R3303-HP HSR6800 Routers Security Configuration Guide

341

[RouterB] user-interface vty 0 4

[RouterB-ui-vty0-4] authentication-mode scheme

# Enable the user interface to support SSH.

[RouterB-ui-vty0-4] protocol inbound ssh

[RouterB-ui-vty0-4] quit

# Create a local user named client001 with the password as aabbcc and service type as ssh.

[RouterB] local-user client001

[RouterB-luser-client001] password simple aabbcc

[RouterB-luser-client001] service-type ssh

[RouterB-luser-client001] quit

# Configure the SSH user client001 with service type as scp and authentication method as

password. (Optional. If an SSH user is not created, password authentication is used by default.)

[RouterB] ssh user client001 service-type scp authentication-type password

2. Configure an IP address for GigabitEthernet 3/0/1 on the SCP client.

<RouterA> system-view

[RouterA] interface gigabitethernet 3/0/1

[RouterA-GigabitEthernet3/0/1] ip address 192.168.0.2 255.255.255.0

[RouterA-GigabitEthernet3/0/1] quit

[RouterA] quit

3. Connect to the SCP server, download the file remote.bin from the server, and save it locally to the

file local.bin.

<RouterA> scp 192.168.0.1 get remote.bin local.bin

Username: client001

Trying 192.168.0.1 ...

Press CTRL+K to abort

Connected to 192.168.0.1 ...

The Server is not authenticated. Continue? [Y/N]:y

Do you want to save the server public key? [Y/N]:n

Enter password:

18471 bytes transfered in 0.001 seconds.