Adobe, Acrobat, and Acrobat Reader are trademarks or registered trademarks of Adobe Systems Incorporated.
The only warranties for HP products and services are set forth in the express warranty statements accompanying
such products and services. Nothing herein should be construed as constituting an additional warranty.
HP shall not be liable for technical or editorial errors or omissions contained herein.
This document contains proprietary information that is protected by copyright. No part of this document may be
photocopied, reproduced, or translated to another language without the prior written consent of Hewlett-Packard
Company.
WARNING: Text set off in this manner indicates that failure to follow directions could result in bodily
Å
harm or loss of life.
CAUTION: Text set off in this manner indicates that failure to follow directions could result in damage to
Ä
equipment or loss of information.
CLI Reference Guide
HP BladeSystem PC Blade Switch
Second Edition (June 2006)
First Edition (December 2005)
xiiwww.hp.comHP PC Blade Switch CLI Reference Guide
Command Line Interface
Using the Command Line Interface (CLI)
Accessing the CLI
When accessing the management interface for the switch over a direct connection to the server’s
console port, or via a Telnet connection, the switch can be managed by entering command
keywords and parameters at the prompt. Using the switch’s command-line interface (CLI) is very
similar to entering commands on a UNIX system.
Console Connection
To access the switch through the console port, perform these steps:
1. At the console prompt, enter the user name and password. When the administrator user name
and password is entered, the CLI displays the “Console#” prompt and enters privileged
access mode (i.e., Privileged Exec). But when the guest user name and password is entered,
the CLI displays the “Console>” prompt and enters normal access mode (i.e., Normal Exec).
2. Enter the necessary commands to complete your desired tasks.
1
3. When finished, exit the session with the “quit” or “exit” command.
After connecting to the system through the console port, the login screen displays:
User Access Verification
Username: admin
Password:
CLI session with the PC Blade Switch is opened.
To end the CLI session, enter [Exit].
Console#
Telnet Connection
Telnet operates over the IP transport protocol. In this environment, your management station and
any network device you want to manage over the network must have a valid IP address. Valid IP
addresses consist of four numbers, 0 to 255, separated by periods. Each address consists of a
network portion and host portion.
For example, the IP address assigned to this switch, 10.1.0.1, consists of a network portion
(10.1.0) and a host portion (1).
The IP address for this switch is unassigned by default.
✎
HP PC Blade Switch CLI Reference Guidewww.hp.com1-1
Command Line Interface
To access the switch through a Telnet session, you must first set the IP address for the switch, and
set the default gateway if you are managing the switch from a different IP subnet.
If your corporate network is connected to another network outside your office or to the Internet,
you need to apply for a registered IP address. However, if you are attached to an isolated
network, then you can use any IP address that matches the network segment to which you are
attached.
After you configure the switch with an IP address, you can open a Telnet session by performing
these steps:
1. From the remote host, enter the Telnet command and the IP address of the device you want to
access.
2. At the prompt, enter the user name and system password. The CLI will display the
“Console#” prompt for the administrator to show that you are using privileged access mode
(i.e., Privileged Exec), or “Console” for the guest to show that you are using normal access
mode (i.e., Normal Exec).
3. Enter the necessary commands to complete your desired tasks.
4. When finished, exit the session with the “quit” or “exit” command.
After entering the Telnet command, the login screen displays:
Username: admin
Password:
CLI session with the PC Blade Switch is opened.
To end the CLI session, enter [Exit].
Console#
You can open up to four sessions to the device via Telnet.
✎
1-2www.hp.comCLI Reference Guide
Entering Commands
This section describes how to enter CLI commands.
Keywords and Arguments
A CLI command is a series of keywords and arguments. Keywords identify a command, and
arguments specify configuration parameters. For example, in the command “show interfaces
status ethernet 1/e5,” show interfaces and status are keywords, ethernet is an argument that
specifies the interface type, and 1/5 specifies the port.
You can enter commands as follows:
■To enter a simple command, enter the command keyword.
■To enter multiple commands, enter each command in the required order. For example, to
enable Privileged Exec command mode, and display the startup configuration, enter:
Console> enable
Console# show startup-config
■To enter commands that require parameters, enter the required parameters after the command
keyword. For example, to set a password for the administrator, enter:
Command Line Interface
Console(config)#username admin password smith
Minimum Abbreviation
The CLI will accept a minimum number of characters that uniquely identify a command. For
example, the command “configure” can be entered as con. If an entry is ambiguous, the system
will prompt for further input.
