S12700 V200R013C00 Command Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.

About This Document
Using the Command Query Tool
Basic Configurations Commands
- CLI Overview Commands
- EasyDeploy Commands
- USB-based Deployment Configuration Commands
- First Login Commands
- UI Configuration Commands
- User Login Configuration Commands
- File Management Commands
- Configuring System Startup Commands
- ISSU Configuration Commands
- Upgrade Commands
- Open Source Software Declaration Information Checking Commands
Device Management Commands
- Device Status Checking Commands
- Hardware Configuration Commands
- CSS Configuration Commands
- SVF Commands
- OPS Configuration Commands
- OIDS Configuration Commands
- Energy-saving Configuration Commands
- Information Center Configuration Commands
- Fault Management Commands
- SAID Configuration Commands
- NTP Configuration Commands
- PTP Configuration Commands
- Clock Synchronization Commands
Interface Management Commands
- Basic Interface Configuration Commands
- Ethernet Interface Configuration Commands
- Logical Interface Configuration Commands
Ethernet Switching Configuration Commands
- MAC Address Table Configuration Commands
- Link Aggregation Commands
- VLAN Configuration Commands
- VLAN Aggregation Configuration Commands
- VLAN Switch Configuration Commands
- MUX VLAN Configuration Commands
- VLAN Termination Configuration Commands
- Voice VLAN Configuration Commands
- QinQ Configuration Commands
- VLAN Mapping Configuration Commands
- GVRP Configuration Commands
- VCMP Configuration Commands
- STP/RSTP/MSTP/VBST Configuration Commands
- SEP Configuration Commands
- RRPP Configuration Commands
- ERPS (G.8032) Configuration Commands
- Loop Detection Configuration Commands
- Loopback Detection Configuration Commands
- Layer 2 Protocol Transparent Transmission Commands
IP Service Commands
- IPv4 Configuration Commands
- ARP Configuration Commands
- DHCP Configuration Commands
- DNS Configuration Commands
- mDNS Gateway Configuration Commands
- mDNS Relay Configuration Commands
- UDP Helper Configuration Commands
- IP Performance Optimization Configuration Commands
- Basic IPv6 Configuration Commands
- DHCPv6 Configuration Commands
- IPv6 DNS Configuration Commands
- IPv6 over IPv4 Tunnel Configuration Commands
- IPv4 over IPv6 Tunnel Configuration Commands
IP Unicast Routing Commands
- Static Route Configuration Commands
- RIP Configuration Commands
- RIPng Configuration Commands
- OSPF Configuration Commands
- OSPFv3 Configuration Commands
- IPv4 IS-IS Configuration Commands
- IPv6 IS-IS Configuration Commands
- BGP Configuration Commands
- Routing Policy Configuration Commands
- IP Routing Table Management Commands
- PBR Configuration Commands
IP Multicast Commands
- IGMP Configuration Commands
- MLD Configuration Commands
- PIM (IPv4) Configuration Commands
- PIM (IPv6) Configuration Commands
- MSDP Configuration Commands
- Multicast VPN Configuration Commands
- Layer 3 Multicast CAC Commands
- Multicast Route Management (IPv4) Commands
- Multicast Route Management (IPv6) Commands
- VLAN-based IGMP Snooping Configuration Commands
- VSI-based IGMP Snooping Configuration Commands
- MLD Snooping Configuration Commands
- Static Multicast MAC Address Configuration Commands
- Multicast VLAN Configuration Commands
- VLAN-based Layer 2 Multicast CAC Commands
- VSI-based Layer 2 Multicast CAC Commands
- Multicast Network Management Commands
MPLS Configuration Commands
- Basic MPLS Configuration Commands
- MPLS QoS Configuration Commands
- MPLS TE Configuration Commands
- MPLS OAM Configuration Command
VPN Configuration Commands
- GRE Configuration Commands
- IPSec Configuration Commands (IPSec Encryption)
- BGP/MPLS IP VPN Configuration Commands
- VLL Configuration Commands
- PWE3 Configuration Commands
- VPLS Configuration Commands
- L2VPN Access to L3VPN Configuration Commands
WLAN-AC Commands
- WLAN Service Configuration Commands
- WLAN Radio Resource Management Configuration Commands
- WLAN Spectrum Analysis Configuration Commands
- WLAN Roaming Commands
- WLAN QoS Configuration Commands
- WLAN Location Configuration Commands
- WLAN Security Configuration Commands
- WLAN WDS Configuration Commands
- WLAN Mesh Configuration Commands
- Vehicle-Ground Fast Link Handover Configuration Commands
- Hotspot2.0 Configuration Commands
- IoT AP Configuration Commands
- WLAN Traffic Optimization Commands
- Centralized License Control Commands
- WLAN Reliability Commands
- WMI Commands
Reliability Commands
- BFD Configuration Commands
- VRRP Configuration Commands
- NSR Configuration Commands
- DLDP Configuration Commands
- Smart Link And Monitor Link Configuration Commands
- MAC Swap Loopback Configuration Commands
- EFM Configuration Commands
- CFM Configuration Commands
- Y.1731 Configuration Commands
User Access and Authentication Commands
- AAA Configuration Commands
- RADIUS Configuration Commands
- HWTACACS Configuration Commands
- NAC Configuration Commands (Unified Mode)
- NAC Configuration Commands (Common Mode)
- Policy Association Configuration Commands
- PPPoE Configuration Commands
- DAA Configuration Commands
- IP Session Configuration Commands
Security Commands
- ACL Configuration Commands
- Reflective ACL Commands
- Local Attack Defense Configuration Commands
- Attack Defense Configuration Commands
- MFF Configuration Commands
- Traffic Suppression and Storm Control Configuration Commands
- ARP Security Configuration Commands
- Port Security Configuration Commands
- DHCP Snooping Configuration Commands
- ND Snooping Configuration Commands
- PPPoE+ Configuration Commands
- IP Source Guard Configuration Commands
- SAVI Configuration Commands
- URPF Configuration Commands
- Keychain Configuration Commands
- MPAC Configuration Commands
- Traffic Isolation Between the Service and Management planes Configuration Commands
- Security Risk Commands
- PKI Configuration Commands
QoS Commands
- MQC Configuration Commands
- Priority Mapping Commands
- Traffic Policing, Traffic Shaping, and Interface-based Rate Limiting Commands
- Congestion Avoidance and Congestion Management Commands
- Filtering Configuration Commands
- Redirection Configuration Commands
- Statistics Configuration Commands
- ACL-based Simplified Traffic Policy Commands
- HQoS Commands
Network Management and Monitoring Commands
- SNMP Configuration Commands
- RMON and RMON2 Configuration Commands
- LLDP Configuration Commands
- Performance Management Commands
- iPCA Configuration Commands
- NQA Configuration Commands
- Service Diagnosis Configuration Commands
- Mirroring Configuration Commands
- Packet Capture Configuration Command
- Traffic Distribution Commands
- NetStream Configuration Commands
- sFlow Configuration Commands
- Ping and Tracert Configuration Commands
- TWAMP Light Configuration Commands
- NETCONF Configuration Commands
- Intelligent Video O&M Configuration Commands
- eMDI Configuration Commands
Free Mobility and Service Chaining Commands
- Free Mobility Configuration Commands
- Service Chain Configuration Commands
VXLAN Commands
- VXLAN Configuration Commands
Upgrade-compatible Commands Reference
- Device Management Compatible Commands
- Ethernet Switching Compatible Commands
- IP Service Compatible Commands
- IP Routing Compatible Commands
- MPLS compatible command
- VPN compatible command
- WLAN Compatible Commands
- User Access and Authentication Compatible Commands
- Security Compatible Commands
- Network Management Compatible Commands

