authentication-mode (IPFPM-DCP instance view)

Function

The authentication-mode command configures the authentication mode and password for an IP Flow Performance Measurement (IP FPM) instance.

The undo authentication-mode command deletes the authentication mode and password of an IP FPM instance.

By default, no authentication mode or password is configured for an IP FPM instance.

Format

authentication-mode hmac-sha256 key-id key-id-value [ cipher ] auth-text

authentication-mode hmac-sha256 key-id key-id-value [ cipher ] password

undo authentication-mode hmac-sha256

Parameters

Parameter	Description	Value
cipher	Indicates that an authentication password is displayed in ciphertext.	-
auth-text	Specifies the authentication password of a DCP.	The value is a string of characters. The value ranges from 1 to 255 for simple passwords. The value ranges from 24 or 32 to 432 for ciphertext passwords.
hmac-sha256	Indicates the HMAC-SHA256 authentication algorithm to be used for packets sent by a DCP to an MCP.	-
key-id key-id-value	Specifies the key ID for an authentication password of an IP FPM instance.	The value is an integer ranging from 1 to 64.
password	Indicates the interactive mode for password configuration.	-

Views

IPFPM-DCP instance view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ipfpm	write

Usage Guidelines

Usage Scenario

To enhance network security and performance statistics reliability, run the authentication-mode command so that authentication is performed during IP FPM performance statistics. An MCP and its associated DCPs must have the same authentication mode and password configured. The MCP processes packets only from the authenticated DCPs.

Prerequisites

The instance command has been run to configure an IP FPM instance on a DCP.

Precautions

If no authentication mode or password is configured for an IP FPM instance on a DCP, the authentication mode and password configured for the DCP takes effect. If the authentication mode and password are configured in both the DCP view and IP FPM instance view, the configuration in the IP FPM instance view takes effect.

Example

# Configure the authentication mode for an IP FPM instance and enter the interactive mode for password configuration.

<HUAWEI> system-view
[~HUAWEI] nqa ipfpm dcp
[*HUAWEI-nqa-ipfpm-dcp] instance 1
[*HUAWEI-nqa-ipfpm-dcp-instance-1] authentication-mode hmac-sha256 key-id 1 password
Plain text with length of 1-255, Encrypted text with length of 24 or 32-432
Enter Password:
Confirm Password:

# Configure the authentication mode and password for an IP FPM instance.

<HUAWEI> system-view
[~HUAWEI] nqa ipfpm dcp
[*HUAWEI-nqa-ipfpm-dcp] instance 1
[*HUAWEI-nqa-ipfpm-dcp-instance-1] authentication-mode hmac-sha256 key-id 1 cipher Huawei-123