HPE FlexFabric 5940 SERIES, Руководство по настройке безопасности

Страница: 421 / 571

408
Connecting to 192.168.0.1 port 22.
sftp>
SCP configuration examples
Unless otherwise noted, devices in the configuration examples operate in non-FIPS mode.
When the device acts as an SCP server and is operating in FIPS mode, only ECDSA and RSA key
pairs are supported. Do not generate a DSA key pair on the SCP server.
SCP configuration example with password authentication
Network requirements
As shown in Figure 115 :
•
Switch B uses the password authentication method.
•
The client 's username and password are saved on Switch B.
Establish an SCP connection between Switch A and Switch B, so you can log in to Switch B to
transfer files.
Figure 115 Network diagram
Configuration procedure
1. Configure the SCP server:
# Generate RSA key pairs.
<SwitchB> system-view
[SwitchB] public-key local create rsa
The range of public key modulus is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
........................++++++
...................++++++
..++++++++
............++++++++
Create the key pair successfully.
# Generate a DSA key pair.
[SwitchB] public-key local create dsa
The range of public key modulus is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
.++++++++++++++++++++++++++++++++++++++++++++++++++*
........+......+.....+......................................+