164
Enabling the SFTP server function
This SFTP server function enables clients to log in to the device through SFTP.
To enable the SFTP server function:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable the SFTP server
function.
sftp server enable
By default, the SFTP server function
is disabled.
Configuring the user interfaces for Stelnet clients
Dependent on different SSH applications, an SSH client can be an Stelnet, SFTP, or SCP client.
The Stelnet client accesses the device through a VTY user interface. You must configure the user interfaces
for SSH clients to allow SSH login. The configuration takes effect only on the clients at next login.
The SFTP or SCP client accesses the device without using a VTY user interface.
To configure the user interfaces for Stelnet clients:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter VTY user interface view.
user-interface
vty
number
[
ending-number
]
N/A
3.
Set the login authentication
mode to
scheme
.
authentication-mode
scheme
By default, the authentication
mode is
password
.
For more information about this
command, see
Fundamentals
Command Reference
.
Configuring a client's host public key
If the server uses publickey authentication to authentication a client, it compares the SSH username and
host public key that it receives from the client with those locally saved. If the information is consistent, it
checks the digital signature that the client sends. The digital signature is calculated by the client
according to the private key that corresponds to the host public key.
For SSH servers that use publickey authentication, password-publickey authentication, or any
authentication, you must configure the client's DSA or RSA host public key on the server, and specify the
corresponding host private key on the client to generate the digital signature, so that the client can pass
publickey authentication with correct digital signature. If the device serves as a client, corresponding host
private key is specified by the specified public key algorithm.
You can manually configure the host public key of an SSH client on the server, or import it from the public
key file: