C613-50170-01 Rev B
Command Reference for x510 Series
2299
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
A
LLIED
T
ELESIS
M
ANAGEMENT
F
RAMEWORK
™ (AMF) C
OMMANDS
ATMF
SECURE
-
MODE
atmf secure-mode
Overview
Use this command to enable AMF secure mode on an AMF node. AMF secure mode
makes an AMF network more secure by:
•
Adding an authorization mechanism before and AMF member is allowed to
join an AMF network.
•
The encryption of all AMF packets sent between AMF nodes.
•
Adding support for user login authentication by RADIUS or , and
removing the requirement to have the same privileged user account in the
local user database on all devices in the AMF network.
•
Adding additional logging which enables network administrators to monitor
attempts to gain unauthorized access to the AMF network.
Once the secure mode command is run on all nodes on an AMF network, the AMF
masters and AMF controllers manage the addition of AMF nodes and AMF areas to
the AMF network.
Use the
no
variant of this command to disable AMF secure mode on an AMF node.
Syntax
atmf secure-mode
no atmf secure-mode
Default
Secure mode is disabled by default.
Mode
Global Configuration
Usage
When an AMF network is running in AMF secure mode the
feature is automatically enabled. This restricts the
command to
users that are logged on to an AMF master. This feature cannot be disabled
independently of secure mode.
When AMF secure mode is enabled the AMF controllers and masters in the AMF
network form a group of certificate authorities. A node may only join a secure AMF
network once it has been authorized by a master or controller. When enabled, all
devices in the AMF network must be running in secure mode. Unsecured devices
will not be able to join a secure AMF network.
Example
To enable AMF secure mode on an AMF node, use the commands:
awplus#
configure terminal
awplus(config)#
atmf secure-mode
To disable AMF secure mode on an AMF node, use the commands:
awplus#
configure terminal
awplus(config)#
no atmf secure-mode
Related
Commands
