Sftp Configuration Examples; Password Authentication Enabled Sftp Server Configuration Example - HP MSR Series Configuration Manual

# Create a local device management user client002.
[RouterB] local-user client002 class manage
# Authorize the local user client002 to use the SSH service.
[RouterB-luser-manage-client002] service-type ssh
# Assign the user role network-admin to the local user client002.
[RouterB-luser-manage-client002] authorization-attribute user-role network-admin
[RouterB-luser-manage-client002] quit
3. Establish an SSH connection to the Stelnet server 192.168.1.40.
<RouterA> ssh2 192.168.1.40
Username: client002
Press CTRL+C to abort.
Connecting to 192.168.1.40 port 22.
The server is not authenticated. Continue? [Y/N]:y
Do you want to save the server public key? [Y/N]:n
Enter a character ~ and a dot to abort.
******************************************************************************
* Copyright (c) 2010-2015 Hewlett Packard Enterprise Development LP.
* Without the owner's prior written consent,
* no decompiling or reverse-engineering shall be allowed.
******************************************************************************
<RouterB>
Select Yes to access the server and download the server's host public key. At the next
connection attempt, the client authenticates the server by using the saved server's host public
key on the client.

SFTP configuration examples

Unless otherwise noted, devices in the configuration examples operate in non-FIPS mode.
When you configure SFTP on a device that operates in FIPS mode, follow these restrictions and
guidelines:
•
The modulus length of the key pair must be 2048 bits.
•
When the device acts as an SFTP server, only RSA key pairs are supported. Do not generate a
DSA key pair on the SFTP server.
Password authentication enabled SFTP server configuration
example
Network requirements
As shown in
•
The router acts as the SFTP server and uses password authentication.
•
The username and password of the client are saved on the router.
Establish an SFTP connection between the host and the router, so you can log in to the router to
manage and transfer files.
Figure 127:
422
*
*
*