This document contains proprietary information, which is
protected by copyright. No part of this document may be
photocopied, reproduced, or translated into another
language without the prior written consent of HewlettPackard.
Publication Number
5998-3892
November 2012
Applicable Products
HP 3500 Switches(J9470A, J9471A, J9472A,
J9473A)
HP 3500yl Switches (J8692A, J8693A)
HP 5400zl Switches (J8697A, J8698A, J9447A,
J9448A)
HP 6200yl Switch (J8992A)
HP 8200zl Switches(J9475A, J8715A/B)
HP 6600 Switches(J9263A, J9264A, J9265A,
J9451A, J9452A)
HP 3800 Switches (J9573A, J9574A, J9575A,
J9576A, J9584A, J9585A, J9586A, J9587A, J9588A)
HP 2620 Switches (J9623A, J9624A, J9625A,
J9626A, J9627A)
HP 2520G Switches (J9298A, J9299A)
HP 2 520 Switches (J9137A, J913 8A )H P
Switch 2530-48G-PoE+ (J9772A)
HP Switch 2530-24G-PoE+(J9773A)
HP Switch 2530-48G(J9775A)
HP Switch 2530-24G(J9776A)
HP 2615 Switch (J9565A)
HP 2910al Switches (J9145A, J9146A, J9147A
J9148A)
HP 2915 Switch (J9562A)
Disclaimer
The information contained in this document is subject to
change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY
OF ANY KIND WITH REGARD TO THIS MATERIAL,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS
FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not
be liable for errors contained herein or for incidental or
consequential damages in connection with the furnishing,
performance, or use of this material.
The only warranties for HP products and services are set
forth in the express warranty statements accompanying
such products and services. Nothing herein should be
construed as constituting an additional warranty. HP shall
not be liable for technical or editorial errors or omissions
contained herein.
Hewlett-Packard assumes no responsibility for the use or
reliability of its software on equipment that is not furnished
by Hewlett-Packard.
Software End User License Agreement and
Hardware Limited Warranty
For the software end user license agreement and the
hardware limited warranty information for HP Networking
products, visit
www.hp.com/networking/support.
Trademark Credits
Microsoft, Windows, and Microsoft Windows NT are US
registered trademarks of Microsoft Corporation. Java™ is a
US trademark of Sun Microsystems, Inc.
Hewlett-Packard Company
8000 Foothills Boulevard, m/s 5551
Roseville, California 95747-5551
http://www.hp.com/networking/support
Contents
Product Documentation
About Your Switch Manual Set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
NoteFor the latest version of all HP switch documentation, including Release Notes
covering recently added features, please visit the HP Networking web site at
www.hp.com/Networking/support.
Electronic Publications
The latest version of each of the publications listed below is available in PDF
format on the HP Networking web site, as described in the Note at the top of
this page.
■Installation and Getting Started Guide—Explains how to prepare for
and perform the physical installation and connect the switch to your
network.
■Basic Operation Guide—Describes how to use the switch interfaces and
introduces basic operations.
■Management and Configuration Guide—Describes how to configure,
manage, and monitor basic switch operation.
■Advanced Traffic Management Guide—Explains how to configure traffic
management features such as VLANs, MSTP, QoS, and Meshing.
■Multicast and Routing Guide—Explains how to configure IGMP, PIM, IP
routing, and VRRP features.
■Access Security Guide—Explains how to configure access security fea-
tures and user authentication on the switch.
■IPv6 Configuration Guide—Describes the IPv6 protocol operations that
are supported on the switch.
■Command Line Interface Reference Guide—Provides a comprehensive
description of CLI commands, syntax, and operations.
■Comware CLI Commands in ProVision Software—Provides the syntax,
descriptions, and examples of Comware CLI commands that can be
executed in ProVision software. Includes related ProVision software commands.
■Event Log Message Reference Guide—Provides a comprehensive descrip-
tion of event log messages.
■Release Notes—Describe new features, fixes, and enhancements that
become available between revisions of the main product guide.
vii
List of Commands
The following table lists the commands found in the Basic Operation Guide.
A few commands are not supported on certain switches.
