HP MSR Series Configuration Manual page 10

Configuring the device as an Stelnet client ·················································································· 400
Stelnet client configuration task list ······················································································ 400
Generating local DSA or RSA key pairs················································································ 400
Specifying the source IP address for SSH packets ································································· 400
Establishing a connection to an Stelnet server ······································································· 401
Configuring the device as an SFTP client ···················································································· 403
SFTP client configuration task list ······················································································· 403
Generating local DSA or RSA key pairs················································································ 403
Specifying the source IP address for SFTP packets ································································ 403
Establishing a connection to an SFTP server ········································································· 404
Working with SFTP directories ··························································································· 405
Working with SFTP files ···································································································· 405
Displaying help information ································································································ 406
Terminating the connection with the SFTP server ··································································· 406
Configuring the device as an SCP client ····················································································· 406
SCP client configuration task list ························································································· 406
Generating local DSA or RSA key pairs················································································ 406
Establishing a connection to an SCP server ·········································································· 407
Displaying and maintaining SSH ······························································································· 408
Stelnet configuration examples ································································································· 408
Password authentication enabled Stelnet server configuration example ······································ 409
Publickey authentication enabled Stelnet server configuration example······································· 411
Password authentication enabled Stelnet client configuration example ······································· 417
Publickey authentication enabled Stelnet client configuration example ········································ 420
SFTP configuration examples ··································································································· 422
Password authentication enabled SFTP server configuration example ········································ 422
Publickey authentication enabled SFTP client configuration example ········································· 424
SCP configuration example ······································································································ 428
Network requirements ······································································································ 428
Configuration procedure ··································································································· 428
NETCONF over SSH configuration example ················································································ 429
Network requirements ······································································································ 430
Configuration procedure ··································································································· 430
Verifying the configuration ································································································· 431
Configuring SSL ··········································································· 432
Overview ······························································································································ 432
SSL security services ······································································································· 432
SSL protocol stack ··········································································································· 432
Feature and hardware compatibility ··························································································· 433
FIPS compliance···················································································································· 433
SSL configuration task list ········································································································ 433
Configuring an SSL server policy ······························································································· 434
Configuring an SSL client policy ································································································ 435
Displaying and maintaining SSL ································································································ 436
SSL server policy configuration example ····················································································· 436
Configuring ASPF ········································································ 439
Overview ······························································································································ 439
ASPF basic concepts ······································································································· 439
ASPF inspections ············································································································ 440
Command and hardware compatibility ························································································ 442
ASPF configuration task list ······································································································ 442
Configuring an ASPF policy ······································································································ 442
Applying an ASPF policy to an interface ······················································································ 443
Applying an ASPF policy to a zone pair ······················································································ 443
Displaying and maintaining ASPF ······························································································ 444
ASPF configuration examples ··································································································· 445
ASPF FTP application inspection configuration example ·························································· 445
ASPF TCP application inspection configuration example ························································· 446
ASPF H.323 application inspection configuration example ······················································· 447
ASPF application to a zone pair configuration example ···························································· 448
viii