HPE FlexNetwork MSR Series Comware 7 Layer 3 - Ip Services Configuration Guides

366
Step Command Remarks
2. Set the port number of the
VAM server.
vam server listen-port
port-number
The default port number is 18000.
The port number of the VAM
server must be the same as that
configured on the VAM clients.
Specifying authentication and encryption algorithms for the
VAM server
The VAM server uses the specified algorithms to negotiate with the VAM client.
The VAM server and client use SHA-1 and AES-CBC-128 during connection initialization, and use
the negotiated algorithms after connection initialization.
The algorithm specified earlier in a command line has a higher priority. The configuration of the
commands that specify authentication and encryption algorithms does not affect registered VAM
clients. It applies to subsequently registered VAM clients.
To specify authentication and encryption algorithms for the VAM server:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter ADVPN domain view.
vam server advpn-domain
domain-name [
id
domain-id ]
N/A
3. Specify authentication
algorithms.
authentication-algorithm
{
aes-xcbc-mac
|
md5
|
none
|
sha-1
|
sha-256
} *
The default authentication
algorithm is SHA-1.
4. Specify encryption
algorithms.
encryption-algorithm
{
3des-cbc
|
aes-cbc-128
|
aes-cbc-192
|
aes-cbc-256
|
aes-ctr-128
|
aes-ctr-192
|
aes-ctr-256
|
des-cbc
|
none
} *
The default encryption algorithms
are AES-CBC-256,
AES-CBC-192, AES-CBC-128,
AES-CTR-256, AES-CTR-192,
AES-CTR-128, 3DES-CBC, and
DES-CBC in descending order of
priority.
Configuring an authentication method
The VAM server uses the specified method to authenticate clients in the ADVPN domain. The VAM
server supports PAP and CHAP authentication.
If the specified ISP domain does not exist, the authentication will fail. A newly configured
authentication method does not affect registered VAM clients. It applies to subsequently registered
VAM clients.
To configure an authentication method:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter ADVPN domain view.
vam server advpn-domain
domain-name [
id
domain-id ]
N/A
3. Specify an authentication
method.
authentication
-
method
{
none
|
{
chap
|
pap
} [
domain
isp-name ] }
By default, the authentication
method is CHAP, and the default
domain is used.

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English