R0106-HP MSR Router Series Security Configuration Guide(V7)

357
[RouterB] interface gigabitethernet 2/1/1
[RouterB-GigabitEthernet2/1/1] ip address 192.168.0.1 255.255.255.0
[RouterB-GigabitEthernet2/1/1] quit
# Create a local device management user named client001 with the plaintext password aabbcc,
the service type ssh, and the user role network-admin.
[RouterB] local-user client001 class manage
[RouterB-luser-manage-client001] password simple aabbcc
[RouterB-luser-manage-client001] service-type ssh
[RouterB-luser-manage-client001] authorization-attribute user-role network-admin
[RouterB-luser-manage-client001] quit
# Configure the SSH user client001 with service type scp and authentication method password. By
default, password authentication is used if no SSH user is created.
[RouterB] ssh user client001 service-type scp authentication-type password
2. Configure an IP address for GigabitEthernet 2/1/1 on the SCP client.
<RouterA> system-view
[RouterA] interface gigabitethernet 2/1/1
[RouterA-GigabitEthernet2/1/1] ip address 192.168.0.2 255.255.255.0
[RouterA-GigabitEthernet2/1/1] quit
[RouterA] quit
3. Connect to the SCP server, download the file remote.bin from the server, and save it locally to the
file local.bin.
<RouterA> scp 192.168.0.1 get remote.bin local.bin
Username: client001
Connected to 192.168.0.1 ...
The Server is not authenticated. Continue? [Y/N]:y
Do you want to save the server public key? [Y/N]:n
Enter password:
18471 bytes transfered in 0.001 seconds.