R0106-HP MSR Router Series Security Command Reference(V7)

413
• Specify the loopback interface or dialer interface as the source interface.
• Specify the IPv6 address of the loopback interface or dialer interface as the source IPv6 address.
interface interface-type interface-number: Specifies a source interface by its type and number. The IPv6
address of this interface is the source IP address to send packets.
ipv6 ipv6-address: Specifies a source IPv6 address.
Usage guidelines
In publickey authentication, the client must get the local private key for digital signature. Because
publickey authentication uses either RSA or DSA algorithm, you must specify a public key algorithm by
using the identity-key keyword. In this way, the client can get the correct local private key.
Examples
# Connect an SFTP client to the IPv6 SFTP server 2000::1 and specify the public key of the server as svkey.
The SFTP client uses publickey authentication. Use the following algorithms:
• Preferred key exchange algorithm is dh-group14.
• Preferred server-to-client encryption algorithm is aes128.
• Preferred client-to-server HMAC algorithm is sha1.
• Preferred server-to-client HMAC algorithm is sha1-96.
• Preferred compression algorithm between the server and client is zlib.
<Sysname> sftp ipv6 2000::1 prefer-kex dh-group14 prefer-stoc-cipher aes128
prefer-ctos-hmac sha1 prefer-stoc-hmac sha1-96 prefer-compress zlib publickey svkey
Username:
ssh client ipv6 source
Use ssh client ipv6 source to specify the source IPv6 address for SSH packets.
Use undo ssh client ipv6 source to restore the default.
Syntax
ssh client ipv6 source { interface interface-type interface-number | ipv6 ipv6-address }
undo ssh client ipv6 source
Default
The source IPv6 address for SSH packets is not configured. The SSH packets automatically select an IPv6
address as their source address in compliance with RFC 3484.
Views
System view
Predefined user roles
network-admin
Parameters
interface interface-type interface-number: Specifies a source interface by its type and number. The SSH
packets use the longest-matching IPv6 address of the specified interface as their source address.
ipv6 ipv6-address: Specifies a source IPv6 address.
Usage guidelines
If you execute this command multiple times, the most recent configuration takes effect.