H3C Technologies H3C SecBlade LB Cards - Manual (Page 194)

183
SFTP configuration examples
Password authentication enabled SFTP server configuration
example
Network requirements
As shown in Figure 84 , you can log in to the LB through the SFTP client that runs on the host. The LB acts
as the SFTP server and uses password authentication. The username and password of the client are saved
on the LB.
Figure 84 Network diagram
Configuration procedure
1. Configure the SFTP server:
# Generate the RSA key pairs.
system-view
[LB] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++
++++++++++++++
+++++
++++++++
# Enable the SSH server function.
[LB] ssh server enable
# Enable the SFTP server.
[LB] sftp server enable
# Configure an IP address for interface GigabitEthernet 0/1. The SFTP client uses this address as
the destination for SSH connection.
[LB] interface gigabitethernet 0/1
[LB-GigabitEthernet0/1] ip address 192.168.1.45 255.255.255.0
[LB-GigabitEthernet0/1] quit
# Set the authentication mode of the user interface to AAA.
[LB] user-interface vty 0 4
[LB-ui-vty0-4] authentication-mode scheme
# Enable the user interface to support SSH.