H3C Technologies H3C WX6000 Series Access Controllers User Manual

Page 634

65-6

# Configure an IP address for VLAN interface 1, which the SSH client uses as the destination for SSH
connection.

[Switch] interface Vlan-interface 1

[Switch-Vlan-interface1] ip address 192.168.0.1 255.255.255.0

[Switch-Vlan-interface1] quit

# Set the authentication method on the user interface to AAA.

[Switch] user-interface vty 0 4

[Switch-ui-vty0-4] authentication-mode scheme

# Set the protocol that a remote user uses to login as SSH.

[Switch-ui-vty0-4] protocol inbound ssh

[Switch-ui-vty0-4] quit

# Create local user client001.

[Switch] local-user client001

[Switch-luser-client001] password simple aabbcc

[Switch-luser-client001] service-type ssh

[Switch-luser-client001] quit

# Set the SSH authentication method to password, service type to SFTP.

[Switch] ssh user client001 service-type sftp authentication-type password

If you set the SSH authentication method to publickey, you need to configure the host public key of AC.
For the specific configuration, refer to

# Enable the SFTP server.

[Switch] sftp server enable

2) Configure the SFTP client (AC)

# Configure an IP address for VLAN interface 1.

system-view

[AC] interface vlan-interface 1

[AC-Vlan-interface1] ip address 192.168.0.2 255.255.255.0

[AC-Vlan-interface1] quit

[AC] quit

# Establish a connection to the remote SFTP server and enter SFTP client view.

sftp 192.168.0.1

Input Username: client001

Trying 192.168.0.1 ...

Press CTRL+K to abort

Connected to 192.168.0.1 ...

The Server is not authenticated. Continue? [Y/N]:y

Do you want to save the server public key? [Y/N]:y

Enter password:

sftp-client>