R0106-HP MSR Router Series Security Configuration Guide(V7)

332
Task Command Remarks
Establish a
connection to an
IPv4 SFTP server.
• (Low encryption.) Establish a connection to an IPv4 SFTP
server:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key { dsa | rsa } |
prefer-compress zlib | prefer-ctos-cipher des |
prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-96 } |
prefer-kex { dh-group-exchange | dh-group1 |
dh-group14 } | prefer-stoc-cipher des |
prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] *
[ dscp dscp-value | publickey keyname | source
{ interface interface-type interface-number | ip
ip-address } ] *
• (High encryption in non-FIPS mode.) Establish a
connection to an IPv4 SFTP server:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key { dsa | rsa } | prefer-
compress zlib | prefer-ctos-cipher { 3des | aes128 |
aes256 | des } | prefer-ctos-hmac { md5 | md5-96 |
sha1 | sha1-96 } | prefer-kex { dh-group-exchange |
dh-group1 | dh-group14 } | prefer-stoc-cipher { 3des |
aes128 | aes256 | des } | prefer-stoc-hmac { md5 |
md5-96 | sha1 | sha1-96 } ] * [ dscp dscp-value |
publickey keyname | source { interface interface-type
interface-number | ip ip-address } ] *
• (In FIPS mode.) Establish a connection to an IPv4 SFTP
server:
sftp server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key rsa | prefer-compress
zlib | prefer-ctos-cipher { aes128 | aes256 } |
prefer-ctos-hmac { sha1 | sha1-96 } | prefer-kex
dh-group14 | prefer-stoc-cipher { aes128 | aes256 } |
prefer-stoc-hmac { sha1 | sha1-96 } ] * [ publickey
keyname | source { interface interface-type
interface-number | ip ip-address } ] *
Available in user view.
To establish a connection to an IPv6 SFTP server: