R211x-HP Flexfabric 11900 Security Command Reference

276
Examples
# Connect an SCP client to the SCP server 200.1.1.1, specify the public key of the server as svkey, and
download the file abc.txt from the server. The SCP client uses publickey authentication. Use the following
algorithms:
• Preferred key exchange algorithm is dh-group14.
• Preferred server-to-client encryption algorithm is aes128.
• Preferred client-to-server HMAC algorithm is sha1.
• Preferred server-to-client HMAC algorithm is sha1-96.
• Preferred compression algorithm between the server and client is zlib.
<Sysname> scp 200.1.1.1 get abc.txt prefer-kex dh-group14 prefer-stoc-cipher aes128
prefer-ctos-hmac sha1 prefer-stoc-hmac sha1-96 prefer-compress zlib publickey svkey
scp ipv6
Use scp ipv6 to establish a connection to an IPv6 SCP server and transfer files with the server.
Syntax
In non-FIPS mode:
scp ipv6 server [ port-number ] [ vpn-instance vpn-instance-name ] [ -i interface-type interface-number ]
{ put | get } source-file-name [ destination-file-name ] [ identity-key { dsa | rsa } | prefer-compress zlib
| prefer-ctos-cipher { 3des | aes128 | aes256 | des } | prefer-ctos-hmac { md5 | md5-96 | sha1 |
sha1-96 } | prefer-kex { dh-group-exchange | dh-group1 | dh-group14 } | prefer-stoc-cipher { 3des |
aes128 | aes256 | des } | prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] * [ publickey
keyname | source { interface interface-type interface-number | ipv6 ipv6-address } ] *
In FIPS mode:
scp ipv6 ser
ver [ port-number ] [ vpn-instance vpn-instance-name ] [ -i interface-type interface-number ]
{ put | get } source-file-name [ destination-file-name ] [ identity-key rsa | prefer-compress zlib |
prefer-ctos-cipher { aes128 | aes256 } | prefer-ctos-hmac { sha1 | sha1-96 } | prefer-kex dh-group14
| prefer-stoc-cipher { aes128 | aes256 } | prefer-stoc-hmac { sha1 | sha1-96 } ] * [ publickey keyname
| source { interface interface-type interface-number | ipv6 ipv6-address } ] *
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
server: Specifies a server by its IPv6 address or host name, a case-insensitive string of 1 to 253
characters.
port-number: Specifies the port number of the server, in the range of 1 to 65535. The default is 22.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the server belongs, where
the vpn-instance-name argument is a case-sensitive string of 1 to 31 characters.
-i interface-type interface-number: Specifies the outgoing interface used by the client to connect to the
server. The argument interface-type interface-number specifies the outgoing interface by its type and