Command Completion
If you terminate input with a Tab key, the CLI will print the remaining characters of a partial
keyword up to the point of ambiguity. In the “logging history” example, typing log followed by a
tab will result in printing the command up to “logging.”
Getting Help on Commands
You can display a brief description of the help system by entering the help command. You can
also display command syntax by using the “?” character to list keywords or parameters.
Show Commands
If you enter a “?” at the command prompt, the system will display the first level of keywords for
the current command class (Normal Exec or Privileged Exec) or configuration class (Global,
ACL, DHCP, Interface, Line, VLAN Database, or MSTP). You can also display a list of valid
keywords for a specific command. For example, the command “show ?” displays a list of
possible show commands.
HP PC Blade Switch CLI Reference Guidewww.hp.com1-3
Command Line Interface
The command “show interfaces ?” will display the following information:
Console# show interfaces ?
counters
protocol-vlan
status s
switchport
Console#
Partial Keyword Lookup
If you terminate a partial keyword with a question mark, alternatives that match the initial letters
are provided. (Remember not to leave a space between the command and question mark.) For
example “s?” shows all the keywords starting with “s.”
Console# show s?
snmp sntp spanning-tree ssh startup-config
system
Console#
Information of interfaces counters
Protocol-vlan information
Information of interfaces status
Information of interfaces switchport
Negating the Effect of Commands
For many configuration commands you can enter the prefix keyword “no” to cancel the effect of
a command or reset the configuration to the default value. For example, the logging command
will log system messages to a host server. To disable logging, specify the no logging command.
This guide describes the negation effect for all applicable commands.
Using Command History
The CLI maintains a history of commands that have been entered. You can scroll back through
the history of commands by pressing the up arrow key. Any command displayed in the history
list can be executed again, or first modified and then executed.
Using the show history command displays a longer list of recently executed commands.
Understanding Command Modes
The command set is divided into Exec and Configuration classes. Exec commands generally
display information on system status or clear statistical counters. Configuration commands, on
the other hand, modify interface parameters or enable certain switching functions. These classes
are further divided into different modes. Available commands depend on the selected mode. You
can always enter a question mark “?” at the prompt to display a list of the commands available
for the current mode.
Exec Commands
When you open a new console session on the switch with the user name and password “guest,”
the system enters the Normal Exec command mode (or guest mode), displaying the “Console>”
command prompt. Only a limited number of the commands are available in this mode. You can
access all commands only from the Privileged Exec command mode (or administrator mode).
1-4www.hp.comCLI Reference Guide
Command Line Interface
To access the Privilege Exec mode, open a new console session with the user name and password
“admin.” The system will now display the “Console#” command prompt. You can also enter the
Privileged Exec mode from within Normal Exec mode. To enter the Privileged Exec mode, enter
the following user names and passwords:
Username: admin
Password: [admin login password]
CLI session with the PC Blade Switch is opened.
To end the CLI session, enter [Exit].
Console#
Username: guest
Password: [guest login password]
CLI session with the PC Blade Switch is opened.
To end the CLI session, enter [Exit].
Console#enable
Password: [privileged level password]
Console#
Configuration Commands
Configuration commands are privileged level commands used to modify switch settings. These
commands modify the running configuration only and are not saved when the switch is rebooted.
To store the running configuration in non-volatile storage, use the copy running-config startup-config command.
The configuration commands are organized into different modes:
■Global Configuration — These commands modify the system level configuration, and
include commands such as hostname and snmp-server community.
■Access Control List Configuration — These commands are used for packet filtering.
■DHCP Configuration — These commands are used to configure the DHCP server.
■Interface Configuration — These commands modify the port configuration such as
speed-duplex and negotiation.
■Line Configuration — These commands modify the console port and Telnet configuration,
and include command such as parity and databits.
■Router Configuration — These commands configure global settings for unicast and multicast
routing protocols.
■VLAN Configuration — Includes the command to create VLAN groups.
■Multiple Spanning Tree Configuration — These commands configure settings for the
selected multiple spanning tree instance.
HP PC Blade Switch CLI Reference Guidewww.hp.com1-5
Command Line Interface
To enter the Global Configuration mode, enter the command configure in Privileged Exec mode.
The system prompt will change to “Console(config)#” which gives you access privilege to all
Global Configuration commands.
