hrp encryption-key

Function

The hrp encryption-key command configures the key for encrypting configuration commands backup packets between the active and standby devices.

The undo hrp encryption-key command deletes the key for encrypting configuration commands backup packets between the active and standby devices.

Format

hrp encryption-key key

undo hrp encryption-key

Parameters

Parameter	Description	Value
key	Specifies the key for encrypting configuration commands backup packets between the active and standby devices.	The value is a string of 8 to 16 characters. The system converts the character string into a 32-character cipher text and saves it in the configuration file. To enhance security, the key must meet the minimum complexity requirement. That is, the key must contain two of the following characters: upper-case letters (A to Z), lower-case letters (a to z), digits (0 to 9), and special characters such as exclamation points (!), at signs (@), number signs (#), dollar signs ($), and percent (%).

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, the backup packets are transferred in plain texts. When the heartbeat interfaces of the two FW are not directly connected, you are advised to run the command to configure an encryption key for security reasons. You need to configure the key on both the active and standby FWs. Ensure that the keys on the two FWs are the same. Otherwise, backup between the FWs may fail.

Example

# Set the key for encrypting configuration commands backup packets between the active and standby devices to Password@123.

<sysname> system-view
[sysname] hrp encryption-key Password@123