Home
HP
Switch
5920
HP 5920 User Manual
418 pages
Manual
Specs
Ask a question
To Next Page
To Next Page
Loading...
HP 5920 & 5900 Switch Series
Security
Command Reference
Part number: 5998-28
87
Software version: Release2208
Document version: 6W100-20130
228
2
Table of Contents
Command Reference
1
Table of Contents
3
AAA Commands
13
General AAA Commands
13
Access-Limit Enable
13
Accounting Command
14
Accounting Default
14
Accounting Lan-Access
16
Accounting Login
17
Authentication Default
19
Authentication Lan-Access
20
Authentication Login
21
Authentication Super
23
Authorization Command
24
Authorization Default
25
Authorization Lan-Access
27
Authorization Login
28
Display Domain
30
Domain
31
Domain Default Enable
32
State (ISP Domain View)
33
Local User Commands
34
Authorization-Attribute
34
Bind-Attribute
35
Display Local-User
37
Display User-Group
38
Group
39
Local-User
40
Password
41
Service-Type
43
State (Local User View)
44
User-Group
44
RADIUS Commands
45
Accounting-On Enable
45
Data-Flow-Format (RADIUS Scheme View)
46
Display Radius Scheme
47
Display Radius Statistics
49
Key (RADIUS Scheme View)
51
Nas-Ip (RADIUS Scheme View)
52
Primary Accounting (RADIUS Scheme View)
53
Primary Authentication (RADIUS Scheme View)
54
Radius Nas-Ip
56
Radius Scheme
57
Radius Session-Control Enable
58
Reset Radius Statistics
58
Retry
59
Retry Realtime-Accounting
60
Secondary Accounting (RADIUS Scheme View)
61
Secondary Authentication (RADIUS Scheme View)
63
Security-Policy-Server
65
State Primary
65
State Secondary
66
Timer Quiet (RADIUS Scheme View)
68
Timer Realtime-Accounting (RADIUS Scheme View)
68
Timer Response-Timeout (RADIUS Scheme View)
69
User-Name-Format (RADIUS Scheme View)
70
Vpn-Instance (RADIUS Scheme View)
71
HWTACACS Commands
72
Data-Flow-Format (HWTACACS Scheme View)
72
Display Hwtacacs Scheme
73
Hwtacacs Nas-Ip
75
Hwtacacs Scheme
76
Key (HWTACACS Scheme View)
76
Nas-Ip (HWTACACS Scheme View)
78
Primary Accounting (HWTACACS Scheme View)
79
Primary Authentication (HWTACACS Scheme View)
80
Primary Authorization
82
Reset Hwtacacs Statistics
83
Secondary Accounting (HWTACACS Scheme View)
84
Secondary Authentication (HWTACACS Scheme View)
85
Secondary Authorization
87
Timer Quiet (HWTACACS Scheme View)
89
Timer Realtime-Accounting (HWTACACS Scheme View)
89
Timer Response-Timeout (HWTACACS Scheme View)
90
User-Name-Format (HWTACACS Scheme View)
91
Vpn-Instance (HWTACACS Scheme View)
92
LDAP Commands
93
Authentication-Server
93
Display Ldap Scheme
93
Ipv6
96
Ldap Scheme
97
Ldap Server
97
Login-Dn
98
Login-Password
99
Protocol-Version
100
Search-Base-Dn
101
Search-Scope
101
Server-Timeout
102
User-Parameters
103
802.1X Commands
105
Display Dot1X
105
Dot1X
107
Dot1X Authentication-Method
108
Dot1X Handshake
109
Dot1X Mandatory-Domain
110
Dot1X Max-User
111
Dot1X Multicast-Trigger
112
Dot1X Port-Control
112
Dot1X Port-Method
113
Dot1X Quiet-Period
114
Dot1X Re-Authenticate
115
Dot1X Retry
115
Dot1X Timer
116
Dot1X Unicast-Trigger
118
Reset Dot1X Statistics
119
MAC Authentication Commands
120
Display Mac-Authentication
120
Mac-Authentication
122
Mac-Authentication Domain
122
Mac-Authentication Max-User
123
Mac-Authentication Timer
124
Mac-Authentication User-Name-Format
125
Reset Mac-Authentication Statistics
127
Port Security Commands
128
Display Port-Security
128
Display Port-Security Mac-Address Block
130
Display Port-Security Mac-Address Security
132
Port-Security Authorization Ignore
134
Port-Security Enable
135
Port-Security Intrusion-Mode
136
Port-Security Mac-Address Security
137
Port-Security Max-Mac-Count
139
Port-Security Ntk-Mode
139
Port-Security Oui
140
Port-Security Port-Mode
141
Port-Security Timer Autolearn Aging
144