Console# configure
Console(config)#
To enter the other modes, at the configuration prompt type one of the following commands. Use
the exit or end command to return to the Privileged Exec mode.For example, you can use the
following commands to enter interface configuration mode, and then return to Privileged Exec
mode.
Console(config)#interface ethernet 1/e5
Console(config-if)#exit
Console(config)#
Command Line Processing
Commands are not case sensitive. You can abbreviate commands and parameters as long as they
contain enough letters to differentiate them from any other currently available commands or
parameters. You can use the Tab key to complete partial commands, or enter a partial command
followed by the “?” character to display a list of possible matches. You can also use the following
editing keystrokes for command-line processing:
Keystroke Commands
KeystrokeFunction
Up ArrowsRecalls commands from the history buffer, beginning with the most
recent command. Repeat the key sequence to recall successively
older commands.
Down ArrowsReturns the most recent commands from the history buffer after
recalling commands with the up arrow key. Repeating the key
sequence will recall successively more recent commands.
Ctrl+AMoves the cursor to the beginning of the command line.
Ctrl+EMoves the cursor to the end of the command line.
Ctrl+Z/ EndReturns back to the Privileged EXEC mode from any configuration
mode.
1-6www.hp.comCLI Reference Guide
Command Groups
The system commands can be broken down into the functional groups shown below.
Command Groups
Command GroupDescriptionPage
Command Line Interface
802.1x CommandsSpecify authentication, authorization and accounting
(AAA) methods for use on interfaces running IEEE
802.1x, and enable 802.1x globally.
AAA CommandsDefine the authentication method lists for servers.3-1
ACL CommandsDisplay Access Control Lists (ACLs) defined on the
device.
Address Table Commands Register MAC-layer multicast addresses, and handle
MAC-layer secure address to a routed port.
Clock CommandsShow the configuration or status of the Simple
Network Time Protocol (SNTP).
Configuration and Image
File Commands
Ethernet Configuration
Commands
GVRP CommandsDisplay the GARP VLAN Registration Protocol (GVRP)
IGMP Snooping
Commands
IP Addressing Commands Define a default gateway, set an IP address for
Display the contents of the currently running
configuration file, specify contents of image files.
Configure multiple Ethernet type interfaces.8-1
configuration information, enable GVRP globally or on
an interface.
Enable the Internet Group Management Protocol
(IGMP) snooping.
interface, delete entries from the host.
2-1
4-1
5-1
6-1
7-1
9-1
10-1
11-1
LACP CommandsConfigure system or port priority using the Link
Aggregation Control Protocol (LACP).
Line CommandsDisplay line parameters, enable the command history
function, or configure the command history buffer size.
Management ACL
Commands
PHY Diagnostics
Commands
Port Channel CommandsEnter the interface configuration mode to configure a
Port Monitor CommandsStart a port monitoring session, or display the port
QoS CommandsEnable Quality of Service (QoS) on the device, create
HP PC Blade Switch CLI Reference Guidewww.hp.com1-7
Define a permit or deny a rule, or configure a
management access control list.
Display the optical transceiver diagnostics.15-1
specific, or a multiple port-channel.
monitoring status.
policy maps, and define traffic classifications
12-1
13-1
14-1
16-1
17-1
18-1
Command Line Interface
Command GroupDescriptionPage
RADIUS CommandsSpecify the source IP address used for communication
19-1
with Remote Authentication Dial-in User Service
(RADIUS) servers, and display the RADIUS server
settings.
RMON CommandsDisplay the Remote Network Monitoring (RMON)
20-1
Ethernet history statistics, alarms table and
configuration.
SNMP CommandsConfigure the community access string to permit
21-1
access to the Simple Network Management Protocol
(SNMP) server, create or update SNMP server entries,
and specify SNMP engineID.
Spanning-Tree Commands Configure the spanning-tree functionality.22-1
SSH CommandsDisplay the Secure Socket Shell (SSH) public keys on
23-1
the device, SSH server configuration, or which SSH
public key is manually configured.
Syslog CommandsLog messages to a syslog server, or limit log messages
24-1
to a syslog server.
System Management
Commands
TACACS+ CommandsDisplay configuration and statistical information about
Display and list system, version or Telnet session
information.
25-1
26-1
a Terminal Access Controller Access Control System
(TACACS+) server, or specify a TACACS+ host.
User Interface Commands Display and list system, version or Telnet session
information.
VLAN CommandsEnter the (Virtual Local Area Network) VLAN
Configuration mode, enable simultaneously
configuring multiple VLANs, or adds or remove
VLANs.
