156
dscp dscp-value: Specifies the DSCP value in the IPv4 SFTP packets. The value range for the
dscp-value argument is 0 to 63, and the default value is 48. The DSCP value determines the
transmission priority of the packet.
source: Specifies a source IP address or source interface for the SFTP packets. By default, the
device uses the primary IPv4 address of the output interface in the routing entry as the source
address of SFTP packets. For successful SFTP connections, use one of the following methods:
Specify the loopback interface as the source interface.
Specify the IPv4 address of the loopback interface as the source IPv4 address.
interface interface-type interface-number: Specifies a source interface by its type and number. The
primary IPv4 address of this interface is the source IPv4 address of the SFTP packets.
ip ip-address: Specifies a source IPv4 address.
Usage guidelines
If the client and the server have negotiated to use certificate authentication, the client must verify the
server's certificate. For the client to correctly get the server's certificate, you must specify the server's
PKI domain on the client by using the server-pki-domain domain-name option. The client uses the
CA certificate stored in the specified PKI domain to verify the server's certificate and does not need to
save the server's public key before authentication. If you do not specify the server's PKI domain, the
client uses the PKI domain of its own certificate to verify the server's certificate.
Examples
# Use the 128-bit Suite B algorithms to establish a connection to the SFTP sever 10.1.1.2. Specify
the client's PKI domain and the server's PKI domain as clientpkidomain and serverpkidomain,
respectively.
<Sysname> sftp 10.1.1.2 suite-b 128-bit pki-domain clientpkidomain server-pki-domain
serverpkidomain
New command: ssh2 ipv6 suite-b
Use ssh2 ipv6 suite-b to establish a connection to an IPv6 Stelnet server based on Suite B
algorithms.
Syntax
ssh2 ipv6 server [ port-number ] [ vpn-instance vpn-instance-name ] suite-b [ 128-bit | 192-bit ]
pki-domain domain-name [ server-pki-domain domain-name ] [ -i interface-type interface-number ]
[ prefer-compress zlib ] [ dscp dscp-value | escape character | source { interface interface-type
interface-number | ipv6 ipv6-address } ] *
Views
User view
Predefined user roles
network-admin
To Next Page
Loading...
Need help?
General
