensors on the device.
<Sysname> display environment
System temperature information (degree centigrade):
----------------------------------------------------------------------
Slot Sensor Temperature Lower Warning Alarm Shutdown
3 hotspot 1 38 0 80 97 NA
3 hotspot 2 49 0 80 97 NA
7 inflow 1 31 0 71 90 NA
7 outflow 1 44 0 80 99 NA
7 hotspot 1 47 0 81 100 NA
7 hotspot 2 53 0 88 107 NA
Table 43 Command output
Field Description
System Temperature information (degree centigrade)
Temperature information (°C). sensor
Slot
Slot
Temperature sensor:
•
hotspot
—Hotspot sensor.
•
inflow
—Air inlet sensor.
•
outflow
—Air outlet sensor.
Slot number of a card. (In standalone mode.)
Member ID and slot number of a card on an IRF member device in the member
ID/slot number
format. (In IRF mode.)
LowerLimit
WarningLimit
AlarmLimit
ShutdownLimit
Lower temperature limit.
Warning temperature threshold.
Alarming temperature threshold.
Shutdown temperature threshold. When the sensor temperature reaches the limit, the system shuts down automatically.
266
display fan
Use display fan to display the operating states of fans.
Syntax
In standalone mode:
display fan
[ fan-id ]
In IRF mode:
display fan
[ chassis { chassis-number | virtual-chassis-number slot slot-number } [ fan-id ] ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters chassis
{ chassis-number | virtual-chassis-number slot slot-number }: Specifies an IRF member device by its member ID. The virtual-chassis-number slot slot-number option is not supported in the current software version. On an IRF fabric, this command displays fan operating status information for all member devices if you do not specify a member device. (In IRF mode.)
fan-id
: Specifies a fan by its ID. If you do not specify this option, the command displays the operating states of all fans on the device. (In standalone mode.)
Examples
# Display the operating states of all fans.
<Sysname> display fan
Fan Frame 1 State: Normal
display memory
Use display memory to display memory usage information.
Syntax
In standalone mode:
display memory
[ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display memory
[ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin
267
mdc-operator
Parameters slot
slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays memory usage for all cards. (In standalone mode.)
chassis chassis-number slot
slot-number: Specifies a card on an IRF member device by its slot number and the member ID. If you do not specify this option, the command displays memory usage for all cards in the IRF fabric. (In IRF mode.)
cpu
cpu-number: Specifies a CPU by its number. If you do not specify this option, the command displays information about the default CPU.
Examples
# (In standalone mode.) Display memory usage information.
<Sysname> display memory
The statistics about memory is measured in KB:
Slot 3:
Total Used Free Shared Buffers Cached FreeRatio
Mem: 999968 345792 654176 0 0 28496 65.4%
-/+ Buffers/Cache: 317296 682672
Swap: 0 0 0
Slot 7:
Total Used Free Shared Buffers Cached FreeRatio
Mem: 8135316 737928 7397388 0 152 175584 90.9%
-/+ Buffers/Cache: 562192 7573124
Swap: 0 0 0
# (In IRF mode.) Display memory usage information.
<Sysname> display memory
The statistics about memory is measured in KB:
Chassis 1 Slot 3:
Total Used Free Shared Buffers Cached FreeRatio
Mem: 999968 345792 654176 0 0 28496 65.4%
-/+ Buffers/Cache: 317296 682672
Swap: 0 0 0
Chassis 1 Slot 7:
Total Used Free Shared Buffers Cached FreeRatio
Mem: 8135316 737928 7397388 0 152 175584 90.9%
-/+ Buffers/Cache: 562192 7573124
Swap: 0 0 0
Table 44 Command output
Field Description
Slot Slot number of a card. (In standalone mode.)
Chassis x Slot x Slot number of a card on a member device. (In IRF mode.)
268
Field Description
Total
Total size of the allocable physical memory space.
The memory space is virtually divided into two parts: the allocable part and the unallocable part. The latter is used for kernel codes, kernel management, and ISSU functions. The former can be allocated and used for such tasks as running service modules and storing files.
Used Used physical memory.
Shared Physical memory shared by processes.
Cached
FreeRatio
-/+ Buffers/Cache
Physical memory used for caches.
Free memory ratio.
-/+ Buffers/Cache:used = Mem:Used – Mem:Buffers – Mem:Cached, which indicates the physical memory used by applications.
-/+ Buffers/Cache:free = Mem:Free + Mem:Buffers + Mem:Cached, which indicates the physical memory available for applications.
display memory-threshold
Use display memory-threshold to display memory alarm thresholds and statistics.
Syntax
In standalone mode:
display memory-threshold
[ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
display memory-threshold
[ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Views
Any view
Predefined user roles
network-admin mdc-admin
Parameters slot
slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays the memory usage thresholds and statistics for the active MPU. (In standalone mode.)
chassis
chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays the memory usage thresholds and statistics for the global active MPU. (In IRF mode.)
cpu
cpu-number: Specifies a CPU by its number. If you do not specify this option, the command displays the memory usage thresholds and statistics for the default CPU.
Usage guidelines
For more information about memory usage notifications, see log information containing
MEM_EXCEED_THRESHOLD
or MEM_BELOW_THRESHOLD.
269
Examples
# Display memory alarm thresholds and statistics.
<Sysname> display memory-threshold
Memory usage threshold: 100%
Free memory threshold:
Minor: 96M
Severe: 64M
Critical: 48M
Normal: 128M
Current memory state: Normal
Event statistics:
[Back to normal state]
First notification: 0.0
Latest notification: 0.0
Total number of notifications sent: 0
[Enter minor low-memory state]
First notification at: 0.0
Latest notification at: 0.0
Total number of notifications sent: 0
[Back to minor low-memory state]
First notification at: 0.0
Latest notification at: 0.0
Total number of notifications sent: 0
[Enter severe low-memory state]
First notification at: 0.0
Latest notification at: 0.0
Total number of notifications sent: 0
[Back to severe low-memory state]
First notification at: 0.0
Latest notification at: 0.0
Total number of notifications sent: 0
[Enter critical low-memory state]
First notification at: 0.0
Latest notification at: 0.0
Total number of notifications sent: 0
display power
Use display power to display power module information.
Syntax
In standalone mode:
display power
[ power-id ]
In IRF mode:
display power
[ chassis { chassis-number | virtual-chassis-number slot slot-number } [ power-id ] ]
Views
Any view
270
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters chassis
{ chassis-number | virtual-chassis-number slot slot-number }: Specifies an IRF member device by its member ID. The virtual-chassis-number slot slot-number option is not supported in the current software version. On an IRF fabric, this command displays power supply information for all member devices if you do not specify a member device. (In IRF mode.)
power
-id: Specifies a power module by its ID. If you do not specify this option, the command displays information about all power modules on the specified object.
Examples
# Display power module information.
<Sysname> display power
Power 1 State: Normal
Power 2 State: Absent
Power 3 State: Absent
Power 4 State: Absent
display scheduler job
Use display scheduler job to display job configuration information.
Syntax display scheduler job
[ job-name ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
job-name
: Specifies a job by its name, a case-sensitive string of 1 to 47 characters. If you do not specify this option, the command displays configuration information for all jobs.
Examples
# Display configuration information for all jobs.
<Sysname> display scheduler job
Job name: saveconfig
copy startup.cfg backup.cfg
Job name: backupconfig
Job name: creat-VLAN100
271
system-view
vlan 100
// The output shows that the device has three jobs: the first has one command, the second has no command, and the third has two commands. Jobs are separated by blank lines.
display scheduler logfile
Use display scheduler logfile to display job execution log information.
Syntax display scheduler logfile
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display job execution log information.
<Sysname> display scheduler logfile
Logfile Size: 1902 Bytes.
Job name : shutdown
Schedule name : shutdown
Execution time : Tue Dec 27 10:44:42 2011
Completion time : Tue Dec 27 10:44:47 2011
--------------------------------- Job output -----------------------------------
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname]interface rang gigabitethernet 1/0/1 to gigabitethernet 1/0/3
[Sysname-if-range]shutdown
Table 45 Command output
Field
Logfile Size
Schedule name
Description
Size of the log file, in bytes.
Schedule to which the job belongs.
Execution time
Completion time
Job output
Related commands reset scheduler logfile
Time when the job was started.
Time when the job was completed. If the job has never been executed or the job has no commands, this field is blank.
Commands in the job and their output.
272
display scheduler reboot
Use display scheduler reboot to display the automatic reboot schedule.
Syntax display scheduler reboot
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display the automatic reboot schedule.
<Sysname> display scheduler reboot
System will reboot at 16:32:00 05/23/2011 (in 1 hours and 39 minutes).
Related commands scheduler reboot at scheduler reboot delay
display scheduler schedule
Use display scheduler schedule to display schedule information.
Syntax display scheduler schedule
[ schedule-name ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
schedule-name
: Specifies a schedule by its name, a case-sensitive string of 1 to 47 characters. If you do not specify this option, the command displays information about all schedules.
Examples
# Display information about all schedules.
<Sysname> display scheduler schedule
Schedule name : START-pc1/pc2
Schedule type : Run on every Mon Tue Wed Thu Fri at 08:00:00
Start time : Thu Aug 7 08:00:00 2014
273
Last execution time : Yet to be executed
-----------------------------------------------------------------------
Job name Last execution status start-GigabitEthernet1/0/1 -NA- start-GigabitEthernet1/0/2 -NA-
Schedule name : STOP-pc1/pc2
Schedule type : Run on every Mon Tue Wed Thu Fri at 18:00:00
Start time : Wed Aug 6 18:00:00 2014
Last execution time : Yet to be executed
-----------------------------------------------------------------------
Job name Last execution status shutdown-GigabitEthernet1/0/1 -NA- shutdown-GigabitEthernet1/0/2 -NA-
Schedule name : saveconfig
-----------------------------------------------------------------------
Job name Last execution status
1 -NA-
Table 46 Command output
Field Description
Schedule type
Execution time setting of the schedule. If no execution time is specified, this field is not displayed.
Start time
Last execution time
Last completion time
Execution counts
Job name
Last execution status
Time to execute the schedule for the first time. If no execution time is specified, this field is not displayed.
Last time when the schedule was executed. If no execution time is specified, this field is not displayed. If the schedule has never been executed, "Yet to be executed" is displayed for this field.
Last time when the schedule was completed. If no execution time is specified, this field is not displayed.
Number of times the schedule has been executed. If the schedule has never been executed, this field is not displayed.
Name of a job under the schedule.
Result of the most recent execution:
• Successful.
• Failed.
•
Waiting—The device is executing the schedule and the job is waiting to be executed.
• In process—The job is being executed.
•
-NA-—The execution time has not arrived yet.
To view information about whether the commands in the job has been executed and the execution results, execute the display scheduler logfile command.
display serial-no
Use display serial-no to display serial numbers for fan trays and power modules.
274
Syntax
In standalone mode:
display serial-no
{ fan fan-id | power power-id }
In IRF mode:
display serial-no
chassis chassis-number { fan fan-id | power power-id }
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
fan fan-id
: Specifies a fan tray by its ID.
power power-id
: Specifies a power module by its ID.
chassis chassis-number
: Specifies an IRF member device by its member ID. (In IRF mode.)
Examples
# (In standalone mode.) Display the serial number for fan tray 0.
<Sysname> display serial-no fan 0
DEVICE_SERIAL_NUMBER : 210212A0561234560001
# (In IRF mode.) Display the serial number for fan tray 0 on member device 1.
<Sysname> display serial-no chassis 1 fan 0
DEVICE_SERIAL_NUMBER : 210212A0561234560001
Related commands set serial-no
display switch-mode status
Use display switch-mode status to display operating mode information about modules.
Syntax
In standalone mode:
display switch-mode status
In IRF mode:
display switch-mode status chassis chassis-number
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin
275
mdc-operator
Parameters
chassis chassis-number
: Specifies an IRF member device by its member ID. (In IRF mode.)
Usage guidelines
If a module does not have an operating mode specified, the Config field displays NONE. The module will operate in the default mode after you save the running configuration and reboot the module.
Examples
# (In standalone mode.) Display operating mode information about all modules on the switch.
<Sysname> display switch-mode status
LPU switch mode:
Slot Current Config
2 NORMAL *BRIDGING
3 MIX NONE
4 NORMAL NORMAL
5 MIX BRIDGING
* indicates the mode is not supported.
# (In IRF mode.) Display operating mode information about all modules on the IRF member device 1.
<Sysname> display switch-mode status chassis 1
LPU switch mode:
Slot Current Config
2 MIX MIX
3 MIX NONE
4 NORMAL NORMAL
5 MIX BRIDGING
Table 47 Command output
Current
Config
Field Description
Current operating mode:
• NONE—The module does not support operating mode configuration.
• BRIDGING—The module is operating in the extended MAC mode.
•
NORMAL—The module is operating in the normal mode.
•
ROUTING—The module is operating in the extended routing mode.
• MIX—The module is operating in the extended hybrid mode.
• STANDARD-IPV6—The module is operating in the IPv6 standard mode.
•
IPv6—The module is operating in the IPv6 mode.
Current operating mode:
• NONE—No operating mode is specified for the module.
• BRIDGING—The extended MAC mode is specified for the module.
•
NORMAL—The normal mode is specified for the module.
•
ROUTING—The extended routing mode is specified for the module.
• MIX—The extended hybrid mode is specified for the module.
• STANDARD-IPV6—The IPv6 standard mode is specified for the module.
•
IPv6—The IPv6 mode is specified for the module.
276
Field Description
* indicates the mode is not supported.
The module does not support the operating mode specified for it. The module will use the default operating mode after reboot.
Related commands switch-mode
display system stable state
Use display system stable state to display system stability and status information.
Syntax display system stable state
[ mdc { id | all } ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters mdc
{ id | all }: Specifies an MDC by its ID or specifies all MDCs. If you do not specify this option, the command displays stability information for the system.
Usage guidelines
Before performing an ISSU or active/standby switchover, execute this command multiple times to identify whether the system is operating stably. If the value of the System State field is not Stable, you cannot perform an ISSU. If the value of the Redundancy Stable field is not Stable, you cannot perform an active/standby switchover.
The device/card/MDC startup takes some time. If the values of the status fields do not change to
Stable
, execute this command multiple times to identify the devices/cards/MDCs that are not in
Stable
state. You can also use other commands to identify the faulty components. For example:
•
Use the display device command to identify the cards in Fault state.
•
Use the display ha service-group command to display the status of HA service groups and identify the groups in batch backup state.
Examples
# (In standalone mode.) Display system stability and status information.
<Sysname> display system stable state
System state : Stable
Redundancy state: Stable
Slot CPU Role State
* 1 0 Active Stable
277
Table 48 Command output
Field Description
System state
System status:
•
Stable
—The system is operating stably.
•
Not ready
—The system is not operating stably. You cannot perform an ISSU when the system is in this state.
Redundancy state
Role
State
*
System redundancy status:
•
Stable
—Both MPUs are operating stably. You can perform a switchover.
•
No Redundance
—The system has only one MPU. You cannot perform a switchover.
•
Not Ready
—The system is not operating stably. You cannot perform a switchover.
Role of the card in the system:
•
Active
—The card is the active MPU.
•
Standby
—The card is the standby MPU.
•
Other
—The card is not an MPU.
Card status:
•
Stable
—The card is operating stably.
•
Board Inserted
—The card has just been installed.
•
Kernel Init
—Card kernel is being initialized.
•
Service Starting
—Services are starting.
•
Service Stopping
—Services are stopping.
•
HA Batch Backup
—An HA batch backup is going on.
•
Interface Data Batch Backup
—An interface data batch backup is in progress.
•
MDC Starting
—MDCs are starting.
•
MDC Stopping
—MDCs are stopping.
The object is not operating stably.
Related commands display device display ha service-group
(High Availability Command Reference)
display mdc
(Virtual Technologies Command Reference)
display system-working-mode
Use display system-working-mode to display the current system working mode.
Syntax display system-working-mode
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
278
Examples
# Display the current system working mode.
<Sysname> display system-working-mode
The current system working mode is standard.
The system working mode for next startup is standard.
display transceiver alarm
Use display transceiver alarm to display transceiver alarms.
Syntax display transceiver alarm interface
[ interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters interface
[ interface-type interface-number ]: Specifies an interface by its type and number. If no interface is specified, this command displays the alarms present on every transceiver module.
Usage guidelines
Table 49 shows the common transceiver alarms. If no error occurs, "None" is displayed.
Table 49 Common transceiver alarm components
Field Description
SFP/SFP+:
RX Receive
TX Transmit
Temp Temperature
QSFP+:
RX Receive
TX Transmit
Temp Temperature
CFP:
RX Receive
TX Transmit
279
Field Description
Temp Temperature
XFP:
RX Receive
TX Transmit
Temp Temperature
Examples
# Display the alarms present on the transceiver module in interface Ten-GigabitEthernet 3/0/45.
<Sysname> display transceiver alarm interface ten-gigabitethernet 3/0/45
Ten-GigabitEthernet3/0/45 transceiver current alarm information:
RX power low
RX signal loss
Table 50 Command output
Field Description
transceiver current alarm information Alarms present on the transceiver module.
RX signal loss
RX power low
Received signals are lost.
Received power is low.
display transceiver diagnosis
Use display transceiver diagnosis to display the current values of the digital diagnosis parameters on transceiver modules.
Syntax display transceiver diagnosis interface
[ interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters interface
[ interface-type interface-number ]: Specifies an interface by its type and number. If no interface is specified, this command displays the current values of the digital diagnosis parameters on every transceiver module.
280
Usage guidelines
This command cannot display information about some transceiver modules.
Examples
# Display the current values of the digital diagnosis parameters on the transceiver module in interface Ten-GigabitEthernet 3/0/45.
<Sysname> display transceiver diagnosis interface ten-gigabitethernet 3/0/45
Ten-GigabitEthernet3/0/45 transceiver diagnostic information:
Current diagnostic parameters:
Temp.(°C) Voltage(V) Bias(mA) RX power(dBm) TX power(dBm)
30 3.36 7.82 -35.64 -2.23
Alarm thresholds:
Temp.(°C) Voltage(V) Bias(mA) RX power(dBm) TX power(dBm)
High 73 3.80 13.20 1.00 0.00
Low -3 2.81 1.00 -9.50 -10.30
Table 51 Command output
Field Description
transceiver diagnostic information
Digital diagnosis information for the transceiver module in the interface.
Temp.(°C)
Voltage(V)
Bias(mA)
RX power(dBm)
TX power(dBm)
Temperature in °C, accurate to 1°C.
Voltage in V, accurate to 0.01 V.
Bias current in mA, accurate to 0.01 mA.
RX power in dBm, accurate to 0.01 dBm.
TX power in dBm, accurate to 0.01 dBm.
display transceiver interface
Use display transceiver interface to display the key parameters of transceiver modules.
Syntax display transceiver interface
[ interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
interface-type interface-number
: Specifies an interface by its type and number. If you do not specify this option, the command displays the key parameters of every transceiver module.
Examples
# Display the key parameters of the transceiver module in interface Ten-GigabitEthernet 3/0/45.
<Sysname> display transceiver interface ten-gigabitethernet 3/0/45
281
Ten-GigabitEthernet3/0/45 transceiver information:
Transceiver Type : 10G_BASE_SR_SFP
Connector Type : LC
Wavelength(nm) : 850
Transfer Distance(m) : 80(OM2),20(OM1),300(OM3)
Digital Diagnostic Monitoring : YES
Vendor Name : FINISAR CORP.
Table 52 Command output
Field Description
transceiver information Transceiver information.
Transceiver Type Transceiver type.
Connector Type
Wavelength(nm)
Transfer Distance(xx)
Digital Diagnostic
Monitoring
Ordering Name
Connector type options:
•
SC—Fiber connector developed by NTT.
•
LC—1.25 mm/RJ-45 fiber connector developed by Lucent.
• RJ-45.
•
CX 4.
• Fiber transceiver: Central wavelength (in nm) of the transmit laser. If the transceiver supports multiple wavelengths, every two wavelength values are separated by a comma.
•
Copper cable: Displayed as N/A.
Transmission distance, where xx indicates the distance unit:
• km—Kilometers, for single-mode transceiver modules.
• m—Meters, for other transceiver modules.
If the transceiver module supports multiple types of transmission media, this field displays the transmission distance for each type, in the form transmission distance
(medium type).
Transmission medium types include:
• 9 um—9/125 µm single-mode fiber.
• 50 um—50/125 µm multimode fiber.
•
62.5 um—62.5/125 µm multimode fiber.
•
TP—Twisted pair.
• CX4—CX4 cable.
Support for the digital diagnosis feature:
•
YES—Supported.
•
NO—Not supported.
Product code.
display transceiver manuinfo
Use display transceiver manuinfo to display electronic label information for transceiver modules.
