Configuring The Device As An Sftp Client; Sftp Client Configuration Task List; Specifying The Source Ip Address For Sftp Packets; Establishing A Connection To An Sftp Server - HPE FlexFabric 7900 Series Security Configuration Manual

Configuring the device as an SFTP client

SFTP client configuration task list

Tasks at a glance
(Optional.)

Specifying the source IP address for SFTP packets

(Required.)
(Optional.) Working with SFTP directories
(Optional.) Working with SFTP files
(Optional.) Displaying help information
(Optional.) Terminating the connection with the SFTP server
Specifying the source IP address for SFTP packets
As a best practice, specify the IP address of the loopback interface as the source address for SFTP
packets for the following purposes:
•
Ensuring the communication between the SFTP client and the SFTP server.
•
Improving the manageability of SFTP clients in authentication service.
To specify the source IP address for SFTP packets:
Step
1. Enter system view.
2. Specify the source
address for SFTP
packets.

Establishing a connection to an SFTP server

When you try to access an SFTP server, the device must use the server's host public key to
authenticate the server. If the server's host public key is not configured on the device, the device will
notify you to confirm whether to continue with the access.
•
If you choose to continue, the device accesses the server and downloads the server's host
public key.
•
If you choose to not continue, the connection cannot be established.
As a best practice, configure the server's host public key on the device in an insecure network.
After the connection is established, you can directly enter SFTP client view on the server to perform
file or directory operations, such as working with directories or files.
Establishing a connection to an SFTP server
Command
system-view
sftp client source { ip ip-address |
interface interface-type
interface-number }
153
Remarks
N/A
By default, the source IP address
for SFTP packets is not
configured. The SFTP packets
use the primary IP address of the
output interface specified in the
routing entry as their source IP
address.