HP VSR1000 Security Configuration Manual page 288

..++++++++
............++++++++
Create the key pair successfully.
# Generate a DSA key pair.
[RouterB] public-key local create dsa
The range of public key size is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
.++++++++++++++++++++++++++++++++++++++++++++++++++*
........+......+.....+......................................+
...+.................+..........+...+
Create the key pair successfully.
# Enable the SFTP server function.
[RouterB] sftp server enable
# Assign an IP address to interface GigabitEthernet 1/0. The client uses this address as the
destination address for SSH connection.
[RouterB] interface gigabitethernet 1/0
[RouterB-GigabitEthernet1/0] ip address 192.168.0.1 255.255.255.0
[RouterB-GigabitEthernet1/0] quit
# Import the peer public key from the file pubkey, and name it routerkey.
[RouterB] public-key peer routerkey import sshkey pubkey
# Create an SSH user client001. Specify the service type as sftp and the authentication method as
publickey for the user. Assign the public key routerkey to the user.
[RouterB] ssh user client001 service-type sftp authentication-type publickey assign
publickey routerkey
# Create a local device management user client001. Specify the service type as ssh for the user.
Assign the user role network-admin and the working directory flash:/ to the user.
[RouterB] local-user client001 class manage
[RouterB-luser-manage-client001] service-type ssh
[RouterB-luser-manage-client001] authorization-attribute user-role network-admin
work-directory flash:/
[RouterB-luser-manage-client001] quit
3. Establish a connection between the SFTP client and the SFTP server:
# Establish a connection to the SFTP server and enter SFTP client view.
<RouterA> sftp 192.168.0.1 identity-key rsa
Username: client001
Press CTRL+C to abort.
Connecting to 192.168.0.1 port 22.
The server is not authenticated. Continue? [Y/N]:y
Do you want to save the server public key? [Y/N]:n
sftp>
# Display files under the current directory of the server, delete the file z, and verify the result.
sftp> dir -l
-rwxrwxrwx 1 1
-rwxrwxrwx 1 1
1 301 Dec 18 14:11 010.pub
1 301 Dec 18 14:12 011.pub
278