3Com 4210 PWR, Configuration Manual

Page: 443 / 567

SFTP Configuration 441
n
If you specify to authenticate a client through public key on the server, the client
needs to read the local private key when logging in to the SFTP server. Since both
RSA and DSA are available for public key authentication, you need to use the
identity-key key word to specify the algorithms to get correct local private key;
otherwise you will fail to log in. For details, see SSH Operation Manual.
SFTP Configuration
Example
Network requirements
As shown in Figure 151, establish an SSH connection between the SFTP client
(switch A) and the SFTP server (switch B). Log in to switch B through switch A to
manage and transmit files. An SFTP user with the user name "client001" and
password "abc" exists on the SFTP server.
Network diagram
Figure 151 Network diagram for SFTP configuration
Configuration procedure
1 Configure the SFTP server (switch B)
# Create key pairs.
<4210> system-view
[4210] public-key local create rsa
[4210] public-key local create dsa
# Create a VLAN interface on the switch and assign to it an IP address, which is
used as the destination address for the client to connect to the SFTP server.
[4210] interface vlan-interface 1
[4210-Vlan-interface1] ip address 192.168.0.1 255.255.255.0
[4210-Vlan-interface1] quit
# Specify the SSH authentication mode as AAA.
[4210] user-interface vty 0 4
[4210-ui-vty0-4] authentication-mode scheme
# Configure the protocol through which the remote user logs in to the switch as
SSH.
[4210-ui-vty0-4] protocol inbound ssh
[4210-ui-vty0-4] quit
# Create a local user client001.
[4210] local-user client001
[4210-luser-client001] password simple abc
[4210-luser-client001] service-type ssh
[4210-luser-client001] quit
Switch B
SFTP Server
SFTP Client
Vlan -Int1
192.168.0.1/24
Vlan -Int1
192.168.0.2/24
Switch A