HP VPN Firewall Appliances System Management and Maintenance Configuration Guide

202

[Router-ui-vty0-4] authentication-mode scheme

# Enable the user interfaces to support SSH.

[Router-ui-vty0-4] protocol inbound ssh

[Router-ui-vty0-4] quit

# Create a local user named client001 with the password as aabbcc and service type as ssh.

[Router] local-user client001

[Router-luser-client001] password simple aabbcc

[Router-luser-client001] service-type ssh

[Router-luser-client001] quit

# Create an SSH user client001, and specify the service type for the user as scp and authentication

method as password. (Optional. If an SSH user is not created, password authentication is used by

default.)

[Router] ssh user client001 service-type scp authentication-type password

2. Configure an IP address for GigabitEthernet 0/1 on the SCP client:

<Firewall> system-view

[Firewall] interface gigabitethernet 0/1

[Firewall-GigabitEthernet0/1] ip address 192.168.0.2 255.255.255.0

[Firewall-GigabitEthernet 0/1] quit

[Firewall] quit

3. Connect to the SCP server, download the file remote.bin from the server, and save it locally to the

file local.bin.

<Firewall> scp 192.168.0.1 get remote.bin local.bin

Username: client001

Trying 192.168.0.1 ...

Press CTRL+K to abort

Connected to 192.168.0.1 ...

The Server is not authenticated. Continue? [Y/N]:y

Do you want to save the server public key? [Y/N]:n

Enter password:

18471 bytes transfered in 0.001 seconds.