269
SCP configuration commands
The switch supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see
Security Configuration Guide
.
SCP client configuration commands
scp
Syntax
In non-FIPS mode:
scp
[
ipv6
]
server
[
port-number
] {
get
|
put
}
source-file-path
[
destination-file-path
] [
identity-key
{
dsa
|
rsa
} |
prefer-ctos-cipher
{
3des
|
aes128
|
des
} |
prefer-ctos-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
} |
prefer-kex
{
dh-group-exchange
|
dh-group1
|
dh-group14
} |
prefer-stoc-cipher
{
3des
|
aes128
|
des
} |
prefer-stoc-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
} ] *
In FIPS mode:
scp
[
ipv6
]
server
[
port-number
] {
get
|
put
}
source-file-path
[
destination-file-path
] [
identity-key
rsa
|
prefer-ctos-cipher
{
aes128
|
aes256
} |
prefer-ctos-hmac
{
sha1
|
sha1-96
} |
prefer-kex dh-group14
|
prefer-stoc-cipher
{
aes128
|
aes256
} |
prefer-stoc-hmac
{
sha1
|
sha1-96
} ] *
View
User view
Default level
3: Manage level
Parameters
ipv6
: Specifies the type of the server as IPv6. If this keyword is not specified, the server is an IPv4 server.
server
: Specifies an IPv4 or IPv6 server by its address or host name. For an IPv4 server, it is a
case-insensitive string of 1 to 20 characters. For an IPv6 server, it is a case-insensitive string of 1 to 46
characters.
port
-
number
: Specifies the port number of the server, in the range of 0 to 65535. The default is 22.
identity-key
: Specifies the algorithm for publickey authentication, either
dsa
or
rsa
. The default is
dsa
.
•
dsa
: Specifies the public key algorithm
dsa.
•
rsa
: Specifies the public key algorithm
rsa
.
prefer-ctos-cipher
: Specifies the preferred encryption algorithm from client to server, defaulted to
aes128
.
•
3des
: Specifies the encryption algorithm 3des-cbc.
•
aes128
: Specifies the encryption algorithm aes128-cbc.
•
aes256
: Encryption algorithm aes256-cbc.
•
des
: Specifies the encryption algorithm des-cbc.
