3Com Switch 4800G 24-Port Configuration Manual page 1136

1136 C 89: SFTP S
HAPTER
n
ERVICE
Network diagram
Figure 342 Network diagram for SFTP configuration
SFTP server
Vlan -int1
192 .168 .0 .1/24
Switch B
Configuration procedure
1 Configure the SFTP server (Switch B)
# Generate RSA and DSA key pairs and enable the SSH server.
<SwitchB> system-view
[SwitchB] public-key local create rsa
[SwitchB] public-key local create dsa
[SwitchB] ssh server enable
# Configure an IP address for VLAN interface 1, which the SSH client uses as the
destination for SSH connection.
[SwitchB] interface Vlan-interface 1
[SwitchB-Vlan-interface1] ip address 192.168.0.1 255.255.255.0
[SwitchB-Vlan-interface1] quit
# Set the authentication method on the user interface to AAA.
[SwitchB] user-interface vty 0 4
[SwitchB-ui-vty0-4] authentication-mode scheme
# Set the protocol that a remote user uses to login as SSH.
[SwitchB-ui-vty0-4] protocol inbound ssh
[SwitchB-ui-vty0-4] quit
# Create local user client001.
[SwitchB] local-user client001
[SwitchB-luser-client001] password simple aabbcc
[SwitchB-luser-client001] service-type ssh
[SwitchB-luser-client001] quit
# Set the SSH authentication method to password, service type to SFTP.
[SwitchB] ssh user client001 service-type sftp authentication-type p
assword
If you set the SSH authentication method to publickey, you need to configure the
host public key of SwitchA. For the specific configuration, refer to "When Using
Publickey Authentication" on page 1127.
# Enable the SFTP server.
[SwitchB] sftp server enable
2 Configure the SFTP client (Switch A)
# Configure an IP address for VLAN interface 1.
<SwitchA> system-view
[SwitchA] interface vlan-interface 1
[SwitchA-Vlan-interface1] ip address 192.168.0.2 255.255.255.0
[SwitchA-Vlan-interface1] quit
[SwitchA] quit
SFTP client
Vlan -int1
192.168.0.2/24
Switch A