Web Server CommandsEnable configuring the device from a browser, or
display the HTTP server configuration.
27-1
28-1
29-1
1-8www.hp.comCLI Reference Guide
aaa authentication dot1x
The aaa authentication dot1x Global Configuration mode command specifies one or more
authentication, authorization, and accounting (AAA) methods for use on interfaces running IEEE
802.1x. To return to the default configuration, use the no form of this command.
■method1 [method2...] - At least one keyword, as listed in the following table:
KeywordDescription
radiusUses the list of all RADIUS servers for authentication.
2
802.1x Commands
noneUses no authentication.
Default Setting
No authentication method is defined.
Command Mode
Global Configuration
Command Usage
Additional methods of authentication are used only if the previous method returns an error and
not if the request for authentication is denied. To ensure that authentication succeeds even if all
methods return an error, specify none as the final method in the command line.
The RADIUS server must support MD-5 challenge and EAP type frames.
Example
The following command uses the aaa authentication dot1x default with no authentication.
HP PC Blade Switch CLI Reference Guidewww.hp.com2-1
802.1x Commands
dot1x system-auth-control
The dot1x system-auth-control Global Configuration mode command enables 802.1x globally.
To return to the default configuration, use the no form of this command.
Syntax
dot1x system-auth-control
no dot1x system-auth-control
Parameters
There are no parameters for this command.
Default Configuration
802.1x is disabled globally.
Command Modes
Global Configuration mode
Command Usage
There are no user guidelines for this command.
Example
The following command enables 802.1x globally.
Console(config)# dot1x system-auth-control
2-2www.hp.comHP PC Blade Switch CLI Reference Guide
dot1x port-control
The dot1x port-control Interface Configuration mode command enables manually controlling
the authorization state of the port. To return to the default configuration, use the
command.
■auto — Enables 802.1x authentication on the interface and causes the port to transition to
the authorized or unauthorized state based on the 802.1x authentication exchange between
the port and the client.
■force-authorized — Disables 802.1x authentication on the interface and causes the port to
transition to the authorized state without any authentication exchange required. The port
resends and receives normal traffic without 802.1x-based authentication of the client.
■force-unauthorized — Denies all access through this interface by forcing the port to
transition to the unauthorized state and ignoring all attempts by the client to authenticate.
The device cannot provide authentication services to the client through the interface.
802.1x Commands
no form of this
Default Configuration
Port is in the force-authorized state
Command Mode
Interface Configuration (Ethernet)
Command Usage
It is recommended to disable spanning tree or to enable spanning-tree PortFast mode on 802.1x
edge ports (ports in auto state that are connected to end stations), in order to get immediately to
the forwarding state after successful authentication.
Example
The following command enables 802.1x authentication on Ethernet port 1/e16.
Console(config)# interface ethernet 1/e16
Console(config-if)# dot1x port-control auto
HP PC Blade Switch CLI Reference Guidewww.hp.com2-3
802.1x Commands
dot1x re-authentication
The dot1x re-authentication Interface Configuration mode command enables periodic
re-authentication of the client. To return to the default configuration, use the no form of this
command.
Syntax
dot1x re-authentication
no dot1x re-authentication
Parameters
There are no parameters for this command.
Default Setting
Periodic re-authentication is disabled.
Command Mode
Interface Configuration (Ethernet)
Command Usage
There are no user guidelines for this command.
Example
The following command enables periodic re-authentication of the client.
Console(config)# interface ethernet 1/e16
Console(config-if)# dot1x re-authentication
2-4www.hp.comHP PC Blade Switch CLI Reference Guide
dot1x timeout re-authperiod
The dot1x timeout re-authperiod Interface Configuration mode command sets the number of
seconds between re-authentication attempts. To return to the default configuration, use the no
form of this command.
Syntax
dot1x timeout re-authperiod seconds
no dot1x timeout re-authperiod
Parameters
■seconds — Number of seconds between re-authentication attempts.
(Range: 300-4294967295)
Default Setting
Re-authentication period is 3600 seconds.
Command Mode
Interface Configuration (Ethernet) mode
802.1x Commands
Command Usage
There are no user guidelines for this command.
Example
The following command sets the number of seconds between re-authentication attempts, to 300.
Console(config)# interface ethernet 1/e16
Console(config-if)# dot1x timeout re-authperiod
300
HP PC Blade Switch CLI Reference Guidewww.hp.com2-5
802.1x Commands
dot1x re-authenticate
The dot1x re-authenticate Privileged EXEC mode command manually initiates a
re-authentication of all 802.1x-enabled ports or the specified 802.1x-enabled port.
