F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices System Management and Maintenance Configuration Guide-6PW100

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module

191

192

193

194

195

196

197

198

199

200

189

+++++

++++++++

# Generate a DSA key pair.

[Firewall] public-key local create dsa

The range of public key size is (512 ~ 2048).

NOTES: If the key modulus is greater than 512,

It will take a few minutes.

Press CTRL+C to abort.

Input the bits of the modulus[default = 1024]:

Generating Keys...

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

+++++++++++++++++++++++++++++++++++

# Enable the SSH server function.

[Firewall] ssh server enable

# Enable the SFTP server.

[Firewall] sftp server enable

# Configure an IP address for interface GigabitEthernet 0/1, which the client will use as the

destination for SSH connection.

[Firewall] interface gigabitethernet 0/1

[Firewall-GigabitEthernet0/1] ip address 192.168.1.45 255.255.255.0

[Firewall-GigabitEthernet0/1] quit

# Set the authentication mode of the user interface to AAA.

[Firewall] user-interface vty 0 4

[Firewall-ui-vty0-4] authentication-mode scheme

# Enable the user interface to support SSH.

[Firewall-ui-vty0-4] protocol inbound ssh

[Firewall-ui-vty0-4] quit

# Configure a local user named client002 with the password aabbcc and the service type ssh.

[Firewall] local-user client002

[Firewall-luser-client002] password simple aabbcc

[Firewall-luser-client002] service-type ssh

[Firewall-luser-client002] quit

# Configure the user authentication method as password and service type as SFTP.

[Firewall] ssh user client002 service-type sftp authentication-type password

2. Establish a connection to the SFTP server:

The device supports a variety of SFTP client software. The following uses PSFTP of PuTTY Version

0.58 as an example.

PSFTP supports only password authentication.

To establish a connection to the SFTP server:

a. Run the psftp.exe to launch the client interface as shown in 904HFigure 84, and enter the following

command:

open 192.168.1.45

b. Enter username client002 and password aabbcc as prompted to log in to the SFTP server.