HP FlexNetwork 10500 Series Security Configuration Manual page 10

Enabling the SCP server ························································································································ 361
Enabling NETCONF over SSH ·············································································································· 361
Configuring the user lines for SSH login ································································································ 361
Configuring a client's host public key ····································································································· 362
Configuring an SSH user ······················································································································· 363
Configuring the SSH management parameters ····················································································· 364
Specifying a PKI domain for the SSH server ························································································· 365
Configuring the device as an Stelnet client ···································································································· 365
Stelnet client configuration task list ········································································································ 365
Specifying the source IP address for SSH packets ················································································ 366
Establishing a connection to an Stelnet server ······················································································ 366
Establishing a connection to an Stelnet server based on Suite B ·························································· 369
Configuring the device as an SFTP client ······································································································ 369
SFTP client configuration task list ·········································································································· 369
Specifying the source IP address for SFTP packets ·············································································· 369
Establishing a connection to an SFTP server ························································································ 370
Establishing a connection to an SFTP server based on Suite B ···························································· 372
Working with SFTP directories ··············································································································· 373
Working with SFTP files ························································································································· 373
Displaying help information ···················································································································· 374
Terminating the connection with the SFTP server ················································································· 374
Configuring the device as an SCP client ········································································································ 374
Establishing a connection to an SCP server ·························································································· 374
Establishing a connection to an SCP server based on Suite B······························································ 377
Specifying algorithms for SSH2 ····················································································································· 377
Specifying key exchange algorithms for SSH2 ······················································································ 377
Specifying public key algorithms for SSH2 ···························································································· 378
Specifying encryption algorithms for SSH2 ···························································································· 378
Specifying MAC algorithms for SSH2 ···································································································· 379
Displaying and maintaining SSH ···················································································································· 379
Stelnet configuration examples ······················································································································ 379
Password authentication enabled Stelnet server configuration example ··············································· 379
Publickey authentication enabled Stelnet server configuration example ··············································· 382
Password authentication enabled Stelnet client configuration example ················································ 387
Publickey authentication enabled Stelnet client configuration example ················································· 390
Stelnet configuration example based on 128-bit Suite B algorithms ······················································ 392
SFTP configuration examples ························································································································ 396
Password authentication enabled SFTP server configuration example ················································· 397
Publickey authentication enabled SFTP client configuration example ··················································· 399
SFTP configuration example based on 192-bit Suite B algorithms ························································ 402
SCP configuration examples ·························································································································· 406
SCP configuration example with password authentication ···································································· 406
SCP configuration example based on Suite B algorithms ······································································ 408
NETCONF over SSH configuration example with password authentication ·················································· 415
Network requirements ···························································································································· 415
Configuration procedure ························································································································· 415
Verifying the configuration ······················································································································ 417
Configuring IP source guard ······································································· 418
Overview ························································································································································ 418
Static IPSG bindings ······························································································································ 418
Dynamic IPSG bindings ························································································································· 419
IPSG configuration task list ···························································································································· 419
Configuring the IPv4SG feature ····················································································································· 420
Enabling IPv4SG on an interface ··········································································································· 420
Configuring a static IPv4SG binding ······································································································ 420
Configuring the IPv6SG feature ····················································································································· 421
Enabling IPv6SG on an interface ··········································································································· 421
Configuring a static IPv6SG binding ······································································································ 421
Displaying and maintaining IPSG ·················································································································· 422
IPSG configuration examples ························································································································ 423
Static IPv4SG configuration example ····································································································· 423
viii