H3C Technologies H3C SecPath F1000-E User Manual
Page 88
9
# Generate RSA and DSA key pairs and enable the SSH server.
[Device] public-key local create rsa
[Device] public-key local create dsa
[Device] ssh server enable
# Enable the SFTP server.
[Device] sftp server enable
# Configure an IP address for interface GigabitEthernet 0/1, which the client will use as the destination
for SSH connection.
[Device] interface gigabitethernet 0/1
[Device-GigabitEthernet0/1] ip address 192.168.1.45 255.255.255.0
[Device-GigabitEthernet0/1] quit
# Set the authentication mode of the user interfaces to AAA.
[Device] user-interface vty 0 4
[Device-ui-vty0-4] authentication-mode scheme
# Enable the user interfaces to support SSH.
[Device-ui-vty0-4] protocol inbound ssh
[Device-ui-vty0-4] quit
# Configure a local user named client002 with the password being aabbcc and the service type
being SSH.
[Device] local-user client002
[Device-luser-client002] password simple aabbcc
[Device-luser-client002] service-type ssh
[Device-luser-client002] quit
# Configure the user authentication method as password and service type as SFTP.
[Device] ssh user client002 service-type sftp authentication-type password
Step2
Establish a connection between the SFTP client and the SFTP server
NOTE:
•
There are many kinds of SSH client software. The following takes the PSFTP of PuTTY Version 0.58 as an
example.
•
The PSFTP supports only password authentication.
# Establish a connection to the remote SFTP server.
Run the psftp.exe to launch the client interface as shown in
, and enter the following command:
open 192.168.1.45
Enter username client002 and password aabbcc as prompted to log into the SFTP server.