Specifying Authentication And Encryption Algorithms For The Vam Server; Configuring An Authentication Method; Configuring Keepalive Parameters - HP FlexNetwork MSR2003 Configuration Manual

Specifying authentication and encryption algorithms for the
VAM server
The VAM server uses the specified algorithms to negotiate with the VAM client.
The VAM server and client use SHA-1 and AES-CBC-128 during connection initialization, and use
the negotiated algorithms after connection initialization.
The algorithm specified earlier in a command line has a higher priority. The configuration of the
commands that specify authentication and encryption algorithms does not affect registered VAM
clients. It applies to subsequently registered VAM clients.
To specify authentication and encryption algorithms for the VAM server:
Step
1. Enter system view.
2. Enter ADVPN domain view.
3. Specify authentication
algorithms.
4. Specify encryption
algorithms.

Configuring an authentication method

The VAM server uses the specified method to authenticate clients in the ADVPN domain. The VAM
server supports PAP and CHAP authentication.
If the specified ISP domain does not exist, the authentication will fail. A newly configured
authentication method does not affect registered VAM clients. It applies to subsequently registered
VAM clients.
To configure an authentication method:
Step
1. Enter system view.
2. Enter ADVPN domain view.
3. Specify an authentication
method.

Configuring keepalive parameters

Keepalive parameters include a keepalive interval and a maximum number of keepalive retries. The
VAM server assigns the configured keepalive parameters to clients in the ADVPN domain.
Command
system-view
vam server advpn-domain
domain-name [ id domain-id ]
authentication-algorithm
{ aes-xcbc-mac | md5 | none |
sha-1 | sha-256 } *
encryption-algorithm
{ 3des-cbc | aes-cbc-128 |
aes-cbc-192 | aes-cbc-256 |
aes-ctr-128 | aes-ctr-192 |
aes-ctr-256 | des-cbc | none } *
Command
system-view
vam server advpn-domain
domain-name [ id domain-id ]
authentication-method { none |
{ chap | pap } [ domain
isp-name ] }
341
Remarks
N/A
N/A
The default authentication
algorithm is SHA-1.
The default encryption algorithms
are AES-CBC-256,
AES-CBC-192, AES-CBC-128,
AES-CTR-256, AES-CTR-192,
AES-CTR-128, 3DES-CBC, and
DES-CBC in descending order of
priority.
Remarks
N/A
N/A
By default, the authentication
method is CHAP, and the default
domain is used.