Establishing A Connection To An Sftp Server - HP MSR Series Configuration Manual

Step
1. Enter system view.
2. Specify the source
address for SFTP
packets.

Establishing a connection to an SFTP server

When you try to access an SFTP server, the device must use the server's host public key to
authenticate the server. If the server's host public key is not configured on the device, the device will
notify you to confirm whether to continue with the access.
•
If you choose to continue, the device accesses the server and downloads the server's host
public key.
•
If you choose to not continue, the connection cannot be established.
In an insecure network, Hewlett Packard Enterprise recommends that you configure the server's
host public key on the device.
After the connection is established, you can directly enter SFTP client view on the server to perform
file or directory operations.
To establish a connection to an IPv4 SFTP server:
Task
Establish a
connection to an
IPv4 SFTP
server.
To establish a connection to an IPv6 SFTP server:
Command
system-view
•
Specify the source IPv4 address
for SFTP packets:
sftp client source { ip ip-address
| interface interface-type
interface-number }
•
Specify the source IPv6 address
for SFTP packets:
sftp client ipv6 source { ipv6
ipv6-address | interface
interface-type interface-number }
Command
•
In non-FIPS mode:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key { dsa | rsa } |
prefer- compress zlib | prefer-ctos-cipher { 3des |
aes128 | aes256 | des } | prefer-ctos-hmac { md5 |
md5-96 | sha1 | sha1-96 } | prefer-kex
{ dh-group-exchange | dh-group1 | dh-group14 } |
prefer-stoc-cipher { 3des | aes128 | aes256 | des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 |
sha1-96 } ] * [ dscp dscp-value | publickey keyname
| source { interface interface-type interface-number |
ip ip-address } ] *
•
In FIPS mode:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key rsa |
prefer-compress zlib | prefer-ctos-cipher { aes128
| aes256 } | prefer-ctos-hmac { sha1 | sha1-96 } |
prefer-kex dh-group14 | prefer-stoc-cipher
{ aes128 | aes256 } | prefer-stoc-hmac { sha1 |
sha1-96 } ] * [ publickey keyname | source
{ interface interface-type interface-number | ip
ip-address } ] *
404
Remarks
N/A
By default, the source IP address
for SFTP packets is not
configured.
The IPv4 SFTP packets use the
primary IP address of the output
interface specified in the routing
entry as their source IP address.
The IPv6 SFTP packets
automatically select an IPv6
address as their source address
in compliance with RFC 3484.
Remarks
Available in user view.