authentication-mode (IPFPM-DCP instance view)

Function

The authentication-mode command configures the authentication mode and password for a measurement instance on a DCP.

The undo authentication-mode command deletes the authentication mode and password of a measurement instance on a DCP.

By default, no authentication mode or password is configured for a measurement instance on a DCP.

Format

authentication-mode hmac-sha256 key-id key-id [ cipher ] password

undo authentication-mode hmac-sha256

Parameters

Parameter	Description	Value
hmac-sha256	Uses HMAC-SHA256 to encrypt and authenticate packets sent by a DCP to the MCP.	-
key-id key-id	Specifies the ID of the authentication password configured for a measurement instance.	The value is an integer that ranges from 1 to 64.
cipher	Specifies the cipher-text authentication password for a measurement instance.	-
password	Specifies the authentication password for a measurement instance.	The value is a case-sensitive character string without spaces. The value is a string of 1 to 255 characters in plain text. The value is a string of 32 to 392 characters in cipher text.

Views

IPFPM-DCP instance view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

On a network demanding high security, when iPCA is used to measure network-level packet loss, enable authentication. After the same authentication mode and password are configured on the MCP and DCPs, the MCP accepts the packets only from authenticated DCPs. This improves network security and reliability of packet loss measurement. The authentication-mode command configures the authentication mode and password for a measurement instance on a DCP.

Prerequisites

A measurement instance has been created on the DCP using the instance command.

Precautions

If the authentication-mode command is not used to configure the authentication mode and password, all measurement instances of the DCP use the authentication mode and password configured by the authentication-mode (IPFPM-DCP view) command.

Example

# Configure the authentication mode and password for a measurement instance.

<HUAWEI> system-view
[HUAWEI] nqa ipfpm dcp
[HUAWEI-nqa-ipfpm-dcp] instance 1
[HUAWEI-nqa-ipfpm-dcp-instance-1] authentication-mode hmac-sha256 key-id 1 cipher huawei