Syntax display transceiver manuinfo interface
[ interface-type interface-number ]
Views
Any view
282
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters interface
[ interface-type interface-number ]: Specifies an interface by its type and number. If no interface is specified, this command displays electronic label information for the transceiver modules on all interfaces.
Usage guidelines
This command displays only part of the electronic label information.
Examples
# Display electronic label information for the transceiver module in interface Ten-GigabitEthernet
4/0/45.
<Sysname> display transceiver manuinfo interface ten-gigabitethernet 3/0/45
Ten-gigabitethernet 3/0/45 transceiver manufacture information:
Manu. Serial Number : MY13D41001
Manufacturing Date : 2014-01-20
Vendor Name : HPE
Table 53 Command output
Field Description
Manu. Serial Number Serial number generated during production of the transceiver module.
Manufacturing Date
Date when the electronic label information was written to the transceiver module.
display version
Use display version to display system version information.
Syntax display
version
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Examples
# Display system version information.
<Sysname> display version
HPE Comware Software, Version 7.1.045, Release 7178
Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP
283
HP 7506 uptime is 0 weeks, 0 days, 3 hours, 13 minutes
Last reboot reason : Cold reboot
Boot image: flash:/7500-CMW710-BOOT-R7178.bin
Boot image version: 7.1.045, Release 7178
Compiled Dec 20 2015 12:00:00
System image: flash:/7500-CMW710-SYSTEM-R7178.bin
System image version: 7.1.045, Release 7178
Compiled Dec 20 2015 12:00:00
...
display version-update-record
Use display version-update-record to display the startup software image upgrade history records of the active MPU. (In standalone mode.)
Use display version-update-record to display the startup software image upgrade history records of the global active MPU. (In IRF mode.)
Syntax display version-update-record
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Usage guidelines
The device records its current startup software version information and all subsequent version update information. Such information can survive reboots.
The maximum number of records is 10.
Examples
# Display the startup software image upgrade history records.
<Sysname> display version-update-record
Name Version Compile time
Record 1 (updated on Nov 20 2158 at 13:19:34):
* 7500-CMW710-BOOT-R7178.bin 7.1.045 Release 7178 Dec 20 2015 12:00:
00
* 7500-CMW710-SYSTEM-R7178.bin 7.1.045 Release 7178 Dec 20 2015 12:00:
00
...
Table 54 Command output
Field Description
Name Software image file name.
284
Field Description
* The new software image is different from the old one.
Related commands reset version-update-record
display xbar
Use display xbar to display the load modes for MPUs, including the load mode setting and the current load mode.
Syntax
In standalone mode:
display xbar
In IRF mode:
display xbar
[ chassis chassis-number ]
Views
Any view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
chassis chassis-number
: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays the MPU load mode information for all member devices. (In
IRF mode.)
Usage guidelines
This command is not supported on a 7502 (JD242C).
The running load mode might be different from the configured load mode. The load-balance mode takes effect only when both the active and standby MPUs are present. If the standby MPU is not present, the active MPU operates in load-single mode.
Examples
# (In standalone mode.) Display the load modes for MPUs.
<Sysname> display xbar
The configured system HA xbar load mode is BALANCE
The activated system HA xbar load mode is SINGLE
The output shows that the configured load mode is the load-balance mode but the running load mode is the load-single mode.
# (In IRF mode.) Display the load modes for the MPUs on all IRF member devices.
<Sysname> display xbar
Chassis 1:
The configured system HA xbar load mode is BALANCE
The activated system HA xbar load mode is SINGLE
285
Chassis 2:
The configured system HA xbar load mode is SINGLE
The activated system HA xbar load mode is SINGLE
The output shows that two member devices exist in the IRF fabric. On IRF member device 1, the configured load mode is the load-balance mode but the running load mode is the load-single mode.
On IRF member device 2, both the configured load mode and the running load mode are the
load-single
mode.
Related commands xbar
hardware-failure-detection
Use hardware-failure-detection to specify the action to be taken in response to hardware failures.
Use undo hardware-failure-detection to restore the default.
Syntax hardware-failure-detection
{ board | chip | forwarding } { isolate | off | reset | warning }
undo hardware-failure-detection
{ board | chip | forwarding }
Default
The system takes the action of warning in response to hardware failures on chips, cards, and the forwarding plane.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters board
: Specifies failures on control paths and cards.
chip
: Specifies failures on components of cards such as the chips, capacitances, resistances.
forwarding
: Specifies failures on the forwarding plane (including services and other relevant items).
isolate
: Takes one or more of the following actions:
•
Shuts down the relevant ports.
•
Prohibits loading software for the relevant cards.
•
Isolates the relevant cards.
•
Powers off the relevant cards to reduce impact from the failures.
off
: Takes no action.
reset
: Restarts the relevant components or cards to recover from failures.
warning
: Sends traps to notify you of the failures.
Usage guidelines
The device automatically detects hardware failures on components, cards, and the forwarding plane.
You can specify the actions to be taken in response to detected failures.
Examples
# Configure the device to send traps in response to failures on components.
286
<Sysname> system-view
[Sysname] hardware-failure-detection chip warning
# Configure the device to restart the cards on which failures are detected.
<Sysname> system-view
[Sysname] hardware-failure-detection board reset
header
Use header to create a banner.
Use undo header to delete a banner.
Syntax header
{ incoming | legal | login | motd | shell } text
undo header
{ incoming | legal | login | motd | shell }
Default
No banner is configured.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters incoming
: Configures the banner to be displayed before a modem dial-in user accesses user view.
If authentication is required, the incoming banner appears after the authentication is passed. Modem dial-in is not supported in the current software version.
legal
: Configures the banner to be displayed before a user inputs the username and password to access the CLI.
login
: Configures the banner to be displayed before password or scheme authentication is performed for a login user.
motd
: Configures the greeting banner to be displayed before the legal banner appears.
shell
: Configures the banner to be displayed before a non-modem dial-in user accesses user view.
text
: Specifies the banner message. You can enter the banner message on the same line as the keywords or on different lines. For more information, see Fundamentals Configuration Guide.
Examples
# Create the incoming banner, legal banner, login banner, MOTD banner, and shell banner.
<Sysname> system-view
[Sysname] header incoming
Please input banner content, and quit with the character '%'.
Welcome to incoming(header incoming)%
[Sysname] header legal
Please input banner content, and quit with the character '%'.
Welcome to legal (header legal)%
[Sysname] header login
Please input banner content, and quit with the character '%'.
Welcome to login(header login)%
287
[Sysname] header motd
Please input banner content, and quit with the character '%'.
Welcome to motd(header motd)%
[Sysname] header shell
Please input banner content, and quit with the character '%'.
Welcome to shell(header shell)%
In this example, the percentage sign (%) is the starting and ending character of the text argument.
Entering the percentage sign after the text quits the header command. Because it is the starting and ending character, the percentage sign is not included in the banner.
# Test the configuration by using Telnet. The login banner appears only when password or scheme login authentication has been configured.
******************************************************************************
* Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
Welcome to legal (header legal)
Press Y or ENTER to continue, N to exit.
Welcome to motd(header motd)
Welcome to login(header login)
Login authentication
Password:
Welcome to shell(header shell)
job
Use job to assign a job to a schedule.
Use undo job to revoke a job.
Syntax
job job-name
undo job job-name
Default
No job is assigned to a schedule.
Views
Schedule view
Predefined user roles
network-admin mdc-admin
288
Parameters
job-name
: Specifies the job name, a case-sensitive string of 1 to 47 characters.
Usage guidelines
You can assign multiple jobs to a schedule. The jobs in a schedule are executed concurrently.
The jobs to be assigned to a schedule must already exist. To create a job, use the scheduler job command.
Examples
# Assign job save-job to schedule saveconfig.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] job save-job
Related commands scheduler job scheduler schedule
memory-threshold
Use memory-threshold to set free-memory thresholds.
Use undo memory-threshold to restore the defaults.
Syntax
In standalone mode:
memory-threshold
[ slot slot-number [ cpu cpu-number ] ] minor minor-value severe severe-value
critical critical-value normal normal-value
undo memory-threshold
[ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
memory-threshold
[ chassis chassis-number slot slot-number [ cpu cpu-number ] ] minor
minor-value severe severe-value critical critical-value normal normal-value
undo memory-threshold
[ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Default
•
Minor alarm threshold: 96 MB.
•
Severe alarm threshold: 64 MB.
•
Critical alarm threshold: 48 MB.
•
Normal state threshold: 128 MB.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
minor minor-value
: Specifies the minor alarm threshold. This threshold must be equal to or less than the normal state threshold. Setting this threshold to 0 disables the minor alarm feature.
289
severe severe-value
: Specifies the severe alarm threshold. This threshold must be equal to or less than the minor alarm threshold. Setting this threshold to 0 disables the severe alarm feature.
critical critical-value
: Specifies the critical alarm threshold. This threshold must be equal to or less than the severe alarm threshold. Setting this threshold to 0 disables the critical alarm feature.
normal normal-value
: Specifies the normal state threshold. This threshold must be equal to or less than the total memory size.
slot
slot-number: Specifies a card by its slot number. If you do not specify this option, the command sets free-memory thresholds for the active MPU. (In standalone mode.)
chassis
chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command sets free-memory thresholds for the global active MPU. (In IRF mode.)
cpu
cpu-number: Specifies a CPU by its number. If you do not specify this option, the command sets free-memory thresholds for the default CPU.
Usage guidelines
To ensure correct operation and improve memory efficiency, the system monitors the amount of free memory space in real time. When a threshold is exceeded, the system sends an alarm notification or an alarm-removed notification to affected feature modules or processes so they can take countermeasures. For more information about the thresholds, see Fundamentals Configuration
Guide
.
Examples
# Set the minor alarm, severe alarm, critical alarm, and normal state thresholds to 64 MB, 48 MB, 32
MB, and 96 MB, respectively.
<Sysname> system-view
[Sysname] memory-threshold minor 64 severe 48 critical 32 normal 96
Related commands display memory-threshold
memory-threshold usage
Use memory-threshold usage to set the memory usage threshold.
Use undo memory-threshold usage to restore the default.
Syntax
In standalone mode:
memory-threshold
[ slot slot-number [ cpu cpu-number ] ] usage memory-threshold
undo memory-threshold
[ slot slot-number [ cpu cpu-number ] ] usage
In IRF mode:
memory-threshold
[ chassis chassis-number slot slot-number [ cpu cpu-number ] ] usage
memory-threshold
undo memory-threshold
[ chassis chassis-number slot slot-number [ cpu cpu-number ] ] usage
Default
The memory usage threshold is 100.
