authentication-mode (IPFPM-DCP view)

Function

The authentication-mode command configures the authentication mode and password on a Data Collecting Point (DCP).

The undo authentication-mode command deletes the authentication mode and password on a DCP.

By default, no authentication mode or password is configured on a DCP.

Format

authentication-mode hmac-sha256 key-id key-id [ cipher ] password

undo authentication-mode hmac-sha256

Parameters

Parameter	Description	Value
hmac-sha256	Uses HMAC-SHA256 to encrypt and authenticate packets sent by a DCP to the MCP.	-
key-id key-id	Specifies the ID of the authentication password configured on a DCP.	The value is an integer that ranges from 1 to 64.
cipher	Specifies the cipher-text authentication password on a DCP.	-
password	Specifies the authentication password on a DCP.	The value is a case-sensitive character string without spaces. The value is a string of 1 to 255 characters in plain text. The value is a string of 32 to 392 characters in cipher text.

Views

IPFPM-DCP view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To enhance network security and performance statistics reliability, run the authentication-mode command so that authentication is performed during IP FPM performance statistics. An MCP and its associated DCPs must have the same authentication mode and password configured. The MCP processes packets only from the authenticated DCPs.

Prerequisites

Global DCP has been enabled using the nqa ipfpm dcp command.

Example

# Configure the authentication mode and password on a DCP.

<HUAWEI> system-view
[HUAWEI] nqa ipfpm dcp
[HUAWEI-nqa-ipfpm-dcp] authentication-mode hmac-sha256 key-id 1 cipher huawei