HP 5500 HI Series User Manual

440
Configuring SCP
Overview
Secure copy (SCP) is based on SSH2.0 and offers a secure approach to copying files.
SCP uses SSH connections for copying files. The switch can act as the SCP server, allowing a user to log
in to the switch for file upload and download. The switch can also act as an SCP client, enabling a user
to log in from the switch to a remote server for secure file transfer.
NOTE:
W
hen the switch acts as an SCP server, only one of the FTP, SFTP or SCP user can access the switch.
FIPS compliance
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode (see "Configuring FIPS") and non
-FIPS mode.
Configuring the switch as an SCP server
Ste
p
Command Remarks
1. Enter system view.
system-view
N/A
2. Configure the SSH
server.
For more information, see the security
guide for your switch.
N/A
3. Create an SSH user for a
SCP client, set the
service type to all or scp,
and specify the
authentication method.
ssh user username service-type { all | scp }
authentication-type { password | { any |
password-publickey | publickey } assign
publickey keyname work-directory
directory-name }
N/A
4. Create a user account
and assign a working
directory for the SSH
user on the switch or a
remote server if
password authentication
is used.
• On the remote server (Details not
shown.)
• On the switch:
a. local-user
b. password
c. service-type ssh
d. authorization-attribute
work-directory directory-name
Skip this step if publickey
authentication, whether with
password authentication or not,
is used.
Make sure that the local user
account has the name username
as the username specified in the
ssh user command.
When you set the working directory for the user, follow these guidelines:
• If only password authentication is used, the working directory specified in the ssh user command
does not take effect. You must set the working directory on the remote server or in the local user
account for the SSH user.
• If publickey authentication, whether with password authentication or not, is used, you must set the
working directory in the ssh user command.

HP 5500 HI Series Specifications

General

Brand	HP
Model	5500 HI Series
Category	Switch
Language	English