ProCurve 420 Technické informace

hp procurvewireless access point 420management andconfiguration guidewww.hp.com/go/hpprocurve

management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-13 username-admin . . . . . . . . . . .

General System Configuration Configuring SNMP Figure 5-6. Configuring SNMPv3 Users CLI: Configuring SNMP v3 Users CLI Commands Used in This Section C

General System Configuration Configuring SNMP Using the CLI to Set an Engine ID. A new engine ID can be specified by entering 5 to 32 hexadecimal cha

General System Configuration Configuring SNMP • UDP Port – The UDP port that is used on the receiving management station for trap messages. • SNMP U

General System Configuration Configuring SNMP Figure 5-7. Creating SNMP v3 Trap Targets and Filters To Create SNMP Trap Targets: 1. Select the Confi

General System Configuration Configuring SNMP 8. Click the [Apply Changes] button to return to the SNMP Trap window where the new target ID appears i

General System Configuration Configuring SNMP Figure 5-9. Creating SNMP Trap Filters 4. In the SNMP Notification New Filter window, type a name for

General System Configuration Configuring SNMP Figure 5-10. Adding SNMP Trap Filter Objects CLI: Configuring SNMP v3 Trap Targets and Filters CLI Comm

General System Configuration Configuring SNMP The following example creates a filter ID “trapfilter” that sends only dot11StationAssociation and dot11

General System Configuration Configuring SNMP • • • • • • • • • • • • • • • sysSystemUp – The access point is up and running. (Object ID: 1.3.6.1.4.1

General System Configuration Configuring SNMP • localMacAddrAuthFail – A client station has failed authentication with the local MAC address database

sntp-server daylight-saving . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-36 sntp-server timezone . . . . . . . . . . . . .

General System Configuration Configuring SNMP • vlanEnableStatusSet – VLAN support on the access point has been enabled or disabled. (Object ID: 1.3.

General System Configuration Configuring SNMP 4. Under Trap Configuration, check or clear the required traps, or use the [Enable All Traps] or [Disab

General System Configuration Configuring SNMP To send SNMP v1 and v2c traps to a management station, specify the host IP address using the snmp-server

General System Configuration Configuring SNMP dot1xSupplicantAuthenticated Enabled wirelessExternalAntenna Enabled possibleRogueApDetected

General System Configuration Enabling System Logging Enabling System Logging The access point supports a logging process that can control error messag

General System Configuration Enabling System Logging Web: Setting Logging Parameters The System Servers window on the Administration tab enables syste

General System Configuration Enabling System Logging Figure 5-12. Setting Logging Parameters CLI: Setting Logging Parameters CLI Commands Used in Thi

General System Configuration Enabling System Logging The following example shows how to enable logging, set the minimum severity level of messages to

General System Configuration Enabling System Logging To display logging messages stored in access point memory, use the show event-log command, as sho

General System Configuration Configuring SNTP Configuring SNTP Simple Network Time Protocol (SNTP) allows the access point to set its internal clock b

RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-67 radius-accounting-server enable . . .

General System Configuration Configuring SNTP Enable Daylight Saving: The access point provides a way to automati-cally adjust the system clock for

General System Configuration Configuring SNTP Figure 5-13. Setting SNTP Parameters CLI: Setting SNTP Parameters CLI Commands Used in This Section Com

General System Configuration Configuring SNTP The following example shows how to enable SNTP, configure primary and secondary time server IP addresses

General System Configuration Configuring Ethernet Interface Parameters Configuring Ethernet Interface Parameters The access point’s Ethernet interface

General System Configuration Configuring Ethernet Interface Parameters Figure 5-14. Setting Ethernet Interface Parameters CLI: Setting Ethernet Inter

General System Configuration Configuring Ethernet Interface Parameters To display the current Ethernet interface status from the Exec level, use the s

General System Configuration Configuring RADIUS Accounting Configuring RADIUS Accounting Remote Authentication Dial-in User Service (RADIUS) Accountin

General System Configuration Configuring RADIUS Accounting RADIUS Accounting Attribute Description Acct-Terminate-Cause Specifies how the session wa

General System Configuration Configuring RADIUS Accounting Secondary Server Setup: Configure a secondary RADIUS Accounting server to provide a back

General System Configuration Configuring RADIUS Accounting Figure 5-15. The Accounting Servers Window CLI: Setting RADIUS Accounting Server Parameter

Wireless Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-93 interface wireless g . . . . . . . . . . . .

General System Configuration Configuring RADIUS Accounting Command Syntax CLI Reference Page radius-accounting-server [secondary] retransmit page 8-

General System Configuration Configuring RADIUS Accounting To display the current RADIUS server settings from the Exec level, use the show radius comm

General System Configuration Setting up Filter Control Setting up Filter Control The access point can employ network traffic frame filtering to contro

General System Configuration Setting up Filter Control • Enable: Access point filters Ethernet protocol types based on the configuration of protocol

General System Configuration Setting up Filter Control Figure 5-16. The Filter Control Window CLI: Setting Traffic Filters CLI Commands Used in This

-----------------------------------------------------------General System Configuration Setting up Filter Control The following example shows how to e

General System Configuration Configuring VLAN Support Configuring VLAN Support A VLAN is a group of network nodes that can be located anywhere in the

General System Configuration Configuring VLAN Support which can be the management VLAN or the default VLAN of any configured SSID interface. Traffic p

General System Configuration Configuring VLAN Support Management VLAN Tagging: Specifies if the management VLAN is a tagged or untagged VLAN. • Ta

General System Configuration Configuring VLAN Support CLI: Enabling VLAN Support CLI Commands Used in This Section Command Syntax CLI Reference Page

Neighbor AP Detection Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-124 ap-detection . . . . . . . . . . . . . . . . . . .

