Cisco RF Gateway 1 Modules, Configuration Manual

Page: 243 / 286

SFTP Support
78-4025112-01 Rev H0 219

Open Source toolkit for SSH to generate the DSA key

Software containing SSH/SFTP kernel support such as 2.6.x or 6.1.x.
Important: It is recommended that you consult your IT and security departments
before installing on live RFGW-1 systems. The key files you’ll be creating contain a
private key and must be handled in accordance with your company’s security
procedures, especially the unprotected key known as dsa_key.pem.
Creating an Unprotected DSA Key:
The dsa_key.pem is not password protected. It contains your private DSA key in the
open for all to see. Generating a DSA key requires an openssh shell (Cygwin is used
in our example). Follow the instructions below to create a DSA key.
1 Enter the following command at the shell prompt:
ssh-keygen -t dsa (the "-t" flag is used to specify the key type).
Result: You will be prompted for the location to save the file. The default
location is ~/.ssh/id_dsa.
2 Click Enter to save the file to the default location, or specify a different location.
Result: You will then be prompted for a passphrase.
3 Click Enter twice to generate an unprotected file.
Result: The following 2 files are created:
- dsa_key.pem - the private key (to be downloaded to the RFGW-1)
- dsa_key.pem.pub - the public key (may be downloaded to the server
Note: You can specify the filename on the command line by inserting an "-f". This
flag forces the path for storing the key file. See example below.
ssh-keygen -t dsa -f /path/to/my_dsa
Installing SFTP
By default, SFTP is disabled and FTP is used as the default file transfer method.
Follow the steps below to enable and configure SFTP.