Views
System view
290
Predefined user roles
network-admin mdc-admin
Parameters
memory-threshold
: Specifies the memory usage threshold in percentage. The value range is 0 to
100.
slot
slot-number: Specifies a card by its slot number. If you do not specify this option, the command sets the memory usage threshold for the active MPU. (In standalone mode.)
chassis
chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command sets the memory usage threshold for the global active MPU. (In IRF mode.)
cpu
cpu-number: Specifies a CPU by its number. If you do not specify this option, the command sets the memory usage threshold for the default CPU.
Usage guidelines
The device samples memory usage at an interval of 1 minute. If the sample is greater than the memory usage threshold, the device sends a trap.
Examples
# Set the memory usage threshold to 80%.
<Sysname> system-view
[Sysname] memory-threshold chassis 1 slot 2 cpu 1 usage 80
Related commands display memory-threshold
monitor cpu-usage enable
Use monitor cpu-usage enable to enable CPU usage monitoring.
Use undo monitor cpu-usage enable to disable CPU usage monitoring.
Syntax
In standalone mode:
monitor cpu-usage enable
[ slot slot-number [ cpu cpu-number ] ]
undo monitor cpu-usage enable
[ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
monitor cpu-usage enable
[ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
undo monitor cpu-usage enable
[ chassis chassis-number slot slot-number [ cpu cpu-number ] ]
Default
CPU usage monitoring is enabled.
Views
System view
Predefined user roles
network-admin mdc-admin
291
Parameters slot
slot-number: Specifies a card by its slot number. If you do not specify this option, the command enables CPU usage monitoring for the active MPU. (In standalone mode.)
chassis
chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command enables
CPU usage monitoring for the global active MPU. (In IRF mode.)
cpu
cpu-number: Specifies a CPU by its number. If you do not specify this option, the command enables CPU usage monitoring for the default CPU.
Usage guidelines
After CPU usage monitoring is enabled, the system samples and saves CPU usage at the interval specified by the monitor cpu-usage interval command. You can use the display cpu-usage
history
command to view recent CPU usage.
Examples
# Enable CPU usage monitoring.
<Sysname> system-view
[Sysname] monitor cpu-usage enable
Related commands display cpu-usage configuration display cpu-usage history monitor cpu-usage interval
monitor cpu-usage interval
Use monitor cpu-usage interval to set the sampling interval for CPU usage monitoring.
Syntax
In standalone mode:
monitor cpu-usage interval interval-value
[ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
monitor cpu-usage interval interval-value
[ chassis chassis-number slot slot-number [ cpu
cpu-number
] ]
Default
The system samples CPU usage every 1 minute.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
interval-value
: Specifies the sampling interval for CPU usage monitoring. Valid values include 5Sec for 5 seconds, 1Min for 1 minute, and 5Min for 5 minutes.
slot
slot-number: Specifies a card by its slot number. If you do not specify this option, the command sets the interval for the active MPU. (In standalone mode.)
292
chassis
chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command sets the interval for the global active MPU. (In IRF mode.)
cpu
cpu-number: Specifies a CPU by its number. If you do not specify this option, the command sets the interval for the default CPU.
Usage guidelines
After CPU usage monitoring is enabled, the system samples and saves CPU usage at the specified interval. You can use the display cpu-usage history command to view recent CPU usage.
Examples
# Set the sampling interval for CPU usage monitoring to 5 seconds.
<Sysname> system-view
[Sysname] monitor cpu-usage interval 5Sec
Related commands display cpu-usage configuration display cpu-usage history monitor cpu-usage enable
monitor cpu-usage threshold
Use monitor cpu-usage threshold to set the CPU usage threshold.
Use undo monitor cpu-usage threshold to restore the default.
Syntax
In standalone mode:
monitor cpu-usage threshold cpu-threshold
[ slot slot-number [ cpu cpu-number ] ]
undo monitor cpu-usage threshold
[ slot slot-number [ cpu cpu-number ] ]
In IRF mode:
monitor cpu-usage threshold cpu-threshold
[ chassis chassis-number slot slot-number [ cpu
cpu-number
] ]
undo monitor cpu-usage threshold
[ chassis chassis-number slot slot-number [ cpu
cpu-number
] ]
Default
The CPU usage threshold is 99.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
cpu-threshold
: Specifies the CPU usage threshold in percentage. The value range is 0 to 100.
slot
slot-number: Specifies a card by its slot number. If you do not specify this option, the command sets the CPU usage threshold for the active MPU. (In standalone mode.)
293
chassis
chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number
argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command sets the
CPU usage threshold for the global active MPU. (In IRF mode.)
cpu
cpu-number: Specifies a CPU by its number. If you do not specify this option, the command sets the CPU usage threshold for the default CPU.
Usage guidelines
The device samples CPU usage at an interval of 1 minute. If the sample is greater than the CPU usage threshold, the device sends a trap.
Examples
# Set the CPU usage threshold to 80%.
<Sysname> system-view
[Sysname] monitor cpu-usage threshold 80
Related commands display cpu-usage configuration
monitor handshake-timeout disable-port
Use monitor handshake-timeout disable-port to enable the port-down feature globally.
Use undo monitor handshake-timeout disable-port to disable the feature globally.
Default
The port-down feature is enabled.
Syntax monitor handshake-timeout disable-port undo monitor handshake-timeout disable-port
Views
System view
Predefined user roles
network-admin mdc-admin
Usage guidelines
The port-down feature applies to scenarios where two devices (one active and one standby) are used for high availability, for example, a network deployed with VRRP. This feature shuts down all service ports on the active device immediately after both MPUs on the active device are removed or reboot abnormally. The shutdown operation ensures quick service switchover to the standby device.
Examples
# Enable the port-down feature globally.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] monitor handshake-timeout disable-port
Set successful!
294
reboot
Use reboot to reboot a card or the entire system. (In standalone mode.)
Use reboot to reboot an IRF member device or all IRF member devices. (In IRF mode.)
Syntax
In standalone mode:
reboot
[ slot slot-number [ subslot subslot-number ] ] [ force ]
In IRF mode:
reboot
[ chassis chassis-number [ slot slot-number [ subslot subslot-number ] ] ] [ force ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters chassis
chassis-number: Specifies an IRF member device by its member ID. (In IRF mode.)
slot slot-number
: Specifies a card by its slot number. (In standalone mode.)
slot slot-number
: Specifies a card by its slot number.(In IRF mode.)
subslot subslot-number
: Specifies a subcard by its subslot number. This option is not supported in the current software version.
force
: Reboots the device immediately without performing software or hard disk check. If this keyword is not specified, the system first checks whether the reboot might result in data loss or a system failure. For example, the system checks whether the main system software image file exists and whether a write operation is in progress on a storage medium. If the reboot might cause problems, the system does not reboot the device.
Usage guidelines
CAUTION:
• A device reboot might interrupt network services.
• If the main startup software images are corrupt or missing, you must re-specify a set of main startup software images before executing the reboot command. force keyword only when the device fails or a reboot command without the force keyword cannot perform a reboot correctly. A reboot command with the force keyword might result in file system corruption because it does not perform data protection.
For data security, the device does not reboot if you reboot the device while the device is performing file operations.
In standalone mode:
•
To reboot a card, specify the slot number.
•
To reboot the entire device, do not specify the slot number option.
In IRF mode, you can use reboot [ chassis chassis-number [ slot slot-number [ subslot
subslot-number
] ] ] on the master to reboot the master or a subordinate member.
•
To reboot a card, specify both the IRF member ID and the slot number.
•
To reboot an IRF member device, specify only the IRF member ID or virtual chassis number.
295
•
To reboot all IRF member devices, do not specify the member ID or slot number option.
Examples
# Reboot the device when no configuration change has occurred since the last time you saved the running configuration.
<Sysname> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
# If any configuration has changed, reboot the device and save the configuration.
<Sysname> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
Current configuration will be lost after the reboot, save current configuration? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key): flash:/startup.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Configuration is saved to flash successfully.
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
# If any configuration has changed, reboot the device but do not save the configuration.
<Sysname> reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
Current configuration will be lost after the reboot, save current configuration? [Y/N]:n
This command will reboot the device. Continue? [Y/N]:y
Now rebooting, please wait...
# Reboot the device immediately without performing software check.
<Sysname> reboot force
A forced reboot might cause the storage medium to be corrupted. Continue? [Y/N]:y
Now rebooting, please wait...
# (In standalone mode.) Reboot the interface module in slot 2.
<Sysname> reboot slot 2
Start to check configuration with next startup configuration file, please wait..
.......DONE!
This command will reboot the specified slot, Continue? [Y/N]:y
Now rebooting, please wait...
# (In standalone mode.) Reboot the interface module in slot 2 by force.
<Sysname> reboot slot 2 force
A forced reboot might cause the storage medium to be corrupted. Continue? [Y/N]:y
Now rebooting, please wait...
# (In IRF mode.) Reboot IRF member device 2.
<Sysname> reboot chassis 2
Start to check configuration with next startup configuration file, please wait..
.......DONE!
This command will reboot the specified chassis, Continue? [Y/N]:y
296
Now rebooting, please wait...
# (In IRF mode.) Reboot IRF member device 2 by force.
<Sysname> reboot chassis 2 force
A forced reboot might cause the storage medium to be corrupted. Continue? [Y/N]:y
Now rebooting, please wait...
# (In IRF mode.) Reboot the interface module in slot 2 on IRF member device 2.
<Sysname> reboot chassis 2 slot 2
Start to check configuration with next startup configuration file, please wait..
.......DONE!
This command will reboot the specified slot, Continue? [Y/N]:y
Now rebooting, please wait...
# (In IRF mode.) Reboot the interface module in slot 2 on IRF member device 2 by force.
<Sysname> reboot chassis 2 slot 2 force
A forced reboot might cause the storage medium to be corrupted. Continue? [Y/N]:y
Now rebooting, please wait...
reset asset-info
Use reset asset-info to clear the asset profile for a physical component.
Syntax
In standalone mode:
reset asset-info
{ chassis | fan fan-id | power power-id | slot slot-number } [ csn | custom |
department
| description | location | service-date | state ]
In IRF mode:
reset asset-info
chassis chassis-number { chassis | fan fan-id | power power-id | slot slot-number }
[ csn | custom| department | description | location | service-date | state ]
Views
System view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters chassis
: Clears the asset profile for the chassis. The device does not support this keyword.
fan fan-id
: Clears the asset profile of the specified fan tray. The device does not support this option.
power power-id
: Clears the asset profile for the specified power module. The device does not support this option.
slot
slot-number: Clears the asset profile for the card in the specified slot.
csn
: Clears the asset ID.
custom
: Clears customized asset items.
department
: Clears the department name.
description
: Clears the asset description.
