HP VSR1000 Security Configuration Manual page 267

Virtual services router
Table of Contents

Advertisement

In an insecure network, HP recommends that you configure the server's host public key on the device.
After the connection is established, you can directly enter SFTP client view on the server to perform
operations, such as working with directories or files.
To establish a connection to an SFTP server:
Task
Command
Establish a
connection to an
SFTP server.
In non-FIPS mode, establish a connection to an IPv4 SFTP
server:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key { dsa | rsa } | prefer-
compress zlib | prefer-ctos-cipher { 3des | aes128 |
aes256 | des } | prefer-ctos-hmac { md5 | md5-96 |
sha1 | sha1-96 } | prefer-kex { dh-group-exchange |
dh-group1 | dh-group14 } | prefer-stoc-cipher { 3des |
aes128 | aes256 | des } | prefer-stoc-hmac { md5 |
md5-96 | sha1 | sha1-96 } ] * [ dscp dscp-value |
publickey keyname | source { interface interface-type
interface-number | ip ip-address } ] *
In FIPS mode, establish a connection to an IPv4 SFTP
server:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key rsa | prefer-compress
zlib | prefer-ctos-cipher { aes128 | aes256 } |
prefer-ctos-hmac { sha1 | sha1-96 } | prefer-kex
dh-group14 | prefer-stoc-cipher { aes128 | aes256 } |
prefer-stoc-hmac { sha1 | sha1-96 } ] * [ publickey
keyname | source { interface interface-type
interface-number | ip ip-address } ] *
In non-FIPS mode, establish a connection to an IPv6 SFTP
server:
sftp ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name ] [ -i interface-type interface-number ]
[ identity-key { dsa | rsa } | prefer-compress zlib |
prefer-ctos-cipher { 3des | aes128 | aes256 | des } |
prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-96 } |
prefer-kex { dh-group-exchange | dh-group1 |
dh-group14 } | prefer-stoc-cipher { 3des | aes128 |
aes256 | des } | prefer-stoc-hmac { md5 | md5-96 |
sha1 | sha1-96 } ] * [ dscp dscp-value | publickey
keyname | source { interface interface-type
interface-number | ipv6 ipv6-address } ] *
In FIPS mode, establish a connection to an IPv6 SFTP
server:
sftp ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name ] [ -i interface-type interface-number ]
[ identity-key rsa| prefer-compress zlib |
prefer-ctos-cipher { aes128 | aes256 } |
prefer-ctos-hmac { sha1 | sha1-96 } | prefer-kex
dh-group14 | prefer-stoc-cipher { aes128 | aes256 } |
prefer-stoc-hmac { sha1 | sha1-96 } ] * [ publickey
keyname | source { interface interface-type
interface-number | ipv6 ipv6-address } ] *
257
Remarks
Available in user view.

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents