Configuration Guide User guide

194 FastIron Configuration Guide
53-1002494-02
Secure copy with SSH2
Importing a digital certificate using SCP
To import a digital certificate using SCP, enter a command such as the following one:
C:\> scp certfile user@192.168.89.210:sslCert
Syntax: scp <certificate-filename> <user>@<ip-address>:sslCert.
The <ip-address> variable is the IP address of the server from which the digital certificate file is
downloaded.
The <certificate-filename> variable is the file name of the digital certificate that you are importing
to the device.
The scp command can be used when TFTP access is unavailable or not permitted and the
command has an equivalent functionality to the ip ssl certificate-data-file tftp. For more
information on the ip ssl certificate-data-file tftp command, refer to “Importing digital certificates
and RSA private key files” on page 138.
Importing an RSA private key
To import an RSA private key from a client using SCP, enter a command such as the following one:
Brocade(config)# scp keyfile user@192.168.9.210:sslPrivKey
Syntax: scp <key-filename> <user>@<ip-address>: sslPrivKey
The <ip-address> variable is the IP address of the server that contains the private key file.
The <key-filename> variable is the file name of the private key that you want to import into the
device.
The scp command can be used when TFTP access is unavailable or not permitted and the
command has an equivalent functionality to the ip ssl private-key-file tftp command. For more
information on the ip ssl private-key-file tftp command, refer to “Importing digital certificates and
RSA private key files” on page 138.
Importing a DSA or RSA public key
To import a DSA or RSA public key from a client using SCP, enter a command such as the following
one:
Brocade(config)# scp pkeys.txt user@192.168.1.234:sshPubKey
Syntax: scp <key-filename> <user>@<ip-address>:sshPubKey
The <ip-address> variable is the IP address of the server that contains the public key file.
The <key-filename> variable is the name of the DSA or RSA public key file that you want to import
into the device.
The scp command can be used when TFTP access is unavailable or not permitted and the
command has an equivalent function to the ip ssh pub-key-file tftp command. For more information
on the ip ssh pub-key-file tftp command, refer to “Importing authorized public keys into the Brocade
device” on page 184.