HP 5500 Ei 5500 Si Switch Series Configuration Guide

 316 
Generating Keys... 
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\
++++++++ 
+++++++++++++++++++++++++++++++++++ 
# Enable the SSH server. 
[SwitchB] ssh server enable 
# Enable the SFTP server. 
[SwitchB] sftp server enable 
# Configure an IP address for VLAN-interface 1, which the SSH client uses as the destination for 
SSH connection. 
[SwitchB] interface vlan-interface 1 
[SwitchB-Vlan-interface1] ip address 192.168.0.1 255.255.255.0 
[SwitchB-Vlan-interface1] quit 
#...

 317 
/z 
Are you sure to delete it? [Y/N]:y 
This operation might take a long time.Please wait... 
 
File successfully Removed 
sftp-client> dir 
-rwxrwxrwx   1 noone    nogroup      1759 Aug 23 06:52 config.cfg 
-rwxrwxrwx   1 noone    nogroup       225 Aug 24 08:01 pubkey2 
-rwxrwxrwx   1 noone    nogroup       283 Aug 24 07:39 pubkey 
drwxrwxrwx   1 noone    nogroup         0 Sep 01 06:22 new 
-rwxrwxrwx   1 noone    nogroup       225 Sep 01 06:55 pub 
# Add a directory named new1 and check if it has...

 318 
sftp-client> 
# Terminate the connection to the remote SFTP server. 
sftp-client> quit 
Bye 
Connection closed. 
 
SFTP server configuration example 
Network requirements 
As shown in Figure 112, an  SSH connection is required between the host and the switch. The host, an 
SFTP client, needs to log in to the switch for file management and file transfer. Use password 
authentication and configure the username  client002 and the password aabbcc  for the client on the 
switch. 
Figure 112  Network...

 319 
[Switch] ssh server enable 
# Enable the SFTP server. 
[Switch] sftp server enable 
# Configure an IP address for VLAN-interface 1, which the client will use as the destination for SSH 
connection. 
[Switch] interface vlan-interface 1 
[Switch-Vlan-interface1] ip address 192.168.1.45 255.255.255.0 
[Switch-Vlan-interface1] quit 
# Set the authentication mode of the user interfaces to AAA. 
[Switch] user-interface vty 0 15 
[Switch-ui-vty0-15] authentication-mode scheme 
# Enable the user interfaces...

 320 
Figure 113 SFTP client interface 
 
  

 321 
Configuring SCP 
Overview 
Secure copy (SCP) is based on SSH2.0 and offers a secure approach to copying files. 
SCP uses SSH connections for copying files. The switch can act as the SCP server, allowing a user to log 
in to the switch for file upload and download. The switch can also act as an SCP client, enabling a user 
to log in from the switch to a remote server for secure file transfer.  
 
 NOTE: 
When the switch acts as an SCP server, only one of  the FTP, SFTP or SCP user can access the...

 322 
Step Command  Remarks 
1.  Upload a file 
to an SCP 
server. 
• Upload a file to the IPv4 SCP server: 
scp  server  [ port-number  ] put source-file -path  [ destination-file-path  ]  
[ identity-key  { dsa  | rsa } |  prefer-ctos-cipher  { 3des | aes128  | 
des  } | prefer-ctos-hmac  { md5 | md5-96 |  sha1 | sha1-96 } | 
prefer-kex  { dh-group-exchange  | dh-group1  | dh-group14  } | 
prefer-stoc-cipher  { 3des | aes128  | des } | prefer-stoc-hmac  { md5 
|  md5-96 |  sha1 | sha1-96 } ] *  
•...

 323 
 system-view 
[SwitchA] interface vlan-interface 1 
[SwitchA-Vlan-interface1] ip address 192.168.0.2 255.255.255.0 
[SwitchA-Vlan-interface1] quit 
# Download the file remote.bin f r o m  t h e  SC P  s e r v e r,  s a ve  i t  l o c a l l y  a n d  c h a n g e  t h e  f i l e  n a m e  t o  local.bin. 
 scp 192.168.0.1 get remote.bin local.bin 
Username: test 
Trying 192.168.0.1 ... 
Press CTRL+K to abort 
Connected to 192.168.0.1 ... 
 
The Server is not authenticated. Continue? [Y/N]:y 
Do you...

 324 
It will take a few minutes. 
Press CTRL+C to abort. 
Input the bits of the modulus[default = 1024]: 
Generating Keys... 
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\
++++++++ 
+++++++++++++++++++++++++++++++++++ 
# Enable the SSH server function. 
[Switch] ssh server enable 
# Configure an IP address for VLAN-interface 1, which the client will use as the destination for SSH 
connection.  
[Switch] interface vlan-interface 1 
[Switch-Vlan-interface1] ip address...

 325 
Configuring SSL 
Overview 
Secure Sockets Layer (SSL) is a security protocol that provides secure connection services for TCP-based 
application layer protocols such as Hypertext Transfer Pr o t o c o l  ( H T T P ) .  I t  i s  w i d e l y  u s e d  i n  e - b u s i n e s s  a n d  
online banking to ensure secure data transmission over the Internet.  
SSL security mechanism 
Secure connections provided by SSL have these features: 
•   Confidentiality —SSL uses a symmetric encryption algorithm to...