CommandPage
alias3-24
banner exec1-9
banner motd1-5
boot [system flash]8-11
boot set-default flash5-30
config5-4
console6-7
copy config5-48
copy flash5-24
copy tftp config5-49
copy tftp flash8-2
copy usb flash8-4
copy xmodem flash8-3
dhcp config-file-update5-61
enable3-4
end3-8
erase5-46
erase flash5-24
exit3-5
fastboot5-32
hostname6-13
interface loopback <number>7-17
ip address <ip-addr> <mask-bits>7-7
ip address <ip-addr>/<mask-length>7-7
ip address dhcp-bootp7-8
ip default-gateway <ip-addr>7-10
ip preserve7-21
ip source-interface7-26
ip ttl7-11
viii
CommandPage
kill6-9
mac-age-time6-14
menu2-3
redo3-22
reload after5-33
reload at5-33
rename config5-44
repeat3-23
session interactive-mode3-17
session show-message-type3-16
show <ip | ipv6>7-6
show banner3-20
show config5-58
show config files5-40
show config interface5-58
show config status5-4
show console6-2
show flash8-13
show ip route7-20
show ip source-interface7-30
show reload5-35
show running-config5-51
show running-config interface5-51
show session3-18
show system information6-12
show version5-20
snmp -server <contact | location>6-13
startup-default5-42
telnet6-5
telnet-server6-4
time6-14
time daylight-time-rule6-14
time timezone6-14
vlan3-4
ix
CommandPage
web-management6-7
write memory5-5
write terminal5-4
x
Getting Started
Initial Switch Set-Up
Initial setup includes:
■setting a Manager password
■assigning an IP (Internet Protocol) address and subnet mask
■configuring optional banners
Recommended Minimal Configuration
Getting Started
Initial Switch Set-Up
1
In the factory default configuration, the switch has no IP (Internet Protocol)
address and subnet mask, and no passwords. In this state, it can be managed
only through a direct console connection. To manage the switch through inband (networked) access, you should configure the switch with an IP address
and subnet mask compatible with your network. Also, you should configure
a Manager password to control access privileges from the console and web
browser interface. Other parameters in the Switch Setup screen can be left at
their default settings or you can configure them with values you enter.
For more information on IP addressing, see “Configuring IP Addressing” on
page 7-1.
NoteBy default, the switch is configured to acquire an IPv4 address configuration
from a DHCP or Bootp server. To use DHCP/Bootp instead of the manual
method described in this chapter, see DHCP/Bootp Operation in the Manage-ment and Configuration Guide for your switch.
For information on configuring IPv6 addressing, refer to the latest IPv6 Configuration Guide for you switch.
1-1
Getting Started
HP Switch
==========================- TELNET - MANAGER MODE -============================
Switch Setup
System Name : HP Switch
System Contact :
Manager Password :
Confirm Password :
Logon Default : CLI Time Zone [0] : 0
Community Name : public Spanning Tree Enabled [No] : No
Default Gateway :
Time Sync Method [None] : TIMEP
TimeP Mode [Disabled] : Disabled
IP Config [Manual] : DHCP/Bootp
IP Address : 127.0.0.1
Subnet Mask : 255.255.255.255
Actions-> Cancel Edit Save Help
Enter System Name - up to 32 characters.
Use arrow keys to change field selection, <Space> to toggle field choices,
and <Enter> to go to Actions.
Initial Switch Set-Up
Using the Switch Setup Screen
The quickest and easiest way to minimally configure the switch for management and password protection is to use a direct console connection to the
switch, start a console session, and access the Switch Setup screen.
1.Using the method described in the Installation and Getting Started Guide for your switch, connect a terminal device to the switch and display
the switch console command (CLI) prompt (the default display).
The CLI prompt appears displaying the switch model number, for
example:
HP E8200zl#
2.screen. The following illustration is an example of a Setup screen with
default settings. Your screen may vary slightly.
Figure 1-1. Example Switch Setup Screen
3.Use the Tab key to select the Manager Password field and enter a manager
1-2
password of up to 16 characters.
4.Tab to the IP Config (DHCP/Bootp) field and use the Space bar to select the Manual option.
5.Tab to the IP Address field and enter the IP address that is compatible with
your network.
6.Tab to the Subnet Mask field and enter the subnet mask used for your
network.
7.Press Enter, then S (for S
ave).