Rate and give feedback:

Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).

capwap sensitive-info psk

Function

The capwap sensitive-info psk command modifies the pre-shared key (PSK) used for sensitive information encryption.

The undo capwap sensitive-info psk command restores the default PSK used for sensitive information encryption.

The default PSK used for sensitive information encryption is WLAN-KEYSTRING-AES256.

Format

capwap sensitive-info psk psk-value

undo capwap sensitive-info psk

Parameters

Parameter	Description	Value
psk-value	Specifies the PSK used for sensitive information encryption.	The value can be a string of 48 or 68 characters in cipher text (for example, *%^%#u(Oz:BL,QKYZw%-JWCP8aGC,="C&M'OIGmt.V(%^%#) or a string of 6 to 32 characters in plain text (for example, a1234567*). The key must contain at least two of the following: uppercase letters, lowercase letters, digits, and special characters except the question mark (?) and space.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Sensitive information transmitted between the AC and APs is encrypted, such as the FTP user name/password, AP login user name/password, and service configuration-related keys. You can use the capwap sensitive-info psk command to modify the PSK used for sensitive information encryption.

NOTE:

To ensure STA security, you are advised to modify the PSK value.

After the configuration is complete, all online APs will go offline from the AC and go online again.

Precautions

In hot backup (HSB) and dual-link cold backup scenarios, the PSKs configured on the active and standby ACs must be the same. Otherwise, APs cannot set up CAPWAP tunnels with the standby AC.

The pre-shared key for encrypting sensitive information cannot be modified when an AP is being upgraded on the

Example

# Modify the PSK for encrypting sensitive information to z0020011@11.

<HUAWEI> system-view
[HUAWEI] capwap sensitive-info psk z0020011@11
Warning: This operation may cause devices using CAPWAP connections to go offline. Continue? [Y/N]:y

Related Topics

display capwap configuration

Translation

简体中文

Download

Updated: 2019-04-09

Document ID: EDOC1100065659

Downloads: 88

Average rating:

This Document Applies to these Products

Related Version

Reminder

S12700 V200R013C00 Command Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.

capwap sensitive-info psk

Function

Format

Parameters

Views

Default Level

Usage Guidelines

Example

About Huawei

How to Buy

Partner

Resources

Others

Enterprise App

Reminder

Enterprise

Corporate

Consumer

Carrier

Africa

Latin America

Middle East

Asia Pacific

North America

Europe

S12700 V200R013C00 Command Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.

capwap sensitive-info psk

Function

Format

Parameters

Views

Default Level

Usage Guidelines

Example

About Huawei

How to Buy

Partner

Resources

Others

Enterprise App