HP FlexFabric 5700 Series Security Configuration Manual page 325

In an insecure network, HP recommends that you configure the server's host public key on the device.
After the connection is established, you can directly enter SFTP client view on the server to perform file or
directory operations.
To establish a connection to an SFTP server:
Task Command
•
•
Establish a
•
connection to an
SFTP server.
•
In non-FIPS mode, establish a connection to an IPv4 SFTP
server:
sftp server [ port-number ] [ identity-key { dsa | ecdsa |
rsa } | prefer-compress zlib | prefer-ctos-cipher { 3des |
aes128 | aes256 | des } | prefer-ctos-hmac { md5 |
md5-96 | sha1 | sha1-96 } | prefer-kex
{ dh-group-exchange | dh-group1 | dh-group14 } |
prefer-stoc-cipher { 3des | aes128 | aes256 | des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] *
[ dscp dscp-value | publickey keyname | source
{ interface interface-type interface-number | ip
ip-address } ] *
In FIPS mode, establish a connection to an IPv4 SFTP
server:
sftp server [ port-number ] [ identity-key { ecdsa | rsa } |
prefer-compress zlib | prefer-ctos-cipher { aes128 |
aes256 } | prefer-ctos-hmac { sha1 | sha1-96 } |
prefer-kex dh-group14 | prefer-stoc-cipher { aes128 |
aes256 } | prefer-stoc-hmac { sha1 | sha1-96 } ] *
[ publickey keyname | source { interface interface-type
interface-number | ip ip-address } ] *
In non-FIPS mode, establish a connection to an IPv6 SFTP
server:
sftp ipv6 server [ port-number ] [ -i interface-type
interface-number ] [ identity-key { dsa | ecdsa | rsa } |
prefer-compress zlib | prefer-ctos-cipher { 3des |
aes128 | aes256 | des } | prefer-ctos-hmac { md5 |
md5-96 | sha1 | sha1-96 } | prefer-kex
{ dh-group-exchange | dh-group1 | dh-group14 } |
prefer-stoc-cipher { 3des | aes128 | aes256 | des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] *
[ dscp dscp-value | publickey keyname | source
{ interface interface-type interface-number | ipv6
ipv6-address } ] *
In FIPS mode, establish a connection to an IPv6 SFTP
server:
sftp ipv6 server [ port-number ] [ -i interface-type
interface-number ] [ identity-key { ecdsa | rsa } |
prefer-compress zlib | prefer-ctos-cipher { aes128 |
aes256 } | prefer-ctos-hmac { sha1 | sha1-96 } |
prefer-kex dh-group14 | prefer-stoc-cipher { aes128 |
aes256 } | prefer-stoc-hmac { sha1 | sha1-96 } ] *
[ publickey keyname | source { interface interface-type
interface-number | ipv6 ipv6-address } ] *
313
Remarks
Available in user view.