dhcp server database authentication-mode

To prevent data loss caused by device faults, you can enable the DHCPv4 address pool data saving and restoration functions. The system generates lease.txt and conflict.txt files in the dhcp folder to save normal address lease information and address conflict information, respectively. To prevent the lease.txt and conflict.txt files from being tampered with, the encrypted file integrity authentication code is added to the lease.txt and conflict.txt files. After the device is restarted, the system decrypts the file integrity authentication code and verifies the file integrity based on the decrypted file integrity authentication code before restoring the address lease information and address conflict information from the lease.txt and conflict.txt files. If the verification is successful, the data is restored. If the verification fails, the data is discarded and a log is recorded.

• If you need to manually modify the file content, run the dhcp server database authentication-mode no-check command to set the file integrity authentication mode to no-check before the restart.
• The root keys for decrypting and encrypting the file integrity authentication code must be the same. If the root keys are different, the decryption fails. The root keys of different devices are different. If you need to use the backup files generated on other devices to restore data, run the dhcp server database authentication-mode no-check command to set the file integrity authentication mode to no-check before the restart.
• To be compatible with earlier versions, a device can be restarted to restore data of a historical version file that does not carry the file integrity authentication code. To prevent data tampering based on historical version files, you can run the dhcp server database authentication-mode force-check command to set the file integrity authentication mode to force-check before the restart.

• After the dhcp server database authentication-mode force-check command is run, historical version files that do not carry the file integrity authentication code cannot be restored. Therefore, exercise caution when running this command.
• If the lease.txt file fails to be verified, it is renamed lease.txt.fail and saved.
• If the conflict.txt file fails to be verified, it is renamed conflict.txt.fail and saved.