R2511-HP MSR Router Series Security Command Reference(V5)

433
Parameters
remote-path&<1-10>: Specifies the names of directories on the remote SFTP server. &<1-10> means that
you can provide up to 10 directory names that are separated by space.
Examples
# On the SFTP server, delete directory temp1 in the current directory.
sftp-client> rmdir temp1
Directory successfully removed
scp
Use scp to transfer files with an SCP server.
Syntax
In non-FIPS mode:
scp [ ipv6 ] server [ port-number ] { get | put } source-file-path [ destination-file-path ] [ identity-key { dsa
| rsa } | prefer-compress { zlib | zlib-openssh } | prefer-ctos-cipher { 3des | aes128 | des } |
prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-96 } | prefer-kex { dh-group-exchange | dh-group1
| dh-group14 } | prefer-stoc-cipher { 3des | aes128 | des } | prefer-stoc-hmac { md5 | md5-96 | sha1
| sha1-96 } ] *
In FIPS mode:
scp [ ipv6 ] server [ port-number ] { get | put } source-file-path [ destination-file-path ] [ identity-key rsa
| prefer-compress { zlib | zlib-openssh } | prefer-ctos-cipher { aes
128 | aes256 } | prefer-ctos-hmac
{ sha1 | sha1-96 } | prefer-kex dh-group14 | prefer-stoc-cipher { aes128 | aes256 } | prefer-stoc-hmac
{ sha1 | sha1-96 } ] *
Default
The following matrix shows the default algorithms used in non-FIPS and FIPS modes:
Preferred algorithm In non-FIPS mode In FIPS mode
Public key algorithm dsa rsa
Preferred client-to-server encryption
algorithm
aes128 aes128
Preferred client-to-server HMAC
algorithm
sha1-96 sha1-96
Preferred key exchange algorithm dh-group-exchange dh-group14
Preferred server-to-client encryption
algorithm
aes128 aes128
Preferred server-to-client HMAC
algorithm
sha1-96 sha1-96
Views
User view
Default command level
3: Manage level