HP HP 830 Series User manual
HP 830 Series PoE+ Unified Wired-WLAN
Switch and HP 10500/7500 20G Unified
W
ired-WLAN Module
Fundamentals Configuration Guide
Part number: 5998-3904
Software version:
3308P29(HP 830 Series PoE+ Unified Wired-WLAN Switch)
2308P29 (HP 10500/7500 20G Unified Wired-WLAN
Module)
Document version: 6W102-20131112
Legal and notice information
© Copyright 2013 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or use
of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
i
Contents
Using the CLI ································································································································································ 1
Command conventions ·····················································································································································1
Using the undo form of a command ·······························································································································2
CLI views ············································································································································································2
Entering system view from user view······················································································································3
Returning to the upper-level view from any view ··································································································3
Returning to user view from any other view ··········································································································3
Accessing the CLI online help··········································································································································4
Entering a command·························································································································································5
Editing a command line···········································································································································5
Abbreviating commands··········································································································································5
Configuring and using command keyword aliases······························································································5
Configuring and using hotkeys·······························································································································6
Enabling redisplaying entered-but-not-submitted commands ···············································································7
Understanding command-line error messages···············································································································8
Using the command history function ·······························································································································8
Viewing history commands ·····································································································································9
Setting the command history buffer size for user interfaces ················································································9
Controlling the CLI output·················································································································································9
Pausing between screens of output ························································································································9
Filtering the output from a display command····································································································· 10
Configuring user privilege and command levels ········································································································ 13
Configuring a user privilege level ······················································································································· 13
Switching the user privilege level ························································································································ 16
Changing the level of a command······················································································································ 19
Saving the running configuration ································································································································· 19
Displaying and maintaining CLI ··································································································································· 20
Login overview ···························································································································································21
Login methods at a glance············································································································································ 21
CLI user interfaces ·························································································································································· 21
User interface assignment····································································································································· 22
User interface identification ································································································································· 22
Logging in to the CLI··················································································································································23
Logging in through the console/AUX port for the first time······················································································· 23
Configuring console login control settings ·················································································································· 25
Disabling authentication for console login ········································································································· 26
Configuring password authentication for console login ··················································································· 26
Configuring scheme authentication for console login ······················································································· 27
Configuring common console user interface settings (optional)······································································· 28
Logging in through Telnet·············································································································································· 30
Disabling authentication for Telnet login ············································································································ 31
Configuring password authentication for Telnet login ······················································································ 32
Configuring scheme authentication for Telnet login ·························································································· 33
Configuring common VTY user interface settings (optional)············································································· 35
Using the device to log in to a Telnet server ······································································································ 36
Logging in through SSH ················································································································································ 37
Configuring the SSH server on the device·········································································································· 38
Using the device to log in to an SSH server······································································································· 39
ii
Displaying and maintaining CLI login ························································································································· 40
Logging in to the Web interface·······························································································································42
Configuring HTTP login ················································································································································· 42
Configuring HTTPS login ··············································································································································· 43
Displaying and maintaining Web login ······················································································································ 45
Web login configuration examples······························································································································ 45
HTTP login configuration example······················································································································· 46
HTTPS login configuration example ···················································································································· 47
Logging in through SNMP·········································································································································50
Configuring SNMP login··············································································································································· 50
Prerequisites ··························································································································································· 50
Configuring SNMPv3 settings······························································································································ 50
Configuring SNMPv1 or SNMPv2c settings······································································································· 51
NMS login example······················································································································································· 52
Network requirements··········································································································································· 52
Configuration procedure ······································································································································ 52
Controlling user logins···············································································································································53
Controlling Telnet logins················································································································································ 53
Controlling Telnet users by client SSIDs ·············································································································· 53
Configuring source IP-based Telnet login control······························································································· 53
Configuring source/destination IP-based Telnet login control·········································································· 54
Configuring source MAC-based Telnet login control ························································································ 54