297
location
: Clears the asset location.
service-date
: Clears the service start date.
state
: Clears the usage status
chassis chassis-number
: Specifies an IRF member device by its member ID. (In IRF mode.)
Usage guidelines
To clear an item in an asset profile, specify the corresponding keyword for the command. To clear all items in an asset profile, do not specify the item keywords.
Examples
# (In standalone mode.) Clear the asset ID for slot 0.
<Sysname> system-view
[Sysname] reset asset-info slot 0 csn
# (In IRF mode.) Clear the asset ID for slot 0 on IRF member device 1.
<Sysname> system-view
[Sysname] reset asset-info chassis 1 slot 0 csn
Related commands display asset-info set asset-info
reset version-update-record
Use reset version-update-record to clear the startup software image upgrade history records of the active MPU. (In standalone mode.)
Use reset version-update-record to clear the startup software image upgrade history records of the global active MPU. (In IRF mode.)
Syntax reset version-update-record
Views
System view
Predefined user roles
network-admin mdc-admin
Examples
# Clear the startup software image upgrade history records.
<Sysname> system-view
[Sysname] reset version-update-record
This command will delete all records of version update. Continue? [Y/N]:y
Related commands display version-update-record
reset scheduler logfile
Use reset scheduler logfile to clear job execution log information.
298
Syntax reset scheduler logfile
Views
User view
Predefined user roles
network-admin mdc-admin
Examples
# Clear job execution log information.
<Sysname> reset scheduler logfile
Related commands display scheduler logfile
restore factory-default
Use restore factory-default to restore the factory-default configuration for the device.
Syntax restore factory-default
Views
User view
Predefined user roles
network-admin mdc-admin
Usage guidelines
CAUTION:
This command is disruptive. Use this command only when you cannot troubleshoot the device by using other methods, or you want to use the device in a different scenario.
This command performs the following operations:
•
Deletes all configuration files (.cfg files) in the root directories of the storage media.
•
Deletes all log files (.log files in the folder /logfile).
•
Clears all log information (in the log buffer), trap information, and debugging information.
•
Restores the parameters for the BootWare to the factory-default settings.
After this command is executed, only the items required for fundamental device operation are retained, including the .bin files, the MAC addresses, and the electronic label information.
Examples
# Restore the factory-default configuration for the device.
<Sysname> restore factory-default
This command will restore the system to the factory default configuration and clear the operation data. Continue [Y/N]:y
299
Restoring the factory default configuration. This process might take a few minutes. Please wait.................................................................................
.........................Done.
Please reboot the system to place the factory default configuration into effect.
Related commands reboot
scheduler job
Use scheduler job to create a job and enter job view. If the job already exists, you enter job view directly.
Use undo scheduler job to delete a job.
Syntax
scheduler job job-name
undo scheduler job job-name
Default
No job exists.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
job-name
: Specifies the job name, a case-sensitive string of 1 to 47 characters.
Usage guidelines
A job can be referenced by multiple schedules. In job view, you can assign commands to the job.
Examples
# Create a job named backupconfig and enter job view.
<Sysname> system-view
[Sysname] scheduler job backupconfig
[Sysname-job-backupconfig]
Related commands command scheduler schedule
scheduler logfile size
Use scheduler logfile size to set the size of the job execution log file.
Syntax
scheduler logfile size value
Default
The size of the job execution log file is 16 KB.
300
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
value
: Sets the size of the job execution log file, in KB. The value range is 16 to 1024.
Usage guidelines
The job execution log file saves the execution information of jobs. If the file is full, old records are deleted to make room for new records. If the size of the log information to be written to the file is greater than the file size, the excessive information is not written to the file.
Examples
# Set the size of the job execution log file to 32 KB.
<Sysname> system-view
[Sysname] scheduler logfile size 32
Related commands display scheduler logfile
scheduler reboot at
Use scheduler reboot at to specify the reboot date and time.
Use undo scheduler reboot to delete the reboot schedule configuration.
Syntax scheduler reboot at
time [ date ]
undo scheduler
reboot
Default
No reboot date or time is specified.
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
time
: Specifies the reboot time in the hh:mm format. The value range for hh is 0 to 23. The value range for mm is 0 to 59.
date
: Specifies the reboot date in the MM/DD/YYYY or YYYY/MM/DD format. The value range for
YYYY
is 2000 to 2035. The value range for MM is 1 to 12. The value range for DD varies by month.
Usage guidelines
CAUTION:
Device reboot interrupts network services.
301
When the date argument is not specified, the system uses the following rules to determine the reboot time:
•
If the reboot time is later than the current time, a reboot occurs at the reboot time of the current day.
•
If the reboot time is earlier than the current time, a reboot occurs at the reboot time the next day.
For data security, if you are performing file operations at the reboot time, the system does not reboot.
The device supports only one device reboot schedule. If you configure both the schedule reboot
delay
and schedule reboot delay commands or configure one of the commands multiple times, the most recent configuration takes effect.
Examples
# Configure the device to reboot at 12:00 p.m. This example assumes that the current time is 11:43 a.m. on June 6, 2011.
<Sysname> scheduler reboot at 12:00
Reboot system at 12:00:00 06/06/2011 (in 0 hours and 16 minutes). Confirm? [Y/N]:
Related commands scheduler reboot delay
scheduler reboot delay
Use scheduler reboot delay to specify the reboot delay time.
Use undo scheduler reboot to delete the reboot schedule configuration.
Syntax scheduler
reboot delay time
undo scheduler
reboot
Default
No reboot delay time is specified.
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
time
: Specifies the reboot delay time in the hh:mm or mm format. This argument can contain up to six characters. When in the hh:mm format, mm must be in the range of 0 to 59.
Usage guidelines
CAUTION:
Device reboot interrupts network services.
For data security, if you are performing file operations at the reboot time, the system does not reboot.
The device supports only one device reboot schedule. If you configure both the schedule reboot
delay
and schedule reboot delay commands or configure one of the commands multiple times, the most recent configuration takes effect.
302
Examples
# Configure the device to reboot after 88 minutes. This example assumes that the current time is
11:48 a.m. on June 6, 2011.
<Sysname> scheduler reboot delay 88
Reboot system at 13:16 06/06/2011(in 1 hours and 28 minutes). Confirm? [Y/N]:
scheduler schedule
Use scheduler schedule to create a schedule and enter schedule view. If the schedule already exists, you enter schedule view directly.
Use undo scheduler schedule to delete a schedule.
Syntax
scheduler schedule schedule-name
undo scheduler schedule schedule-name
Default
No schedule exists.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
schedule-name
: Specifies the schedule name, a case-sensitive string of 1 to 47 characters.
Usage guidelines
You can configure a schedule to have the device automatically run a command or a set of commands without administrative interference.
To configure a schedule:
1.
Use the scheduler job command to create a job and enter job view.
2.
Use the command command to assign commands to the job.
3.
Use the scheduler schedule command to create a schedule and enter schedule view.
4.
Use the job command to assign the job to the schedule. You can assign multiple jobs to a schedule. The jobs must already exist.
5.
Use the user-role command to assign user roles to the schedule. You can assign up to 64 user roles to a schedule.
6.
Use the time at, time once, or time repeating command to specify an execution time for the schedule. You can specify only one execution time for a schedule.
Examples
# Create a schedule named saveconfig.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
Related commands job time at
303
time once
set asset-info
Use set asset-info to configure an asset profile for a physical component.
Syntax
In standalone mode:
set asset-info
{ chassis | fan fan-id | power power-id | slot slot-number } { csn csn-number |
custom
name value | department department | description description | location location |
service-date
date | state state }
In IRF mode:
set asset-info
chassis chassis-number { chassis | fan fan-id | power power-id | slot slot-number }
{ csn csn-number | custom name value | department department | description description |
location
location | service-date date | state state }
Views
System view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters chassis
: Configures an asset profile for the chassis. The device does not support this keyword.
fan fan-id
: Configures an asset profile for the specified fan tray. The device does not support this option.
power power-id
: Configures an asset profile for the specified power module. The device does not support this option.
slot
slot-number: Configures an asset profile for the card in the specified slot.
csn csn-number
: Specifies an asset ID for the asset, a string of 1 to 64 characters.
custom
name value: Defines an asset profile item and specifies the value.
department department
: Specifies the department name, a string of 1 to 64 characters.
description description
: Specifies the asset description, a string of 1 to 64 characters.
location location
: Specifies the asset location, a string of 1 to 64 characters.
service-date date
: Specifies the service start date, a string of 1 to 25 characters.
state
state: Specifies the asset usage status, a string of 1 to 64 characters.
chassis chassis-number
: Specifies an IRF member device by its member ID. (In IRF mode.)
Usage guidelines
You can configure an asset profile for a card.
An asset profile has the following system-defined fields:
•
Asset ID.
•
Department name.
•
Asset description.
304
•
Asset location.
•
Service start date (when the asset started to provide services).
•
Asset usage status.
You can define additional fields by using the custom name value option.
Examples
# (In standalone mode.) Set the asset ID to 123456 for slot 0.
<Sysname> system-view
[Sysname] set asset-info slot 0 csn 123456
# (In IRF mode.) Set the asset ID to 123456 for slot 0 on IRF member device 1.
<Sysname> system-view
[Sysname] set asset-info chassis 1 slot 0 csn 123456
Related commands display asset-info reset asset-info
set serial-no
Use set serial-no to specify a serial number for a fan tray or power module.
Syntax
In standalone mode:
set serial-no
{ fan fan-id | power power-id } serial-no
In IRF mode:
set serial-no chassis chassis-number
{ fan fan-id | power power-id } serial-no
Views
System view
Predefined user roles
network-admin network-operator mdc-admin mdc-operator
Parameters
fan fan-id
: Specifies a fan tray by its ID.
power power-id
: Specifies a power module by its ID.
chassis chassis-number
: Specifies an IRF member device by its member ID. (In IRF mode.)
serial-no
: Specifies the serial number for the fan tray or power module.
Examples
# (In standalone mode.) Specify a serial number for fan tray 0.
<Sysname> system-view
[Sysname] set serial-no fan 0 210212A0561234560001
Set Fan Serial No Success!
# (In IRF mode.) Specify a serial number for fan tray 0 on IRF member device 1.
305
<Sysname> system-view
[Sysname] set serial-no chassis 1 fan 0 210212A0561234560001
Set Fan Serial No Success!
