Enabling The Sftp Server Function; Configuring The User Interfaces For Stelnet Clients; Configuring A Client's Host Public Key - H3C S5830V2 Security Configuration Manual

Enabling the SFTP server function

This SFTP server function enables clients to log in to the device through SFTP.
To enable the SFTP server function:
Step
1. Enter system view.
2. Enable the SFTP server
function.

Configuring the user interfaces for Stelnet clients

Dependent on different SSH applications, an SSH client can be an Stelnet, SFTP, or SCP client.
The Stelnet client accesses the device through a VTY user interface. You must configure the user interfaces
for SSH clients to allow SSH login. The configuration takes effect only on the clients at next login.
The SFTP or SCP client accesses the device without using a VTY user interface.
To configure the user interfaces for Stelnet clients:
Step
1. Enter system view.
2. Enter VTY user interface view.
3. Set the login authentication
mode to scheme.

Configuring a client's host public key

If the server uses publickey authentication to authentication a client, it compares the SSH username and
host public key that it receives from the client with those locally saved. If the information is consistent, it
checks the digital signature that the client sends. The digital signature is calculated by the client
according to the private key that corresponds to the host public key.
For SSH servers that use publickey authentication, password-publickey authentication, or any
authentication, you must configure the client's DSA or RSA host public key on the server, and specify the
corresponding host private key on the client to generate the digital signature, so that the client can pass
publickey authentication with correct digital signature. If the device serves as a client, corresponding host
private key is specified by the specified public key algorithm.
You can manually configure the host public key of an SSH client on the server, or import it from the public
key file:
Command
system-view
sftp server enable
Command
system-view
user-interface vty number
[ ending-number ]
authentication-mode scheme
164
Remarks
N/A
By default, the SFTP server function
is disabled.
Remarks
N/A
N/A
By default, the authentication
mode is password.
For more information about this
command, see Fundamentals
Command Reference.