Telnet login control configuration example ········································································································ 55
Configuring source IP-based SNMP login control ······································································································ 56
Configuration procedure ······································································································································ 56
SNMP login control configuration example ······································································································· 57
Configuring Web login control ···································································································································· 57
Configuring source IP-based Web login control································································································ 58
Logging off online Web users······························································································································ 58
Web login control configuration example·········································································································· 58
Configuring FTP··························································································································································60
Using the device as an FTP client································································································································· 60
Establishing an FTP connection···························································································································· 60
Managing directories on the FTP server ············································································································· 61
Working with the files on the FTP server············································································································· 62
Switching to another user account ······················································································································ 63
Maintaining and troubleshooting the FTP connection ······················································································· 63
Terminating the FTP connection ··························································································································· 63
FTP client configuration example························································································································· 63
Using the device as an FTP server································································································································ 65
Configuring basic parameters ····························································································································· 65
Configuring authentication and authorization ··································································································· 66
FTP server configuration example························································································································ 67
Displaying and maintaining FTP··································································································································· 69
Configuring TFTP························································································································································70
Prerequisites···································································································································································· 70
Using the device as a TFTP client ································································································································· 70
Displaying and maintaining the TFTP client ················································································································ 71
TFTP client configuration example································································································································ 71
Managing the file system ··········································································································································73
File name formats··························································································································································· 73
iii
Managing files ······························································································································································· 73
Displaying file information ··································································································································· 74
Displaying the contents of a file··························································································································· 74
Renaming a file······················································································································································ 74
Copying a file························································································································································ 74
Moving a file·························································································································································· 74
Deleting/restoring a file ······································································································································· 75
Emptying the recycle bin ······································································································································ 75
Calculating the digest of a file····························································································································· 75
Managing directories ···················································································································································· 75
Displaying directory information ························································································································· 75
Displaying the current working directory············································································································ 76
Changing the current working directory············································································································· 76
Creating a directory·············································································································································· 76
Removing a directory············································································································································ 76
Managing storage media ············································································································································· 77
Performing batch operations········································································································································· 77
Setting the file system operation mode························································································································ 77
File system management examples ······························································································································ 78
Managing configuration files····································································································································79
Overview········································································································································································· 79
Configuration types··············································································································································· 79
Configuration file content organization and format·························································································· 80
Startup with a configuration file ·························································································································· 80
Saving the running configuration ································································································································· 80
Enabling configuration encryption ······················································································································ 80
Saving configuration by using different methods······························································································· 81
Using automatic configuration backup after a software upgrade ··································································· 82
Specifying a configuration file for the next startup····································································································· 82
Backing up the next-startup configuration file to a TFTP server················································································· 82
Restoring the next-startup configuration file from a TFTP server················································································ 83
Deleting the next-startup configuration file ·················································································································· 83
Displaying and maintaining configuration files ·········································································································· 84
Upgrading software···················································································································································85
Software upgrade methods··········································································································································· 85
Upgrading BootWare···················································································································································· 86
Upgrading system software ·········································································································································· 86
Installing hotfixes···························································································································································· 86
Basic concepts ······················································································································································· 87
Patch states····························································································································································· 87
Patch installation task list ······································································································································ 90
Installation prerequisites ······································································································································· 90
Installing and running a patch in one step ········································································································· 90
Installing a patch step by step ····························································································································· 91
