H3C SOHO IE4300, Command Reference Manual

Page: 2433 / 3296

49
source
: Specifies a source IPv6 address or source interface for IPv6 SFTP packets. By default, the
device automatically selects a source address for IPv6 SFTP packets in compliance with RFC 3484.
As a best practice to ensure successful SFTP connections, specify a loopback interface as the
source interface or specify the IPv6 address of a loopback interface as the source address.
•
interface interface-type interface-number
: Specifies a source interface by its
type and number. The IPv6 address of this interface is the source IPv6 address of the IPv6
SFTP packets.
•
ipv6 ipv6-address
: Specifies a source IPv6 address.
Usage guidelines
If the client and the server have negotiated to use certificate authentication, the client must verify the
server's certificate. For the client to correctly get the server's certificate, you must specify the server's
PKI domain on the client by using the
server-pki-domain domain-name
option. The client
uses the CA certificate stored in the specified PKI domain to verify the server's certificate and does
not need to save the server's public key before authentication. If you do not specify the server's PKI
domain, the client uses the PKI domain of its own certificate to verify the server's certificate.
Examples
# Connect an SFTP client to SFTP server 2000::1 and specify the public key of the server as svkey .
The SFTP client uses publickey authentication. Use the following algorithms:
•
Preferred key exchange algorithm: dh-group14-sha1 .
•
Preferred server-to-client encryption algorithm: aes128-cbc .
•
Preferred client-to-server HMAC algorithm: sha1 .
•
Preferred server-to-client HMAC algorithm: sha1-96 .
•
Preferred compression algorithm: zlib .
<Sysname> sftp ipv6 2000::1 prefer-kex dh-group14-sha1 prefer-stoc-cipher aes128-cbc
prefer-ctos-hmac sha1 prefer-stoc-hmac sha1-96 prefer-compress zlib public-key svkey
Username:
sftp ipv6 suite-b
Use
sftp ipv6 suite-b
to establish a connection to an IPv6 SFTP server based on Suite B
algorithms and enter SFTP client view.
Syntax
sftp ipv6 server [ port-number ] [ vpn-instance vpn-instance-name ] [ -i
interface-type interface-number ] suite-b [ 128-bit | 192-bit ] pki-domain
domain-name [ server-pki-domain domain-name ] [ prefer-compress zlib ]
[ dscp dscp-value | source { interface interface-type interface-number |
ipv6 ipv6-address } ] *
Views
User view
Predefined user roles
network-admin
Parameters
server
: Specifies a server by its IPv6 address or host name, a case-insensitive string of 1 to 253
characters.
port
-
number
: Specifies the port number of the server, in the range of 1 to 65535. The default is 22.