Table 1-1.Setup Screen Field Descriptions
ParameterDefault
System NameblankOptional; up to 255 characters, including spaces
System ContactblankOptional; up to 255 characters, including spaces
Manager PasswordblankRecommended; up to 16 characters (no blank spaces)
Getting Started
Initial Switch Set-Up
Logon DefaultCLIThe default setting selects the command line interface for console access.
Time Zone0 (none)Optional; 1440 to -1440. The number of minutes your location is to the
Community NamepublicDefault setting recommended.
Spanning Tree EnabledNoDefault setting recommended unless STP is already running on your network
Default GatewayblankRecommended; Enter the IP address of the next-hop gateway node if network
Time Sync MethodTimePOptional; The protocol the switch uses to acquire a time signal. The options
TimeP ModeDisabledSynchronizes the time kept on the switch to the TimeP server.
IP ConfigDHCP/BootpSet to Manual unless a DHCP/Bootp server is used on your network to
IP Addressxxx.xxx.xxx.xxx Recommended; If you set IP Config to Manual, then enter an IP address
Subnet Maskxxx.xxx.xxx.xxx Recommended; If you entered an IP address, then enter a subnet mask
*The IP address and subnet mask assigned for the switch must be compatible with the IP addressing used in your network.
For more on IPv4 addressing, see “Configuring IP Addressing” on page 7-1. For IPv6 addressing topics, refer to the latest
IPv6 Configuration Guide for your switch.
The alternative is the Menu interface.
West (-) or East (+) of GMT.
or the switch will be used in complex network topologies.
traffic needs to be able to reach off-subnet destinations.
are SNTP and TimeP.
configure IP addressing.
compatible with your network.*
compatible with your network.*
1-3
Getting Started
Login Banners
Login Banners
Custom Login Banners
You can now configure the switch to display a login banner of up to 3070
characters when an operator initiates a management session with the switch
through any of the following methods:
■Telnet
■serial connection
■SSHv2
■WebAgent
The default banner displays product registration information; the copyright
splash is no longer displayed.
If a banner is configured, the banner page is displayed when you access the
WebAgent. The default product registration information is not displayed as
there is already a product registration prompt displayed in the WebAgent.
1-4
Banner Operation with Telnet, Serial, or SSHv2 Access
When a system operator begins a login session, the switch displays the banner
above the prompts for local password and Press any key to continue. Entering
a correct password or, if no password is configured, pressing any key clears
the banner from the CLI and displays the CLI prompt. (Refer to Figure 2-5 on
page 1-6.)
Banner Operation with the WebAgent
When a system operator uses the WebAgent to access the switch, the text of
a non-default banner configured on the switch appears in a dedicated banner
window with a Continue
displays either the Registration page or the switch’s home page. If the banner
feature is disabled or if the switch is using the factory-default banner, then the
banner page does not appear in the WebAgent screen when an operator
initiates a login session with the switch.
link to the next page. Clicking on Continue then
Getting Started
Login Banners
Configuring and Displaying a Non-Default Banner
You can enable or disable banner operation using either the switch’s CLI or
an SNMP application. The steps include:
1.Enable non-default banner operation and define the endpoint delimiter
for the banner.
2.Enter the desired banner text, including any specific line breaks you
want.
3.Enter the endpoint delimiter.
Use show banner motd to display the current banner status.
Syntax: banner motd < delimiter >
no banner motd
This command defines the single character used to terminate the banner text and enables banner text input. You
can use any character except a blank space as a delimiter.
The no form of the command disables the login banner
feature.
< banner-text-string >
The switch allows up to 3070 banner characters,
including blank spaces and CR-LF ([Enter]). (The tilde “
and the delimiter defined by banner motd <delimiter> are
not allowed as part of the banner text.) While entering
banner text, you can backspace to edit the current line
(that is, a line that has not been terminated by a CR-LF.)
However, terminating a line in a banner by entering a
CR-LF prevents any further editing of that line. To edit a
line in a banner entry after terminating the line with a
CR-LF requires entering the delimiter described above
and then re-configuring new banner text.
The banner text string must terminate with the character
defined by banner motd < delimiter >.
Note: In redundant management, the banner is not seen
on the standby module, only the active module.
~“
1-5
Getting Started
HP Switch(config)# banner motd %
Enter TEXT message. End with the character'%'
This is a private system maintained by the
Allied Widget Corporation.
Unauthorized use of this system can result in
civil and criminal penalties!%
HP Switch(config)# write memory
HP Switch(config)# show banner motd
Banner Information
Banner status: Enabled
Configured Banner:
This is a private system maintained by the
Allied Widget Corporation.
Unauthorized use of this system can result in
civil and criminal penalties!
Login Banners
Example of Configuring and Displaying a Banner
Suppose a system operator wanted to configure the following banner message
on her company’s switches:
This is a private system maintained by the
Allied Widget Corporation.
Unauthorized use of this system can result in
civil and criminal penalties!
In this case, the operator will use the [Enter] key to create line breaks, blank
spaces for line centering, and the % symbol to terminate the banner message.
Figure 1-2. Example of Configuring a Login Banner
To view the current banner configuration, use either the show banner motd or
show running command.
Figure 1-3. Example of show banner motd Output
1-6
Getting Started
HP Switch(config)# show running
Running configuration:
; J8697A Configuration Editor; Created on release #K.15.05.0001
; Ver #01:01:00
hostname "HP Switch"
module 1 type J8702A
vlan 1
name "DEFAULT_VLAN"
untagged A1-A24
ip address dhcp-bootp
exit
banner motd "This is a private system maintained by the\n Allied Widget
Corporation.\nUnauthorized use of this system can result in\n civil and
criminal penalties!"
password manager
HP Switch(config)#
Shows the current banner
configuration.
This is a private system maintained by the
Allied Widget Corporation.
Unauthorized use of this system can result in
civil and criminal penalties!
Password:
The login screen displays the
configured banner.
Entering a correct password
clears the banner and displays
the CLI prompt.
Login Banners
Figure 1-4. The Current Banner Appears in the Switch’s Running-Config File
The next time someone logs onto the switch’s management CLI, the following
appears:
Figure 1-5. Example of CLI Result of the Login Banner Configuration
1-7
Getting Started
Login Banners
Operating Notes
■The default banner appears only when the switch is in the factory
default configuration. Using no banner motd deletes the currently
configured banner text and blocks display of the default banner. The
default banner is restored only if the switch is reset to its factorydefault configuration.
■The switch supports one banner at any time. Configuring a new
banner replaces any former banner configured on the switch.
■If the switch is configured with ssh version 1 or ssh version 1-or-2,
configuring the banner sets the SSH configuration to ssh version 2
and displays the following message in the CLI:
Warning: SSH version has been set to v2.
■If a banner is configured, the switch does not allow configuration with
ssh version 1 or ssh version 1-or-2. Attempting to do so produces the
following error message in the CLI:
Banner has to be disabled first.
■If a banner is enabled on the switch, the WebAgent displays the
following link to the banner page:
1-8
Notice to all users
Getting Started
HP Switch(config)# banner exec &
Enter TEXT message. End with the character &
This is Switch A in the language lab &
HP Switch(config)# show banner exec
Banner Information
Banner Status: Enabled
Configured Banner:
This is Switch A in the language lab
Login Banners
User-Configurable Banner Message after
Authentication
A text message that has been configured with the banner motd command
displays with the authentication prompt when a user opens a console, telnet,
SSH, or WebAgent session.
The exec option of the banner command allows a user-configurable message
to be displayed after the user has been authenticated. If there is no password
on the switch, the exec banner message displays immediately.
Syntax:[no] banner exec <ASCII-string>
Sets the exec banner text. Text can be multiple lines up to 3070
characters, and can consist of any printable character except
the tilde (~) and the delimiting character.
<ASCII-string>: The text must end with a delimiting character,
which can be any single character except the tilde (~)
character.
The no version of the command removes the banner exec text.
Figure 1-6. Example of the banner exec Command
To display the status and text for the exec banner configuration, use the show
banner exec command.
Figure 1-7. Example Displaying Exec Banner Configuration
1-9
Getting Started
HP Switch(config)# banner motd "You can use the \’banner motd\’ CLI command in
non-interactive mode.\n\n\tThe banner motd command will support escape characters."
HP Switch(config)# show banner motd
Banner Information
Banner status: Enabled
Configured Banner:
You can use the ‘banner motd’ CLI command in non-interactive mode.
The banner motd command will support escape characters.”
