HP VSR1000 Security Configuration Manual page 287

After login, you are assigned the user role network-admin to execute file management and transfer
•
operations.
Router B acts as the SFTP server and uses publickey authentication and the RSA public key
•
algorithm.
Figure 78 Network diagram
Configuration procedure
In the server configuration, the client's host public key is required. Use the client software to generate the
RSA key pairs on the client before configuring the SFTP server.
1. Configure the SFTP client:
# Assign an IP address to interface GigabitEthernet 1/0.
<RouterA> system-view
[RouterA] interface gigabitethernet 1/0
[RouterA-GigabitEthernet1/0 ip address 192.168.0.2 255.255.255.0
[RouterA-GigabitEthernet1/0] quit
# Generate the RSA key pairs.
[RouterA] public-key local create rsa
The range of public key size is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
........................++++++
...................++++++
..++++++++
............++++++++
Create the key pair successfully.
# Export the host public key to the file pubkey.
[RouterA] public-key local export rsa ssh2 pubkey
[RouterA] quit
# Transmit the public key file pubkey to the server through FTP or TFTP. (Details not shown.)
2. Configure the SFTP server:
# Generate the RSA key pairs.
<RouterB> system-view
[RouterB] public-key local create rsa
The range of public key size is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
........................++++++
...................++++++
277