Moxa Technologies NPort S9000 Series Manual
NPort S9000 Series
Command Line Interface
Edition 1.0, March 2017
www.moxa.com/product
© 2017 Moxa Inc. All rights reserved.
NPort S9000 Series
Command Line Interface
The software described in this manual is furnished under a license agreement and may be used only in accordance with
the terms of that agreement.
Copyright Notice
© 2017 Moxa Inc. All rights reserved.
Trademarks
The MOXA logo is a registered trademark of Moxa Inc.
All other trademarks or registered marks in this manual belong to their respective manufacturers.
Disclaimer
Information in this document is subject to change without notice and does not represent a commitment on the part of
Moxa.
Moxa provides this document as is, without warranty of any kind, either expressed or implied, including, but not limited
to, its particular purpose. Moxa reserves the right to make improvements and/or changes to this manual, or to the
products and/or the programs described in this manual, at any time.
Information provided in this manual is intended to be accurate and reliable. However, Moxa assumes no responsibility for
its use, or for any infringements on the rights of third parties that may result from its use.
This product might include unintentional technical or typographical errors. Changes are periodically made to the
information herein to correct such errors, and these changes are incorporated into new editions of the publication.
Technical Support Contact Information
www.moxa.com/support
Moxa Americas
Toll
-free: 1-888-669-2872
Tel:
+1-714-528-6777
Fax:
+1-714-528-6778
Moxa China (Shanghai office)
Toll
-free: 800-820-5036
Tel:
+86-21-5258-9955
Fax:
+86-21-5258-5505
Moxa Europe
Tel:
+49-89-3 70 03 99-0
Fax:
+49-89-3 70 03 99-99
Moxa Asia
-Pacific
Tel:
+886-2-8919-1230
Fax:
+886-2-8919-1231
Moxa India
Tel:
+91-80-4172-9088
Fax:
+91-80-4132-1045
Table of Contents
1. Command Modes ............................................................................................................................... 1-1
CLI (Command Line Interface) ............................................................................................................. 1-1
Configuring the NPort S9000 to CLI Mode .............................................................................................. 1-1
Basic Operation .................................................................................................................................. 1-2
Useful Interactive “Help” Features ........................................................................................................ 1-3
2. Commands ........................................................................................................................................ 2-1
2.1 Root Layer Commands .......................................................................................................... 2-1
2.1.1 quit ........................................................................................................................... 2-1
2.1.2 exit ........................................................................................................................... 2-1
2.1.3 reload ........................................................................................................................ 2-2
2.1.4 terminal ..................................................................................................................... 2-2
2.1.5 login .......................................................................................................................... 2-3
2.1.6 copy .......................................................................................................................... 2-3
2.1.7 save .......................................................................................................................... 2-4
2.1.8 ping .......................................................................................................................... 2-4
2.1.9 clear .......................................................................................................................... 2-4
2.1.10 show ........................................................................................................................... 2-5
2.1.11 configure ..................................................................................................................... 2-7
2.1.12 sslcertgen .................................................................................................................... 2-8
2.1.13 sshkeygen ................................................................................................................... 2-8
2.2 Configuration Mode Commands ............................................................................................. 2-9
2.2.1 password-policy minimum-length .................................................................................. 2-9
2.2.2 password-policy complexity-check ................................................................................. 2-9
2.2.3 password-policy complexity-check ............................................................................... 2-10
2.2.4 password-policy password-lifetime .............................................................................. 2-10
2.2.5 login-lockout retry-threshold ...................................................................................... 2-11
2.2.6 login-lockout lockout-time .......................................................................................... 2-11
2.2.7 logging-capacity ........................................................................................................ 2-12
2.2.8 hostname ................................................................................................................. 2-12
2.2.9 snmp-server location ................................................................................................. 2-13
2.2.10 snmp-server description .............................................................................................. 2-13
2.2.11 snmp-server contact ................................................................................................... 2-14
2.2.12 snmp-server community .............................................................................................. 2-14
2.2.13 snmp-server version ................................................................................................... 2-14
2.2.14 snmp-server read-write-user ....................................................................................... 2-15
2.2.15 snmp-server read-only-user ......................................................................................... 2-15
2.2.16 snmp-server host ....................................................................................................... 2-16
2.2.17 snmp-server trap-mode .............................................................................................. 2-16
2.2.18 interface .................................................................................................................... 2-17
2.2.19 clock set .................................................................................................................... 2-17
2.2.20 clock timezone ........................................................................................................... 2-18
2.2.21 clock summer-time ..................................................................................................... 2-18
2.2.22 ntp remote-server ...................................................................................................... 2-19
2.2.23 ntp refresh-time ......................................................................................................... 2-19
2.2.24 ntp server.................................................................................................................. 2-19
2.2.25 irig-b ........................................................................................................................ 2-20
2.2.26 time-source ............................................................................................................... 2-20
2.2.27 logging ...................................................................................................................... 2-20
2.2.28 line-swap-fast-recover ................................................................................................ 2-21
2.2.29 ip auto-logout ............................................................................................................ 2-21
2.2.30 ip http-server ............................................................................................................. 2-21
2.2.31 ip http-server login-message ....................................................................................... 2-22
2.2.32 ip http-server login-failure-message ............................................................................. 2-22
2.2.33 ip telnet .................................................................................................................... 2-23
2.2.34 ip ssh ........................................................................................................................ 2-23
2.2.35 ip snmp-agent ............................................................................................................ 2-23
