378
Task Command
Remarks
aes128-ctr
|
aes128-gcm
|
aes192-ctr
|
aes256-cbc
|
aes256-ctr
|
aes256-gcm
|
des-cbc
} |
prefer-ctos-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
|
sha2-256
|
sha2-512
} |
prefer-kex
{
dh-group-exchange-sha1
|
dh-group1-sha1
|
dh-group14-sha1
|
ecdh-sha2-nistp256
|
ecdh-sha2-nistp384
} |
prefer-stoc-cipher
{
3des-cbc
|
aes128-cbc
|
aes128-ctr
|
aes128-gcm
|
aes192-ctr
|
aes256-cbc
|
aes256-ctr
|
aes256-gcm
|
des-cbc
} |
prefer-stoc-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
|
sha2-256
|
sha2-512
}] *
[
{
public-key
keyname
|
server-pki-domain
domain-name
} |
source
{
interface
interface-type interface-number
|
ipv6
ipv6-address
} ] *
•
In FIPS mode:
scp
ipv6
server
[
port-number
] [
vpn-instance
vpn-instance-name
] [
-i
interface-type
interface-number
] {
put
|
get
}
source-file-name
[
destination-file-name
] [
identity-key
{
ecdsa-sha2-nistp256
|
ecdsa-sha2-nistp384
|
rsa
| {
x509v3-ecdsa-sha2-nistp384
|
x509v3-ecdsa-sha2-nistp256
}
pki-domain
domain-name
} |
prefer-compress
zlib
|
prefer-ctos-cipher
{
aes128-cbc
|
aes128-ctr
|
aes128-gcm
|
aes192-ctr
|
aes256-cbc
|
aes256-ctr
|
aes256-gcm
} |
prefer-ctos-hmac
{
sha1
|
sha1-96
|
sha2-256
|
sha2-512
} |
prefer-kex
{
dh-group14-sha1
|
ecdh-sha2-nistp256
|
ecdh-sha2-nistp384
} |
prefer-stoc-cipher
{
aes128-cbc
|
aes128-ctr
|
aes128-gcm
|
aes192-ctr
|
aes256-cbc
|
aes256-ctr
|
aes256-gcm
} |
prefer-stoc-hmac
{
sha1
|
sha1-96
|
sha2-256
|
sha2-512
}] *
[
{
public-key
keyname
|
server-pki-domain
domain-name
} |
source
{
interface
interface-type interface-number
|
ipv6
ipv6-address
} ] *
Establishing a connection to an SCP server based on Suite B
Task Command
Remarks
Establish a
connection to an SCP
server based on Suite
B.
•
Establish a connection to an IPv4 SCP server
based on Suite B:
scp
server
[
port-number
] [
vpn-instance
vpn-instance-name
] {
put
|
get
}
source-file-name
[
destination-file-name
]
suite-b
[
128-bit
|
192-bit
]
pki-domain
domain-name
[
server-pki-domain
domain-name
] [
prefer-compress zlib
]
[
source
{
interface
interface-type
interface-number
|
ip
ip-address
} ] *
•
Establish a connection to an IPv6 SCP server
based on Suite B:
scp
ipv6
server
[
port-number
] [
vpn-instance
vpn-instance-name
] [
-i
interface-type
interface-number
] {
put
|
get
}
source-file-name
[
destination-file-name
]
suite-b
[
128-bit
|
192-bit
]
pki-domain
domain-name
Available in user view.
The client cannot establish
connections to both IPv4
and IPv6 SCP servers.
Содержание FlexFabric 5940 SERIES
Страница 251: ...238 ...