HP A6600 Configuration Manual page 9

Configuring first-time authentication support ···································································································· 314
Establishing connection between the SSH client and server ·········································································· 315
Displaying and maintaining SSH ······························································································································· 315
SSH server configuration examples ··························································································································· 316
Configuring the router to act as password authentication server ·································································· 316
Configuring the router to act as public key authentication server ································································· 318
SSH client configuration examples····························································································································· 323
Configuring router to act as password authentication client ·········································································· 323
Configuring router to act as public key authentication client ········································································· 326
Configuring SFTP ····················································································································································· 329
Configuring the router as an SFTP server ·················································································································· 329
Configuration prerequisites ································································································································ 329
Enabling the SFTP server ···································································································································· 329
Configuring the SFTP connection idle timeout period ····················································································· 330
Configuring the router an SFTP client ························································································································ 330
Specifying a source IP address or interface for the SFTP client ······································································ 330
Establishing a connection to the SFTP server ···································································································· 331
Working with SFTP directories ··························································································································· 331
Working with SFTP files ······································································································································ 332
Displaying help information ······························································································································· 333
Terminating the remote SFTP server connection ······························································································· 333
SFTP client configuration example ····························································································································· 333
SFTP server configuration example ···························································································································· 337
Configuring SSL ······················································································································································· 340
SSL security mechanism ······································································································································ 340
SSL protocol stack ··············································································································································· 341
Configuration task list ·················································································································································· 341
Configuring SSL server policy ····································································································································· 341
Configuration prerequisites ································································································································ 341
Configuration procedure ···································································································································· 342
Configuring an SSL client policy ································································································································ 343
Configuration prerequisites ································································································································ 343
Configuration procedure ···································································································································· 343
Displaying and maintaining SSL ································································································································ 343
Troubleshooting SSL ····················································································································································· 344
SSL handshake failure ········································································································································· 344
Configuring a firewall ············································································································································· 345
Packet filtering firewall········································································································································ 345
ASPF ····································································································································································· 346
Configuring a packet filtering firewall ······················································································································· 348
Configuration task list ········································································································································· 348
Enabling the firewall function····························································································································· 348
Configuring the firewall default filtering action ······························································································· 349
Configuring packet filtering on an interface ···································································································· 349
Displaying and maintaining a packet filtering firewall ··················································································· 350
Packet filtering firewall configuration example ································································································ 351
Configuring an ASPF ··················································································································································· 352
Configuration task list ········································································································································· 352
Enabling the firewall function····························································································································· 352
Configuring an ASPF policy ······························································································································· 353
Applying an ASPF policy to an interface ·········································································································· 353
Configuring port mapping ································································································································· 353
Displaying and maintaining ASPF ····················································································································· 354
ix