HP FlexNetwork 7500 Series Command Reference Manual page 492

source-file-name: Specifies the name of the source file, a case-sensitive string of 1 to 255
characters.
destination-file-name: Specifies the name of the target file, a case-sensitive string of 1 to 255
characters. If you do not specify this argument, the target file uses the same file name as the source
file.
suite-b: Specifies the Suite B algorithms. If neither the 128-bit keyword nor the 192-bit keyword is
specified, all algorithms in Suite B are used. For more information about the Suite B algorithms, see
Table 65.
128-bit: Specifies the 128-bit Suite B security level.
192-bit: Specifies the 192-bit Suite B security level.
pki-domain domain-name: Specifies the PKI domain of the client's certificate. The domain-name
argument represents the PKI domain name, a case-insensitive string of 1 to 31 characters. Invalid
characters are tildes (~), asterisks (*), backslashes (\), vertical bars (|), colons (:), dots (.), angle
brackets (< >), quotation marks ("), and apostrophes (').
server-pki-domain domain-name: Specifies the PKI domain for verifying the server's certificate.
The domain-name argument represents the PKI domain name, a case-insensitive string of 1 to 31
characters. Invalid characters are tildes (~), asterisks (*), backslashes (\), vertical bars (|), colons (:),
dots (.), angle brackets (< >), quotation marks ("), and apostrophes ('). If you do not specify the
server's PKI domain, the client uses the PKI domain of its own certificate to verify the server's
certificate.
prefer-compress: Specifies the preferred compression algorithm for data compression between the
server and the client. By default, compression is not supported.
zlib: Specifies the compression algorithm zlib.
source: Specifies a source IP address or source interface for SCP packets. By default, the device
uses the primary IPv4 address of the output interface in the routing entry as the source address of
SCP packets. As a best practice to ensure successful SCP connections, specify a loopback interface
as the source interface or specify the IPv4 address of the interface as the source IPv4 address.
•
interface interface-type interface-number: Specifies a source interface by its type and number.
The IPv4 address of this interface is the source IPv4 address of the SCP packets.
•
ip ip-address: Specifies a source IPv4 address.
Usage guidelines
Table 65 Suite B algorithms
Security
level
128-bit
192-bit
Both
Examples
# Use the 128-bit Suite B algorithms to establish a connection to SCP server 200.1.1.1 and
download the file abc.txt from the server. Specify the client's PKI domain and the server's PKI
domain as clientpkidomain and serverpkidomain, respectively.
<Sysname> scp 200.1.1.1 get abc.txt suite-b 128-bit pki-domain clientpkidomain
server-pki-domain serverpkidomain
Username
Key exchange
algorithm
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp256
ecdh-sha2-nistp384
Encryption algorithm
and HMAC algorithm
aes128-gcm
aes256-gcm
aes128-gcm
aes256-gcm
477
Public key algorithm
x509v3-ecdsa-sha2-nistp256
x509v3-ecdsa-sha2-nistp384
x509v3-ecdsa-sha2-nistp384
x509v3-ecdsa-sha2-nistp256
x509v3-ecdsa-sha2-nistp384