R3303-HP HSR6800 Routers Security Configuration Guide

ManualsBrandsHP ManualsNetwork HardwareHP HSR68xx Configure-to-Order Router Solution

351

352

353

354

355

356

357

358

359

360

338

# Set the authentication mode of the user interface to AAA.

[RouterB] user-interface vty 0 4

[RouterB-ui-vty0-4] authentication-mode scheme

# Enable the user interface to support SSH.

[RouterB-ui-vty0-4] protocol inbound ssh

[RouterB-ui-vty0-4] quit

# Import the peer public key from the file pubkey, and name it RouterKey.

[RouterB] public-key peer RouterKey import sshkey pubkey

# For user client001, set the service type as SFTP, authentication method as publickey, public key

as RouterKey, and working folder as cfa0:/.

[RouterB] ssh user client001 service-type sftp authentication-type publickey assign

publickey RouterKey work-directory cfa0:/

3. Establish a connection between the SFTP client and the SFTP server:

# Establish a connection to the SFTP server and enter SFTP client view.

<RouterA> sftp 192.168.0.1 identity-key rsa

Input Username: client001

Trying 192.168.0.1 ...

Press CTRL+K to abort

Connected to 192.168.0.1 ...

The Server is not authenticated. Continue? [Y/N]:y

Do you want to save the server public key? [Y/N]:n

sftp-client>

# Display files under the current directory of the server, delete file z, and verify that the file has

been deleted successfully.

sftp-client> dir

-rwxrwxrwx 1 noone nogroup 1759 Aug 23 06:52 config.cfg

-rwxrwxrwx 1 noone nogroup 225 Aug 24 08:01 pubkey2

-rwxrwxrwx 1 noone nogroup 283 Aug 24 07:39 pubkey

drwxrwxrwx 1 noone nogroup 0 Sep 01 06:22 new

-rwxrwxrwx 1 noone nogroup 225 Sep 01 06:55 pub

-rwxrwxrwx 1 noone nogroup 0 Sep 01 08:00 z

sftp-client> delete z

The following File will be deleted:

Are you sure to delete it? [Y/N]:y

This operation might take a long time.Please wait...

File successfully Removed