Sftp Configuration Examples; Password Authentication Enabled Sftp Server Configuration Example - HP MSR2000 Configuration Manual

SFTP configuration examples

This section provides examples of configuring SFTP on routers.
Unless otherwise noted, the devices in the configuration examples are in non-FIPS mode.
If you configure an SFTP server in FIPS mode, follow these guidelines:
The modulus length of the key pair must be 2048 bits.
•
Do not generate a DSA key pair on the Stelnet server. Only RSA key pairs are supported.
•
Password authentication enabled SFTP server configuration
example
Network requirements
As shown in
assigned the user role network-admin to execute file management and transfer operations. The router
acts as the SFTP server and uses password authentication. The username and password of the client are
saved on the router.
Figure 65 Network diagram
Configuration procedure
1. Configure the SFTP server:
# Generate the RSA key pairs.
<Router> system-view
[Router] public-key local create rsa
The range of public key size is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
........................++++++
...................++++++
..++++++++
............++++++++
Create the key pair successfully.
# Enable the SSH server function.
[Router] ssh server enable
# Enable the SFTP server.
[Router] sftp server enable
# Assign an IP address to interface Ethernet 1/1. The client uses this address as the destination for
SSH connection.
Figure 65, you can log in to the router through the SFTP client that runs on the host and are
238