General System Configuration Configuring VLAN Support The following example shows how to display the current VLAN status for the access point. HP420#s

6 Wireless Interface Configuration Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Wireless Interface Configuration Overview Overview The Access Point 420 supports up to eight Service Set IDentifier (SSID) interfaces per physical rad

Wireless Interface Configuration Setting the Country Code Setting the Country Code The correct country code must be set for the country in which you

Wireless Interface Configuration Setting the Country Code HP420#country ? WORD Country code: AL-ALBANIA, DZ-ALGERIA, AR-ARGENTINA, AM-ARMENIA, A

Wireless Interface Configuration Setting the Country Code To display the access point’s current country code setting, use the show system command from

Wireless Interface Configuration Setting the Radio Working Mode Setting the Radio Working Mode The access point can operate in three standard modes, I

Wireless Interface Configuration Setting the Radio Working Mode Web: Setting the Radio Working Mode The Port/Radio Settings window on the Configuratio

Wireless Interface Configuration Setting the Radio Working Mode Figure 6-1. Setting the Radio Working Mode CLI: Setting the Radio Working Mode CLI Co

Wireless Interface Configuration Setting the Radio Working Mode To display the current radio mode setting from the Exec level, use the show interface

1 Getting Started Contents Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2 Co

Wireless Interface Configuration Configuring Radio Settings Configuring Radio Settings The access point’s radio channel settings are limited by local

Wireless Interface Configuration Configuring Radio Settings Multicast Data Rate: The maximum data rate at which the access point transmits multicas

Wireless Interface Configuration Configuring Radio Settings access point. Individual SSID interfaces do not have a limit. Therefore, if one interface

Wireless Interface Configuration Configuring Radio Settings Figure 6-2. Configuring Radio Settings CLI: Configuring Radio Settings CLI Commands Used

Wireless Interface Configuration Configuring Radio Settings Command Syntax CLI Reference Page rts-threshold <threshold> page 8-105 slot-time [

Wireless Interface Configuration Configuring Radio Settings To display the current radio settings from the Exec level, use the show interface wireless

Wireless Interface Configuration Modifying Antenna Settings Modifying Antenna Settings When using an external antenna with the access point, you must

Wireless Interface Configuration Modifying Antenna Settings External Antenna 802.11g Transmit Power Control (TPC) Settings (%) FCC/IC EU/ETSI Japan

Wireless Interface Configuration Modifying Antenna Settings Web: Setting the Antenna Mode and Transmit Power Control Limits The Port/Radio Settings wi

Wireless Interface Configuration Modifying Antenna Settings Figure 6-3. Antenna Mode and Port/Radio Settings Window CLI: Setting the Antenna Mode and

Getting Started Introduction Introduction This Management and Configuration Guide is intended to support the following access points: HP ProCurve W

Wireless Interface Configuration Modifying Antenna Settings Using the CLI to Set the Transmit Power Control Limits. The follow-ing example shows how

Wireless Interface Configuration Modifying Antenna Settings You can use the show command to display the current radio settings from the wireless inter

Wireless Interface Configuration Managing Multiple SSID Interfaces Managing Multiple SSID Interfaces A Service Set IDentifier (SSID) is a recognizable

Wireless Interface Configuration Managing Multiple SSID Interfaces Add: Creates a new SSID interface and sets these parameters: • Index: Specifies

Wireless Interface Configuration Managing Multiple SSID Interfaces 4. Enter a unique name for the SSID interface. 5. Add a description for the SSID

Wireless Interface Configuration Managing Multiple SSID Interfaces The following example shows how to create an SSID interface, add a descrip-tion, an

Wireless Interface Configuration Managing Multiple SSID Interfaces Closed System: Prevents the access point does from including the primary interfa

Wireless Interface Configuration Managing Multiple SSID Interfaces CLI: Modifying SSID Interface Settings CLI Commands Used in This Section Command Sy

Wireless Interface Configuration Managing Multiple SSID Interfaces ----------------Security------------------------------------------------- Closed Sy

7 Wireless Security Configuration Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Getting Started Conventions Italics indicate variables for which you must supply a value when executing the command. For example, in this command s

Wireless Security Configuration Overview Overview This Chapter describes how to: Configure wireless security using the Security Wizard Configure

Wireless Security Configuration Wireless Security Overview Wireless Security Overview The access point is configured by default as an “open system,” w

Wireless Security Configuration Wireless Security Overview network by requiring an 802.1X client application to submit user credentials for authentica

Wireless Security Configuration Wireless Security Overview starts with a master (temporal) key for each user session and then mathematically generates

Wireless Security Configuration Wireless Security Overview WPA2 Mixed-Mode: WPA2 defines a transitional mode of operation for networks moving from

Wireless Security Configuration Wireless Security Overview Security Mechanism Client Support Implementation Considerations MAC Address Filtering Us

Wireless Security Configuration Wireless Security Overview Table 7-1. Summary of Wireless Security Configuration Configuring Encryption in the HP Pro

Wireless Security Configuration Wireless Security Overview Configuring Encryption in the HP ProCurve Wireless Access Point 420 Encryption Methods and

Wireless Security Configuration Wireless Security Overview Table 7-2. Summary of MAC Authentication Configuration Configuring MAC Authentication in t