Related commands display serial-no
shutdown-interval
Use shutdown-interval to set the port status detection timer.
Use undo shutdown-interval to restore the default.
Syntax
shutdown-interval time
undo shutdown-interval
Default
The port status detection timer setting is 30 seconds.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
interval
: Specifies the port status detection timer value in seconds. The value range is 0 to 300. To disable port status detection, set this argument to 0.
Usage guidelines
The device starts a port status detection timer when a port is shut down by a protocol. Once the timer expires, the device brings up the port so the port status reflects the port's physical status.
If you change the timer during port detection, the device compares the new setting (T1) with the time that elapsed since the port was shut down (T).
•
If T < T1, the port will be brought up after T1 – T seconds.
•
If T ≥ T1, the port is brought up immediately.
For example, the timer is 30 seconds. If you change it to 10 seconds 2 seconds after the port is shut down, the port will come up 8 seconds later. If you change the timer to 2 seconds 10 seconds after the port is shut down, the port comes up immediately.
Examples
# Set the port status detection timer to 100 seconds.
<Sysname> system-view
[Sysname] shutdown-interval 100
switch-mode
Use switch-mode to specify an operating mode for an a module.
Use undo switch-mode to remove the operating mode configuration. The module does not have an operating mode specified.
306
Syntax
Default
In standalone mode:
switch-mode
{ acl-ipv4 | acl-l2 | bridging | high-speed | ipv6 | low-speed | mix-bridging-routing
| normal | port-extender | routing | standard-ipv6 } slot slot-number
undo switch-mode
slot slot-number
In IRF mode:
switch-mode
{ acl-ipv4 | acl-l2 | bridging | high-speed | ipv6 | low-speed | mix-bridging-routing
| normal | port-extender | routing | standard-ipv6 } chassis chassis-number slot slot-number
undo switch-mode
chassis chassis-number slot slot-number
Table 55 Default operating modes for modules
Modules
•
LSQM1SRP8X2QE0 (JH209A, JH217A)
MPUs
•
EB, EC, and SD interface modules
•
SC interface modules:
LSQM1GP44TSSE0 (JH210A, JH218A)
LSQM1GP24TSSE0 (JH211A, JH219A)
LSQM1GT48SE0 (JH212A, JH220A)
LSQM1GV48SE0 (JH213A, JH221A)
•
SC interface modules:
LSQ1QGS4SC0 (JC792A)
LSQ1TGS8SC0 (JF290A, JC723A)
LSQ3GV48SC0 (JG663A, JG664A)
•
SF interface modules
Default operating mode mix-bridging-routing normal
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters acl-ipv4
: Specifies the acl-ipv4 mode. This keyword is not supported in the current software version.
acl-l2
: Specifies the acl-l2 mode. This keyword is not supported in the current software version.
bridging
: Specifies the extended MAC mode.
high-speed
: Specifies the high-speed mode. This keyword is not supported in the current software version.
ipv6
: Specifies the IPv6 mode.
low-speed
: Specifies the low-speed mode. This keyword is not supported in the current software version.
mix-bridging-routing
: Specifies the extended hybrid mode.
normal
: Specifies the normal mode.
port-extender
: Specifies the port extender mode. This keyword is not supported in the current software version.
307
routing
: Specifies the extended routing mode.
standard-ipv6
: Specifies the IPv6 standard mode.
slot slot-number
: Specifies the number of the slot where the module resides.
chassis chassis-number
: Specifies the ID of the IRF member device. (In IRF mode.)
Usage guidelines
Different types of modules support different operating modes. For more information, see
Fundamentals Configuration Guide
.
To make an operating mode change take effect, save the configuration and reboot the module.
If the device has multiple SD or EB interface modules, specify the same operating mode for them.
An SD or EB interface module might reboot once or twice for self-optimization the first time you perform either of the following tasks:
•
Change its operating mode.
•
Upgrade the software version of the switch after changing the operating mode.
The optimization and reboot process takes approximately 6 to 10 minutes.
Examples
# (In standalone mode.) Set the operating mode to standard-ipv6 for the SF interface module in slot
2.
<Sysname> system-view
[Sysname] switch-mode standard-ipv6 slot 2
# (In IRF mode.) Set the operating mode to standard-ipv6 for the SF interface module in slot 2 of
IRF member device 2.
<Sysname> system-view
[Sysname] switch-mode standard-ipv6 chassis 1 slot 2
Related commands display switch-mode status
sysname
Use sysname to set the device name.
Use undo sysname to restore the default.
Syntax sysname
sysname
undo sysname
Default
The default device name is HPE.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
sysname
: Specifies a name for the device, a string of 1 to 64 characters.
308
Usage guidelines
A device name identifies a device in a network and is used as the user view prompt at the CLI. For example, if the device name is Sysname, the user view prompt is <Sysname>.
Examples
# Set the name of the device to R2000.
<Sysname> system-view
[Sysname] sysname R2000
[R2000]
system-working-mode
Use system-working-mode to set the system operating mode.
Use undo system-working-mode to restore the default.
Syntax system-working-mode
{ advance | standard }
undo system-working-mode
Default
The device operates in standard mode.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters advance
: Sets the system operating mode to advanced.
standard
: Sets the system operating mode to standard.
Usage guidelines
In different operating modes, the device supports different features, and might have different specifications for the supported features.
To change the operating mode to advance, make sure the device has enough IFP ACL resources.
To display the current IFP ACL resource information, use the display qos-acl resource command.
For more information about this command, see ACL and QoS Command Reference.
After changing the operating mode, you must reboot the device to make the device operate in the new mode.
Examples
# Set the system operating mode to advanced.
<Sysname> system-view
[Sysname] system-working-mode advance
The system working mode is changed, it will take effect after system restart.
temperature-limit
Use temperature-limit to set the temperature alarm thresholds for the device.
309
Use undo temperature-limit to restore the default.
Syntax
In standalone mode:
temperature-limit
slot slot-number { hotspot | inflow | outflow } sensor-number lowlimit
warninglimit
[ alarmlimit ]
undo temperature-limit slot slot-number
{ hotspot | inflow | outflow } sensor-number
In IRF mode:
temperature-limit
chassis chassis-number slot slot-number { hotspot | inflow | outflow }
sensor-number
lowlimit warninglimit [ alarmlimit ]
undo temperature-limit chassis
chassis-number slot slot-number { hotspot | inflow | outflow }
sensor-number
Default
To view the default thresholds, use the undo form of the command to restore the default and execute the display environment command.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
chassis chassis-number
: Specifies an IRF member device by its member ID. (In IRF mode.)
slot slot-number
: Specifies a card by its slot number.
hotspot
: Configures temperature alarm thresholds for hotspot sensors. A hotspot sensor is typically near the chip that generates a great amount of heat and used to monitor the chip.
inflow
: Configures temperature alarm thresholds for inlet sensors. An inlet sensor is near the air inlet and used for monitoring ambient temperature.
outflow
: Configures temperature alarm thresholds for outlet sensors. An outlet sensor is near the air outlet for monitoring device temperature.
sensor-number
: Specifies a sensor by its number, an integer starting from 1. Each number represents a temperature sensor on the device or card.
lowlimit
: Specifies the low-temperature threshold in Celsius degrees.
warninglimit
: Specifies the high-temperature warning threshold in Celsius degrees. This threshold must be greater than the low-temperature threshold.
alarmlimit
: Specifies the high-temperature alarming threshold in Celsius degrees. This threshold must be greater than the high-temperature warning threshold.
Usage guidelines
When the device temperature drops below the low-temperature threshold or reaches the high-temperature warning threshold, the device sends a log message and a trap.
When the device temperature reaches the high-temperature alarming threshold, the device sends log messages and traps repeatedly, and sets LEDs on the device panel.
Different cards have different threshold value ranges. To view the value ranges, use the CLI online help.
310
Examples
# (In standalone mode.) Set temperature alarm thresholds for hotspot sensor 1 on the card in slot 7.
<Sysname> system-view
[sysname] temperature-limit slot 7 hotspot 1 -5 80 95
# (In IRF mode.) Set temperature alarm thresholds for hotspot sensor 1 on the card in slot 7 on IRF member device 1.
<Sysname> system-view
[sysname] temperature-limit chassis 1 slot 7 hotspot 1 -5 80 95
time at
Use time at to specify an execution date and time for a non-periodic schedule.
Use undo time to delete the execution date and time configuration for a non-periodic schedule.
Syntax
time at time date
undo time
Default
No execution time or date is specified for a non-periodic schedule.
Views
Schedule view
Predefined user roles
network-admin mdc-admin
Parameters
time
: Specifies the schedule execution time in the hh:mm format. The value range for hh is 0 to 23.
The value range for mm is 0 to 59.
date
: Specifies the schedule execution date in the MM/DD/YYYY or YYYY/MM/DD format. The value range for YYYY is 2000 to 2035. The value range for MM is 1 to 12. The value range for DD varies by month.
Usage guidelines
The specified time (date plus time) must be later than the current system time.
The time at command, the time once command, and the time repeating command overwrite one another. The most recently configured command takes effect.
Examples
# Configure the device to execute schedule saveconfig at 01:01 a.m. on May 11, 2011.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time at 1:1 2011/05/11
Related commands scheduler schedule
311
time once
Use time once to specify one or more execution days and the execution time for a non-periodic schedule.
Use undo time to delete the execution day and time configuration for a non-periodic schedule.
Syntax time
once at time [ month-date month-day | week-day week-day&<1-7> ]
time once delay time
undo time
Default
No execution time or day is specified for a non-periodic schedule.
Views
Schedule view
Predefined user roles
network-admin mdc-admin
Parameters
at time
: Specifies the execution time in the hh:mm format. The value range for hh is 0 to 23. The value range for mm is 0 to 59.
month-date month-day
: Specifies a day in the current month, in the range of 1 to 31. If you specify a day that does not exist in the current month, the configuration takes effect on that day in the next month.
week-day
week-day&<1-7>: Specifies a space-separated list of up to seven week days for the schedule. Valid week day values include Mon, Tue, Wed, Thu, Fri, Sat, and Sun.
delay time
: Specifies the delay time for executing the schedule, in the hh:mm or mm format. This argument can contain up to six characters. When in the hh:mm format, mm must be in the range of 0 to 59.
Usage guidelines
If the specified time has already occurred, the schedule will be executed at the specified time the following day.
If the day in the month has already occurred, the schedule will be executed at the specified day in the following month.
