< Home

authentication-mode (E-Trunk view)

Function

The authentication-mode command configures the E-Trunk authentication and encryption mode.

The undo authentication-mode command restores the default E-Trunk authentication and encryption mode.

By default, the E-Trunk authentication and encryption mode is hmac-sha1.

Only the S5720-EI, S5720-HI, S5720I-SI, S5720S-SI, S5720-SI, S5735-S, S5735S-S, S5735-S-I, S5730-HI, S5730S-EI, S5730-SI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-EI, S6720-HI, S6720-LI, S6720S-EI, S6720S-LI, S6720S-SI, S6720-SI, S6730-H, S6730S-H, S6730-S, and S6730S-S support this command.

Format

authentication-mode { hmac-sha1 | hmac-sha256 | enhanced-hmac-sha256 }

undo authentication-mode

Parameters

Parameter Description Value
hmac-sha1 Indicates that the E-Trunk authentication and encryption mode is hmac-sha1. -
hmac-sha256

Indicates that the E-Trunk authentication and encryption mode is hmac-sha256.

NOTE:

hmac-sha256 is more secure than hmac-sha1, so you are advised to configure hmac-sha256 as the E-Trunk authentication and encryption mode.

-
enhanced-hmac-sha256

Indicates that the E-Trunk authentication and encryption mode is enhanced-hmac-sha256.

NOTE:

enhanced-hmac-sha256 is more secure than hmac-sha256 and hmac-sha1, so you are advised to configure enhanced-hmac-sha256 as the E-Trunk authentication and encryption mode.

-

Views

E-Trunk view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To improve system security, run the authentication-mode command to configure the E-Trunk authentication and encryption mode.

Precautions

Two devices in an E-Trunk must have the same E-Trunk authentication and encryption mode.

Example

# Configure the E-Trunk authentication and encryption mode as enhanced-hmac-sha256.

<HUAWEI> system-view
[HUAWEI] e-trunk 1
[HUAWEI-e-trunk-1] authentication-mode enhanced-hmac-sha256
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >