Msr954 Router Configuration Guide — Hpe

[HPE-MSR954] wlan ap ap1 model WA6322 # or correct model [HPE-MSR954-wlan-ap-ap1] serial-id 1234567890 [HPE-MSR954-wlan-ap-ap1] radio 1 [HPE-MSR954-wlan-ap-ap1-radio-1] service-template 1 [HPE-MSR954-wlan-ap-ap1-radio-1] radio enable [HPE-MSR954] wlan service-template 1 [HPE-MSR954-wlan-st-1] ssid MyCorpWiFi [HPE-MSR954-wlan-st-1] security-ie rsn [HPE-MSR954-wlan-st-1] cipher-suite ccmp [HPE-MSR954-wlan-st-1] service-template enable [HPE-MSR954-wlan-st-1] quit [HPE-MSR954] wlan service-template 1 [HPE-MSR954-wlan-st-1] akm mode psk [HPE-MSR954-wlan-st-1] preshared-key pass-phrase simple StrongWifiPass

<HPE-MSR954> tftp 192.168.1.200 get backup_msr954.cfg startup.cfg <HPE-MSR954> reboot | Command | Purpose | |---------|---------| | display ip interface brief | Show IP status of all interfaces | | display interface brief | Show link status | | display ip routing-table | View route table | | display nat session all | Active NAT translations | | display wlan client | Connected Wi-Fi clients | | display dhcp server ip-in-use | DHCP leases | | ping -a 192.168.1.1 8.8.8.8 | Source-ping from LAN IP | 10. Factory Reset (If Needed) <HPE-MSR954> bootrom update file reset.btw # not typical # Instead, during boot (Ctrl+B): =========================<EXTEND-BOOTROM>========================= | <1> Boot System | | <2> Restore to Factory Default Configuration | | <3> Skip Current Configuration | ================================================================= Press Ctrl+B now... select option 2. Or in CLI (if accessible): hpe msr954 router configuration guide

1. Overview & Prerequisites The HPE MSR954 is a compact, fixed-port router in the MSR900 series, running Comware V7 (HPE’s proprietary network OS). It is designed for small branches or enterprise edge routing. [HPE-MSR954] wlan ap ap1 model WA6322 # or

<HPE-MSR954> tftp 192.168.1.200 put startup.cfg backup_msr954.cfg Or in CLI (if accessible): 1

[HPE-MSR954] save The current configuration will be written to the device. Are you sure? [Y/N]:y

[HPE-MSR954] acl advanced 3100 [HPE-MSR954-acl-ipv4-adv-3100] rule deny tcp source any destination any destination-port eq 22 [HPE-MSR954-acl-ipv4-adv-3100] rule permit tcp source 203.0.113.100 0 destination any destination-port eq 22 [HPE-MSR954] interface GigabitEthernet 0/0 [HPE-MSR954-GigabitEthernet0/0] packet-filter 3100 inbound [HPE-MSR954] undo http server enable [HPE-MSR954] undo telnet server enable 8. Save Configuration & Backup Always save after changes:

Assign Wi-Fi to VLAN 1 (or separate VLAN). 7.1 Packet Filter (ACL) Block SSH from WAN except specific IP: