HPE FlexNetwork 5510 HI Series Security Configuration Manual page 363

Task Command
vpn-instance-name ] { put | get } source-file-name
[ destination-file-name ] [ identity-key { ecdsa |
rsa | { x509v3-ecdsa-sha2-nistp384
x509v3-ecdsa-sha2-nistp256
domain-name } | prefer-compress zlib
prefer-ctos-cipher { aes128-cbc | aes256-cbc |
aes128-ctr | aes192-ctr
aes128-gcm | aes256-gcm } | prefer-ctos-hmac
{ sha1 | sha1-96 | sha2-256 | sha2-512 } |
prefer-kex {
ecdh-sha2-nistp256 | ecdh-sha2-nistp384 } |
prefer-stoc-cipher { aes128-cbc | aes256-cbc |
aes128-ctr | aes192-ctr
aes128-gcm | aes256-gcm } | prefer-stoc-hmac
{ sha1 | sha1-96 | sha2-256 | sha2-512 } ] *
[ { public-key keyname | server-pki-domain
domain-name }
interface-type interface-number | ip ip-address } ]
*
•
In non-FIPS mode, connect to the IPv6 SCP
server, and transfer files with this server:
scp ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name
interface-number ] { put | get } source-file-name
[ destination-file-name ] [ identity-key { dsa |
ecdsa | rsa | { x509v3-ecdsa-sha2-nistp384 |
x509v3-ecdsa-sha2-nistp256
domain-name } | prefer-compress zlib
prefer-ctos-cipher { 3des-cbc | aes128-cbc |
aes256-cbc | des-cbc | aes128-ctr | aes192-ctr |
aes256-ctr | aes128-gcm | aes256-gcm } |
prefer-ctos-hmac { md5 | md5-96 | sha1 |
sha1-96 | sha2-256 | sha2-512 } | prefer-kex
{ dh-group-exchange-sha1 | dh-group1-sha1 |
dh-group14-sha1
ecdh-sha2-nistp384
{ 3des-cbc | aes128-cbc | aes256-cbc | des-cbc
| aes128-ctr | aes192-ctr | aes256-ctr |
aes128-gcm | aes256-gcm } | prefer-stoc-hmac
{ md5 | md5-96 | sha1 | sha1-96 | sha2-256 |
sha2-512 }] * [ { public-key keyname |
server-pki-domain domain-name } | source
{ interface interface-type interface-number | ipv6
ipv6-address } ] *
•
In FIPS mode, connect to the IPv6 SCP server,
and transfer files
scp ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name
interface-number ] { put | get } source-file-name
[ destination-file-name ] [ identity-key { ecdsa |
rsa | { x509v3-ecdsa-sha2-nistp384
x509v3-ecdsa-sha2-nistp256
domain-name }
prefer-ctos-cipher { aes128-cbc | aes256-cbc |
aes128-ctr | aes192-ctr
aes128-gcm | aes256-gcm } | prefer-ctos-hmac
{ sha1 | sha1-96 | sha2-256 | sha2-512 } |
prefer-kex {
ecdh-sha2-nistp256 | ecdh-sha2-nistp384 } |
prefer-stoc-cipher { aes128-cbc | aes256-cbc |
aes128-ctr | aes192-ctr
aes128-gcm | aes256-gcm } | prefer-stoc-hmac
{ sha1 | sha1-96 | sha2-256 | sha2-512 } ] *
350
} pki-domain
| aes256-ctr
dh-group14-sha1
| aes256-ctr
| source { interface
] [ -i interface-type
} pki-domain
| ecdh-sha2-nistp256
} | prefer-stoc-cipher
with this server:
] [ -i interface-type
} pki-domain
| prefer-compress zlib
| aes256-ctr
dh-group14-sha1
| aes256-ctr
Remarks
|
|
|
|
|
|
|
|
|
|
|
|