3Com WX3000 Sftp Configuration Example, Sftp source-interface, Sftp source-ip ip-address

If you specify to authenticate a client through public key on the server, the client needs to read the local private key when logging in to the SFTP server. Since both RSA and DSA are available for public key authentication, you need to use the identity-keykey word to specify the algorithms to get correct local private key; otherwise you will fail to log in. For details, see SSH Operation.

Specifying the source interface or source IP address for an SFTP client

You can specify the source interface or source IP address for the device acting as an FTP client, so that it can connect to a remote SFTP server.

Follow these steps to specify the source interface or source IP address for an SFTP client:

To do…	Use the command…	Remarks
Enter system view	system-view	—
Specify an interface as the	sftp source-interface
source interface of the
	interface-type interface-number
specified SFTP client		Use either command
Specify an IP address as the		Not specified by default
source IP address of the	sftp source-ip ip-address
specified SFTP client
Display the source IP address	display sftp source-ip	Optional
used by the current SFTP client		Available in any view.

SFTP Configuration Example

Network requirements

As shown in Figure 1-6, establish an SSH connection between the SFTP client (Switch A) and the SFTP server (switch B). Log in to Switch B through switch A to manage and transmit files. An SFTP user account with the user name client001 and password abc exists on the SFTP server.

Figure 1-6Network diagram for SFTP configuration

SFTP Server		Vlan -Int1	SFTP Client
		192.168.0.2/24
	Vlan -Int1
Switch B192.168.0.1/24			Switch A

Configuration procedure

1)Configure the SFTP server (Switch B)

# Create key pairs.

<device> system-view

[device] public-key local create rsa

[device] public-key local create dsa

1-16