2.2.36 ip moxa-service .......................................................................................................... 2-24
2.2.37 ip mms-service .......................................................................................................... 2-24
2.2.38 ip igmp-snooping ........................................................................................................ 2-24
2.2.39 ip igmp-snooping vlan ................................................................................................. 2-25
2.2.40 ip igmp-snooping querier vlan ...................................................................................... 2-25
2.2.41 ip igmp-snooping query-interval ................................................................................... 2-26
2.2.42 ip igmp-snooping enhanced ......................................................................................... 2-26
2.2.43 ip igmp static-group .................................................................................................... 2-27
2.2.44 ip dhcp-relay server .................................................................................................... 2-27
2.2.45 ip dhcp-relay option82 ................................................................................................ 2-28
2.2.46 ip dhcp-relay option82 remote-id-type .......................................................................... 2-28
2.2.47 serial ........................................................................................................................ 2-29
2.2.48 vlan create ................................................................................................................ 2-29
2.2.49 vlan mode ................................................................................................................. 2-29
2.2.50 gvrp .......................................................................................................................... 2-30
2.2.51 redundancy................................................................................................................ 2-30
2.2.52 redundancy mode ....................................................................................................... 2-30
2.2.53 auth mode ................................................................................................................. 2-31
2.2.54 auth tacacs+ .............................................................................................................. 2-31
2.2.55 auth tacacs+ server-ip ................................................................................................ 2-31
2.2.56 auth tacacs+ server-port ............................................................................................. 2-32
2.2.57 auth tacacs+ shared-key ............................................................................................. 2-32
2.2.58 auth tacacs+ auth-type ............................................................................................... 2-33
2.2.59 auth tacacs+ timeout .................................................................................................. 2-33
2.2.60 lldp enable ................................................................................................................. 2-34
2.2.61 lldp timer .................................................................................................................. 2-34
2.2.62 dot1x auth ................................................................................................................. 2-34
2.2.63 dot1x reauth .............................................................................................................. 2-35
2.2.64 dot1x radius .............................................................................................................. 2-35
2.2.65 monitor ..................................................................................................................... 2-36
2.2.66 email-warning server .................................................................................................. 2-36
2.2.67 email-warning mail-address ......................................................................................... 2-37
2.2.68 email-warning account ................................................................................................ 2-37
2.2.69 email-warning send test email ...................................................................................... 2-38
2.2.70 email-warning event ................................................................................................... 2-38
2.2.71 relay-warning override ................................................................................................ 2-39
2.2.72 relay-warning config relay ........................................................................................... 2-39
2.2.73 relay-warning event .................................................................................................... 2-40
2.2.74 garp.......................................................................................................................... 2-40
2.2.75 ptp enable ................................................................................................................. 2-41
2.2.76 ptp mode ................................................................................................................... 2-41
2.2.77 ptp log-sync-interval ................................................................................................... 2-42
2.2.78 ptp log-announce-interval ............................................................................................ 2-42
2.2.79 ptp announce-receipt-timeout ...................................................................................... 2-42
2.2.80 ptp log-min-delay-req-interval ..................................................................................... 2-43
2.2.81 ptp log-min-pdelay-req-interval .................................................................................... 2-43
2.2.82 ptp domain-number .................................................................................................... 2-43
2.2.83 ptp transport ............................................................................................................. 2-44
2.2.84 ptp priority1............................................................................................................... 2-44
2.2.85 ptp priority2............................................................................................................... 2-44
2.2.86 ptp utc-offset ............................................................................................................. 2-45
2.2.87 loopprotection ............................................................................................................ 2-45
2.2.88 qos mode .................................................................................................................. 2-45
2.2.89 qos mapping .............................................................................................................. 2-46
2.2.90 account add ............................................................................................................... 2-46
2.2.91 account edit ............................................................................................................... 2-47
2.2.92 system-log system ..................................................................................................... 2-47
2.2.93 system-log network .................................................................................................... 2-48
2.2.94 system-log config ....................................................................................................... 2-48
2.2.95 system-log opmode .................................................................................................... 2-49
2.2.96 reset-button .............................................................................................................. 2-49
2.2.97 console auth .............................................................................................................. 2-49
2.2.98 console try-next-auth .................................................................................................. 2-50
2.3 Commands for Configuring Interface .................................................................................... 2-50
2.3.1 Ethernet Interface Commands .................................................................................... 2-50
2.3.2 VLAN Interface Commands ......................................................................................... 2-61
2.3.3 Serial Interface Commands ........................................................................................ 2-64
2.3.4 Protocol Modbus Interface Commands ......................................................................... 2-78
2.3.5 Protocol DNP3 Interface Commands ............................................................................ 2-83
1
1. Command Modes
Command Line Interface (CLI)
The command line interface (CLI) for the NPort S9000 series can be accessed through either the serial console
or Telnet console. For either type of connection, access to the command line interface is generally referred to
as an EXEC session.
