Advpn Commands; Vam Server Commands; Authentication-Algorithm - HP MSR Series Command Reference Manual

ADVPN commands

VAM server commands

authentication-algorithm

Use authentication-algorithm to specify the algorithms for VAM protocol packet authentication and their
priorities.
Use undo authentication-algorithm to restore the default.
Syntax
authentication-algorithm { aes-xcbc-mac | md5 | none | sha-1 | sha-256 } *
undo authentication-algorithm
Default
SHA- 1 is used for protocol packet authentication.
Views
ADVPN domain view
Predefined user roles
network-admin
Parameters
aes-xcbc-mac: Uses the AES-XCBC-MAC authentication algorithm.
md5: Uses the MD5 authentication algorithm.
none: Performs no authentication.
sha-1: Uses the SHA- 1 authentication algorithm.
sha-256: Uses the SHA-256 authentication algorithm.
Usage guidelines
The VAM server and client use SHA- 1 during connection initialization, and use the negotiated algorithms
after connection initialization.
An authentication algorithm specified earlier in this command has a higher priority. The configuration of
this command does not affect registered VAM clients. It applies to subsequently registered VAM clients.
Examples
# Specify the authentication algorithms as MD5, SHA- 1 , and SHA-256 in descending order of priority for
ADVPN domain 1.
<Sysname> system-view
[Sysname] vam server advpn-domain 1
[Sysname-vam-server-domain-1] authentication-algorithm md5 sha-1 sha-256
475