Port-Security Timer Disableport
144
Password Control Commands
146
Display Password-Control
146
Display Password-Control Blacklist
147
Password-Control { Aging | Composition | History | Length } Enable
148
Password-Control Aging
150
Password-Control Alert-Before-Expire
151
Password-Control Complexity
151
Password-Control Composition
152
Password-Control Enable
154
Password-Control Expired-User-Login
154
Password-Control History
155
Password-Control Length
156
Password-Control Login Idle-Time
157
Password-Control Login-Attempt
158
Password-Control Super Aging
160
Password-Control Super Composition
160
Password-Control Super Length
161
Password-Control Update-Interval
162
Reset Password-Control Blacklist
163
Reset Password-Control History-Record
164
Public Key Management Commands
165
Display Public-Key Local Public
165
Display Public-Key Peer
169
Peer-Public-Key End
170
Public-Key Local Create
171
Public-Key Local Destroy
175
Public-Key Local Export Dsa
176
Configuration Guide
177
Public-Key Local Export Rsa
178
Public-Key Peer
180
Public-Key Peer Import Sshkey
181
PKI Commands
183
Attribute
183
Ca Identifier
185
Certificate Request Entity
185
Certificate Request from
186
Certificate Request Mode
187
Certificate Request Polling
188
Certificate Request Url
189
Common-Name
190
Country
191
Crl Check
191
Crl Url
192
Display Pki Certificate Access-Control-Policy
193
Display Pki Certificate Attribute-Group
194
Display Pki Certificate Domain
196
Display Pki Certificate Request-Status
200
Display Pki Crl
201
Fqdn
203
Ldap-Server
204
Locality
205
Organization
206
Organization-Unit
207
Pki Abort-Certificate-Request
207
Pki Certificate Access-Control-Policy
208
Pki Certificate Attribute-Group
209
Pki Delete-Certificate
210
Pki Domain
211
Pki Entity
212
Pki Export
212
Pki Import
219
Pki Request-Certificate
224
Pki Retrieve-Certificate
225
Pki Retrieve-Crl
226
Pki Storage
227
Pki Validate-Certificate
228
Public-Key Dsa
230
Public-Key Ecdsa
231
Public-Key Rsa
232
Root-Certificate Fingerprint
234
Rule
235
Source
236
State
237
Usage
238
SSH Commands
240
SSH Server Configuration Commands
240
Display Ssh Server
240
Display Ssh User-Information
241
Sftp Server Enable
242
Sftp Server Idle-Timeout
243
Ssh Server Acl
244
Ssh Server Ipv6 Acl
245
Ssh Server Authentication-Retries
246
Ssh Server Authentication-Timeout
246
Ssh Server Compatible-Ssh1X Enable
247
Ssh Server Enable
248
Ssh Server Rekey-Interval
248
Ssh User
249
SSH Client Configuration Commands
251
Bye
251
Cdup
252
Delete
253
Dir
253
Display Sftp Client Source
255
Display Ssh Client Source
255
Exit
256
Get
256
Help
257
Mkdir
259
Put
259
Pwd
260
Quit
260
Remove
260
Rename
261
Rmdir
261
Scp
262
Scp Ipv6
264
Sftp
267
Sftp Client Ipv6 Source
269
Sftp Client Source
270
Sftp Ipv6
271
Ssh Client Ipv6 Source
273
Ssh Client Source
274
Ssh2
275
Ssh2 Ipv6
277
SSL Commands
280
SSL Server Policy Configuration Commands
280
Ciphersuite
280
Client-Verify Enable
282
Display Ssl Server-Policy
282
Pki-Domain (SSL Server Policy View)
283
Session Cachesize
284
Ssl Server-Policy
285
SSL Client Policy Configuration Commands
285
Display Ssl Client-Policy
285
Pki-Domain (SSL Client Policy View)
286
Prefer-Cipher
287
Server-Verify Enable
289
Ssl Client-Policy
290
Version
290
IP Source Guard Commands
292
Display Ip Source Binding
292
Display Ipv6 Source Binding Static
293
Ip Source Binding
295
Ip Verify Source
296
Ipv6 Source Binding
297
Ipv6 Verify Source
298
Reset Ip Source Binding
299
Reset Ipv6 Source Binding
300
ARP Attack Protection Commands
302
Unresolvable IP Attack Protection Commands
302
Arp Resolving-Route Enable
302
Arp Source-Suppression Enable
303
Arp Source-Suppression Limit
303
Display Arp Source-Suppression
304