The commands are separated into several tiers for different type of commands. The first tier commands are the
root-layer commands, which should be executed under the root directory for some major function categories.
These commands include view the settings, configuring the settings, etc. Other commands for different tiers
should be excuted in their relative folders. Please find all the details in Chapter 2, which explains how to use the
commands to configure or monitor the NPort S9000 series.
Configuring the NPort S9000 to CLI Mode
The default configuration mode for both the serial, Telnet, and SSH console is MENU mode. To change the NPort
S9000 to CLI configuration mode, log in the NPort S9000’s serial, Telnet or SSH console and go to Login Mode
under Basic Settings and then press y to activate the change. You will then be able to view the CLI display in
the console. (Note that the default login username is admin, and the password is moxa.)
1. Select Basic Settings.
2. Select Login mode.
NPort 9000 Series CLI Command Modes
1-2
3. Press y to activate.
4. Now log in to access CLI display mode.
After changing to CLI mode, the CLI mode will be the default setting for the next reboot.
Basic Operation
The CLI is organized in different configuration levels. When you first enter CLI mode, type ? to view a quick help
panel that shows the basic commands of the first configuration level. Type any of the commands shown on the
screen to access the next configuration level. The quick help panel, accessed from any level by typing ?, is a
useful tool for understanding the commands in any level.
To enter the next level, type the commands shown in the console.
To access the next higher level, type exit.
NPort 9000 Series CLI Command Modes
1-3
To go directly back to the first level, type Ctrl + z.
Useful Interactive “Help” Features
The CLI includes several types of interactive commands. The Help commands are listed in the following table:
Command Purpose
? Provides a brief description of the Help feature in any command level.
Partial command? Provides a list of commands that begin with the character string (no space
between the command and the question mark).
Partial command<Tab> Completes a partial command name (no space between the command and
<Tab>).
Command? Lists the keywords, arguments, or both associated with the command (type a
space between the command and the question mark).
Command keyword? Lists the arguments that are associated with the keyword (type a space between
the keyword and the question mark).
2
2. Commands
2.1 Root Layer Commands
After logging in to the CLI console, users will be at the root folder of the CLI console. In the root folder, users
can see the system settings, ping other devices, upgrade firmware and so on.
2.1.1 quit
Use quit to quit the current configuration mode.
Commands
quit
Syntax
Description
quit Exit command line interface
Defaults N/A
Permission Admin group, User group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV# quit
2.1.2 exit
Use exit to exit the current configuration mode.
Commands
exit
Syntax
Description
exit Exit from configure mode
Exit from port setting mode
Exit command line interface
Exit from management interface setting
Defaults N/A
Permission Admin group, User group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV(config)# exit
NPort S9450I-2S-SC-HV#
NPort 9000 Series CLI Commands
2-2
2.1.3 reload
Use the reload privileged command on the switch to restart the Moxa Switch. Use the reload factory-default
privileged command to restore the switch configuration to the factory default values.
Commands
reload [factory-default]
reload [serial] {p1 | p2 | p3 | p4 | all}
Syntax
Description
reload Halt and perform a cold restart
factory-default Halt and perform a cold restart with factory default
serial Restart a serial port.
p1
Serial port 1.
p2 Serial port 2.
p3 Serial port 3.
p4 Serial port 4.
all All serial ports.
Defaults N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV# reload
NPort S9450I-2S-SC-HV# reload factory-default
NPort S9450I-2S-SC-HV# reload serial p1 p3
NPort S9450I-2S-SC-HV# reload serial all
2.1.4 terminal
Use the terminal privileged command on the device server to Configure terminal page length. Use terminal
default to set the terminal length to default value.
Commands
terminal terminal-length
terminal default length
Syntax
Description
terminal
Configure terminal page length
terminal-length Terminal page length
default length Reset the terminal length to the default
Defaults 20
Permission Admin group
Usage
Guidelines
terminal-length: 20 – 100, or set 0 to prevent pagination
Examples
NPort S9450I-2S-SC-HV# terminal 20
NPort S9450I-2S-SC-HV# terminal default length
NPort 9000 Series CLI Commands
2-3
2.1.5 login
Use the login privileged command on the device server to configure default login console.
Commands
login mode { menu | cli }
Syntax
Description
login Change login mode
mode Login modes
menu Legacy menu mode
cli Command line interface
Defaults menu
Permission
Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV# login mode cli
2.1.6 copy
Use the copy privileged command on the device server to copy an image or configuration file from a remote
server to the Flash memory or copy the running configuration, startup configuration, or event log to a remote
server via TFTP.
