Aruba 2530 - Enabling SCP and SFTP; Disabling TFTP and Auto-TFTP for Enhanced Security

(This step assumes that you have already set up SSH on the switch.)
2. Execute ip ssh filetransfer to enable secure file transfer.
3. Use a third-party client application for SCP and SFTP commands.
Enabling SCP and SFTP
For more information about secure copy and SFTP, see Using SCP and SFTP on page 265.
Procedure
1. Open an SSH session as you normally would to establish a secure encrypted tunnel between your computer
and the switch.
For more detailed directions on how to open an SSH session, see "Configuring secure shell (SSH)" in the
access security guide for your switch. Please note that this is a one-time procedure for new switches or
connections. If you have already done it once you should not need to do it a second time.
2. To enable secure file transfer on the switch (once you have an SSH session established between the switch
and your computer), open a terminal window and enter the following command:
switch(config)# ip ssh filetransfer
For information on disabling TFTP and auto-TFTP, see
Disabling TFTP and auto-TFTP for enhanced security
on page 266.
Disabling TFTP and auto-TFTP for enhanced security
Using the ip ssh filetransfer command to enable SFTP automatically disables TFTP and auto-TFTP (if
either or both are enabled), as shown in Switch configuration with SFTP enabled on page 266.
Switch configuration with SFTP enabled
switch(config)# ip ssh filetransfer
Tftp and auto-tftp have been disabled.
1
switch(config)# sho run
Running configuration:
; J9091A Configuration Editor; Created on release #xx.15.xx
hostname "HP Switch"
module 1 type J8702A
module 2 type J702A
vlan 1
name "DEFAULT_VLAN"
untagged A1-A24,B1-B24
ip address 10.28.234.176 255.255.240.0
exit
ip ssh filetransfer
2
no tftp-enable
password manager
password operator
1
Enabling SFTP automatically disables TFTP and auto-tftp and displays this message.
2
Viewing the configuration shows that SFTP is enabled and TFTP is disabled.
If you enable SFTP and then later disable it, TFTP and auto-TFTP remain disabled unless they are explicitly re-
enabled.
266 Aruba 2530 Management and Configuration Guide for
ArubaOS-Switch 16.05