Login Banners
Banner MOTD Command with
Non-Interactive Mode
The use of escape characters allows the banner motd command to be used in
non-interactive mode for multiple message lines. In non-interactive mode, you
can create a banner message enclosed in double quotes or other delimiter that
uses escape characters within the delimiters. Other existing CLI commands
do not support the escape characters. For more information on interactive
and non-interactive mode, see “CLI Interactive Commands” on page 3-17 in
this guide.
The following escape characters are supported:
\”double q
\’single quote
\`forward quote
\\backslash
\fform feed
\nnewline
\rcarriage return
\thorizontal tab
\vvertical tab
Figure 1-8. Example of Configuring the Banner Message Using Escape Characters Within Double Quote
Delimiters
1-10
Getting Started
HP Switch(config)# show running-config
Running configuration:
;J8693A Configuration Editor; Created on release #K.15.05.0002
;Ver #01:01:00
hostname ‘HP Switch’
vlan 1
name “DEFAULT_VLAN”
untagged 1-48, a1-a4
ip address dhcp-bootp
exit
banner motd “You can use the \’banner motd\’ CLI command in non-interactive
mode.\n\n\tThe banner motd command will support escape characters."
HP Switch(config)# banner motd #
Ehter TEXT message. End with the character ‘#’
You can use the \’banner motd\’ CLI command in non-interactive mode.\n\n\tThe
banner motd command will support escape characters.#
Login Banners
The running configuration file contains the banner message as entered in the
command line.
Figure 1-9. Example of the Running Config File with Banner MOTD Configured in Non-interactive Mode
You can use a delimiting character other than quotes as well, as shown in
Figure 1-10.
Figure 1-10. Example of Configuring the Banner Message Using an Alternate Delimiter of ‘#’
1-11
Getting Started
Login Banners
1-12
Using the Menu Interface
Overview
This chapter describes the following features:
■Overview of the Menu Interface (page 2-1)
■Starting and ending a Menu session (page 2-2)
■The Main Menu (page 2-6)
■Screen structure and navigation (page 2-8)
■Rebooting the switch (page 2-11)
The menu interface operates through the switch console to provide you with
a subset of switch commands in an easy-to-use menu format enabling you to:
■Perform a “quick configuration” of basic parameters, such as the IP
addressing needed to provide management access through your network
■Configure these features:
2
• Manager and Operator
passwords
• System parameters
• IP addressing
• Time protocol
•Ports
• Trunk groups
■View status, counters, and Event Log information
■Update switch software
■Reboot the switch
For a detailed list of menu features, see the “Menu Features List” on page 2-13.
Privilege Levels and Password Security. HP strongly recommends that
you configure a Manager password to help prevent unauthorized access to
your network. A Manager password grants full read-write access to the switch.
An Operator password, if configured, grants access to status and counter,
Event Log, and the Operator level in the CLI. After you configure passwords
on the switch and log off of the interface, access to the menu interface (and
• A network monitoring port
• SNMP community names
• IP authorized managers
• VLANs (Virtual LANs) and GVRP
2-1
Using the Menu Interface
Starting and Ending a Menu Session
the CLI and web browser interface) will require entry of either the Manager
or Operator password. (If the switch has only a Manager password, then
someone without a password can still gain read-only access.)
NoteIf the switch has neither a Manager nor an Operator password, anyone
having access to the console interface can operate the console with full
manager privileges. Also, if you configure only an Operator password,
entering the Operator password enables full manager privileges.
For more information on passwords, refer to the Access Security Guide for
your switch.
Menu Interaction with Other Interfaces.
■The menu interface displays the current running-config parameter set-
tings. You can use the menu interface to save configuration changes made
in the CLI only if the CLI changes are in the running config when you save
changes made in the menu interface. (For more on how switch memory
manages configuration changes, see Chapter 5, “Switch Memory and
Configuration”.)
■A configuration change made through any switch interface overwrites
earlier changes made through any other interface.
■The Menu Interface and the CLI (Command Line Interface) both use the
switch console. To enter the menu from the CLI, use the
To enter the CLI from the Menu interface, select
Command Line (CLI) option.)
menu command.
2-2
Starting and Ending a Menu Session
You can access the menu interface using any of the following:
■A direct serial connection to the switch’s console port, as described in the
installation guide you received with the switch
■A Telnet connection to the switch console from a networked PC or the
switch’s web browser interface. Telnet requires that an IP address and
subnet mask compatible with your network have already been configured
on the switch.
Loading...
+ 186 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.