HP 3600 v2 Series Configuration Manual page 10

Enabling the SSH server function ······················································································································· 308
Configuring the user interfaces for SSH clients ································································································ 308
Configuring a client's host public key ··············································································································· 309
Configuring an SSH user ···································································································································· 310
Setting the SSH management parameters ········································································································ 311
Setting the DSCP value for packets sent by the SSH server ············································································ 312
Configuring the switch as an SSH client ··················································································································· 313
SSH client configuration task list ························································································································ 313
Specifying a source IP address/interface for the SSH client ·········································································· 313
Configuring whether first-time authentication is supported ············································································· 313
Establishing a connection between the SSH client and server ······································································· 314
Setting the DSCP value for packets sent by the SSH client ············································································· 315
Displaying and maintaining SSH ······························································································································· 316
SSH server configuration examples ··························································································································· 316
When the switch acts as a server for password authentication ····································································· 317
When the switch acts as a server for publickey authentication ····································································· 319
SSH client configuration examples ····························································································································· 324
When switch acts as client for password authentication ················································································ 324
When switch acts as client for publickey authentication ················································································ 327
Configuring SFTP ····················································································································································· 330
Overview ······································································································································································· 330
FIPS compliance ··························································································································································· 330
Configuring the switch as an SFTP server ················································································································· 330
Enabling the SFTP server ···································································································································· 330
Configuring the SFTP connection idle timeout period ····················································································· 331
Configuring the switch as an SFTP client ··················································································································· 331
Specifying a source IP address or interface for the SFTP client ······································································ 331
Establishing a connection to the SFTP server ···································································································· 332
Working with SFTP directories ··························································································································· 332
Working with SFTP files ······································································································································ 333
Displaying help information ······························································································································· 334
Terminating the connection to the remote SFTP server ···················································································· 334
Setting the DSCP value for packets sent by the SFTP client ············································································ 334
SFTP client configuration example ····························································································································· 335
SFTP server configuration example ···························································································································· 338
Configuring SCP ······················································································································································ 341
Overview ······································································································································································· 341
FIPS compliance ··························································································································································· 341
Configuring the switch as an SCP server ·················································································································· 341
Configuring the switch as the SCP client ··················································································································· 342
SCP client configuration example ······················································································································ 342
SCP server configuration example ···················································································································· 343
Configuring SSL ······················································································································································· 345
Overview ······································································································································································· 345
SSL security mechanism ······································································································································ 345
SSL protocol stack ··············································································································································· 345
FIPS compliance ··························································································································································· 346
Configuration task list ·················································································································································· 346
Configuring an SSL server policy ······························································································································· 346
SSL server policy configuration example ·········································································································· 348
Configuring an SSL client policy ································································································································ 350
Displaying and maintaining SSL ································································································································· 351
Troubleshooting SSL ····················································································································································· 351
viii