1-16
If you specify to authenticate a client through public key on the server, the client needs to read the local
private key when logging in to the SFTP server. Since both RSA and DSA are available for public key
authentication, you need to use the identity-key key word to specify the algorithms to get correct local
private key; otherwise you will fail to log in. For details, see SSH Operation.

Specifying the source interface or source IP address for an SFTP client

You can specify the source interface or source IP address for the device acting as an FTP client, so that
it can connect to a remote SFTP server.
Follow these steps to specify the source interface or source IP address for an SFTP client:
To do… Use the command… Remarks
Enter system view system-view —
Specify an interface as the
source interface of the
specified SFTP client
sftp source-interface
interface-type interface-number
Specify an IP address as the
source IP address of the
specified SFTP client sftp source-ip ip-address
Use either command
Not specified by default
Display the source IP address
used by the current SFTP client display sftp source-ip Optional
Available in any view.
SFTP Configuration Example

Network requirements

As shown in Figure 1-6, establish an SSH connection between the SFTP client (Switch A) and the SFTP
server (switch B). Log in to Switch B through switch A to manage and transmit files. An SFTP user
account with the user name client001 and password abc exists on the SFTP server.
Figure 1-6 Network diagram for SFTP configuration
Switch B
SFTP Server SFTP Client
Vlan-Int1
192.168.0.1/24
Vlan-Int1
192.168.0.2/24
Switch A

Configuration procedure

1) Configure the SFTP server (Switch B)
# Create key pairs.
<device> system-view
[device] public-key local create rsa
[device] public-key local create dsa