Commands
copy tftp device-firmware
copy xmodem device-firmware
copy tftp running-config
copy {running-config|event-log|startup-config} tftp [tftp-address]
Syntax
Description
copy Copy from one file to another
tftp Remote server through TFTP
xmodem Copy from xmodem
device-firmware System firmware
running-config Current running configuration of system
startup-config System startup configuration
event-log Event log file
tftp-address TFTP address. E.g., tftp://192.168.127.1/abc.txt
Defaults N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV# copy tftp
device-firmware - System firmware
running-config - Current running configuration of system
NPort S9450I-2S-SC-HV# copy tftp running-config
Address or name of remote host [192.168.127.1]? 192.168.127.95
Source file name? cli.ini
Save import config to flash? [Y/n]
Saving configuration ...Success
NPort 9000 Series CLI Commands
2-4
2.1.7 save
Use the save privileged command on the device server to save the configuration to the flash rom.
Commands
save config
Syntax
Description
save config Save running configuration to flash
Defaults N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV# save config
Saving configuration ...
Success
2.1.8 ping
Use the ping user EXEC command on the device server to diagnose the remote host if it is alive.
Commands
ping destaddr
Syntax
Description
ping Send echo messages
destaddr Ping destination address or hostname
Defaults N/A
Permission Admin group, User group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV# ping 192.168.127.1
PING 192.168.127.1, Send/Recv/Lost = 4/4/0
2.1.9 clear
Use the clear privileged command on the device server to clear the information.
Commands
clear { logging event-log | counters }
Syntax
Description
clear Clear information
logging event-log System event logs
counters Clear statistic counters
Defaults N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV# clear loggin event-log
NPort S9450I-2S-SC-HV# clear counters
NPort 9000 Series CLI Commands
2-5
2.1.10 show
Use the show user EXEC command on the device server to display the system informations.
Commands
show { version | running-config | startup-config | system | users | ip | serial | clock | snmp | gmrp
| password-policy | login-lockout | logging-capacity | qos | loopprotection | s2n-conn |
serial-status | serial-error | serial-setting | serial-alias | serial-param | system-info |
network-conn | accounts }
show auth { mode | tacacs+ | radius}
show interface ethernet mod_port [{ config | rate-limit | counters }]
show interface trunk [ trunk_id_range [counters]]
show interface mgmt [access-ip]
show interface serial port { opmode | data-packing }
show interface serial protocol { modbus | dnp3 }
show redundancy { turbo-ring-v1 | turbo-ring-v2 | turbo-chain | spanning-tree }
show redundancy mst { configuration | cist | instance instid }
show mac-address-table { static | learned | interface ethernet mod_port | trunk trunk_id }
show logging [event-log]
show vlan [config]
show port-security mod_port
show dot1x { local-userdb | radius }
show lldp [entry]
show port [monitor]
show email-warning [config]
show relay-warning [{config | status }]
show garp [timer]
show ptp {settings | status | port [mod_port] }
show qos [{cos-to-queue | dscp-to-queue }]
Syntax
Description
show Show running system information
version System version information
running-config Current running configuration of system
startup-config System startup configuration
system System hardware and software status
users Display login user settings
auth Display authentication settings
mode Display current server mode authentication settings
tacacs+ TACACS+ authentication
radius RADIUS authentication
ip Display IP information
serial Show serial console setting
interfaces Interface status and configuration
ethernet IEEE 802.3/IEEE 802.3z
mod_port Port ID or list. Ex. 1/1,2,3,2/1-3,5,...
config Show interface module/port settings
rate-limit Rate limiting configuration
counters
Display counters in detail
counters Display counters
trunk Show interface trunk information
trunk_id_range Trunk ID (or list)
counters Display counters in detail
mgmt Display management VLAN information
access-ip Display accessible IP list
NPort 9000 Series CLI Commands
2-6
serial Show serial info
port Serial port 1 - n
opmode Show serial port opmode
data-packing Show serial port data-packing
protocol Show serial protocol
modbus Show Modbus protocol settings
dnp3 Show DNP3 protocol settings
clock Display the system clock
snmp Display SNMP configuration
redundancy Display redundancy protocol status
turbo-ring-v1 Display turbo ring v1 status
turbo-ring-v2 Display turbo ring v2 status
turbo-chain Display turbo chain status
spanning-tree Display spanning tree settings
mst Display multiple spanning tree settings
configuration
Display multiple spanning tree global settings
cist Display MSTP cist status
instance Display MSTP msti status
instid MSTP instance ID
mac-address-table Display MAC address forwarding table
static Retrieve static MAC addresses
learned Retrieve learned MAC addresses
interface Retrieve MAC address by interface
ethernet Ethernet Port interface
mod_port Port ID. Ex. 1/3, 2/1,...
trunk Trunk interface
trunk_id Trunk ID. From 1 to 2
logging Display syslog information
event-log Display system event logs
vlan Display VLAN status
config Display VLAN configuration
gvrp Display GVRP configuration
port-security Display port access control table
mod_port Port ID or list. Ex. 1/1,2,3,2/1-3,5,...
