R0106-HP MSR Router Series Security Configuration Guide(V7)

328
• Improving the manageability of Stelnet clients in authentication service.
To specify the source IP address for SSH packets:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Specify the source address
for SSH packets.
•
Specify the source IPv4 address for
SSH packets:
ssh client source { interface
interface-type interface-number | ip
ip-address }
• Specify the source IPv6 address for
SSH packets:
ssh client ipv6 source { interface
interface-type interface-number | ipv6
ipv6-address }
By default, the source IP
address for SSH packets is not
configured. The IPv4 SSH
packets use the primary IP
address of the output interface
specified in the routing entry as
their source address. The IPv6
SSH packets automatically
select an IPv6 address as their
source address in compliance
with RFC 3484.
Establishing a connection to an Stelnet server
When you try to access an Stelnet server, the device must use the server's host public key to authenticate
the server. If the server's host public key is not configured on the device, the device will prompt you to
confirm whether you want to continue with the access.
• If you choose to continue, the device accesses the server and downloads the server's host public
key.
• If you choose to not continue, the connection cannot be established.
In an insecure network, HP recommends that you configure the server's host public key on the device.
To establish a connection to an IPv4 Stelnet server: