331
SFTP client configuration example
Unless otherwise noted, devices in the configuration example are operating in non-FIPS mode.
Network requirements
As shown in
, an SSH connection is required between Switch A and Switch B. Switch A, an
SFTP client, needs to log in to Switch B for file management and file transfer. Use publickey authentication
and the RSA public key algorithm.
Figure 101
Network diagram
Configuration procedure
During SFTP server configuration, the client public key is required. Use the client software to generate
RSA key pairs on the client before configuring the SFTP server.
1.
Configure the SFTP client:
# Create VLAN-interface 1 and assign an IP address to it.
<SwitchA> system-view
[SwitchA] interface vlan-interface 1
[SwitchA-Vlan-interface1] ip address 192.168.0.2 255.255.255.0
[SwitchA-Vlan-interface1] quit
# Generate the RSA key pairs.
[SwitchA] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++
++++++++++++++
+++++
++++++++
# Export the host public key to file
pubkey
.
[SwitchA] public-key local export rsa ssh2 pubkey
[SwitchA] quit
Then, transmit the public key file to the server through FTP or TFTP.
2.
Configure the SFTP server:
# Generate the RSA key pairs.
<SwitchB> system-view
[SwitchB] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
