HP 5920 Series Configuration Manual page 293

In an insecure network, HP recommends that you configure the server's host public key on the device.
After the connection is established, you can directly enter SFTP client view on the server to perform
operations, such as working with directories or files.
To establish a connection to an SFTP server:
Task Command
•
•
Establish a
connection to an •
SFTP server.
•
In non-FIPS mode, establish a connection to an IPv4 SFTP
server:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key { dsa | ecdsa | rsa } |
prefer-compress zlib | prefer-ctos-cipher { 3des |
aes128 | aes256 | des } | prefer-ctos-hmac { md5 |
md5-96 | sha1 | sha1-96 } | prefer-kex
{ dh-group-exchange | dh-group1 | dh-group14 } |
prefer-stoc-cipher { 3des | aes128 | aes256 | des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] *
[ dscp dscp-value | publickey keyname | source
{ interface interface-type interface-number | ip
ip-addres} ] *
In FIPS mode, establish a connection to an IPv4 SFTP
server:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key { ecdsa | rsa } |
prefer-compress zlib | prefer-ctos-cipher { aes128 |
aes256 } | prefer-ctos-hmac { sha1 | sha1-96 } |
prefer-kex dh-group14 | prefer-stoc-cipher { aes128 |
aes256 } | prefer-stoc-hmac { sha1 | sha1-96 } ] *
[ publickey keyname | source { interface interface-type
interface-number | ip ip-address } ] *
In non-FIPS mode, establish a connection to an IPv6 SFTP
server:
sftp ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name ] [ -i interface-type interface-number ]
[ identity-key { dsa | ecdsa | rsa } | prefer-compress zlib
| prefer-ctos-cipher { 3des | aes128 | aes256 | des } |
prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-96 } |
prefer-kex { dh-group-exchange | dh-group1 |
dh-group14 } | prefer-stoc-cipher { 3des | aes128 |
aes256 | des } | prefer-stoc-hmac { md5 | md5-96 |
sha1 | sha1-96 } ] * [ dscp dscp-value | publickey
keyname | source { interface interface-type
interface-number | ipv6 ipv6-addres} ] *
In FIPS mode, establish a connection to an IPv6 SFTP
server:
sftp ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name ] [ -i interface-type interface-number ]
[ identity-key { ecdsa | rsa } | prefer-compress zlib |
prefer-ctos-cipher { aes128 | aes256 } |
prefer-ctos-hmac { sha1 | sha1-96 } | prefer-kex
dh-group14 | prefer-stoc-cipher { aes128 | aes256 } |
prefer-stoc-hmac { sha1 | sha1-96 } ] * [ publickey
keyname | source { interface interface-type
interface-number | ipv6 ipv6-addres} ] *
282
Remarks
Available in user view.
The ecdsa keyword is
available in Release
2311P04 and later
versions.