Uninstalling a patch step by step························································································································· 92
Displaying and maintaining software upgrade ·········································································································· 93
Software upgrade examples········································································································································· 93
Upgrading the system software ··························································································································· 94
Installing patches ··················································································································································· 95
Dealing with password loss·······································································································································97
Disabling password recovery capability ············································································································ 97
Examining the state of password recovery capability······················································································· 98
Dealing with console login password loss when password recovery capability is enabled ························ 99
iv
Dealing with user privilege level password loss when password recovery capability is enabled ·············100
Dealing with password loss when password recovery capability is disabled ·············································101
Managing licenses·················································································································································· 103
Overview·······································································································································································103
Registering a feature····················································································································································103
Displaying and maintaining licenses ·························································································································103
Managing the device·············································································································································· 104
Overview·······································································································································································104
Performing quick configuration···································································································································104
Configuring the device name ·····································································································································104
Changing the system time ···········································································································································105
Configuration guidelines ····································································································································105
Configuration procedure ····································································································································107
Enabling displaying the copyright statement ············································································································108
Configuring banners····················································································································································108
Banner input methods ·········································································································································109
Configuration procedure ····································································································································109
Configuring the maximum number of concurrent users ···························································································110
Configuring the exception handling method·············································································································110
Rebooting the device ···················································································································································111
Rebooting devices immediately at the CLI ········································································································111
Scheduling a device reboot ·······························································································································111
Scheduling jobs····························································································································································112
Job configuration approaches ···························································································································112
Configuration guidelines ····································································································································112
Scheduling a job in the non-modular approach ······························································································113
Scheduling a job in the modular approach ·····································································································113
Setting the port status detection timer ························································································································114
Configuring temperature thresholds for a card·········································································································114
Configuring the alarm resend function ······················································································································115
Monitoring an NMS-connected interface ··················································································································115
Clearing unused 16-bit interface indexes··················································································································116
Displaying and maintaining device management····································································································117
Support and other resources ·································································································································· 119
Contacting HP ······························································································································································119
Subscription service ············································································································································119
Related information······················································································································································119
Documents····························································································································································119
Websites·······························································································································································119
Conventions ··································································································································································120
Index ········································································································································································ 122
1
Using the CLI
At the command-line interface (CLI), you can enter text commands to configure, manage, and monitor
your device.
Figure 1 CLI example
You can use a variety of methods to log in to the CLI. For example, you can log in through the console
port, or by using Telnet or SSH. For more information about login methods, see "Logging in to the CLI."
Command conventions
Command conventions describe the syntax of commands. Commands in product manuals comply with
the conventions listed in Table 1.
Table 1 Command conventions
Convention Descri
p
tion
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars, from
which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign can
be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
Command keywords are case insensitive.
2
The following example analyzes the syntax of the clock datetime time date command by using the
conventions in Table 1.
Figure 2 Understanding command-line parameters
For example, to set the system time to 10:30:20, February 23, 2012, enter the following command line
at the CLI and press Enter:
<Sysname> clock datetime 10:30:20 2/23/2012
Using the undo form of a command
Most configuration commands have an undo form for canceling a configuration, restoring the default, or
disabling a feature. For example, the info-center enable command enables the information center, and
the undo info-center enable command disables the information center.
CLI views
Commands are grouped in different views by function. To use a command, you must enter its view.
CLI views are hierarchically organized, as shown in Figure 3. Each view has a unique prompt, from which
you can identify where you are and what you can do. For example, the prompt [Sysname-vlan100]
shows that you are in VLAN 100 view and can configure attributes for that VLAN.
You are placed in user view immediately after you are logged in to the CLI. The user view prompt is
<Device-name>, where the Device-name argument, representing the device hostname, defaults to HP
and can be changed by using the sysname command. In user view, you can perform basic operations,
including display, debug, file management, FTP, Telnet, clock setting, and reboot.
From user view, you can enter system view to configure global settings, including the daylight saving time,
banners, and hotkeys. The system view prompt is [Device-name].
From system view, you can enter different function views. For example, you can enter interface view to
configure interface parameters, enter VLAN view to add ports to the specific VLAN, and enter user
interface view to configure login user attributes.
To display all commands available in a view, enter a question mark (?) at the view prompt.
3
Figure 3 CLI view hierarchy
Entering system view from user view
Task Command
Enter system view from user view. system-view
Returning to the upper-level view from any view
Task Command
Return to the upper-level view from any view. quit
Executing the quit command in user view terminates your connection to the device.
In public key code view, use the public-key-code end command to return to the upper-level view (public
key view). In public key view, use the peer-public-key end command to return to system view.
Returning to user view from any other view
Instead of using the quit command multiple times, you can return directly to user view from any other view
by using the return command or pressing Ctrl+Z.
To return to user view from any other view:
Task Command
Return to user view. return
4
Accessing the CLI online help
The CLI online help is context sensitive. You can enter a question mark at any prompt or in any position
of a command to display all available options.
