H3C SOHO IE4300, Command Reference Manual

Page: 2435 / 3296

51
Examples
# Use the 192-bit Suite B algorithms to establish a connection to SFTP server 2000::1 . Specify the
client's PKI domain and the server's PKI domain as clientpkidomain and serverpkidomain ,
respectively.
<Sysname> sftp ipv6 2000::1 suite-b 192-bit pki-domain clientpkidomain server-pki-domain
serverpkidomain
Username:
sftp suite-b
Use sftp suite-b to establish a connection to an IPv4 SFTP server based on Suite B algorithms
and enter SFTP client view.
Syntax
sftp server [ port-number ] [ vpn-instance vpn-instance-name ] suite-b
[ 128-bit | 192-bit ] pki-domain domain-name [ server-pki-domain
domain-name ] [ prefer-compress zlib ] [ dscp dscp-value | source { interface
interface-type interface-number | ip ip-address } ] *
Views
User view
Predefined user roles
network-admin
Parameters
server : Specifies a server by its IPv4 address or host name, a case-insensitive string of 1 to 253
characters.
port-number
: Specifies the port number of the server, in the range of 1 to 65535. The default is
22.
vpn-instance vpn-instance-name : Specifies the MPLS L3VPN instance to which the server
belongs. The vpn-instance-name argument represents the VPN instance name, a
case-sensitive string of 1 to 31 characters.
suite-b : Specifies the Suite B algorithms. If neither the 128-bit keyword nor the 192-bit keyword is
specified, all algorithms in Suite B are used. For more information about the Suite B algorithms, see
Table 8 .
128-bit
: Specifies the 128-bit Suite B security level.
192-bit : Specifies the 192-bit Suite B security level.
pki-domain domain-name
: Specifies the PKI domain of the client's certificate. The
domain-name
argument represents the PKI domain name, a case-insensitive string of 1 to 31
characters. Invalid characters are tildes (~), asterisks (*), backslashes (\), vertical bars (|), colons (:),
dots (.), angle brackets (< >), quotation marks ("), and apostrophes (').
server-pki-domain domain-name
: Specifies the PKI domain for verifying the server's
certificate. The
domain-name
argument represents the PKI domain name, a case-insensitive string
of 1 to 31 characters. Invalid characters are tildes (~), asterisks (*), backslashes (\), vertical bars (|),
colons (:), dots (.), angle brackets (< >), quotation marks ("), and apostrophes ('). If you do not specify
the server's PKI domain, the client uses the PKI domain of its own certificate to verify the server's
certificate.
prefer-compress
: Specifies the preferred compression algorithm for data compression between
the server and the client. By default, compression is not supported.
zlib
: Specifies compression algorithm zlib.