Wireless Security Configuration Using the Security Wizard Using the Security Wizard The Security Suite window is available from the Wireless Interface

Getting Started Related Publications Related Publications Installation and Getting Started Guide. Use the Installation and Get-ting Started Guide shi

Wireless Security Configuration Using the Security Wizard No t e WEP has been found to be seriously flawed and cannot be recommended for a high level

Wireless Security Configuration Using the Security Wizard 6. WPA (AES-802.1x): Use WPA with 802.1X for user authentication and to dynamically distr

Wireless Security Configuration Using the Security Wizard – WPA2: Clients using WPA2 only are supported. – WPA-WPA2: Clients using WPA or WPA2 are s

Wireless Security Configuration Using the Security Wizard • Cipher: Indicates the encryption method used for multicast (and broadcast) and unicast tr

Wireless Security Configuration Using the Security Wizard To Configure Static WEP Shared Keys: No t e The four WEP keys are common to all SSID inter

Wireless Security Configuration Using the Security Wizard 1. From the Wireless Interfaces SSID Configuration window, click the [Security Suite] butto

Wireless Security Configuration Using the Security Wizard Figure 7-1. Security Suite Window 7-18

Wireless Security Configuration Using the Security Wizard Figure 7-2. The Advanced Settings Window CLI: Configuring Security Settings CLI Commands Us

Wireless Security Configuration Using the Security Wizard Command Syntax CLI Reference Page 802.1x session-key-refresh-rate <rate> page 8-73 8

Wireless Security Configuration Using the Security Wizard Using the CLI to Configure Static WEP Shared Keys. The following example shows how to confi

Getting Started Getting Documentation From the Web Getting Documentation From the Web 1. Go to the HP ProCurve website at http://www.hp.com/go/hpproc

Wireless Security Configuration Using the Security Wizard The following example shows how to configure access point security for WPA-PSK mode. Support

5 5 Wireless Security Configuration Using the Security Wizard Using the CLI to Configure WPA with 802.1X. To configure the access point to support on

Wireless Security Configuration Using the Security Wizard Using the CLI to Configure Mixed Mode Static WEP Keys and WPA-PSK. The following example sh

Wireless Security Configuration Configuring RADIUS Client Authentication Configuring RADIUS Client Authentication Remote Authentication Dial-in User S

Wireless Security Configuration Configuring RADIUS Client Authentication When setting up VLAN IDs for each user on the RADIUS server, be sure to use t

Wireless Security Configuration Configuring RADIUS Client Authentication • Retransmit Attempts: The number of times the access point tries to resend

Wireless Security Configuration Configuring RADIUS Client Authentication Figure 7-3. The Authentication Servers Window CLI: Setting RADIUS Server Par

Wireless Security Configuration Configuring RADIUS Client Authentication Command Syntax CLI Reference Page radius-authentication-server mac-format &l

Wireless Security Configuration Configuring RADIUS Client Authentication To display the current RADIUS server settings from the Exec level, use the sh

Wireless Security Configuration Configuring MAC Address Authentication Configuring MAC Address Authentication The access point can be configured to au

Getting Started Sources for More Information Sources for More Information If you need information on specific features in the HP Web Browser Interf

Wireless Security Configuration Configuring MAC Address Authentication If you choose to configure RADIUS MAC authentication and 802.1X together, the R

Wireless Security Configuration Configuring MAC Address Authentication • MAC Address: Adds the specified MAC addresses into the local MAC database. E

Wireless Security Configuration Configuring MAC Address Authentication Figure 7-4. Local MAC Authentication CLI: Configuring MAC Address Authenticati

Wireless Security Configuration Configuring MAC Address Authentication Configuring Local MAC Authentication. The following example shows how to confi

---------------------Wireless Security Configuration Configuring MAC Address Authentication Displaying MAC Authentication Settings. The following exa

Wireless Security Configuration Configuring MAC Address Authentication Active MAC Address Filter List in each SSID Index MAC Address 12345678 =====

Wireless Security Configuration Configuring MAC Address Authentication — This page is intentionally unused. — 7-38

8 Command Line Reference Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Command Line Reference Overview Overview This chapter describes the commands provided by the CLI. The CLI commands can be broken down into the functio

Command Line Reference Overview The access mode shown in the following tables is indicated by these abbrevi-ations: GC (Global Configuration), IC-E (E

Getting Started Need Only a Quick Start? Quickly assigning an IP address, subnet mask, and gateway, set a Manager password, and (optionally) config

Command Line Reference General Commands General Commands Command Function Mode Page configure Activates global configuration mode Exec 8-4 end

Command Line Reference General Commands end This command returns to the previous configuration mode. Default Setting None Command Mode Global Configur

Command Line Reference General Commands ping This command sends ICMP echo request packets to another node on the network. Syntax ping <host_name |

Command Line Reference General Commands reset This command restarts the system or restores the factory default settings. Syntax reset <board | conf

Command Line Reference General Commands Example In this example, the show history command lists the contents of the command history buffer: HP420#show

Command Line Reference System Management Commands System Management Commands These commands are used to configure the user name, password, system logs

Command Line Reference System Management Commands Command Function Mode Page Web Server http port Specifies the port to be used by the Web browser

Command Line Reference System Management Commands Table 8-1. Access Point Country Codes Country Code Country Code Country Code Country Code Al

Command Line Reference System Management Commands Command Mode Exec Command Usage • The access point’s Country Code must be set before the radio can

