R3102-R3103-HP 6600/HSR6600 Routers Security Configuration Guide

325
Establishing a connection to an SFTP server
You can launch the SFTP client to establish a connection to an SFTP server, and specify the public key
algorithm, the preferred encryption algorithm, preferred HMAC algorithm, and preferred key exchange
algorithm.
After the connection is established, you can directly enter SFTP client view on the server to perform
directory and file operations.
To establish a connection to an SFTP server:
Task Command Remarks
Establish a
connection to an
SFTP server and
enter SFTP client
view.
• Establish a connection to an IPv4 SFTP server:
{ In non-FIPS mode:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key { dsa | rsa } |
prefer-compress { zlib | zlib-openssh } |prefer-ctos-cipher
{ 3des | aes128 | des } | prefer-ctos-hmac { md5 | md5-96
| sha1 | sha1-96 } | prefer-kex { dh-group-exchange |
dh-group1 | dh-group14 } | prefer-stoc-cipher { 3des |
aes128 | des } | prefer-stoc-hmac { md5 | md5-96 | sha1
| sha1-96 } ] *
{ In FIPS mode:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key rsa | prefer-ctos-cipher
{ aes128 | aes256 } | prefer-ctos-hmac { sha1 | sha1-96 }
| prefer-kex dh-group14 | prefer-stoc-cipher { aes128 |
aes256 } | prefer-stoc-hmac { sha1 | sha1-96 } ] *
• Establish a connection to an IPv6 SFTP server:
{ In non-FIPS mode:
sftp ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key { dsa | rsa }|
prefer-compress { zlib | zlib-openssh } | prefer-ctos-cipher
{ 3des | aes128 | des } | prefer-ctos-hmac { md5 | md5-96
| sha1 | sha1-96 } | prefer-kex { dh-group-exchange |
dh-group1 | dh-group14 } | prefer-stoc-cipher { 3des |
aes128 | des } | prefer-stoc-hmac { md5 | md5-96 | sha1
| sha1-96 } ] *
{ In FIPS mode:
sftp ipv6 server [ port-number ] [ identity-key rsa |
prefer-ctos-cipher { aes128 | aes256 } | prefer-ctos-hmac
{ sha1 | sha1-96 } | prefer-kex dh-group14 |
prefer-stoc-cipher { aes128 | aes256 } | prefer-stoc-hmac
{ sha1 | sha1-96 } ] *
Use one of the
commands in user
view.
Working with SFTP directories
SFTP directory operations include:
• Changing or displaying the current working directory
• Displaying files under a specified directory or the directory information
• Changing the name of a specified directory on the server