To access the CLI online help, use one of the following methods:
•Enter a question mark at a view prompt to display the first keyword of every command available in
the view. For example:
<Sysname> ?
User view commands:
archive Specify archive settings
backup Backup next startup-configuration file to TFTP server
boot-loader Set boot loader
bootrom Update/read/backup/restore bootrom
cd Change current directory
clock Specify the system clock
…
•Enter a space and a question mark after a command keyword to display all available keywords
and arguments.
{If you type a question mark in place of a keyword, the CLI displays all possible keyword
matches with a brief description for each keyword. For example:
<Sysname> terminal ?
debugging Send debug information to terminal
logging Send log information to terminal
monitor Send information output to current terminal
trapping Send trap information to terminal
{If you type a question mark in place of an argument, the CLI displays the description of this
argument. For example:
<Sysname> system-view
[Sysname] interface vlan-interface ?
<1-4094> VLAN interface number
[Sysname] interface vlan-interface 1 ?
<cr>
[Sysname] interface vlan-interface 1
The string <cr> indicates that the command is complete, and you can press Enter to execute the
command.
•Enter an incomplete keyword string followed by a question mark to display all keywords starting
with the string. For example:
<Sysname> c?
cd
clock
copy
crypto-digest
<Sysname> display cl?
clipboard
clock
5
Entering a command
When you enter a command, you can use keys or hotkeys to edit the command line, or use abbreviated
keywords or keyword aliases.
Editing a command line
Use the keys listed in Table 2 or the hotkeys listed in Table 3 to edit a command line.
Table 2 Command line editing keys
Ke
y
Function
Common keys If the edit buffer is not full, pressing a common key inserts the character at the
position of the cursor and moves the cursor to the right.
Backspace Deletes the character to the left of the cursor and moves the cursor back one
character.
Left arrow key or Ctrl+B Moves the cursor one character to the left.
Right arrow key or Ctrl+F Moves the cursor one character to the right.
Tab
If you press Tab after entering part of a keyword, the system automatically
completes the keyword:
•If a unique match is found, the system displays the complete keyword.
•If there is more than one match, you can press Tab repeatedly to pick the
keyword you want to enter.
•If there is no match, the system does not modify what you entered but
displays it again in the next line.
Abbreviating commands
You can enter a command line quickly by entering incomplete keywords that uniquely identify the
complete command.
In user view, for example, commands starting with an sinclude startup saved-configuration and
system-view. To enter the command system-view, you only need to type sy. To enter the command
startup saved-configuration, type st s.
You can also press Tab to complete an incomplete keyword.
Configuring and using command keyword aliases
The command keyword alias function allows you to replace the first keyword of a non-undo command or
the second keyword of an undo command with your preferred keyword when you execute the command.
For example, if you configure show as the alias for the display keyword, you can enter show in place of
display to execute a display command.
Usage guidelines
•After you successfully execute a command by using a keyword alias, the system saves the keyword,
instead of its alias, to the running configuration.
6
•If you press Tab after entering part of an alias, the keyword is displayed.
•If a string you entered partially matches a keyword and an alias, the command indicated by the
alias is executed. To execute the command indicated by the keyword, enter the complete keyword.
•If you enter a string that partially matches multiple aliases, the system prompts you to select a
specific alias.
Configuration procedure
To configure a command keyword alias:
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enable the command
keyword alias function. command-alias enable
By default, the command keyword alias
function is disabled, and you can
configure command keyword aliases but
they do not take effect.
3. Configure a command
keyword alias.
command-alias mapping
cmdkey alias
By default, no command keyword alias is
configured.
You must enter the cmdkey and alias
arguments in their complete form.
Configuring and using hotkeys
The system defines the hotkeys shown in Table 3 and provides five configurable command hotkeys.
Pressing a command hotkey is the same as entering a command.
To configure a command hotkey:
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Configure hotkeys.
hotkey { CTRL_G | CTRL_L |
CTRL_O | CTRL_T | CTRL_U }
command
By default:
•Ctrl+G is assigned the display
current-configuration command.
•Ctrl+L is assigned the display ip
routing-table command.
•Ctrl+O is assigned the undo debugging
all command.
