HPE FlexNetwork 5510 HI Series Security Configuration Guide

372
• When the device acts as the SFTP server, it supports only ECDSA and RSA key pairs. If both
ECDSA and RSA key pairs exist on the server, the server uses the ECDSA key pair.
Password authentication enabled SFTP server configuration
example
Network requirements
As shown in Figure 107:
• You can log in to the switch through the SFTP client that runs on the host.
• After login, you are assigned the user role network-admin to execute file management and
transfer operations.
• The switch acts as the SFTP server and uses password authentication.
• The username and password of the client are saved on the switch.
Figure 107 Network diagram
Configuration procedure
1. Configure the SFTP server:
# Generate RSA key pairs.
<Switch> system-view
[Switch] public-key local create rsa
The range of public key size is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
........................++++++
...................++++++
..++++++++
............++++++++
Create the key pair successfully.
# Generate a DSA key pair.
[Switch] public-key local create dsa
The range of public key size is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
.++++++++++++++++++++++++++++++++++++++++++++++++++*
........+......+.....+......................................+
...+.................+..........+...+
Create the key pair successfully.
# Generate an ECDSA key pair.
SFTP client
SFTP server
Host Switch
192.
168
.1
.56
/
24
Vlan
-int
2
192.
168
.
1
.
45
/24

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English