authentication-mode (IPFPM-MCP view)

Function

The authentication-mode command configures the authentication mode and password for a measurement control point (MCP) in the IP Flow Performance Measurement (IP FPM) model.

The undo authentication-mode command deletes the authentication mode and password of an MCP in the IP FPM model.

By default, no authentication mode or password is configured for an MCP in the IP FPM model.

Format

authentication-mode hmac-sha256 key-id key-id [ cipher ] password

authentication-mode hmac-sha256 key-id key-id [ cipher ] password

undo authentication-mode hmac-sha256 key-id key-id

Parameters

Parameter	Description	Value
key-id key-id	Specifies the key ID for an authentication password of an MCP.	The value is an integer ranging from 1 to 64.
cipher	Indicates that an authentication password is displayed in ciphertext.	-
password	Specifies the authentication password of an MCP.	The value is a string of characters. The value ranges from 1 to 255 for simple passwords. The value ranges from 24 or 32 to 432 for ciphertext passwords. When quotation marks are used around the string, spaces are allowed in the string.
password	Indicates the interactive mode for password configuration.	-
hmac-sha256	Indicates the HMAC-SHA256 authentication algorithm to be used for packets sent by a DCP to an MCP.	-

Views

IPFPM-MCP view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ipfpm	write

Usage Guidelines

Usage Scenario

To enhance network security and performance statistics reliability, run the authentication-mode command so that authentication is performed during IP FPM performance statistics. An MCP and its associated DCPs must have the same authentication mode and password configured. The MCP processes packets only from the authenticated DCPs.

Prerequisites

The nqa ipfpm mcp command has been run to enable MCP globally.

Precautions

The authentication mode and password configured on an MCP must be the same as those configured on the DCPs associated with this MCP. Otherwise, the MCP cannot process the statistics reported by the DCPs.

Example

# Configure the authentication mode for a MCP and enter the interactive mode for password configuration.

<HUAWEI> system-view
[~HUAWEI] nqa ipfpm mcp
[*HUAWEI-nqa-ipfpm-mcp] authentication-mode hmac-sha256 key-id 1 password
Plain text with length of 1-255, Encrypted text with length of 24 or 32-432
Enter Password:
Confirm Password:

# Configure the authentication mode and password for an MCP.

<HUAWEI> system-view
[~HUAWEI] nqa ipfpm mcp
[*HUAWEI-nqa-ipfpm-mcp] authentication-mode hmac-sha256 key-id 1 cipher Huawei-123