The following command manually initiates a re-authentication of 802.1x-enabled Ethernet port
1/e16.
Console# dot1x re-authenticate ethernet 1/e16
2-6www.hp.comHP PC Blade Switch CLI Reference Guide
dot1x timeout quiet-period
The dot1x timeout quiet-period Interface Configuration mode command sets the number of
seconds that the device remains in the quiet state following a failed authentication exchange (for
example, the client provided an invalid password). To return to the default configuration, use the
no form of this command.
Syntax
dot1x timeout quiet-period seconds
no dot1x timeout quiet-period
Parameters
■seconds — Specifies the time in seconds that the device remains in the quiet state following a
failed authentication exchange with the client. (Range: 0-65535 seconds)
Default Setting
The default quiet period is 60 seconds.
Command Mode
802.1x Commands
Interface Configuration (Ethernet) mode
Command Usage
During the quiet period, the device does not accept or initiate authentication requests.
The default value of this command should only be changed to adjust for unusual circumstances,
such as unreliable links or specific behavioral problems with certain clients and authentication
servers.
To provide a faster response time to the user, a smaller number than the default value should be
entered.
Example
In the following example, the number of seconds that the device remains in the quiet state
following a failed authentication exchange, is set to 3600.
HP PC Blade Switch CLI Reference Guidewww.hp.com2-7
802.1x Commands
dot1x timeout tx-period
The dot1x timeout tx-period Interface Configuration mode command sets the number of
seconds that the device waits for a response to an Extensible Authentication Protocol
(EAP)-request/identity frame from the client before resending the request. To return to the
default configuration, use the no form of this command.
Syntax
dot1x timeout tx-period seconds
no dot1x timeout tx-period
Parameters
■seconds — Specifies the time in seconds that the device waits for a response to an
EAP-request/identity frame from the client before resending the request.
(Range: 1-65535 seconds)
Default Configuration
Timeout period is 30 seconds.
Command Mode
Interface Configuration (Ethernet) mode
Command Usage
The default value of this command should be changed only to adjust for unusual circumstances,
such as unreliable links or specific behavioral problems with certain clients and authentication
servers.
Example
The following command sets the number of seconds that the device waits for a response to an
EAP-request/identity frame, to 3600 seconds.
Console(config)# interface ethernet 1/e16
Console(config-if)# dot1x timeout tx-period 3600
2-8www.hp.comHP PC Blade Switch CLI Reference Guide
dot1x max-req
The dot1x max-req Interface Configuration mode command sets the maximum number of times
that the device sends an Extensible Authentication Protocol (EAP)-request/identity frame
(assuming that no response is received) to the client, before restarting the authentication process.
To return to the default configuration, use the no form of this command.
Syntax
dot1x max-req count
no dot1x max-req
Parameters
■count — Number of times that the device sends an EAP-request/identity frame before
restarting the authentication process. (Range: 1-10)
Default Configuration
The default number of times is 2.
Command Mode
802.1x Commands
Interface Configuration (Ethernet) mode
Command Usage
The default value of this command should be changed only to adjust for unusual circumstances,
such as unreliable links or specific behavioral problems with certain clients and authentication
servers.
Example
The following command sets the number of times that the device sends an EAP-request or
identity frame, to 6.
Console(config)# interface ethernet 1/e16
Console(config-if)# dot1x max-req 6
HP PC Blade Switch CLI Reference Guidewww.hp.com2-9
802.1x Commands
dot1x timeout supp-timeout
The dot1x timeout supp-timeoutInterface Configuration mode command sets the time for the
retransmission of an Extensible Authentication Protocol (EAP)-request frame to the client. To
return to the default configuration, use the no form of this command.
Syntax
dot1x timeout supp-timeout seconds
no dot1x timeout supp-timeout
Parameters
■seconds — Time in seconds that the device waits for a response to an EAP-request frame
from the client before resending the request. (Range: 1-65535 seconds)
Default Configuration
Default timeout period is 30 seconds.
Command Mode
Interface configuration (Ethernet) mode
Command Usage
The default value of this command should be changed only to adjust for unusual circumstances,
such as unreliable links or specific behavioral problems with certain clients and authentication
servers.
Example
The following command sets the timeout period before retransmitting an EAP-request frame to
the client to 3600 seconds.