dot1x Display 802.1x settings
local-userdb Display current local database
radius Display 802.1x radius settings
gmrp Display 802.1x radius settings
lldp Display LLDP information
entry
LLDP entries
email-warning Display Email warning configuration
config Email warning configuration
relay-warning Display relay warning configuration
config Relay warning configuration
status Current relay warning list
garp Display GARP information
timer Display GARP timer information
ptp
settings Display current PTP configuration
status
Display current PTP port state
port Display PTP port disable/enable state
mod_port Display PTP port disable/enable state
NPort 9000 Series CLI Commands
2-7
password-policy Display password policy settings
login-lockout Display login lockout settings
logging-capacity Display logging capacity settings
qos Display QoS configuration
cos-to-queue CoS to traffic queue mappings
dscp-to-queue DSCP to traffic queue mappings
loopprotection Display loop protection settings
s2n-conn Display the running serial to network connections
serial-status Display the running serial port current status
serial-error Display the running serial port error count
serial-setting Display the running serial port settings
serial-alias Display serial port alias name
serial-param Display serial port parameters
system-info Display system related status
network-conn Display network connection information
accounts
Show current account informations
Defaults N/A
Permission Admin group, User group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV# show version
Model Name : NPort S9650I-16-2HV
Firmware Version : V1.0
NPort S9650I-16-2HV# show interfaces serial protocol modbus
Serial protocol Modbus setting :
Initial delay : 0
Send TCP exception : disable
Modbus TCP listen port : 502
Modbus TCP response timeout : 1000
Slave ID Map :
Channel No. Type Definition Modbus Address Range
----------- ------------- ---------------------
--------------------
1 Modbus Serial Port 1 00001 - 00005
2.1.11 configure
Use the configure privileged command on the device server to enter configuration mode.
Commands
configure { terminal }
Syntax
Description
configure Enter configuration mode
terminal Configure from the terminal
Defaults N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV# configure
NPort S9450I-2S-SC-HV(config)#
NPort 9000 Series CLI Commands
2-8
2.1.12 sslcertgen
Use the sslcertgen privileged command on the device server to generate SSL certificate.
Commands
sslcertgen
Syntax
Description
sslcertgen Generate SSL certificate
Defaults N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV#sslcertgen
Generating... it may take a few minutes...
generating ssl certificate : done
NPort S9450I-2S-SC-HV#
2.1.13 sshkeygen
Use the sshkeygen privileged command on the device server to generate SSH host key.
Commands
sshkeygen
Syntax
Description
sshkeygen Generate SSH host key
Defaults N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV# sshkeygen
Generating... it may take a few minutes...
generating ssh host key : done
NPort S9450I-2S-SC-HV#
NPort 9000 Series CLI Commands
2-9
2.2 Configuration Mode Commands
In the root layer, use the “configure” command to enter configuration mode. In the configuration mode, user
could set all system related settings of the device server.
2.2.1 password-policy minimum-length
Use password-policy minimum-length global password-policy configuration commands on the device
server to configure the minimum password-length with specified characters. Use the no form of this command
to return to the default.
Commands
password-policy minimum-length characters
no password-policy minimum-length
Syntax
Description
password-policy Global password-policy configuration subcommands
minimum-length Password minimum length
characters 4 to 16 characters
Defaults Password minimum length is 4 by default
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV(config)# password-policy minimum-length 8
NPort S9450I-2S-SC-HV(config)# no password-policy minimum-length
2.2.2 password-policy complexity-check
Use password-policy complexity-check global password-policy configuration commands on the device
server to enable the password policy. Use the no form of this command to disable complexity-check.
Commands
password-policy complexity-check
no password-policy complexity-check
Syntax
Description
password-policy Global password-policy configuration subcommands
complexity-check Complexity check
Defaults Password complexity-check is disable by default
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV(config)# password-policy complexity-check
NPort 9000 Series CLI Commands
2-10
2.2.3 password-policy complexity-check
Use password-policy complexity-check global password-policy configuration commands on the device
server to enable the password policy check. Use the no form of this command to disable complexity-check.
Commands
password-policy complexity-check { digit | alphabet | special-characters }
no password-policy complexity-check { digit | alphabet | special-characters }
Syntax
Description
password-policy Global password-policy configuration subcommands
complexity-check Complexity check
digit Enable password policy : at least one digit check
alphabet
Enable password policy : mixed upper and lower case letters check
special-characters Enable password policy : at least one special character check
Defaults Password complexity-check is disable by default
Password complexity-check alphabet is disable by default
Password complexity-check special-characters is disable by default
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV(config)# password-policy complexity-check digit
NPort S9450I-2S-SC-HV(config)# no password-policy complexity-check
alphabet
2.2.4 password-policy password-lifetime
Use password-policy lifetime global password-policy configuration commands on the device server to
enable the password lifetime and the password lifetime with specified days. Use the no form of this command
to disable password-lifetime check.
Commands
password-policy password-lifetime [days]
no password-policy password-lifetime
Syntax
Description
password-policy Global password-policy configuration subcommands
password-lifetime Password lifetime
days 90 to 180 days
Defaults Password lifetime is disable by default
Password lifetime is 90 days by default
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV(config)# password-policy password-lifetime
NPort S9450I-2S-SC-HV(config)# password-policy password-lifetime 100
NPort 9000 Series CLI Commands
2-11
2.2.5 login-lockout retry-threshold
Use login-lockout retry-threshold global login-lockout configuration commands on the device server to
configure the login-lockout retry-threshold with specified times. Use the no form of this command to return to
the default.