ARP Packet Rate Limit Commands
305
Arp Rate-Limit
305
Source MAC Based ARP Attack Detection Commands
305
Arp Source-Mac
305
Arp Source-Mac Aging-Time
306
Arp Source-Mac Exclude-Mac
307
Arp Source-Mac Threshold
307
Display Arp Source-Mac
308
ARP Packet Source MAC Consistency Check Commands
309
Arp Valid-Check Enable
309
ARP Active Acknowledgement Commands
310
Arp Active-Ack Enable
310
ARP Detection Commands
310
Arp Detection Enable
310
Arp Detection Trust
311
Arp Detection Validate
311
Arp Restricted-Forwarding Enable
312
Display Arp Detection
313
Display Arp Detection Statistics
313
Reset Arp Detection Statistics
314
ARP Automatic Scanning and Fixed ARP Commands
315
Arp Fixup
315
Arp Scan
315
ARP Gateway Protection Commands
316
Arp Filter Source
316
ARP Filtering Commands
317
Arp Filter Binding
317
Urpf Commands
319
Ip Urpf
319
Display Ip Urpf
320
FIPS Commands
321
Fips Mode Enable
321
Fips Self-Test
322
Display Fips Status
323
Ipsec Commands
325
Ah Authentication-Algorithm
325
Description
326
Display Ipsec { Ipv6-Policy | Policy
327
Display Ipsec { Ipv6-Policy-Template | Policy-Template
331
Display Ipsec Profile
333
Display Ipsec Sa
334
Display Ipsec Statistics
338
Display Ipsec Transform-Set
340
Display Ipsec Tunnel
341
Encapsulation-Mode
343
Esp Authentication-Algorithm
345
Esp Encryption-Algorithm
346
Ike-Profile
347
Ipsec Anti-Replay Check
348
Ipsec Anti-Replay Window
349
Ipsec Decrypt-Check Enable
349
Ipsec Logging Packet Enable
350
Ipsec Df-Bit
351
Ipsec Global-Df-Bit
352
Ipsec { Ipv6-Policy | Policy } (Interface View)
353
Ipsec { Ipv6-Policy | Policy } (System View)
353
Ipsec { Ipv6-Policy | Policy } Isakmp Template
355
Ipsec { Ipv6-Policy | Policy } Local-Address
356
Ipsec { Ipv6-Policy-Template | Policy-Template } Policy-Template
357
Ipsec Profile
358
Ipsec Sa Global-Duration
359
Ipsec Sa Idle-Time
360
Ipsec Transform-Set
361
Local-Address
361
Pfs
362
Protocol
363
Qos Pre-Classify
364
Remote-Address
365
Reset Ipsec Sa
366
Reset Ipsec Statistics
368
Sa Duration
368
Sa Hex-Key Authentication
369
Sa Hex-Key Encryption
370
Sa Idle-Time
372
Sa Spi
372
Sa String-Key
373
Security Acl
375
Transform-Set
376
IKE Commands
378
Authentication-Algorithm
378
Authentication-Method
379
Certificate Domain
380
Display Ike Proposal
382
Display Ike Sa
383
Dpd
386
Encryption-Algorithm
387
Exchange-Mode
388
Ike Dpd
389
Ike Identity
390
Ike Invalid-Spi-Recovery Enable
391
Ike Keepalive Interval
392
Ike Keepalive Timeout
393
Ike Keychain
393
Ike Limit
394
Ike Nat-Keepalive
395
Ike Profile
396
Ike Proposal
396
Ike Signature-Identity From-Certificate
398
Inside-Vpn
398
Keychain
399
Local-Identity
400
Match Local Address (IKE Keychain View)
401
Match Local Address (IKE Profile View)
402
Match Remote
403
Pre-Shared-Key
405
Priority (IKE Keychain View)
406
Priority (IKE Profile View)
407
Proposal
408
Reset Ike Sa
408
Sa Duration
409
Support and Other Resources
411
Contacting HP
411
Subscription Service
411
Related Information
411
Documents
411
Websites
411
Conventions
412
Index
414
Other manuals for HP 5920
Configuration Guide
322 pages
Need help?
Do you have a question about the HP 5920 and is the answer not in the manual?
Ask a question
HP 5920 Specifications
General
Product Type
Switch
Management
CLI, SNMP
Dimensions
440 x 420 x 43.6 mm
Input Voltage
100-240VAC
Operating Temperature
0°C to 45°C (32°F to 113°F)
Jumbo Frames
9K bytes
Related product manuals
HP 5920 Series
607 pages
HP 5900
86 pages
HP HPE FlexFabric 5930
73 pages
HP HPE FlexFabric 5901 Series
60 pages
HP 5300
35 pages
HP 1405-5
16 pages
HP 5800 Series
396 pages
HP 5830 series
170 pages
HP 5120 series
161 pages
HP 5130 EI series
166 pages
HP ProCurve 5412ZL
460 pages
HP FlexFabric 5700
56 pages