Command Line Reference System Management Commands Command Mode Global Configuration Example HP420(config)#prompt RD2 RD2(config)# system name This com

— This page is intentionally unused. —

Command Line Reference System Management Commands Example HP420#configure HP420(config)#management HP420(config-mgmt)# username-admin This command con

Command Line Reference System Management Commands Command Mode Management Configuration Example HP420(config-mgmt)#password-admin hp420ap HP420(config

Command Line Reference System Management Commands Example HP420(config-mgmt)#user add web operator david davepass HP420(config-mgmt)# user del This co

Command Line Reference System Management Commands Example HP420(config-mgmt)#user pwd david davenewpwd HP420(config-mgmt)# cli serial This command con

Command Line Reference System Management Commands Default Setting Status: Enabled Maximum Sessions: 4 Command Mode Management Configuration Example HP

Command Line Reference System Management Commands Example HP420(config-mgmt)#ssh enable HP420(config-mgmt)# ssh port This command sets the Secure Shel

Command Line Reference System Management Commands Command Mode Management Configuration Command Usage • Use the snmpv3 only command to disable access

---------- ---------- -------- --------- -------------Command Line Reference System Management Commands Example HP420(config-mgmt)#reset-button enable

Command Line Reference System Management Commands Command Usage To avoid using common reserved TCP port numbers below 1024, the configurable range is

Command Line Reference System Management Commands https port Use this command to specify the TCP port number used for HTTPS/SSL connection to the acce

2 Selecting a Management Interface Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Command Line Reference System Management Commands Default Setting Enabled Command Mode Management Configuration Command Usage • Both the HTTP and HTT

Command Line Reference System Management Commands Command Usage • When enabled, the access point identifies voice traffic by the Spec-traLink Radio P

Command Line Reference System Management Commands Example HP420#show system System Information =======================================================

Command Line Reference System Management Commands Example HP420#show version Software Version : v2.1.0.0B12 Boot Rom Version : v3.0.6 Hardware ver

Command Line Reference System Logging Commands System Logging Commands These commands are used to configure system logging on the access point. Comman

Command Line Reference System Logging Commands Example HP420(config)#logging on HP420(config)# logging host This command specifies Syslog server hosts

Command Line Reference System Logging Commands Default Setting Disabled Command Mode Global Configuration Example HP420(config)#logging console HP420(

Command Line Reference System Logging Commands Example HP420(config)#logging level alert HP420(config)# logging facility-type This command sets the fa

Command Line Reference System Logging Commands Example HP420(config)#logging clear HP420(config)# show event-log This command displays log messages st

Command Line Reference System Logging Commands Example HP420#show logging Logging Information ============================================ Syslog Stat

Selecting a Management Interface Overview Overview This chapter describes the following: Access Point management interfaces Advantages of using

Command Line Reference System Clock Commands System Clock Commands These commands are used to configure SNTP and system clock settings on the access p

Command Line Reference System Clock Commands Command Usage When SNTP client mode is enabled using the sntp-server enable command, the sntp-server ip c

Command Line Reference System Clock Commands Related Commands sntp-server ip (page 8-34) show sntp (page 8-38) sntp-server date-time This command sets

Command Line Reference System Clock Commands Command Mode Global Configuration Command Usage The command sets the system clock back one hour during th

Command Line Reference System Clock Commands Example HP420(config)#sntp-server timezone +8 HP420(config)# show sntp This command displays the current

Command Line Reference SNMP Commands SNMP Commands The access point includes an agent that supports Simple Network Manage-ment Protocol (SNMP) version

Command Line Reference SNMP Commands snmp-server community This command defines the community access string for the Simple Network Management Protocol

Command Line Reference SNMP Commands snmp-server contact This command sets the system contact string. Use the no form to remove the system contact inf

Command Line Reference SNMP Commands Command Usage • This command enables both authentication failure notifications and link up-down notifications. •

Command Line Reference SNMP Commands Command Usage The snmp-server host command is used in conjunction with the snmp-server enable server command to e

Selecting a Management Interface Advantages of Using the CLI Advantages of Using the CLI HP420# Exec Level HP420(config)# Global Configuration Level H

Command Line Reference SNMP Commands – hpdot11StationRequestFail - A client station has failed associa-tion, re-association, or authentication. – do

Command Line Reference SNMP Commands – sysRadiusServerChanged - The access point has changed from the primary RADIUS server to the secondary, or from

Command Line Reference SNMP Commands snmp-server location This command sets the system location string. Use the no form to remove the location string.

Command Line Reference SNMP Commands Command Usage • This command is used in conjuction with the snmpv3 user command. • Entering this command invali

Command Line Reference SNMP Commands • The access point enables SNMP v3 users to be assigned to three pre-defined groups. Other groups cannot be defi

Command Line Reference SNMP Commands Example HP420(config)#snmpv3 user User Name<1-32> :chris Group Name<1-32> :RWPriv Authtype

Command Line Reference SNMP Commands • The SNMP v3 user name that is specfied in the target must first be configured using the snmpv3 user command. E

Command Line Reference SNMP Commands Example This example creates a filter "trapfilter" that will send only the hpdot11StationAssociation tr

------------------------------------------------------------------------------------------------------------------------------------------------------

Command Line Reference SNMP Commands show snmp-server This command displays the SNMP configuration settings. Command Mode Exec Example HP420#show snmp

Selecting a Management Interface Advantages of Using the HP Web Browser Interface Advantages of Using the HP Web Browser Interface Figure 2-2. Exampl

Command Line Reference Flash/File Commands ssidPrimarySet Enabled apScanEnableStatusSet Enabled adHocDetected Enabled hpdo

Command Line Reference Flash/File Commands Command Mode Exec Command Usage Use the dir command to see the eligible file names. Example HP420#bootfile

Command Line Reference Flash/File Commands Command Usage • The system prompts for data required to complete the copy command. • Only a configuration

Command Line Reference Flash/File Commands delete This command deletes a software or configuration file. Syntax delete <filename> filename - Nam

---- -------------------------- ----------------Command Line Reference Flash/File Commands Command Usage File information is shown below: Column He

Command Line Reference Flash/File Commands Example HP420#show bootfile Bootfile Information =================================== Bootfile : hp420-2100B

Command Line Reference Flash/File Commands [management] cli-prompt=hp420 vlan-enable=false management-vlan-id=1 management-vlan-tagging=false iapp-ena

Command Line Reference RADIUS Authentication RADIUS Authentication Remote Authentication Dial-in User Service (RADIUS) is a logon authentica-tion prot

Command Line Reference RADIUS Authentication Default Setting None Command Mode SSID Wireless Interface Configuration Example HP420(if-wireless-g-ssid-

Command Line Reference RADIUS Authentication • key_string - Encryption key used to authenticate logon access for client. Do not use blank spaces in t

3 Using the Command Line Interface (CLI) Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Command Line Reference RADIUS Authentication radius-authentication-server timeout This command sets the interval between transmitting authentication r

Command Line Reference RADIUS Authentication Example HP420(if-wireless-g-ssid-1)#radius-authentication-server mac-format multi-colon HP420(if-wireles

Command Line Reference RADIUS Authentication Example HP420#show radius 11g Radius Authentication Server Information ==================================

Command Line Reference RADIUS Accounting RADIUS Accounting The access point provides configuration for RADIUS Accounting servers that can receive user

Command Line Reference RADIUS Accounting Command Mode Global Configuration Example HP420(config)#radius-accounting-server enable HP420(config)# radius

Command Line Reference RADIUS Accounting • secondary - Secondary server. • port_number - RADIUS server UDP port used for authentication messages. (R

Command Line Reference RADIUS Accounting Syntax radius-accounting-server [secondary] retransmit <number_of_retries> • secondary - Secondary ser

Command Line Reference RADIUS Accounting radius-accounting-server timeout-interim This command sets the interval between transmitting accounting updat

Command Line Reference 802.1X Authentication 802.1X Authentication The access point supports IEEE 802.1X (802.1X) access control for wireless clients.

Command Line Reference 802.1X Authentication Command Mode SSID Wireless Interface Configuration Command Usage • The access point uses EAPOL (Extensib

Using the Command Line Interface (CLI) Overview Overview The CLI is a text-based command interface for configuring and monitoring the access point. Th

Command Line Reference 802.1X Authentication Example HP420(if-wireless-g-ssid-1)#802.1x session-key-refresh-rate 5 HP420(if-wireless-g-ssid-1)# 802.1

Command Line Reference 802.1X Authentication Default None Command Mode Global Configuration Command Usage The access point currently only supports EAP

Command Line Reference 802.1X Authentication show authentication This command shows all MAC address and 802.1X authentication settings, as well as the

---------------Command Line Reference 802.1X Authentication MAC filter default permision for each SSID(A: Allow, D: Disallow) 1 2 3 4 5 6 7 8 A A A A

Command Line Reference MAC Address Authentication MAC Address Authentication Use these commands to define MAC authentication on the access point. For

Command Line Reference MAC Address Authentication Example HP420(if-wireless-g-ssid-1)#mac-access permission denied HP420(if-wireless-g-ssid-1)# Relate

Command Line Reference MAC Address Authentication Related Commands mac-access permission (page 8-78) show authentication (page 8-76) mac-authenticatio

Command Line Reference MAC Address Authentication mac-authentication session-timeout This command sets the interval at which associated clients will b

Command Line Reference Filtering Commands Filtering Commands The commands described in this section are used to filter communications between wireless

Command Line Reference Filtering Commands Example HP420(config)#filter local-bridge HP420(config)# filter ap-manage This command prevents wireless cli

Using the Command Line Interface (CLI) Accessing the CLI Telnet Access To access the console through a Telnet session, first make sure the access poin

Command Usage This command is used in conjunction with the filter ethernet-type protocol command to determine which Ethernet protocol types are to be

---------------------------------------------------------Command Line Reference Filtering Commands Default None Command Mode Global Configuration Comm

Command Line Reference Ethernet Interface Commands Ethernet Interface Commands The commands described in this section configure connection parameters

Command Line Reference Ethernet Interface Commands dns server This command specifies the address for the primary or secondary domain name server to be

Command Line Reference Ethernet Interface Commands ip address This command sets the IP address for the (10/100Base-TX) Ethernet interface. Use the no

Command Line Reference Ethernet Interface Commands ip dhcp This command enables the DHCP client for the access point. Use the no form to disable the D

Command Line Reference Ethernet Interface Commands shutdown This command disables the Ethernet interface. To restart a disabled interface, use the no

Command Line Reference Ethernet Interface Commands Default Setting Auto-negotiation Command Mode Interface Configuration (Ethernet) Command Usage If a

Command Line Reference Ethernet Interface Commands Example HP420#show interface ethernet Ethernet Interface Information ==============================

Command Line Reference Wireless Interface Commands Wireless Interface Commands The commands described in this section configure global parameters for

HP ProCurve Wireless Access Point 420 May 2005 Management and Configuration Guide

Using the Command Line Interface (CLI) Using the CLI Using the CLI The CLI commands are organized into the following levels: 1. Exec 2. Global Confi

Command Line Reference Wireless Interface Commands Command Function Mode Page preamble Sets the length of the signal preamble at the IC-W 8-107

Command Line Reference Wireless Interface Commands ssid add This command adds an Service Set Identifier (SSID) interface. Syntax ssid add <ssid-ind

Command Line Reference Wireless Interface Commands ssid This command enters SSID interface configuration mode for configuring parameters for an SSID

Command Line Reference Wireless Interface Commands Default Setting Enterprise Wireless AP Command Mode SSID Wireless Interface Configuration Command U

Command Line Reference Wireless Interface Commands string - Comment or a description for this interface. (Range: 1-80 characters) Default Setting Ente

Command Line Reference Wireless Interface Commands radio-mode This command sets the working mode for the wireless interface. Syntax radio-mode <b |

Command Line Reference Wireless Interface Commands Default Setting Diversity Command Mode Interface Configuration (Wireless) Example HP420(if-wireless

Command Line Reference Wireless Interface Commands multicast-data-rate This command configures the maximum data rate at which the access point transmi

Command Line Reference Wireless Interface Commands Interface Configuration (Wireless) Command Usage • The available channel settings are limited by l

Command Line Reference Wireless Interface Commands dtim-period This command configures the rate at which stations in sleep mode must wake up to receiv

Using the Command Line Interface (CLI) Using the CLI When you log onto the access point CLI, you will be prompted to enter an account user name and pa

Command Line Reference Wireless Interface Commands fragmentation-length This command configures the minimum packet size that can be fragmented when pa

Command Line Reference Wireless Interface Commands rts-threshold This command sets the packet size threshold at which a Request to Send (RTS) signal m

Command Line Reference Wireless Interface Commands slot-time This command sets the basic unit of time the access point uses for calculating waiting ti

Command Line Reference Wireless Interface Commands preamble This command sets the length of the signal preamble that is used at the start of a data tr

Command Line Reference Wireless Interface Commands middle - The percentage of full power allowed for middle radio chan-nels. (Options: 100, 90, 80, 70

Command Line Reference Wireless Interface Commands Command Usage • The min keyword indicates minimum power. • The longer the transmission distance, t

Command Line Reference Wireless Interface Commands shutdown This command disables the radio interface. Use the no form to enable the interface. Syntax

Command Line Reference Wireless Interface Commands show interface wireless g This command displays the status for the wireless interface. Command Mode

Command Line Reference Wireless Interface Commands show ssid This command displays the status for an SSID interface. Syntax show ssid <index ssid-i

Command Line Reference Wireless Interface Commands ----------------Radius Authentication Server----------------------------- Radius Primary Server Inf

Using the Command Line Interface (CLI) Using the CLI Command Level Operation Manager Privileges 1. Exec Level 2. Global Configuration Level 3. Context

Command Line Reference Wireless Interface Commands show station This command shows the wireless clients associated with the access point. The "St

Command Line Reference Wireless Security Commands Wireless Security Commands The commands described in this section configure parameters for wireless

Command Line Reference Wireless Security Commands – For 152-bit keys, use 16 alphanumeric characters or 32 hexa-decimal digits. Default Setting No WE

Command Line Reference Wireless Security Commands security-suite This command defines the mechanisms employed by the access point for wireless securit

Command Line Reference Wireless Security Commands • 802.1x-required - 802.1X is always used for authentication. The access point uses WPA and/or dyna

Command Line Reference Wireless Security Commands • WPA enables the access point to support different unicast encryption keys for each client. Howeve

Command Line Reference Wireless Security Commands wpa-preshared-key This command defines a Wi-Fi Protected Access (WPA) pre-shared key. Syntax wpa-pre

Command Line Reference Wireless Security Commands pre-authentication enable This command enables WPA2 preauthentication for fast secure roaming. Use t

Command Line Reference Wireless Security Commands pmksa-lifetime This command sets the time for aging out cached WPA2 Pairwise Master Key Security Ass

Command Line Reference Wireless Security Commands show wep-key This command displays the cuurent WEP key index settings. Command Mode Interface Config

Using the Command Line Interface (CLI) Using the CLI Context Configuration level: Enables you to make configuration changes in a specific context,

Command Line Reference Neighbor AP Detection Commands Neighbor AP Detection Commands The access point can be configured to periodically scan all radio

Command Line Reference Neighbor AP Detection Commands Command Mode Interface Configuration (Wireless) Command Usage • First set the scan duration and

Command Line Reference Neighbor AP Detection Commands • A long scan duration time will detect more access points in the area, but causes more disrupt

Command Line Reference Neighbor AP Detection Commands Command Mode Interface Configuration (Wireless) Example HP420(if-wireless g)#ap-detection first-

Command Line Reference Neighbor AP Detection Commands Example HP420#show ap-detection config 802.11g Channel : Rogue AP Setting ======================

Command Line Reference IAPP Command IAPP Command The command described in this section enables the protocol signaling required to ensure the successfu

Command Line Reference VLAN Commands VLAN Commands The access point can enable the support of VLAN-tagged traffic passing between wireless clients and

Command Line Reference VLAN Commands • static - Clients are assigned to the default VLAN ID of the associated SSID interface. VLAN assignment from a

