Sftp Suite-B - HP FlexNetwork 7500 Series Command Reference Manual

server's PKI domain, the client uses the PKI domain of its own certificate to verify the server's
certificate.
prefer-compress: Specifies the preferred compression algorithm for data compression between the
server and the client. By default, compression is not supported.
zlib: Specifies the compression algorithm zlib.
dscp dscp-value: Specifies the DSCP value in the IPv6 SFTP packets. The value range for the
dscp-value argument is 0 to 63, and the default value is 48. The DSCP value determines the
transmission priority of the packet.
source: Specifies a source IP address or source interface for IPv6 SFTP packets. By default, the
device automatically selects a source address for IPv6 SFTP packets in compliance with RFC 3484.
As a best practice to ensure successful SFTP connections, specify a loopback interface as the
source interface or specify the IPv6 address of the interface as the source IPv6 address.
•
interface interface-type interface-number: Specifies a source interface by its type and number.
The IPv6 address of this interface is the source IP address of the IPv6 SFTP packets.
•
ipv6 ipv6-address: Specifies a source IPv6 address.
Usage guidelines
Table 66 Suite B algorithms
Security
level
128-bit
192-bit
Both
Examples
# Use the 192-bit Suite B algorithms to establish a connection to SFTP server 2000::1. Specify the
client's PKI domain and the server's PKI domain as clientpkidomain and serverpkidomain,
respectively.
<Sysname> sftp ipv6 2000::1 suite-b 192-bit pki-domain clientpkidomain server-pki-domain
serverpkidomain
Username:

sftp suite-b

Use sftp suite-b to establish a connection to an IPv4 SFTP server based on Suite B algorithms and
enter SFTP client view.
Syntax
sftp server [ port-number ] [ vpn-instance vpn-instance-name ] suite-b [ 128-bit | 192-bit ]
pki-domain domain-name [ server-pki-domain domain-name ] [ prefer-compress zlib ] [ dscp
dscp-value | source { interface interface-type interface-number | ip ip-address } ] *
Views
User view
Predefined user roles
network-admin
mdc-admin
Key exchange
algorithm
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp256
ecdh-sha2-nistp384
Encryption algorithm
and HMAC algorithm
aes128-gcm
aes256-gcm
aes128-gcm
aes256-gcm
486
Public key algorithm
x509v3-ecdsa-sha2-nistp256
x509v3-ecdsa-sha2-nistp384
x509v3-ecdsa-sha2-nistp384
x509v3-ecdsa-sha2-nistp256
x509v3-ecdsa-sha2-nistp384