The easy-operation dtls disable command disables Datagram Transport Layer Security (DTLS) encryption.
The undo easy-operation dtls disable command enables DTLS encryption.
By default, DTLS encryption is enabled.
Usage Scenario
This command is mainly used in the capacity expansion scenario on a live network. If the system software of a client is V200R010C00 or a later version and that of the Commander is a version earlier than V200R010C00, you need to run the easy-operation dtls disable command on the client to disable DTLS encryption.
Precautions
You must enable or disable DTLS encryption on the Commander and client at the same time.
If the system software of a switch in a version earlier than V200R010C00 is upgraded to V200R010C00 or a later version, an easy-operation dtls disable configuration is automatically generated.
If a client in V200R010C00 or a later version needs to be managed by the Commander in a version earlier than V200R010C00, you need to run the easy-operation dtls disable command on the client to disable DTLS encryption.
If a client in a version earlier than V200R010C00 needs to be managed by the Commander in V200R010C00 or a later version and DTLS encryption is enabled on the Commander, you must upgrade the system software of the client to V200R010C00 or a later version. Otherwise, the client cannot join the existing network.
After DTLS encryption is enabled, the shared key configured using the easy-operation shared-key command does not take effect.
After DTLS encryption is enabled, the default pre-shared key is easy-operation. You can run the easy-operation dtls psk command to configure the DTLS PSK.