Technical data

ServerIron ADX Administration Guide 9

53-1002434-01

Configuring SSH

Syntax: [no] ip ssh rsa-authentication yes | no

The yes option enables RSA challenge-response authentication.

Disabling or re-enabling Secure Copy

Secure Copy (SCP) is enabled by deafult.

To disable SCP, enter the following command.

ServerIronADX(config)# ip ssh scp disable

Syntax: [no] ip ssh scp disable | enable

NOTE

If you disable SSH, SCP is also disabled.

Using Secure Copy

Secure Copy (SCP) uses security built into SSH to transfer files between hosts on a network,

providing a more secure file transfer method than Remote Copy (RCP) or FTP. SCP automatically

uses the authentication methods, encryption algorithm, and data compression level configured for

SSH. For example, if password authentication is enabled for SSH, the user is prompted for a user

name and password before SCP allows a file to be transferred. No additional configuration is

required for SCP on top of SSH.

You can use SCP to copy files on the device, including the startup-config and running-config files, to

or from an SCP-enabled remote host.

SCP is enabled by default and can be disabled. To disable SCP, enter the following command.

ServerIronADX(config)# ip ssh scp disable

Syntax: [no] ip ssh scp disable | enable

If you disable SSH, SCP is also disabled.

The following are examples of using SCP to transfer files from and to a ServerIron ADX.

When using SCP, you enter the scp commands on the SCP-enabled client, rather than the console

on the ServerIron ADX.

Certain SCP client options, including -p and -r, are ignored by the SCP server. If an option is

ignored, the client is notified.

To copy a configuration file (c:\cfg\brocade.cfg) to the running-config file on a device at

192.168.1.50 and log in as user terry, enter the following command on the SCP-enabled client.

C:\> scp c:\cfg\brocade.cfg terry@192.168.1.50:runConfig

If password authentication is enabled for SSH, the user is prompted for user terry’s password

before the file transfer takes place.

To copy the configuration file to the startup-config file.

C:\> scp c:\cfg\brocade.cfg terry@192.168.1.50:startConfig

To copy the configuration file to a file called config1.cfg on the PCMCIA flash card in slot 1 on a

Management IV module.

C:\> scp c:\cfg\brocade.cfg terry@192.168.1.50:a:/config1.cfg