R21xx-HP FlexFabric 11900 Security Configuration Guide

91
Task Command Remarks
Connect to
the SCP
server, and
transfer files
with the
server.
• Connect to the IPv4 SCP server, and transfer files with this server:
{ In non-FIPS mode:
scp server [ port-number ] [ vpn-instance vpn-instance-name ] { put | get }
source-file-name [ destination-file-name ] [ identity-key { dsa | rsa } |
prefer-compress zlib | prefer-ctos-cipher { 3des | aes128 | aes256 | des }
| prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-96 } | prefer-kex
{ dh-group-exchange | dh-group1 | dh-group14 } | prefer-stoc-cipher
{ 3des | aes128 | aes256
| des } | prefer-stoc-hmac { md5 | md5-96 |
sha1 | sha1-96 }] * [ publickey keyname | source { interface interface-type
interface-number | ip ip-address } ] *
{ In FIPS mode:
scp server [ port-number ] [ vpn-instance vpn-instance-name ] { put | get }
source-file-name [ destination-file-name ] [ identity-key { dsa | rsa } |
prefer-compress zlib | prefer-ctos-cipher { aes128 | aes256 } |
prefer-ctos-hmac { sha1 | sha1-96 } | prefer-kex dh-group14 |
prefer-stoc-cipher { aes128 | aes256 } | prefer-stoc-hmac { sha1 |
sha1-96 }] * [ publickey keyname | source { interface interface-type
interface-number | ip ip-address } ] *
• Connect to the IPv6 SCP server, and transfer files with this server:
{ In non-FIPS mode:
scp ipv6 server [ port-number ] [ vpn-instance vpn-instance-name ] [ -i
interface-type interface-number ] { put | get } source-file-name
[ destination-file-name ] [ identity-key { dsa | rsa } | prefer-compress zlib
| prefer-ctos-cipher { 3des | aes128 | des } | prefer-ctos-hmac { md5 |
md5-96 | sha1 | sha1-96 } | prefer-kex { dh-group-exchange |
dh-group1 | dh-group14 } | prefer-stoc-cipher { 3des | aes128 | des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 }] * [ publickey
keyname | source { interface interface-type interface-number | ipv6
ipv6-address } ] *
{ In FIPS mode:
scp ipv6 server [ port-number ] [ vpn-instance vpn-instance-name ] [ -i
interface-type interface-number ] { put | get } source-file-name
[ destination-file-name ] [ identity-key { dsa | rsa } | prefer-compress zlib
| prefer-ctos-cipher { aes128 | aes256 } | prefer-ctos-hmac { sha1 |
sha1-96 } | prefer-kex dh-group14 | prefer-stoc-cipher { aes128 |
aes256 } | prefer-stoc-hmac { sha1 | sha1-96 }] * [ publickey keyname |
source { interface interface-type interface-number | ipv6 ipv6-address } ] *
Use one of
the
commands
.
Available
in user
view.
Displaying and maintaining SSH
Execute display commands in any view.
Task Command
Display the source IP address or source
interface information configured for the SFTP
client.
display sftp client source
Display the source IP address or source
interface information configured for the Stelnet
client.
display ssh client source
Display SSH server status information or session
information on an SSH server.
display ssh server { session | status }