HP 5500 HI Series, Руководство по настройке

Страница: 339 / 444

326
Configuring SFTP
Overview
The Secure File Transfer Protocol (SFTP) is a new feature in SSH2.0.
SFTP uses the SSH connection to provide secure data transfer. The switch can serve as the SFTP server,
allowing a remote user to log in to the SFTP server for secure file management and transfer. The switch
can also serve as an SFTP client, enabling a user to log in from the switch to a remote device for secure
file transfer.
With SSH connection across VPNs, you can configure the switch as an SFTP client to establish
connections with SFTP servers in different MPLS VPNs. For more information about this function, see
" Configuring SSH2.0 ."
FIPS compliance
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode (see "
Configuring FIPS ") and non-FIPS mode.
Configuring the switch as an SFTP server
Before you configure this task, complete the following tasks:
•
Configure the SSH server.
•
Use the ssh user service-type command to set the service type of SSH users to sftp or all .
For more information about the configuration procedures, see " Configuring SSH2.0 ."
Enabling the SFTP server
This configuration task will enable the SFTP service so that a client can log in to the SFTP server through
SFTP.
When the switch acts as the SFTP server, the following restrictions are imposed on the SFTP client:
•
Only one client can access the SFTP server at a time. If the SFTP client uses WinSCP, a file on the
server cannot be modified directly. It can only be downloaded to a local place, modified, and then
uploaded to the server.
•
The user privilege level for the SFTP client must be correctly configured.
{
Set the user privilege level to 3 if the SFTP client executes the following commands: delete ,
remove , rename , rmdir , and mkdir .
{
Set the user privilege level to 3 if the SFTP client executes the
put
command and uses the
uploaded local file to overwrite the file on the SFTP server.
{
Set the user privilege level to 2 if the SFTP client executes the put command and does not use
the uploaded local file to overwrite the file on the SFTP server.
{
Set the user privilege level to any value from 0 to 3 if the SFTP client executes other commands.