277
• If only password authentication is used, the working directory specified in the ssh user command
does not take effect. You must set the working directory on the remote server or in the local user
account for the SSH user.
• If publickey authentication, whether with password authentication or not, is used, you must set the
working directory in the ssh user command.
Configuring the switch as the SCP client
Follow these steps to upload or download files to or from an SCP server:
To do… Use the command…
Remarks
Upload a file to an
SCP server.
• In non-FIPS mode:
scp [ ipv6 ] server [ port-number ] put source-file-path
[ destination-file-path ] [ identity-key { dsa | rsa } | prefer-ctos-cipher
{ 3des | aes128 | des } | prefer-ctos-hmac { md5 | md5-96 | sha1
| sha1-96 } | prefer-kex { dh-group-exchange | dh-group1 |
dh-group14 } | prefer-stoc-cipher { 3des | aes128 | des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] *
• In FIPS mode:
scp [ ipv6 ] server [ port-number ] put source-file-path
[ destination-file-path ] [ identity-key rsa | prefer-ctos-cipher
{ aes128 | aes256 } | prefer-ctos-hmac { sha1 | sha1-96 } |
prefer-kex dh-group14 | prefer-stoc-cipher { aes128 | aes256 } |
prefer-stoc-hmac { sha1 | sha1-96 } ] *
Use one of the
commands.
Available in
user view.
Download a file
from an SCP
server.
• In non-FIPS mode:
scp [ ipv6 ] server [ port-number ] get source-file-path
[ destination-file-path ] [ identity-key { dsa | rsa } | prefer-ctos-cipher
{ 3des | aes128 | des } | prefer-ctos-hmac { md5 | md5-96 | sha1
| sha1-96 } | prefer-kex { dh-group-exchange | dh-group1 |
dh-group14 } | prefer-stoc-cipher { 3des | aes128 | des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] *
• In FIPS mode:
scp [ ipv6 ] server [ port-number ] get source-file-path
[ destination-file-path ] [ identity-key rsa | prefer-ctos-cipher
{ aes128 | aes256 } | prefer-ctos-hmac { sha1 | sha1-96 } |
prefer-kex dh-group14 | prefer-stoc-cipher { aes128 | aes256 } |
prefer-stoc-hmac { sha1 | sha1-96 } ] *
IMPORTANT:
File transfer interruption durin
a downloadin
process can result in file fra
ments on the switch. You mus
manually delete them.
SCP client configuration example
Network requirements
As shown in Figure 99, switch A acts as a client and download the file remote.bin from switch B. The user
has the username test and uses the password authentication method.