Commands
login-lockout retry-threshold retry
no login-lockout retry-threshold
Syntax
Description
login-lockout Global login-lockout configuration subcommands
retry-threshold Login retry threshold
retry 0 to 10 times(0 to disable)
Defaults Login retry-threshold is 0 by default
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV(config)# login-lockout retry-threshold 5
NPort S9450I-2S-SC-HV(config)# no login-lockout retry-threshold
2.2.6 login-lockout lockout-time
Use login-lockout lockout-time global login-lockout configuration commands on the device server to
configure the login-lockout lockout-time with specified minutes. Use the no form of this command to return to
the default.
Commands
login-lockout lockout-time minutes
no login-lockout lockout-time
Syntax
Description
login-lockout Global login-lockout configuration subcommands
lockout-time Login lockout time
minutes 1 to 60 minutes
Defaults Login lockout-time is 5 minutes by default
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9450I-2S-SC-HV(config)# login-lockout lockout-time 10
NPort S9450I-2S-SC-HV(config)# no login-lockout lockout-time
NPort 9000 Series CLI Commands
2-12
2.2.7 logging-capacity
Use the logging-capacity privileged command on the device server to set logging capacity related settings.
Commands
logging-capacity over-size-action { overwrite-oldest | stop-recording }
Syntax
Description
logging-capacity Set logging capacity related settings.
over-size-action Set logging capacity oversize-action.
overwrite-oldest Set logging capacity oversize-action : Overwrite oldest event logs
stop-recording Set logging capacity oversize-action : Stop recording event logs
Defaults overwrite-oldest
Permission
Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# logging-capacity over-size-action
stop-recording
NPort S9650I-16-2HV(config)# logging-capacity over-size-action
overwrite-oldest
2.2.8 hostname
To specify or modify the host name for the device server, use the hostname global configuration command. To
return to the default, use the no form of this command.
Commands
hostname name
no hostname
Syntax
Description
hostname Set system’s network name (maximum 30 characters)
no Negate a command or set its defaults
Defaults Name is the default device server name with the serial number
Permission Admin group
Usage
Guidelines
Maximum string tokens are 5.
Maximum device server name length is 30 characters.
Examples
NPort S9650I-16-2HV(config)# hostname MOXA Nport device server
NPort S9650I-16-2HV(config)# no hostname
NPort 9000 Series CLI Commands
2-13
2.2.9 snmp-server location
To set the system location string, use the snmp-server location global configuration command. To remove
the location string, use the no form of this command.
Commands
snmp-server location text
no snmp-server location
Syntax
Description
snmp-server Configure SNMP server
location Device server location
text Location string
Defaults
N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# snmp-server location moxacorp
NPort S9650I-16-2HV(config)# no snmp-server location
2.2.10 snmp-server description
To set the system description string, use the snmp-server description global configuration command. To
remove the description string, use the no form of this command.
Commands
snmp-server description text
no snmp-server description
Syntax
Description
snmp-server Configure SNMP server
description Device server description
text Description string
Defaults The default description is the model name.
Permission Admin group
Usage
Guidelines
“text” parameter can be set as string separated by space.
Maximum string tokens are 5.
Maximum length of device server maintainer contact info is 40.
Examples
NPort S9650I-16-2HV(config)# snmp-server description MOXA nport device
NPort S9650I-16-2HV(config)# no snmp-server description
NPort 9000 Series CLI Commands
2-14
2.2.11 snmp-server contact
To set the system contact string, use the snmp-server contact global configuration command. To remove the
contact string, use the no form of this command.
Commands
snmp-server contact text
no snmp-server contact
Syntax
Description
snmp-server Configure SNMP server
contact Device server maintainer contact information
text Maintainer contact information
Defaults
N/A
Permission Admin group
Usage
Guidelines
“text” parameter can be set as string separated by space.
Maximum string tokens are 5.
Maximum length of maintainer contact info is 40.
Examples
NPort S9650I-16-2HV(config)# snmp-server contact james
NPort S9650I-16-2HV(config)# no snmp-server contact
2.2.12 snmp-server community
To set up the community access string to permit access to the Simple Network Management Protocol (SNMP),
use the snmp-server community global configuration command.
Commands
snmp-server community community_str
Syntax
Description
snmp-server Configure SNMP server
community SNMP community setting
community_str SNMP community string
Defaults overwrite-oldest
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# snmp-server community public
2.2.13 snmp-server version
To set up the snmp version, use the snmp-server version global configuration command.
Commands
snmp-server version [v1-v2c-v3 | v1-v2c | v3]
Syntax
Description
snmp-server Configure SNMP server
version SNMP version setting
v1-v2c-v3 Version 1, 2C and 3 support
v1-v2c Version 1 and 2C support
v3 Only version 3 support
Defaults Default version is v1-v2c
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# snmp-server version v1-v2c-v3
NPort 9000 Series CLI Commands
2-15
2.2.14 snmp-server read-write-user
To configure a read-write privileged user and its authentication type and password to a Simple Network
Management Protocol (SNMP), use the snmp-server read-write-user global configuration command.