Command Line Reference VLAN Commands Command Usage • The management VLAN is for managing the access point through remote management tools, such as th

Command Line Reference VLAN Commands server. If a user does not have a configured VLAN ID, the access point assigns the user to the default VLAN ID (a

Using the Command Line Interface (CLI) Using the CLI How To Move Between Levels Change in Levels Example of Prompt, Command, and Result Exec level to

Command Line Reference VLAN Commands — This page is intentionally unused. — 8-134

A File Transfers Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-2 Do

File Transfers Overview Overview You can download new access point software and upload or download con-figuration files. These features are useful for

File Transfers Downloading Access Point Software Downloading Access Point Software HP periodically provides access point software updates through the

File Transfers Downloading Access Point Software Using TFTP or FTP To Download Software from a Server This procedure assumes that: A software file

File Transfers Downloading Access Point Software • File Type: Specifies the the file type to upload or download: – Application: A software code file

File Transfers Downloading Access Point Software Figure A-1. Remote Software Upgrade CLI: TFTP/FTP Software Download to the Access Point CLI Commands

---- -------------------------- ----------------File Transfers Downloading Access Point Software The following example shows how to download new so

File Transfers Downloading Access Point Software If you typed “n” to continue using the current configuration settings, you must type reset board to r

File Transfers Downloading Access Point Software 3. Under HTTP, in the text field New Firmware File, specify the path and file name of the software o

Using the Command Line Interface (CLI) Using the CLI Listing Commands and Command Options At any command level you can: List all of the commands av

File Transfers Upgrade Procedure for v2.1.x Software Upgrade Procedure for v2.1.x Software To upgrade the access point software from v2.0.x to v2.1.x

File Transfers Upgrade Procedure for v2.1.x Software CLI: Version 2.1.x Software Upgrade using TFTP/FTP The v2.1.x software upgrade can only be perfor

File Transfers Upgrade Procedure for v2.1.x Software 2. After a successful download, the prompt “Do you want to use NEW CONFIG SETTINGS? <y/n>

File Transfers Upgrade Procedure for v2.1.x Software 6. After a successful download, the prompt “Do you want to reset to FACTORY DEFAULT SETTINGS? &l

File Transfers Transferring Configuration Files Transferring Configuration Files Using the Web user interface and CLI commands described in this secti

File Transfers Transferring Configuration Files Reboot Access Point: Click the [Reboot] button to reboot the system. To Upload a Configuration File

File Transfers Transferring Configuration Files Figure A-3. Configuration File Upload CLI: Configuration File Upload and Download CLI Commands Used i

File Transfers Transferring Configuration Files The following example shows how to upload the configuration file to a TFTP server. HP420#copy config t

File Transfers Transferring Configuration Files — This page is intentionally unused. — A-18

C Index Numerics 802.1x authentication … 7-3, 8-72, 8-78 A accounting, RADIUS … 8-67 address filtering … 7-4 Advanced Encryption Standard … 7-5 AES …

Using the Command Line Interface (CLI) Using the CLI Typing ? at the Global Configuration level produces this listing: HP420(config)#? Configure comma

OS download using TFTP … A-4 P password … 4-9 administrator setting … 8-14 creating … 4-8 delete … 4-10 if you lose the password … 4-10 lost … 4-10 op

W web agent enabled … 4-8 web agent, advantages … 2-4 web browser interface access parameters … 4-8 disable access … 4-8 enabling … 4-4 features … 2-4

Technical information in this documentis subject to change without notice.©Copyright 2005Hewlett-Packard Development Company, L.P.Reproduction, adapta

Using the Command Line Interface (CLI) Using the CLI Command Option Displays Conventions for Command Option Displays. When you use the CLI to list op

Using the Command Line Interface (CLI) Using the CLI Configuration Commands and the Context Configuration Modes You can execute basic configuration co

Using the Command Line Interface (CLI) Using the CLI Ethernet Context . Includes interface-specific commands that apply only to the Ethernet interfac

© Copyright 2005 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. This document contain

Using the Command Line Interface (CLI) Using the CLI Wireless Context . Includes wireless-specific commands that apply globally to the wireless inter

Using the Command Line Interface (CLI) Using the CLI Wireless SSID Context . Includes specific commands that apply only to the SSID wireless interfac

Using the Command Line Interface (CLI) CLI Control and Editing CLI Control and Editing Keystrokes Function [Ctrl] [A] Jumps to the first character o

Using the Command Line Interface (CLI) CLI Control and Editing Keystrokes Function [Esc] [Y] * Recalls the next buffer entry in the delete buffer. [

Using the Command Line Interface (CLI) CLI Control and Editing — This page is intentionally unused. — 3-18

4 Using the HP Web Browser Interface Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the HP Web Browser Interface Overview Overview The HP web browser interface built into the access point lets you easily access the access point

Using the HP Web Browser Interface General Features • Neighbor access point detection (page 4-24) General Features The access point includes these we

Using the HP Web Browser Interface Starting a Web Browser Interface Session with the Access Point Starting a Web Browser Interface Session with the Ac

Using the HP Web Browser Interface Description of Browser Interface No t e : Access point management can be limited to access from the Ethernet inter

Contents 1 Getting Started Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1

Using the HP Web Browser Interface Description of Browser Interface iiiTab Bar Act ve Tab World Wide Web s te for Hewlett-Packard’s network ng product

Using the HP Web Browser Interface Description of Browser Interface Online Help for the HP Web Browser Interface Online Help is available for the web

Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Tasks for Your First HP Web Browser Interface Session The fir

Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Figure 4-4. The User Window 2. In the Edit Existing User se

Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session If You Lose the User Name or Password If you lose the Manager

Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session To change the default community names for SNMP v1 or v2c mana

Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Setting the Primary SSID A Service Set IDentifier (SSID) is a

Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Setting the Radio Channel The access point’s radio channel se

Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session 4. For the Radio Status, clear the Shutdown box to enable ra

Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session 3. If you select to use a static IP address, you must manual

Using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4 Command Level at Logon . . . .

Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Configuring Security Settings The Primary SSID is configured

Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Figure 4-10. Security Settings 4-17

Using the HP Web Browser Interface Status Reporting Features Status Reporting Features Browser elements covered in this section include: The AP Sta

Using the HP Web Browser Interface Status Reporting Features AP System Configuration. The AP System Configuration table displays the basic system con

Using the HP Web Browser Interface Status Reporting Features Figure 4-12. AP Wireless and Ethernet Interface Status AP Wireless Configuration. The A

Using the HP Web Browser Interface Status Reporting Features AP Ethernet Configuration. The AP Ethernet Configuration table displays the following et

Using the HP Web Browser Interface Status Reporting Features any client attempting to connect to the access point without verifying its identity. The

Using the HP Web Browser Interface Status Reporting Features No t e The Key Type may appear as “static-wep” for dynamic types and some of the pre-sha

Using the HP Web Browser Interface Status Reporting Features The Status Bar The Status Bar is displayed in the upper left corner of the web browser in

Using the HP Web Browser Interface Status Reporting Features The table of neighbor APs can be viewed from the AP List window on the AP Detection tab.

The Status Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-24 Neighbor AP Detection . . . . . . . .

Using the HP Web Browser Interface Status Reporting Features 4. If needed, specify a time delay before scanning starts. 5. Click the [Apply Changes]

Using the HP Web Browser Interface Status Reporting Features Web: Viewing Detected Neighbor APs After AP detection scanning, use the AP List window on

Using the HP Web Browser Interface Status Reporting Features Network Type: Indicates if the access point is part of an Infrastructure or Ad Hoc net

Using the HP Web Browser Interface Status Reporting Features The following example shows how to start and stop dedicated scanning. HP420(if-wireless-g

Using the HP Web Browser Interface Status Reporting Features To display the current database of detected neighbor APs, enter the CLI command shown in

5 General System Configuration Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

General System Configuration Overview Web: Setting Ethernet Interface Parameters . . . . . . . . . . . . . . . . . . . . 5-49 CLI: Setting Ethernet

General System Configuration Modifying Management User Names and Passwords Modifying Management User Names and Passwords Management access to the acce

General System Configuration Modifying Management User Names and Passwords • WEB & CLI Operator: Allows the user Web and CLI access. Action: U

General System Configuration Modifying Management User Names and Passwords Figure 5-1. The User Window CLI: Setting User Names and Passwords CLI Comm

Configuring SNTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-45 Web: Setting SNTP Parameters . . .

---------- ---------- -------- --------- -------------General System Configuration Modifying Management User Names and Passwords This example shows ho

General System Configuration Setting Management Access Controls Setting Management Access Controls To provide more security for the access point, mana

General System Configuration Setting Management Access Controls Web: Configuring Management Controls The Management window on the Administration tab e

General System Configuration Setting Management Access Controls Figure 5-2. Configuring Management Controls CLI: Configuring Management Controls CLI

General System Configuration Setting Management Access Controls Command Syntax CLI Reference Page [no] https port <port-number> page 8-23 [no]

General System Configuration Setting Management Access Controls To display the current status for management access controls, use the show system comm

General System Configuration Modifying System Information Modifying System Information The access point’s system name can be left at its default setti

General System Configuration Modifying System Information Figure 5-3. The System Information Window CLI: Setting the System Name CLI Commands Used in

General System Configuration Modifying System Information To display the configured system name, use the show system command, as shown in the followin

General System Configuration Configuring IP Settings Configuring IP Settings Configuring the access point with an IP address expands your ability to m

CLI: Creating an SSID Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-24 Web: Modifying SSID Interface Settings . . . . .

General System Configuration Configuring IP Settings • Primary and Secondary DNS Address: The IP address of Domain Name Servers on the network. A DNS

General System Configuration Configuring IP Settings Figure 5-4. The IP Configuration Window CLI: Configuring IP Settings Statically or via DHCP CLI

General System Configuration Configuring IP Settings The following example shows how to enable the DHCP client. HP420(config)#interface ethernet Enter

General System Configuration Configuring SNMP Configuring SNMP You can use a network management application such as HP ProCurve Manager to manage the

General System Configuration Configuring SNMP SNMPv3: Enables access for SNMPv3 clients. Access for SNMPv3 clients is enabled by default. SNMPv

General System Configuration Configuring SNMP Figure 5-5. The SNMP Window CLI: Setting Basic SNMP Parameters CLI Commands Used in This Section Comman

General System Configuration Configuring SNMP SNMP management on the access point is enabled by default. To disable SNMP management, type the followin

General System Configuration Configuring SNMP To display the current SNMP settings from the Exec level, use the show snmp-server command, as shown in

General System Configuration Configuring SNMP Web: Configuring SNMP v3 Users The SNMP window on the Configuration tab also enables the configuration o

General System Configuration Configuring SNMP No t e SNMPv3 Users must be assigned to groups that have the same security levels. If a user who has “A