If the specified day in a week has already occurred, the schedule will be executed at the specified day in the following week.
The time at command, the time once command, and the time repeating command overwrite one another. The most recently configured command takes effect.
Examples
# Configure the device to execute schedule saveconfig once at 15:00.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time once at 15:00
Schedule starts at 15:00 5/11/2011.
# Configure the device to execute schedule saveconfig once at 15:00 on the coming 15th day in a month.
312
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time once at 15:00 month-date 15
# Configure the device to execute schedule saveconfig at 12:00 p.m. on the coming Monday and
Friday.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time once at 12:00 week-day mon fri
# Configure the device to execute schedule saveconfig after 10 minutes.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time once delay 10
Related commands scheduler schedule
time repeating
Use time repeating to specify an execution time table for a periodic schedule.
Use undo time to delete the execution time table configuration for a periodic schedule.
Syntax time repeating
[ at time [ date ] ] interval interval-time
time
repeating at time [ month-date [ month-day | last ] | week-day week-day&<1-7> ]
undo time
Default
No execution time table is specified for a periodic schedule.
Views
Schedule view
Predefined user roles
network-admin mdc-admin
Parameters
at time
: Specifies the execution time in the hh:mm format. The value range for hh is 0 to 23. The value range for mm is 0 to 59. If you do not specify this option, the current system time is used as the execution time.
date
: Specifies the start date for the periodic schedule, in the MM/DD/YYYY or YYYY/MM/DD format.
The value range for YYYY is 2000 to 2035. The value range for MM is 1 to 12. The value range for
DD
varies by month. If you do not specify this argument, the execution start date is the first day when the specified time arrives.
interval interval-time
: Specifies the execution time interval in the hh:mm or mm format. This argument can contain up to six characters. When in the hh:mm format, mm must be in the range of 0 to 59. When in the mm format, this argument must be equal to or greater than 1 minute.
month-date
[ month-day | last ]: Specifies a day in a month, in the range 1 to 31. The last keyword indicates the last day of a month. If you specify a day that does not exist in a month, the configuration takes effect on that day in the next month.
313
week-day
week-day&<1-7>: Specifies a space-separated list of up to seven week days for the schedule. Valid week day values include Mon, Tue, Wed, Thu, Fri, Sat, and Sun.
Usage guidelines
The time repeating [ at time [ date ] ] interval interval-time command configures the device to execute a schedule at an interval from the specified time on.
The time repeating at time [ month-date [ month-day | last ] | week-day week-day&<1-7> ] command configures the device to execute a schedule at the specified time on every specified day in a month or week.
The time at command, the time once command, and the time repeating command overwrite one another, whichever is configured most recently takes effect.
Examples
# Configure the device to execute schedule saveconfig once a hour from 8:00 a.m. on.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time repeating at 8:00 interval 60
# Configure the device to execute schedule saveconfig at 12:00 p.m. every day.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time repeating at 12:00
# Configure the device to execute schedule saveconfig at 8:00 a.m. on the 5th of every month.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time repeating at 8:00 month-date 5
# Configure the device to execute schedule saveconfig at 8:00 a.m. on the last day of every month.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time repeating at 8:00 month-date last
# Configure the device to execute schedule saveconfig at 8:00 a.m. every Friday and Saturday.
<Sysname> system-view
[Sysname] scheduler schedule saveconfig
[Sysname-schedule-saveconfig] time repeating at 8:00 week-day fri sat
Related commands scheduler schedule
transceiver phony-alarm-disable
Use transceiver phony-alarm-disable to disable alarm traps for transceiver modules.
Use undo transceiver phony-alarm-disable to restore the default.
Syntax transceiver phony-alarm-disable undo transceiver phony-alarm-disable
Default
Alarm traps are enabled for transceiver modules.
314
Views
System view
Predefined user roles
network-admin mdc-admin
Usage guidelines
Disable alarm traps if the transceiver modules were manufactured or sold by Hewlett Packard
Enterprise.
The device regularly detects transceiver modules that have a vendor name other than HPE or do not have a vendor name. Upon detecting such a transceiver module, the device repeatedly outputs traps and logs to notify the user to replace the module.
This command is supported only on the default MDC. For more information about MDC, see Virtual
Technologies Configuration Guide.
Examples
# Disable alarm traps for transceiver modules.
<Sysname> system-view
[Sysname] transceiver phony-alarm-disable
user-role
Use user-role to assign user roles to a schedule.
Use undo user-role to remove user roles from a schedule.
Syntax
user-role role-name
undo user-role role-name
Default
A schedule has the user roles of the schedule creator.
Views
Schedule view
Predefined user roles
network-admin mdc-admin
Parameters
role-name
: Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role can be user-defined or predefined. Predefined user roles include network-admin, network-operator, mdc-admin, mdc-operator, and level-0 to level-15.
Usage guidelines
A schedule must have one or more user roles. A command in a schedule can be executed if it is permitted by one or more user roles of the schedule. For more information about user roles, see the
RBAC configuration in Fundamentals Configuration Guide.
A schedule can have a maximum of 64 user roles. After the limit is reached, you cannot assign additional user roles to the schedule.
315
Examples
# Assign user role rolename to schedule test.
<sysname> system-view
[Sysname] scheduler schedule test
[Sysname-schedule-test] user-role rolename
Related commands command scheduler schedule
xbar
Use xbar to set the load mode for MPUs.
Syntax
In standalone mode:
xbar
{ load-balance | load-single }
In IRF mode:
xbar chassis chassis-number
{ load-balance | load-single }
Default
The MPUs operate in load-single mode.
Views
System view
Predefined user roles
network-admin mdc-admin
Parameters
chassis chassis-number
: Specifies an IRF member device by its member ID. (In IRF mode.)
load-balance
: Configures the active MPU and standby MPUs to balance the load for processing and forwarding packets.
load-single
: Configures the MPUs so only the active MPU processes and forwards packets. The standby MPU backs up data and monitors the status of the active MPU. (In standalone mode.)
load-single
: Configures the MPUs so only the global active MPU processes and forwards packets.
The global standby MPUs back up data and monitor the status of the global active MPU. (In IRF mode.)
Usage guidelines
This command is not supported on a 7502 (JD242C).
On a device installed with LSQM1SRP8X2QE0 (JH209A, JH217A) or LSQM2MPUD0 (JH207A,
JH216A) MPUs, this command can be configured but does not take effect.
The load-balance mode takes effect only when both the active and standby MPUs are present. If the standby MPU is not present, the active MPU operates in load-single mode.
Examples
# (In standalone mode.) Set the load mode for the active MPU and the standby MPUs to
load-balance
.
<Sysname> system-view
316
[Sysname] xbar load-balance
# (In IRF mode.) Set the load mode for the active MPU and the standby MPUs on IRF member device 2 to load-balance.
<Sysname> system-view
[Sysname] xbar chassis 2 load-balance
Related commands display xbar
317
Tcl commands
cli
Use cli to enable a Comware command to be executed in Tcl configuration view when it conflicts with a Tcl command.
Syntax
cli command
Views
Tcl configuration view
Predefined user roles
network-admin mdc-admin
Parameters
command
: Specifies the commands to be executed. They must be complete command lines.
Usage guidelines
In Tcl configuration view, if a Comware command conflicts with a Tcl command, the Tcl command will be executed. To execute the Comware command when a conflict occurs, execute the cli command.
Examples
# Perform the following steps to execute a Comware command that conflicts with a Tcl command in
Tcl configuration view.
1.
Execute a Comware command in Tcl configuration view. The output shows that the Comware command cannot be executed because it conflicts with a Tcl command.
<Sysname> tclsh
<Sysname-tcl> system-view
[Sysname-tcl] route-policy 1 permit node 10
[Sysname-tcl-route-policy-1-10] apply cost 10 can't interpret "cost" as a lambda expression
2.
Configure the cli command to execute the Comware command again.
[Sysname-tcl-route-policy-1-10] cli apply cost 10
# Execute multiple Comware commands in one operation to enter OSPF area view.
Method 1:
[Sysname-tcl] cli "ospf 100 ; area 0"
[Sysname-tcl-ospf-100-area-0.0.0.0]
Method 2:
[Sysname-tcl] cli ospf 100 ; cli area 0
[Sysname-tcl-ospf-100-area-0.0.0.0]
tclquit
Use tclquit to return from Tcl configuration view to user view.
318
Syntax tclquit
Views
Tcl configuration view
Predefined user roles
network-admin mdc-admin
Usage guidelines
To return from Tcl configuration view to user view, you can also use the quit command.
To return to the upper-level view after you execute Comware commands to enter system view or a
Comware feature view, use the quit command.
Examples
# Return from Tcl configuration view to user view.
<Sysname-tcl> tclquit
<Sysname>
Related commands tclsh
tclsh
Use tclsh to enter Tcl configuration view from user view.
Syntax tclsh
Views
User view
Predefined user roles
network-admin mdc-admin
Usage guidelines
In Tcl configuration view, you can execute the following commands:
•
All Tcl 8.5 commands.
•
Comware commands. The Tcl configuration view is equivalent to the user view. You can use
Comware commands in Tcl configuration view in the same way they are used in user view.
Examples
# Enter Tcl configuration view from user view.
<Sysname> tclsh
<Sysname-tcl>
Related commands tclquit
319
Password recovery control command
password-recovery enable
Use password-recovery enable to enable password recovery capability.
Use undo password-recovery enable to disable password recovery capability.
Syntax password-recovery enable undo password-recovery enable
Default
Password recovery capability is enabled.
Views
System view
Predefined user roles
network-admin mdc-admin
Usage guidelines
Password recovery capability controls console user access to the device configuration and SDRAM from BootWare menus.
If password recovery capability is enabled, a console user can access the device configuration without authentication to configure new passwords.
If password recovery capability is disabled, console users must restore the factory-default configuration before they can configure new passwords. Restoring the factory-default configuration deletes the next-startup configuration files.
To enhance system security, disable password recovery capability.
This command is supported only on the default MDC. For more information about MDC, see Virtual
Technologies Configuration Guide
.
summarizes options whose availability depends on the password recovery capability setting.
Table 56 BootWare options and password recovery capability compatibility matrix
BootWare menu option
Download Image Program
To SDRAM And Run
Download Files(*.*)
Skip Authentication for
Console Login
Passwor d recovery enabled
Passwor d recovery disabled
Tasks that can be performed
Yes No
Load a system software image to SDRAM and run it.
Yes No
Yes No
Download a file to the current storage medium.
Enable console login without authentication.
This is a one-time operation. It takes effective only for the first system boot or reboot after you choose this option.