•No command is assigned to Ctrl+T or
Ctrl+U.
3. Display hotkeys.
display hotkey [ | { begin |
exclude | include }
regular-expression ]
Optional.
Available in any view. See Table 3 for
hotkeys reserved by the system.
The hotkeys in Table 3 are defined by the device. If a hotkey is also defined by the terminal software that
you are using to interact with the device, the terminal software definition takes effect.
7
Table 3 System-reserved hotkeys
Hotke
y
Function
Ctrl+A Moves the cursor to the beginning of a line.
Ctrl+B Moves the cursor one character to the left.
Ctrl+C Stops the current command.
Ctrl+D Deletes the character at the cursor.
Ctrl+E Moves the cursor to the end of a line.
Ctrl+F Moves the cursor one character to the right.
Ctrl+H Deletes the character to the left of the cursor.
Ctrl+K Aborts the connection request.
Ctrl+N Displays the next command in the command history buffer.
Ctrl+P Displays the previous command in the command history buffer.
Ctrl+R Redisplays the current line.
Ctrl+V Pastes text from the clipboard.
Ctrl+W Deletes the word to the left of the cursor.
Ctrl+X Deletes all characters to the left of the cursor.
Ctrl+Y Deletes all characters to the right of the cursor.
Ctrl+Z Returns to user view.
Ctrl+] Terminates an incoming connection or a redirect connection.
Esc+B Moves the cursor back one word.
Esc+D Deletes all characters from the cursor to the end of the word.
Esc+F Moves the cursor forward one word.
Esc+N Moves the cursor down one line. This hotkey is available before you press Enter.
Esc+P Moves the cursor up one line. This hotkey is available before you press Enter.
Esc+< Moves the cursor to the beginning of the clipboard.
Esc+> Moves the cursor to the ending of the clipboard.
Enabling redisplaying entered-but-not-submitted commands
The redisplay entered-but-not-submitted commands feature enables the system to display what you have
typed (except Yes or No for confirmation) at the CLI when your configuration is interrupted by system
output such as logs. If you have not entered anything, the system does not display the command-line
prompt after the output.
To enable redisplaying entered-but-not-submitted commands:
Step Command Remarks
1. Enter system view. system-view N/A
8
Step Command Remarks
2. Enable redisplaying
entered-but-not-submitted
commands.
info-center synchronous
By default, this feature is disabled.
For more information about this command,
see Network Management and Monitoring
Command Reference.
Understanding command-line error messages
When you press Enter to submit a command, the command line interpreter examines the command
syntax. If the command passes syntax check, the CLI executes the command. If not, the CLI displays an
error message.
Table 4 Common command-line error messages
Error messa
g
e Cause
% Unrecognized command found at '^' position.
The keyword in the marked position is invalid.
% Incomplete command found at '^' position. One or more required keywords or arguments are
missing.
% Ambiguous command found at '^' position. The entered character sequence matches more than one
command.
Too many parameters. The entered character sequence contains excessive
keywords or arguments.
% Wrong parameter found at '^' position. The argument in the marked position is invalid.
Using the command history function
The system can automatically save successfully executed commands to the command history buffer for
the current user interface. You can view them and execute them again, or set the maximum number of
commands that can be saved in the command history buffer.
A command is saved to the command history buffer in the exact format as it was entered. For example,
if you enter an incomplete command, the command saved in the command history buffer is also
incomplete. If you enter a command by using a command keyword alias, the command saved in the
command history buffer also uses the alias.
If you enter a command in the same format multiple times in succession, the system buffers the command
only once. If you enter a command in different formats multiple times, the system buffers each command
format. For example, display cu and display current-configuration are buffered as two entries but
successive repetitions of display cu create only one entry in the buffer.
By default, the command history buffer can save up to 10 commands for each user. To set the capacity
of the command history buffer for the current user interface, use the history-command max-size
command.
9
Viewing history commands
You can use arrow keys to access history commands in Windows 200xand Windows XP Terminal or
Telnet. In Windows 9xHyperTerminal, the arrow keys are invalid, and you must use Ctrl+P and Ctrl+N
instead.
