HP MSR2000/3000/4000 Router Series Security Command Reference

315
Examples
# Connect an SFTP client to the IPv6 SFTP server 2:5::8:9 and specify the public key of the server as svkey.
The SFTP client uses publickey authentication. Use the following algorithms:
• Preferred key exchange algorithm is dh-group14.
• Preferred server-to-client encryption algorithm is aes128.
• Preferred client-to-server HMAC algorithm is sha1.
• Preferred server-to-client HMAC algorithm is sha1-96.
• Preferred compression algorithm between the server and client is zlib.
<Sysname> sftp ipv6 2:5::8:9 prefer-kex dh-group14 prefer-stoc-cipher aes128
prefer-ctos-hmac sha1 prefer-stoc-hmac sha1-96 prefer-compress zlib publickey svkey
Username:
ssh client ipv6 source
Use ssh client ipv6 source to specify the source IPv6 address or source interface for the Stelnet client.
Use undo ssh client ipv6 source to remove the configuration.
Syntax
ssh client ipv6 source { interface interface-type interface-number | ipv6 ipv6-address }
undo ssh client ipv6 source
Default
The Stelnet client uses the IPv6 address of the interface specified by the route of the device to access the
Stelnet server.
Views
System view
Predefined user roles
network-admin
Parameters
interface interface-type interface-number: Specifies the IPv6 address of the interface which matches the
destination address of the outbound packets using the longest match criteria as the source IPv6 address.
The interface-type interface-number argument specifies a source interface by its type and number.
ipv6 ipv6-address: Specifies a source IPv6 address.
Usage guidelines
The Stelnet client uses the specified source address to communicate with the server.
If you execute the ssh client ipv6 source command multiple times, the most recent configuration takes
effect.
If you use the ssh2 ipv6 command to connect to an Stelnet server and specify another source IPv6
address, the Stelnet client uses the new source IPv6 address for the current connection instead of that
specified by the ssh client ipv6 source command.
The source address specified by the ssh client ipv6 source command applies to all Stelnet connections,
and the source address specifies by the ssh2 ipv6 command applies only to the current connection.