Sftp Server Configuration Example - H3C S9500E Series Security Configuration Manual

-rwxrwxrwx
sftp-client>
Terminate the connection to the remote SFTP server.
sftp-client> quit
Bye
Connection closed.
<SwitchA>

SFTP server configuration example

By default, Ethernet interfaces, VLAN interfaces, and aggregate interfaces are in the state of DOWN. To
configure such an interface, use the undo shutdown command to bring it up first.
Network requirements
An SSH connection is established between the host and the switch. See Figure 49. The host, an
SFTP client, logs into the switch for file management and file transfer. An SSH user uses password
authentication with the username being client002 and the password being aabbcc. The
username and password are saved on the switch.
Figure 49 Network diagram for SFTP server configuration
Configuration procedure
Configure the SFTP server
1.
Generate RSA and DSA key pairs and enable the SSH server.
<Switch> system-view
[Switch] public-key local create rsa
[Switch] public-key local create dsa
[Switch] ssh server enable
Enable the SFTP server.
[Switch] sftp server enable
Configure an IP address for VLAN-interface 1, which the client will use as the destination for SSH
connection.
[Switch] interface vlan-interface 1
[Switch-Vlan-interface1] ip address 192.168.1.45 255.255.255.0
[Switch-Vlan-interface1] quit
Set the authentication mode of the user interfaces to AAA.
[Switch] user-interface vty 0 4
1 noone nogroup 283 Sep 02 06:36 puk
151