To view command history, use one of the following methods:
Task Command
Display all commands in the command history
buffer.
display history-command [ | { begin | exclude | include }
regular-expression ]
Display the previous history command. Up arrow key or Ctrl+P
Display the next history command. Down arrow key or Ctrl+N
Setting the command history buffer size for user interfaces
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enter user interface view.
user-interface { first-num1
[ last-num1 ] | { aux |console |
vty } first-num2 [ last-num2 ] }
N/A
3. Set the maximum number of
commands that can be saved
in the command history
buffer.
history-command max-size
size-value
Optional.
By default, the command history
buffer can save up to 10
commands.
Controlling the CLI output
This section describes the CLI output control features that help you identify the desired output.
Pausing between screens of output
The system automatically pauses after displaying a screen if the output is too long to fit on one screen. By
default, up to 24 lines can be displayed on a screen. To change the screen length, use the screen-length
screen-length command (see Fundamentals Command Reference). To control output, use keys in Table 5.
Table 5 Keys for controlling output
Ke
y
s Function
Space Displays the next screen.
Enter Displays the next line.
Ctrl+C Stops the display and cancels the command execution.
<PageUp> Displays the previous page.
10
Ke
y
s Function
<PageDown> Displays the next page.
To display all output at one time and refresh the screen continuously until the final screen is displayed:
Task Command
Remarks
Disable pausing between screens
of output for the current session. screen-length disable
The default for a session depends on the setting
of the screen-length command in user interface
view. The default of the screen-length command
is pausing between screens of output and
displaying up to 24 lines on a screen.
This command is executed in user view and
takes effect only for the current session. When
you log in again to the device, the default is
restored.
Filtering the output from a display command
You can use one of the following methods to filter the output from a display command:
•Specify the |{ begin | exclude | include } regular-expression option at the end of the command.
•When the system pauses after displaying a screen of output, enter a forward slash (/), minus sign
(-), or plus sign (+), and a regular expression to filter subsequent output. The forward slash equals
the keyword begin, the minus sign equals the keyword exclude, and the plus sign equals the
keyword include.
The following definitions apply to the begin, exclude, and include keywords:
•begin—Displays the first line that matches the specified regular expression and all lines that follow.
•exclude—Displays all lines that do not match the specified regular expression.
•include—Displays all lines that match the specified regular expression.
A regular expression is a case-sensitive string of 1 to 256 characters that supports the special characters
in Table 6.
Table 6 Special characters supported in a regular expression
Character Meanin
g
Exam
p
les
^string Matches the beginning of a line. "^user" matches all lines beginning with "user". A
line beginning with "Auser" is not matched.
string$ Matches the end of a line. "user$" matches lines ending with "user". A line
ending with "userA" is not matched.
.
Matches any single character, such
as a single character, a special
character, and a blank.
".s" matches both "as" and "bs".
*
Matches the preceding character or
character group zero or multiple
times.
"zo*" matches "z" and "zoo", and "(zo)*" matches
"zo" and "zozo".
11
Character Meanin
g
Exam
p
les
+
Matches the preceding character or
character group one or multiple
times
"zo+" matches "zo" and "zoo", but not "z".
| Matches the preceding or
succeeding character string
"def|int" only matches a character string
containing "def" or "int".
_
If it is at the beginning or the end of a
regular expression, it equals ^ or $.
In other cases, it equals comma,
space, round bracket, or curly
bracket.
"a_b" matches "a b" or "a(b"; "_ab" only matches
a line starting with "ab"; "ab_" only matches a line
ending with "ab".
-
It connects two values (the smaller
one before it and the bigger one
after it) to indicate a range together
with [ ].
"1-9" means 1 to 9 (inclusive); "a-h" means a to h
(inclusive).
[ ] Matches a single character
contained within the brackets.
[16A] matches a string containing any character
among 1, 6, and A; [1-36A] matches a string
containing any character among 1, 2, 3, 6, and A
(- is a hyphen).
To match the character "]", put it at the beginning of
a string within brackets, for example [ ]string]. There
is no such limit on "[".
