H3C SOHO IE4300, Command Reference Manual

Page: 194 / 3296

11
configuration encrypt
Use
configuration encrypt
to enable configuration encryption.
Use
undo configuration encrypt
to disable configuration encryption.
Syntax
configuration encrypt { private-key | public-key }
undo configuration encrypt
Default
Configuration encryption is disabled.
Views
System view
Predefined user roles
network-admin
Parameters
private-key
: Encrypts configuration with a private key. All devices running Comware 7 software
use the same private key.
public-key
: Encrypts configuration with a public key. All devices running Comware 7 software
use the same public key.
Usage guidelines
Configuration encryption enables the device to automatically encrypt a configuration file when saving
the running configuration to the file.
Any devices running Comware 7 software can decrypt the encrypted configuration file. To prevent an
encrypted file from being decoded by unauthorized users, make sure the file is accessible only to
authorized users.
Examples
# Enable the public-key method for configuration encryption.
<Sysname> system-view
[Sysname] configuration encrypt public-key
configuration replace file
Use configuration replace file to perform configuration rollback.
Syntax
configuration replace file filename
Views
System view
Predefined user roles
network-admin
Parameters
filename
: Specifies the path of the replacement configuration file, a string of up to 255 characters.
The file must be a .cfg file. The file and file path must be valid and on the local system.