Establishing A Connection To An Scp Server Based On Suite B; Specifying Algorithms For Ssh2; Specifying Key Exchange Algorithms For Ssh2 - HP FlexNetwork 10500 Series Security Configuration Manual

Establishing a connection to an SCP server based on Suite B

Task
Establish a
connection to an SCP
server based on Suite
B.

Specifying algorithms for SSH2

Perform this task to specify the following types of algorithms that the SSH2 client and server use for
algorithm negotiation during the Stelnet, SFTP, or SCP session establishment:
•
Key exchange algorithms.
•
Public key algorithms.
•
Encryption algorithms.
•
MAC algorithms.
If you specify algorithms, SSH2 uses only the specified algorithms for algorithm negotiation. The
client uses the specified algorithms to initiate the negotiation, and the server uses the matching
algorithms to negotiate with the client.
If multiple algorithms of the same type are specified, the algorithm specified earlier has a higher
priority during negotiation. The specified SSH2 algorithms do not affect SSH1 sessions.

Specifying key exchange algorithms for SSH2

Step
1. Enter system view.
Command
•
Establish a connection to an IPv4 SCP server
based on Suite B:
scp server [ port-number ] [ vpn-instance
vpn-instance-name ] { put | get }
source-file-name [ destination-file-name ]
suite-b [ 128-bit | 192-bit ] pki-domain
domain-name [ server-pki-domain
domain-name ] [ prefer-compress zlib ]
[ source { interface interface-type
interface-number | ip ip-address } ] *
•
Establish a connection to an IPv6 SCP server
based on Suite B:
scp ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name ] [ interface interface-type
interface-number ] { put | get } source-file-name
[ destination-file-name ] suite-b [ 128-bit |
192-bit ] pki-domain domain-name
[ server-pki-domain domain-name ]
[ prefer-compress zlib ] [ source { interface
interface-type interface-number | ipv6
ipv6-address } ] *
Command
system-view
377
Remarks
Available in user view.
The client cannot establish
connections to both IPv4
and IPv6 SCP servers.
Remarks
N/A