( ) A character group. It is usually used
with "+" or "*".
(123A) means a character group "123A";
"408(12)+" matches 40812 or 408121212. But it
does not match 408.
\index
Repeats the character string
specified by the index. A character
string refers to the string within ()
before \. index refers to the
sequence number (starting from 1
from left to right) of the character
group before \. If only one character
group appears before \, index can
only be 1; if n character groups
appear before index, index can be
any integer from 1 to n.
(string)\1 repeats string, and a matching string must
contain stringstring. (string1)(string2)\2 repeats
string2, and a matching string must contain
string1string2string2. (string1)(string2)\1\2
repeats string1 and string2 respectively, and a
matching string must contain
string1string2string1string2.
[^] Matches a single character not
contained within the brackets.
[^16A] means to match a string containing any
character except 1, 6 or A, and the matching string
can also contain 1, 6 or A, but cannot contain these
three characters only. For example, [^16A]
matches "abc" and "m16", but not 1, 16, or 16A.
\<string Matches a character string starting
with string. "\<do" matches word "domain" and string "doa".
string\> Matches a character string ending
with string. "do\>" matches word "undo" and string "abcdo".
\bcharacter2
Matches character1character2.
character1 can be any character
except number, letter or underline,
and \b equals [^A-Za-z0-9_].
"\ba" matches "-a" with "-" being character1, and
"a" being character2, but it does not match "2a" or
"ba".
12
Character Meanin
g
Exam
p
les
\Bcharacter
Matches a string containing
character, and no space is allowed
before character.
"\Bt" matches "t" in "install", but not "t" in "big
top".
character1\w
Matches character1character2.
character2 must be a number, letter,
or underline, and \wequals
[A-Za-z0-9_].
"v\w" matches "vlan" ("v" is character1 and "l" is
character2)and "service" ( "i" is character2).
\W Equals \b.
"\Wa" matches "-a", with "-" being character1,
and "a" being character2, but does not match "2a"
or "ba".
\
Escape character. If a special
character listed in this table follows
\, the specific meaning of the
character is removed.
"\\" matches a string containing "\", "\^" matches
a string containing "^", and "\\b" matches a string
containing "\b".
The following are regular expression examples:
# Use |begin user-interface in the display current-configuration command to match the first line of
output that contains user-interface to the final line of output.
<Sysname> display current-configuration | begin user-interface
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode none
user privilege level 3
#
return
# Use | exclude Direct in the display ip routing-table command to filter out direct routes and display only
the non-direct routes.
<Sysname> display ip routing-table | exclude Direct
Routing Tables: Public
Destination/Mask Proto Pre Cost NextHop Interface
10.1.1.0/24 Static 60 2 10.1.1.2 Vlan2
# Use | include Vlan in the display ip routing-table command to filter in route entries that contain Vlan.
<Sysname> display ip routing-table | include Vlan
Routing Tables: Public
Destination/Mask Proto Pre Cost NextHop Interface
192.168.1.0/24 Direct 0 0 192.168.1.42 Vlan999
13
Configuring user privilege and command levels
To avoid unauthorized access, the device defines the user privilege levels and command levels in Table
7. User privilege levels correspond to command levels. A user logged in with a specific privilege level can
use only the commands at that level or lower levels.
Table 7 Command levels and user privilege levels
Level Privile
g
e
Default set of commands
0 Visit
Includes commands for network diagnosis and commands for accessing an external
device. Configuration of commands at this level cannot survive a device restart. Upon
device restart, the commands at this level are restored to the default settings.
Commands at this level include ping, tracert, telnet and ssh2.
1 Monitor
Includes commands for system maintenance and service fault diagnosis. Commands at
this level are not saved after being configured. After the device is restarted, the
commands at this level are restored to the default settings.
Commands at this level include debugging, terminal, and send.
2 System
Includes service configuration commands, including routing configuration commands
and commands for configuring services at different network levels.
By default, commands at this level include all configuration commands except for those
at manage level.
3 Manage
Includes commands that influence the basic operation of the system and commands for
configuring system support modules.
