R21xx-HP FlexFabric 11900 Security Configuration Guide

86
Task Command Remarks
Establish a
connection
to an Stelnet
server.
• Establish a connection to an IPv4 Stelnet server:
{ In non-FIPS mode:
ssh2 server [ port-number ] [ vpn-instance vpn-instance-name ]
[ identity-key { dsa | rsa } | prefer- compress zlib |
prefer-ctos-cipher { 3des | aes128 | aes256 | des } |
prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-96 } | prefer-kex
{ dh-group-exchange | dh-group1 | dh-group14 } |
prefer-stoc-cipher { 3des | aes128 | aes256 | des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] * [ publickey
keyname | source { interface interface-type interface-number | ip
ip-address } ] *
{ In FIPS mode:
ssh2 server [ port-number ] [ vpn-instance vpn-instance-name ]
[ identity-key { dsa | rsa } | prefer-compress zlib | prefer-ctos-cipher
{ aes128 | aes256 } | prefer-ctos-hmac { sha1 | sha1-96 } |
prefer-kex dh-group14 | prefer-stoc-cipher { aes128 | aes256 } |
prefer-stoc-hmac { sha1 | sha1-96 } ] * [ publickey keyname | source
{ interface interface-type interface-number | ip ip-address } ] *
• Establish a connection to an IPv6 Stelnet server:
{ In non-FIPS mode:
ssh2 ipv6 server [ port-number ] [ vpn-instance vpn-instance-name ]
[ -i interface-type interface-number ] [ identity-key { dsa | rsa } |
prefer-compress zlib | prefer- ctos-cipher { 3des | aes128 | aes256
| des } | prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-96 } |
prefer-kex { dh-group-exchange | dh-group1 | dh-group14 } |
prefer-stoc-cipher { 3des | aes128 | aes256
| des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] *[ publickey
keyname | source { interface interface-type interface-number | ip
ip-address } ] *
{ In FIPS mode:
ssh2 ipv6 server [ port-number ] [ vpn-instance vpn-instance-name ]
[ -i interface-type interface-number ] [ identity-key { dsa | rsa } |
prefer-compress zlib | prefer-ctos-cipher { aes128 | aes256 } |
prefer-ctos-hmac { sha1 | sha1-96 } | prefer-kex dh-group14 |
prefer-stoc-cipher { aes128 | aes256 } | prefer-stoc-hmac { sha1 |
sha1-96 } ] * [ publickey keyname | source { interface interface-type
interface-number | ipv6 ipv6-address } ] *
Use one of the
commands.
Available in user
view.
Configuring the device as an SFTP client
SFTP client configuration task list
Tasks at a
g
lance
(Optional.) Specifying a source IP address or source interface for the SFTP client
(Required.) Establishing a connection to an SFTP server
(Optional.) Working with SFTP directories
(Optional.) Working with SFTP files
(Optional.) Displaying help information