Brocade Communications Systems 6650 manual Secure copy with SSH2, Enabling and disabling SCP

Secure copy with SSH2

Secure copy with SSH2

Secure Copy (SCP) uses security built into SSH to transfer image and configuration files to and from the device. SCP automatically uses the authentication methods, encryption algorithm, and data compression level configured for SSH. For example, if password authentication is enabled for SSH, the user is prompted for a user name and password before SCP allows a file to be transferred. No additional configuration is required for SCP on top of SSH.

You can use SCP to copy files on the Brocade device, including the startup configuration and running configuration files, to or from an SCP-enabled remote host.

Enabling and disabling SCP

SCP is enabled by default and can be disabled. To disable SCP, enter the following command.

Brocade(config)# ip ssh scp disable

Syntax: ip ssh scp disable enable

NOTE

If you disable SSH, SCP is also disabled.

Secure copy configuration notes

•When using SCP, enter the scp commands on the SCP-enabled client, rather than the console on the Brocade device.

•Certain SCP client options, including -p and -r, are ignored by the SCP server on the Brocade device. If an option is ignored, the client is notified.

•An SCP AES copy of the running or start configuration file from the Brocade device to Linux WS 4 or 5 may fail if the configuration size is less than 700 bytes. To work around this issue, use PuTTY to copy the file.

Example file transfers using SCP

The following are examples of using SCP to transfer files to and from a Brocade device.

Copying a file to the running configuration

To copy a configuration file (c:\cfg\brocade.cfg) to the running configuration file on a Brocade device at 192.168.1.50 and log in as user terry, enter the following command on the SCP-enabled client.

C:\> scp c:\cfg\brocade.cfg terry@192.168.1.50:runConfig

If password authentication is enabled for SSH, the user is prompted for user terry password before the file transfer takes place.

Brocade ICX 6650 Security Configuration Guide	75
53-1002601-01