By default, commands at this level involve the configuration commands of file system,
FTP, TFTP, Xmodem download, user management, level setting, and parameter settings
within a system, which are not defined by any protocols or RFCs.
Configuring a user privilege level
If the authentication mode on a user interface is scheme, configure a user privilege level through the AAA
module or directly on the user interface. For SSH users who use public-key authentication, the user
privilege level configured directly on the user interface always takes effect. For other users, the user
privilege level configured in the AAA module has priority over the user privilege level configured directly
on the user interface.
If the authentication mode on a user interface is none or password, configure the user privilege level
directly on the user interface.
For more information about user login authentication, see "Logging in to the CLI." For more information
about AAA and SSH, see Security Configuration Guide.
Configuring a user privilege level for users through the AAA module
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enter user interface view.
user-interface { first-num1 [ last-num1 ]
| { aux |console | vty } first-num2
[ last-num2 ] }
N/A
14
Ste
p
Command
Remarks
3. Specify the scheme
authentication mode. authentication-mode scheme
By default, the authentication
mode for VTY and AUX users is
password, and no authentication is
required for console login users.
4. Return to system view. quit N/A
5. Configure the
authentication mode for
SSH users as password.
For more information, see Security
Configuration Guide.
This step is required only for SSH
users who must provide their
usernames and passwords for
authentication.
6. Configure the user
privilege level through the
AAA module.
•To use local authentication:
a. Use the local-user command
to create a local user and
enter local user view.
b. Use the level keyword in the
authorization-attribute
command to configure the
user privilege level.
•To use remote authentication
(RADIUS, HWTACACS, or LDAP):
Configure the user privilege level
on the authentication server.
User either approach.
For local authentication, if you do
not configure the user privilege
level, the user privilege level is 0.
For remote authentication, if you
do not configure the user privilege
level, the user privilege level
depends on the default
configuration of the authentication
server.
For more information about the
local-user and
authorization-attribute commands,
see Security Command Reference.
For example:
# Configure the device to use local authentication for Telnet users on VTY 1.
<Sysname> system-view
[Sysname] user-interface vty 1
[Sysname-ui-vty1] authentication-mode scheme
[Sysname-ui-vty1] quit
[Sysname] local-user test
[Sysname-luser-test] password simple 123
[Sysname-luser-test] service-type telnet
When users Telnet to the device through VTY 1, they must enter username test and password 123. After
passing the authentication, the users can only use level-0 commands.
# Assign commands of levels 0 through 3 to the users.
[Sysname-luser-test] authorization-attribute level 3
Configuring the user privilege level directly on a user interface
To configure the user privilege level directly on a user interface that uses the scheme authentication mode:
Ste
p
Command
Remarks
1. Configure the authentication
type for SSH users as
publickey.
For more information, see Security
Configuration Guide.
Required only for SSH users who
use public-key authentication.
2. Enter system view. system-view N/A
Other manuals for HP 830 Series
4
This manual suits for next models
2
Table of contents
Other HP Switch manuals
HP
HP ProCurve 1600M Setup guide
HP
HP 6400cl User manual
HP
HP 316095-B21 - StorageWorks Edge Switch 2/24 User manual
HP
HP V1405-24 User instructions
HP
HP StorageWorks 2/140 - Director Switch Instruction Manual
HP
HP 6125G User manual
HP
HP Officejet Pro 7500 Series User manual
HP
HP JG221A User manual
HP
HP 336044-B21 User instructions
HP
HP 316095-B21 - StorageWorks Edge Switch 2/24 User manual
HP
HP ProCurve 6120G/XG Programming manual
HP
HP 316095-B21 - StorageWorks Edge Switch 2/24 Quick start guide
HP
HP 5400R zl2 Series User manual
HP
HP StorageWorks 2/16 User manual
HP
HP P2361AA #ABA User manual
HP
HP 438031-B21 - 1:10Gb Ethernet BL-c Switch Instruction Manual
HP
HP 6125XLG User manual
HP
HP ProCurve 5400zl Series Guide
HP
HP AA979A - StorageWorks SAN Switch 2/8V User manual
HP
HP 1810 series User instructions