320
BootWare menu option
Skip Current System
Configuration
Passwor d recovery enabled
Passwor d recovery disabled
Tasks that can be performed
Yes No
Load the factory-default configuration without deleting the next-startup configuration file.
This is a one-time operation. It takes effective only for the first system boot or reboot after you perform the operation.
Restore to Factory Default
Configuration
Examples
# Disable password recovery capability.
<Sysname> system-view
[Sysname] undo password-recovery enable
321
Python commands
exit()
Use exit() to exit the Python shell.
Syntax exit()
Views
Python shell
Predefined user roles
network-admin mdc-admin
Usage guidelines
To return to user view from the Python shell, you cannot use the quit command. You must use the
exit()
command.
Examples
# Exit the Python shell.
Python 2.7.3 (default, Apr 10 2014, 16:30:23)
[GCC 4.4.1] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>>
>>> exit()
<Sysname>
python
Use python to enter the Python shell.
Syntax python
Views
User view
Predefined user roles
network-admin mdc-admin
Usage guidelines
In the Python shell, you can use the following items:
•
Python 2.7 commands.
•
Python 2.7 standard API.
•
Comware 7 extended API.
322
Examples
# Enter the Python shell.
<Sysname> python
Python 2.7.3 (default, Apr 10 2014, 16:30:23)
[GCC 4.4.1] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>>
python filename
Use python filename to execute a Python script.
Syntax python
filename [ param ]
Views
User view
Predefined user roles
network-admin mdc-admin
Parameters
filename
: Specifies the name of a Python script on a file system of the device. The script name is case sensitive and must use the extension .py. The extension .py is case insensitive.
param
: Specifies the parameters to be passed to the script. To enter multiple parameters, use spaces as the delimiter.
Usage guidelines
You cannot perform any operations while a Python script is being executed by your command.
Make sure the statements in the script meet the syntax requirements. The system stops executing a
Python script if it finds a statement with syntax errors.
When executing a script, the system uses the defaults for interactive statements. The system does not stop for human input.
Examples
# Execute Python script test.py.
<Sysname> python test.py 1 2
['/flash:/test.py', '1', '2']
323
Document conventions and icons
Conventions
This section describes the conventions used in the documentation.
Port numbering in examples
The port numbers in this document are for illustration only and might be unavailable on your device.
Command conventions
Convention Description
Boldface Bold
text represents commands and keywords that you enter literally as shown.
Italic
[ ]
{ x | y | ... }
[ x | y | ... ]
{ x | y | ... } *
[ x | y | ... ] *
&<1-n>
#
Italic
text represents arguments that you replace with actual values.
Square brackets enclose syntax choices (keywords or arguments) that are optional.
Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.
Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none.
Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one.
Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you select one choice, multiple choices, or none.
The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times.
A line that starts with a pound (#) sign is comments.
GUI conventions
Convention Description
Boldface
Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK.
>
Multi-level menus are separated by angle brackets. For example, File > Create >
Folder
.
Symbols
Convention Description
WARNING!
An alert that calls attention to important information that if not understood or followed can result in personal injury.
CAUTION:
An alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT:
An alert that calls attention to essential information.
NOTE:
An alert that contains additional or supplementary information.
TIP:
An alert that provides helpful information.
324
Network topology icons
Convention Description
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access controller engine on a unified wired-WLAN switch.
Represents an access point.
Represents a wireless terminator unit.
Represents a wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security gateway, or load balancing device.
Represents a security card, such as a firewall, load balancing, NetStream, SSL VPN,
IPS, or ACG card.
325
Support and other resources
Accessing Hewlett Packard Enterprise Support
•
For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website: www.hpe.com/assistance
•
To access documentation and support services, go to the Hewlett Packard Enterprise Support
Center website: www.hpe.com/support/hpesc
Information to collect
•
Technical support registration number (if applicable)
•
Product name, model or version, and serial number
•
Operating system name and version
•
Firmware version
•
Error messages
•
Product-specific reports and logs
•
Add-on products or components
•
Third-party products or components
Accessing updates
•
Some software products provide a mechanism for accessing software updates through the product interface. Review your product documentation to identify the recommended software update method.
•
To download product updates, go to either of the following:
{
Hewlett Packard Enterprise Support Center Get connected with updates page:
{ www.hpe.com/support/e-updates
Software Depot website: www.hpe.com/support/softwaredepot
•
To view and update your entitlements, and to link your contracts, Care Packs, and warranties with your profile, go to the Hewlett Packard Enterprise Support Center More Information on
Access to Support Materials
page: www.hpe.com/support/AccessToSupportMaterials
IMPORTANT:
Access to some updates might require product entitlement when accessed through the Hewlett
Packard Enterprise Support Center. You must have an HP Passport set up with relevant entitlements.
326
Websites
Website Link
Networking websites
Hewlett Packard Enterprise Information Library for
Networking
Hewlett Packard Enterprise Networking website
Hewlett Packard Enterprise My Networking website
Hewlett Packard Enterprise My Networking Portal
Hewlett Packard Enterprise Networking Warranty
General websites
Hewlett Packard Enterprise Information Library
Hewlett Packard Enterprise Support Center
Hewlett Packard Enterprise Support Services Central
Contact Hewlett Packard Enterprise Worldwide
Subscription Service/Support Alerts
Software Depot
Customer Self Repair (not applicable to all devices)
Insight Remote Support (not applicable to all devices) www.hpe.com/networking/resourcefinder www.hpe.com/info/networking www.hpe.com/networking/support www.hpe.com/networking/mynetworking www.hpe.com/networking/warranty www.hpe.com/info/enterprise/docs www.hpe.com/support/hpesc ssc.hpe.com/portal/site/ssc/ www.hpe.com/assistance www.hpe.com/support/e-updates www.hpe.com/support/softwaredepot www.hpe.com/support/selfrepair www.hpe.com/info/insightremotesupport/docs
Customer self repair
Hewlett Packard Enterprise customer self repair (CSR) programs allow you to repair your product. If a CSR part needs to be replaced, it will be shipped directly to you so that you can install it at your convenience. Some parts do not qualify for CSR. Your Hewlett Packard Enterprise authorized service provider will determine whether a repair can be accomplished by CSR.
For more information about CSR, contact your local service provider or go to the CSR website: www.hpe.com/support/selfrepair
Remote support
Remote support is available with supported devices as part of your warranty, Care Pack Service, or contractual support agreement. It provides intelligent event diagnosis, and automatic, secure submission of hardware event notifications to Hewlett Packard Enterprise, which will initiate a fast and accurate resolution based on your product’s service level. Hewlett Packard Enterprise strongly recommends that you register your device for remote support.
For more information and device support details, go to the following website: www.hpe.com/info/insightremotesupport/docs
Documentation feedback
Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation
Feedback ( [email protected]
). When submitting your feedback, include the document title,
327
part number, edition, and publication date located on the front cover of the document. For online help content, include the product name, product version, help edition, and publication date located on the legal notices page.
328
Index
A B C D E F G H I J L M N O P Q R S T U V W X
A
activation-key,
archive configuration,
153 archive configuration interval, 153
archive configuration location,
archive configuration max, 156
B
backup startup-configuration,
bootrom-update security-check enable, 181
C
cdup,
clock protocol,
command accounting,
command-alias mapping,
configuration commit,
configuration commit delay,
configuration encrypt,
configuration replace file,
copy,
copy,
D
databits,
display | { begin | exclude | include }, 2
display | by-linenum,
display alarm,
display archive configuration,
display clock,
display cpu-usage,
display cpu-usage configuration,
display cpu-usage history,
display current-configuration,
display current-configuration diff,
display default-configuration, 164
display device,
display device manuinfo,
display device manuinfo chassis-only, 262
display device manuinfo power,
263 display diagnostic-information, 263
display environment,
display ftp client source,
display ftp-server, 83 display ftp-user, 83
display history-command,
display history-command all,
display hotkey,
display install committed, 190
display install inactive,
329
display install ipe-info,
display install job,
display install log,
display install which,
display ip routing-table, 227 display ipv6 routing-table, 227
display memory-threshold,
display role feature-group, 23
display saved-configuration, 166
display scheduler logfile, 272
display scheduler reboot,
273 display scheduler schedule, 273
display serial-no,
display startup,
display switch-mode status, 275
display system stable state, 277
display system-working-mode,
display telnet client,
display transceiver alarm, 279
display transceiver diagnosis, 280
display transceiver interface, 281
display transceiver manuinfo, 282
display user-interface,
display users,
display version comp-matrix,
display version-update-record,
E
escape-key,
exit(),
F
330
free ftp user,
free ftp user-ip, 85 free ftp user-ip ipv6, 85
free line, 59 free user-interface, 59
ftp client source,
ftp ipv6,
ftp server dscp,
ftp server ipv6 dscp,
ftp server ssl-server-policy,
ftp timeout,
G
gunzip,
H
hardware-failure-detection,
history-command max-size,
hotkey,
I
install activate,
install verify,
ip address,
ipv6 address,
issu accept,
issu commit,
issu load,
issu run switchover,
J
L
line,
line class,
lock,
M
md5sum,
monitor cpu-usage enable,
monitor cpu-usage interval, 292
monitor cpu-usage threshold, 293
monitor handshake-timeout disable-port,
mount,
move,
move,
N
O
open,
P
parity,
permit interface,
permit vlan,
ping,
pwd,
pwd,
pwd,
331
Q
quit,
quit,
quit,
R
reget,
reset,
reset install log-history oldest,
reset recycle-bin,
reset saved-configuration, 170
reset version-update-record,
restore factory-default,
restore startup-configuration, 171
return,
rmdir,
rmdir,
rmdir,
role,
role feature-group,
rstatus,
rule,
S
scheduler job,
scheduler logfile size,
scheduler reboot at,
scheduler schedule,
set asset-info,
set authentication password,
shutdown,
ssh2,
startup saved-configuration, 175
stopbits,
super authentication-mode,
super default role, 41 super password, 41
system,
T
tar create,
telnet,
telnet,
telnet ipv6,
telnet server dscp,
telnet server enable,
telnet server ipv6 acl,
temperature-limit,
tftp client ipv6 source,
tftp client source,
time at,
time once,
time repeating,
transceiver phony-alarm-disable, 314
U
umount,
user-interface class,
user-role,
user-role,
V
version auto-update enable, 183
vpn-instance policy deny,
W
X
332
Letöltés
A nyilvános link frissítve
A csevegés nyilvános linkje frissítve lett. You may view and manage your chat links after registration here.
Dokumentum nyilvános linkje
Hirdetés