Network Requirements; Configuration Procedure - HP 6600 Security Configuration Manual

Network requirements

As shown in
securely transfer files with Router B through Router A. Router B uses the password authentication method
and the client's username and password are saved on Router B.
Figure 120 Network diagram

Configuration procedure

1. Configure the SCP server:
# Generate RSA key pairs.
<RouterB> system-view
[RouterB] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++++++++++++++++++
+++++++++++++++++++++++
+++++
+++++
# Generate a DSA key pair.
[RouterB] public-key local create dsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++
# Enable the SSH server function.
[RouterB] ssh server enable
# Configure an IP address for GigabitEthernet 3/0/1, which the client will use as the destination
for SCP connection.
[RouterB] interface gigabitethernet 3/0/1
[RouterB-GigabitEthernet3/0/1] ip address 192.168.0.1 255.255.255.0
[RouterB-GigabitEthernet3/0/1] quit
# Set the authentication mode of the user interface to AAA.
Figure 120, Router A acts as an SCP client and Router B acts as an SCP server. A user can
347