471
user
username
: Specifies an SCP username, a case-sensitive string of 1 to 80 characters. If the
username contains an ISP domain name, use the
pureusername
@
domain
format. The
pureusername
argument is a string of 1 to 55 characters. The
domain
argument is a string of 1 to 24
characters.
password
password
: Specifies a password in plaintext form, a case-sensitive string of 1 to 63
characters.
Usage guidelines
If the client and the server have negotiated to use certificate authentication, the client must verify the
server's certificate. For the client to correctly get the server's certificate, you must specify the server's
PKI domain on the client by using the
server-pki-domain
domain-name
option. The client uses the
CA certificate stored in the specified PKI domain to verify the server's certificate and does not need
to save the server's public key before authentication. If you do not specify the server's PKI domain,
the client uses the PKI domain of its own certificate to verify the server's certificate.
If you do not specify a username and password in the command, you must provide the username
and password in an interactive way.
If the SCP server uses publickey authentication, the password specified by this command is ignored.
Examples
# Connect the SCP client to SCP server
200.1.1.1
. Specify the public key of the server as
svkey
, and
download file
abc.txt
from the server. The SCP client uses publickey authentication. Use the
following algorithms:
•
Preferred key exchange algorithm:
dh-group14-sha1
.
•
Preferred server-to-client encryption algorithm:
aes128-cbc
.
•
Preferred client-to-server HMAC algorithm:
sha1
.
•
Preferred server-to-client HMAC algorithm:
sha1-96
.
•
Preferred compression algorithm:
zlib
.
<Sysname> scp 200.1.1.1 get abc.txt prefer-kex dh-group14-sha1 prefer-stoc-cipher
aes128-cbc prefer-ctos-hmac sha1 prefer-stoc-hmac sha1-96 prefer-compress zlib public-key
svkey
Username:
scp ipv6
Use
scp ipv6
to establish a connection to an IPv6 SCP server and transfer files with the server.
Syntax
In non-FIPS mode:
scp
ipv6
server
[
port-number
] [
vpn-instance
vpn-instance-name
] [
-i
interface-type
interface-number
] {
put
|
get
}
source-file-name
[
destination-file-name
] [
identity-key
{
dsa
|
ecdsa-sha2-nistp256
|
ecdsa-sha2-nistp384
|
rsa
| {
x509v3-ecdsa-sha2-nistp256
|
x509v3-ecdsa-sha2-nistp384
}
pki-domain
domain-name
} |
prefer-compress
zlib
|
prefer-ctos-cipher
{
3des-cbc
|
aes128-cbc
|
aes128-ctr
|
aes128-gcm
|
aes192-ctr
|
aes256-cbc
|
aes256-ctr
|
aes256-gcm
|
des-cbc
} |
prefer-ctos-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
|
sha2-256
|
sha2-512
} |
prefer-kex
{
dh-group-exchange-sha1
|
dh-group1-sha1
|
dh-group14-sha1
|
ecdh-sha2-nistp256
|
ecdh-sha2-nistp384
} |
prefer-stoc-cipher
{
3des-cbc
|
aes128-cbc
|
aes128-ctr
|
aes128-gcm
|
aes192-ctr
|
aes256-cbc
|
aes256-ctr
|
aes256-gcm
|
des-cbc
} |
prefer-stoc-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
|
sha2-256
|
sha2-512
} ] *
[
{
public-key
keyname
|
server-pki-domain
domain-name
} |
source
{
interface
interface-type
interface-number
|
ipv6
ipv6-address
} ] * [
user
username
[
password
password
] ]
In FIPS mode:
Содержание FlexNetwork 7500 Series
Страница 350: ...335 Related commands display port security port security enable ...
Страница 379: ...364 Sysname system view Sysname keychain abc mode absolute Sysname keychain abc tcp kind 252 ...
Страница 519: ...504 Related commands display ssh2 algorithm ssh2 algorithm cipher ssh2 algorithm key exchange ssh2 algorithm mac ...