Commands
snmp-server read-write-user username auth {no-auth|md5|sha} password
Syntax
Description
snmp-server Configure SNMP server
read-write-user SNMP read-write privileged user setting
username The name of the read-write privileged user
auth Specifies which authentication level should be used
auth-type no-auth | md5 | sha
password Password (maximum 30 characters)
Defaults N/A
Permission Admin group
Usage
Guidelines
Username: max 16 characters
Password: max 16 characters
Examples
NPort S9650I-16-2HV(config)# snmp-server read-write-user admin auth md5
moxacli
2.2.15 snmp-server read-only-user
To configure a read-write privileged user and its authentication type and password to a Simple Network
Management Protocol (SNMP), use the snmp-server read-only-user global configuration command.
Commands
snmp-server read-only-user username auth {no-auth|md5|sha} password
Syntax
Description
snmp-server Configure SNMP server
read-only-user SNMP read-write privileged user setting
username The name of the read-only privileged user
auth Specifies which authentication level should be used
auth-type no-auth | md5 | sha
password Password (maximum 30 characters)
Defaults
N/A
Permission Admin group
Usage
Guidelines
Username: max 16 characters
Password: max 16 characters
Examples
NPort S9650I-16-2HV(config)#snmp-server read-only-user user auth md5
moxacli
NPort 9000 Series CLI Commands
2-16
2.2.16 snmp-server host
To specify the recipient of a Simple Network Management Protocol (SNMP) notification operation, use the
snmp-server host global configuration command. To remove the specified host, use the no form of this
command
Commands
snmp-server host host-addr community-string
no snmp-server host [host-addr]
Syntax
Description
snmp-server Configure SNMP server
host SNMP host setting
host-addr SNMP host address
community-string SNMP Community string
Defaults N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# snmp-server host 192.168.127.254 moxacli
NPort S9650I-16-2HV(config)# no snmp-server host
2.2.17 snmp-server trap-mode
To enable all Simple Network Management Protocol (SNMP) notifications (traps or informs) available on your
system, use the snmp-server trap-mode global configuration command. To disable all available SNMP
notifications, use the no form of this command
Commands
snmp-server trap-mode trap
snmp-server trap-mode inform [retry times timeout seconds]
no snmp-server trap-mode
Syntax
Description
snmp-server Configure SNMP server
trap-mode SNMP Trap/Inform mode setting
trap SNMP Trap
inform SNMP Inform
retry Inform retries times
times 1 to 99
timeout Timeout timer
seconds 1 to 300 seconds
Defaults
The default mode is “trap”
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# snmp-server trap-mode trap
NPort S9650I-16-2HV(config)# snmp-server trap-mode inform retry 3 timeout
10
NPort 9000 Series CLI Commands
2-17
2.2.18 interface
Use the interface privileged command on the device server to select an interface to configure.
Commands
interface mgmt
interface trunk trunk_id_range
interface ethernet mod_port
interface serial ser_id
interface serial protocol { modbus | dnp3 }
Syntax
Description
interface Select an interface to configure
mgmt Configure management VLAN
trunk Configure trunk interface
trunk_id_range Trunk ID (or list)
ethernet IEEE 802.3/IEEE 802.3z
mod_port Port ID or list. Ex. 1/1,2,3,2/1-3,5,...
serial Serial port interface
ser_id Serial port index (1 to n)
protocol Configure serial interface protocols
modbus Configure Modbus protocol settings
dnp3 Configure DNP3 protocol settings
Defaults
N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# interface serial 1
NPort S9650I-16-2HV(config-serif)#
NPort S9650I-16-2HV(config)# interface ethernet 1/1
NPort S9650I-16-2HV(config-if)#
NPort S9650I-16-2HV(config)# interface mgmt
NPort S9650I-16-2HV(config-vlan)#
2.2.19 clock set
Use the clock set global configuration command on the device server to set the current device server time.
Commands
clock set hh:mm:ss month day year
Syntax
Description
clock Configure time-of-day clock
set Adjust the clock
hh:mm:ss hh:mm:ss
month
1 to 12
day 1 to 31
year 2000 to 2037
Defaults N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# clock set 11:11:11 1 1 2010
NPort 9000 Series CLI Commands
2-18
2.2.20 clock timezone
Use the clock timezone global configuration command on the device server to set the current time zone.
Commands
clock timezone gmt offset-hour offset_minutes
Syntax
Description
clock Configure time-of-day clock
timezone Time zone hour shifting
gmt Greenwich Mean Time
offset-hour -12 to 12
Half an hour Only type 30
Defaults
N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# clock timezone gmt 5 30
2.2.21 clock summer-time
Use the clock summer-time global configuration command on the device server to enable the daylight saving
time offset and set the apply duration. Use the no form of this command to disable it.
