HP Procurve CLI Cheat

A list of basic commands for HP switches I find helpful. The commands are written for a
5400 running firmware K.15.13.0005, however, should be similar for any switch with a
recent firmware release.

Notes:
<> indicates a changeable variable, such as port number or VLAN ID.
[] indicates an optional string or value.
<Port> value can be either a single port (A1), multiple ports (A1,B3), or a port string (A1-
B10).
| signifies interchangeable (or) values.

9 Steps total

Step 1: Config Files and Flash Files

#show config --- Show config file

#show running config --- Show running config file

#copy config config1 usb <file name> --- Copy active config file to USB drive

#copy config config1 tftp <IP> <file name> --- Copy your config to file to TFTP server.

#copy tftp config <fileneme> <IP> ---Copy your config from TFTP server to switch

#show flash --- Displays info about flash (version etc.)

#copy tftp flash <IP> <file name> <primary|secondary> --- Download and update your
flash with from TFTP server

#copy flash usb <file name> <primary|secondary> --- Copy flash to USB drive

#copy flash tftp <IP> <file name> <primary|secondary> --- Copy flash to TFTP server

#write memory --- Save config

Step 2: Event Logs
#log [<port>] [-r] --- Display log events of port [most recent first]

#log <IP address> --- Display log events of a specific IP

Step 3: Miscellaneous
#hostname <hostname> --- Set switch hostname

#link-test <destination switch MAC> --- Test connectivity between switches (local switch
and destination switch)

#ping <IP address> --- Ping IP 192.168.0.1

#chassislocate --- Turn on/off switch locator led or blink it (30 minutes)

#chassislocate blink <time> --- Blink switch locator led set time in minutes

#ntp1 <time server name> --- Add time server to NTP server list

#timesync ntp --- Enable NTP synchronization with servers

#password operator --- Set operator password (Normal user / read-only )

#password manager --- Set manager password (Admin user / read-write)

#password all --- Set operator and manager password

#enable --- Switch to manager lever from operator level

#exit --- Exit current level

#logout --- Logout out of the switch

Step 4: PoE
#show power-over-ethernet brief [<port>] --- To show PoE

#no interface <port> power-over-ethernet --- To turn off for a port

#interface <port> power-over-ethernet --- To turn on for a port

Step 5: Ports and LACP Trunks
#interface <port> name <port-name> --- Assign a port name to port-list

#show name --- Show port name

#show interface --- Show port statistics

#interface <port> lacp active --- Configure dynamic LACP trunk on c1-c4

#no interface <port> lacp --- Remove port from dynamic LACP (returns to passive
LACP)

#show trunks [<port>] --- Show trunk status (port optional)

#show lacp --- Show data for LACP configured ports

#trunk <port> <trk1...trk36> <trunk|lacp> --- Configure static trunk or LACP

#no trunk <port> --- Remove trunk

#[no] int <port> rate-limit all <0...100> --- Set (or remove) rate limit on port according to
selected percentage

#show rate-limit all [<port>] --- Show rate limit on all or selected ports

#[no] int <port> rate-limit icmp <0...100> --- Set (or remove) rate limit to all ICMP traffic

#show rate-limit icmp [<port>] --- Show ICMP rate limit on all or selected ports

#loop-protect <port range> --- Turn on loop protection

#show loop-protect --- Display loop protection

Step 6: Security
#port-security <port number> learn-mode configured address-limit 1 mac-address
<MAC address> --- Enable MAC address restriction and limit port access to one MAC
address.

#dhcp-snooping authorized-server <IP address> --- Set authorized DHCP server(s)

#dhcp-snooping trust <port> --- Set ports authorized to pass DHCP

#dhcp-snooping vlan <VLAN ID range> --- Enable DHCP on specified VLANs

#dhcp-snooping --- Enable DHCP globally

#dhcp-snooping option 82 --- Enable option 82 (on edge switches)

#crypto key generate ssh --- Generate an SSH key

#ip ssh --- Enable SSH

#no telnet-server --- Disable Telnet

#no web-management --- Disable web interface

#arp-protect trust <port> --- Set arp-protect trusted ports

#arp-protect vlan <VLAN ID range> --- Enable arp-protect on specified VLANs

#arp-protect --- Enable arp-protect globally

Step 7: Show Information Commands

#show system-information --- Show system information

#show name --- Show port name

#show config --- Show config file

#show mac <port> --- Show MAC-address of the device on specified port

#show mac <mac address> --- Show which port device with MAC-address is connected
to

#show int d --- Show real time port traffic

#show int custom --- Show a custom view of port information

#show flash --- Displays info about flash (version etc.)

#show interface --- Show port statistics

#show run --- Show running config

#show lacp --- Show LACP information

#show trunks --- Show trunk information

#show spanning-tree --- Show STP information

#show rate-limit all [<port>] --- Show rate limit on all or selected ports

#show rate-limit icmp [<port>] --- Show ICMP rate limit on all or selected ports

#show snmpv3 <group|user> --- Show SNMPv3 groups or users

Step 8: SNMPv3
#snmpv3 enable --- Enable SNMP version 3

#snmpv3 only --- Restrict SNMP to only version 3

#snmpv3 user <user name> --- Adds an SNMP user and creates an optional password

#snmpv3 group <group> user <user> sec-model ver3 --- Adds a user to a desired
access group

#show snmpv3 <group|user> --- Show SNMPv3 groups or users

Step 9: VLANs
#vlan <vlan ID> name <vlan name> --- Create VLAN and set its ID and name

#no vlan <port> --- Remove vlan setting on port

#vlan <vlan ID> <tagged|untagged> <port> --- Set port as tagged on vlan

#show vlan --- Show information about VLAN on this swtich

#show vlan ports <port> --- Show VLAN ID and status of specific port

#show vlan <VLAN ID> --- Show ports on this VLAN and port status

#show vlan ports <port> --- Show VLAN ID and status of specific port
#Show Int d --- which give a real-time display of port traffic.

To show PoE
#show power-over-ethernet brief

To show PoE for a port

#show power-over-ethernet brief c13

To turn off for a port

#no interface c13 power-over-ethernet

To turn on for a port

#interface c13 power-over-ethernet

Loop Detection
Turn on loop detection
#loop-protect 1-24
#loop-protect disable-timer 300

Display loop detection

#show loop-protect

#show module -- Show installed modules with description and serial numbers