340
Task Command
Remarks
ecdh-sha2-nistp384
} |
prefer-stoc-cipher
{
3des-cbc
|
aes128-cbc
|
aes256-cbc
|
des-cbc
|
aes128-ctr
|
aes192-ctr
|
aes256-ctr
|
aes128-gcm
|
aes256-gcm
} |
prefer-stoc-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
|
sha2-256
|
sha2-512
} ] * [
dscp
dscp-value
| {
public-key
keyname
|
server-pki-domain
domain-name
} |
source
{
interface
interface-type interface-number
|
ipv6
ipv6-addres
} ] *
•
In FIPS mode, establish a connection to an IPv6
SFTP server:
sftp
ipv6
server
[
port-number
] [
vpn-instance
vpn-instance-name
] [
-i
interface-type
interface-number
] [
identity-key
{
ecdsa
|
rsa
|
{
x509v3-ecdsa-sha2-nistp384
|
x509v3-ecdsa-sha2-nistp256
}
pki-domain
domain-name
}
|
prefer-compress zlib
|
prefer-ctos-cipher
{
aes128-cbc
|
aes256-cbc
|
aes128-ctr
|
aes192-ctr
|
aes256-ctr
|
aes128-gcm
|
aes256-gcm
} |
prefer-ctos-hmac
{
sha1
|
sha1-96
|
sha2-256
|
sha2-512
} |
prefer-kex
{
dh-group14-sha1
|
ecdh-sha2-nistp256
|
ecdh-sha2-nistp384
} |
prefer-stoc-cipher
{
aes128-cbc
|
aes256-cbc
|
aes128-ctr
|
aes192-ctr
|
aes256-ctr
|
aes128-gcm
|
aes256-gcm
} |
prefer-stoc-hmac
{
sha1
|
sha1-96
|
sha2-256
|
sha2-512
} ] * [ {
public-key
keyname
|
server-pki-domain
domain-name
} |
source
{
interface
interface-type interface-number
|
ipv6
ipv6-addres
} ] *
Establishing a connection to an SFTP server based on Suite
B
After the connection is established, you are in SFTP client view of the server and can perform file or
directory operations.
To establish a connection to an SFTP server based on Suite B:
Task Command
Remarks
Establish a
connection to an
SFTP server based
on Suite B.
•
Establish a connection to an IPv4 SFTP server
based on Suite B:
sftp
server
[
port-number
] [
vpn-instance
vpn-instance-name
]
suite-b
[
128-bit
|
192-bit
]
pki-domain
domain-name
[
server-pki-domain
domain-name
] [
prefer-compress zlib
] [
dscp
dscp-value
|
source
{
interface
interface-type
interface-number
|
ip
ip-address
} ] *
•
Establish a connection to an IPv6 SFTP server
based on Suite B:
sftp
ipv6
server
[
port-number
] [
vpn-instance
vpn-instance-name
] [
-i
interface-type
interface-number
]
suite-b
[
128-bit
|
192-bit
]
pki-domain
domain-name
[
server-pki-domain
domain-name
] [
prefer-compress zlib
] [
dscp
dscp-value
|
source
{
interface
interface-type
interface-number
|
ipv6
ipv6-address
} ] *
Available in user view.
The client cannot establish
connections to both IPv4
and IPv6 SFTP servers.