iv 
Configuring the macAddressElseUserLoginSecure Mode ····························································6-17 
Troubleshooting Port Security···············································································································6-19 
Cannot Set the Port Security Mode·······························································································6-19 
Cannot Configure Secure MAC Addresses···················································································6-20 
Cannot Change Port Security Mode When a User Is Online ························································6-20 
7 IP Source Guard Configuration················································································································7-1 
IP Source Guard Overview ·····················································································································7-1 
Configuring a Static Binding Entry ··········································································································7-1 
Configuring Dynamic Binding Function···································································································7-2 
Displaying and Maintaining IP Source Guard ·························································································7-3 
IP Source Guard Configuration Examples······························································································7-3 
Static Binding Entry Configuration Example····················································································7-3 
Dynamic Binding Function Configuration Example ·········································································7-4 
Troubleshooting IP Source Guard ··········································································································7-6 
Failed to Configure Static Binding Entries and Dynamic Binding Function·····································7-6 
8 SSH2.0 Configuration································································································································8-1 
SSH2.0 Overview····································································································································8-1 
Introduction to SSH2.0 ····················································································································8-1 
Operation of SSH ····························································································································8-1 
Configuring the Device as an SSH Server······························································································8-4 
SSH Server Configuration Task List································································································8-4 
Generating a DSA or RSA Key Pair ································································································8-4 
Enabling SSH Server·······················································································································8-5 
Configuring the User Interfaces for SSH Clients·············································································8-5 
Configuring a Client Public Key·······································································································8-6 
Configuring an SSH User ················································································································8-7 
Setting the SSH Management Parameters ·····················································································8-8 
Configuring the Device as an SSH Client ·······························································································8-9 
SSH Client Configuration Task List ·································································································8-9 
Specifying a Source IP address/Interface for the SSH client··························································8-9 
Configuring Whether First-time Authentication is Supported ························································8-10 
Establishing a Connection Between the SSH Client and the Server ············································8-11 
Displaying and Maintaining SSH···········································································································8-11 
SSH Server Configuration Examples····································································································8-12 
When Switch Acts as Server for Password Authentication···························································8-12 
When Switch Acts as Server for Publickey Authentication ···························································8-14 
SSH Client Configuration Examples ·····································································································8-19 
When Switch Acts as Client for Password Authentication ····························································8-19 
When Switch Acts as Client for Publickey Authentication·····························································8-22 
9 SFTP Configuration···································································································································9-1 
SFTP Overview ·······································································································································9-1 
Configuring an SFTP Server···················································································································9-1 
Configuration Prerequisites ·············································································································9-1 
Enabling the SFTP Server···············································································································9-1 
Configuring the SFTP Connection Idle Timeout Period ··································································9-2 
Configuring an SFTP Client ····················································································································9-2 
Specifying a Source IP Address or Interface for the SFTP Client···················································9-2