Configuring the device as an SFTP client ·················································································································· 281

SFTP client configuration task list ······················································································································· 281

Specifying the source IP address for SFTP packets ·························································································· 281

Establishing a connection to an SFTP server ···································································································· 281

Working with SFTP directories ··························································································································· 283

Working with SFTP files ······································································································································ 283

Displaying help information ······························································································································· 283

Terminating the connection with the SFTP server ····························································································· 284

Configuring the device as an SCP client ··················································································································· 284

Displaying and maintaining SSH ······························································································································· 286

Stelnet configuration examples ··································································································································· 286

Password authentication enabled Stelnet server configuration example ······················································ 286

Publickey authentication enabled Stelnet server configuration example ······················································· 289

Password authentication enabled Stelnet client configuration example ························································ 294

Publickey authentication enabled Stelnet client configuration example ························································ 297

SFTP configuration examples ······································································································································ 299

Password authentication enabled SFTP server configuration example ·························································· 299

Publickey authentication enabled SFTP client configuration example ··························································· 301

SCP configuration examples ······································································································································· 304

SCP file transfer with password authentication ································································································ 305

NETCONF over SSH configuration example with password authentication ························································ 306

Network requirements ········································································································································· 306

Configuration procedure ···································································································································· 307

Verifying the configuration ································································································································· 308

Configuring SSL ······················································································································································· 309

Overview ······································································································································································· 309

SSL security services ············································································································································ 309

SSL protocol stack ··············································································································································· 309

FIPS compliance ··························································································································································· 310

SSL configuration task list ············································································································································ 310

Configuring an SSL server policy ······························································································································· 310

Configuring an SSL client policy ································································································································ 312

Displaying and maintaining SSL ································································································································· 313

Configuring IP source guard ·································································································································· 314

Static IP source guard binding entries ··············································································································· 315

Dynamic IP source guard binding entries ········································································································· 315

IP source guard configuration task list ······················································································································· 316

Configuring the IPv4 source guard function ·············································································································· 316

Enabling IPv4 source guard on an interface ···································································································· 316

Configuring a static IPv4 source guard binding entry····················································································· 317

Configuring the IPv6 source guard function ·············································································································· 318

Enabling IPv6 source guard on an interface ···································································································· 318

Configuring a static IPv6 source guard binding entry····················································································· 319

Displaying and maintaining IP source guard ············································································································ 319

IP source guard configuration examples ··················································································································· 320

Static IPv4 source guard configuration example ····························································································· 320

Dynamic IPv4 source guard using DHCP snooping configuration example ················································· 322

Dynamic IPv4 source guard using DHCP relay configuration example ························································ 323

Static IPv6 source guard configuration example ····························································································· 324

Dynamic IPv6 source guard using DHCPv6 snooping configuration example ············································· 324

Configuring ARP attack protection ························································································································· 326

ARP attack protection configuration task list ············································································································· 326

vii