Commands
clock summer-time start-date month week day hour
clock summer-time end-date month week day hour
clock summer-time offset offset-hour
Syntax
Description
clock Configure time-of-day clock
summer-time Configure Summer time parameter
start-date The date when summer time offset start
end-date The date when summer time offset end
month From ‘Jan’, ‘January’ or ‘1’ to ‘Dec’, ‘December’, or ‘12’
week From ‘1st’ or ‘1’ to ‘Last’ or ‘6’
day From ‘Sun’, ‘Sunday’ or ‘1’ to ‘Sat’, ‘Saturday’ or ‘7’
hour
0 to 23
offset Summer time offset
offset-hour 1 to 12
Defaults N/A
Permission Admin group
Usage
Guidelines
When configuring the summer time offset, the start-date and end-date must be configured
correctly first.
Examples
NPort S9650I-16-2HV(config)# clock summer-time start-date Jan 1 Saturday
12
NPort S9650I-16-2HV(config)# clock summer-time end-date Feb 1 Sun 13
NPort 9000 Series CLI Commands
2-19
2.2.22 ntp remote-server
Use the ntp remote-server global configuration command on the device server to configure the remote NTP
server. Use the no form of this command to return to the default.
Commands
ntp remote-server server-addr-1 [server-addr-2]
no ntp remote-server
Syntax
Description
ntp Configure Network Time Protocol
remote-server Configure NTP server for time query
server-addr-1 IP address or DNS name
server-addr-2
IP address or DNS name
Defaults The default configuration contains one time server “time.nist.gov”
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# ntp remote-server 192.168.127.1
time.stdtime.gov.tw
2.2.23 ntp refresh-time
Use the ntp refresh-time global configuration command on the device server to configure the interval of each
NTP query. Use the no form of this command to return to the default.
Commands
ntp refresh-time seconds
no ntp refresh-time
Syntax
Description
ntp Configure Network Time Protocol
refresh-time Configure NTP query intervals
seconds 1-9999 seconds
Defaults Default query interval is 600 sec
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# ntp refresh-time 600
2.2.24 ntp server
Use the ntp server global configuration command on the device server to enable the device server as an NTP
server. Use the no form of this command to return to disable it.
Commands
ntp server
no ntp server
Syntax
Description
ntp Configure Network Time Protocol
server Enable NTP server
Defaults Default is disabled
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# ntp server
NPort 9000 Series CLI Commands
2-20
2.2.25 irig-b
Use the irig-b privileged command on the device server to configure the global irig-b settings and serial
interface irig-b settings.
Commands
irig-b output { off|pwm|pps }
Syntax
Description
irig-b Configure irig-b for system irig-b output.
off Set the irig-b to off.
pwm Set the irig-b to pwm.
pps Set the irig-b to pps.
Defaults The default is off
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# irig-b pwm
NPort S9650I-16-2HV(config)# interface serial 1
NPort S9650I-16-2HV(config-serif)# irig-b pps
2.2.26 time-source
Use the time-source privileged command on the device server to configure time source.
Commands
time-source { local|ntp|irig-b|ptp }
Syntax
Description
time-source Configure the time source of the device server.
local Time source from local.
ntp
Time source from ntp.
irig-b Time source from irig-b.
ptp Time source from ptp.
Defaults The default is local
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# time-source ntp
2.2.27 logging
Use the logging global configuration command on the device server to configure the remote SYSLOG server.
Use the no form of this command to remove the server.
Commands
logging ip-address
no logging ip-address
Syntax
Description
logging
Syslog server setting
ip-address IP or DNS name w/wo. port, Ex:1.2.3.4 or 1.2.3.4:5678
Defaults N/A
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# logging 192.168.1.1
NPort 9000 Series CLI Commands
2-21
2.2.28 line-swap-fast-recover
Use the line-swap-fast-recovery global configuration command on the device server to enable the fast
recovery feature of the MAC address table when line swapping. Use the no form of this command to disable it.
Commands
line-swap-fast-recovery
no line-swap-fast-recovery
Syntax
Description
line-swap-fast-re
covery
Enable Line Swap Fast Recoverty feature
Defaults This feature is enabled by default.
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# line-swap-fast-recovery
2.2.29 ip auto-logout
Use ip auto-logout global configuration commands on the device server to configure the auto-logout for the
consoles with specified minutes.
Commands
ip auto-logout minutes
Syntax
Description
ip Global IP configuration subcommands
auto-logout Auto-logout timer
minutes 1 to 1440 minutes
Defaults Auto-logout is 5 minutes by default.
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# ip auto-logout 120
2.2.30 ip http-server
Use ip http-server global configuration commands on the device server to enable HTTP/HTTPs service. Use
the no form of this command to disable HTTP/HTTPS service.
Commands
ip http-server
ip http-server secure
no ip http-server
no ip http-server secure
Syntax
Description
ip Global IP configuration subcommands
http-server Enable
secure Enable HTTP/HTTPS web service
Defaults HTTP/HTTPS service is enabled.
Permission Admin group
Usage
Guidelines
N/A
Examples
NPort S9650I-16-2HV(config)# ip http-server
NPort S9650I-16-2HV(config)# ip http-server secure
NPort S9650I-16-2HV(config)# no ip http-server
Loading...