F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices System Management and Maintenance Command Reference-6PW100

216
• The preferred HMAC algorithm from server to client is sha1-96.
Examples
# Connect to SFTP server 10.1.1.2, using the following connection scheme:
• The preferred key exchange algorithm: dh-group1.
• The preferred encryption algorithm from server to client: aes128.
• The preferred HMAC algorithm from client to server: md5.
• The preferred HMAC algorithm from server to client: sha1-96.
<Sysname> sftp 10.1.1.2 prefer-kex dh-group1 prefer-stoc-cipher aes128 prefer-ctos-hmac
md5 prefer-stoc-hmac sha1-96
Input Username:
sftp client ipv6 source
Use sftp client ipv6 source to specify the source IPv6 address or source interface for the SFTP client.
Use undo sftp client ipv6 source to remove the configuration.
Syntax
sftp client ipv6 source { interface interface-type interface-number | ipv6 ipv6-address }
undo sftp client ipv6 source
Default
An SFTP client uses the IPv6 address of the interface specified by the route of the device to access the
SFTP server.
Views
System view
Default command level
3: Manage level
Parameters
interface interface-type interface-number: Specifies a source interface by its type and number.
ipv6 ipv6-address: Specifies a source IPv6 address.
Usage guidelines
To make sure the SFTP client and the SFTP server can communicate with each other, and to improve the
manageability of SFTP clients in the authentication service, HP recommends you to specify a loopback
interface or dialer interface as the source interface.
The following matrix shows the sftp client ipv6 source command and firewalls and UTM devices
compatibility:
Hardware Command com
p
atible
F1000-A-EI/F1000-S-EI Yes
F1000-E Yes
F5000 Yes
Firewall module Yes