Huawei USG6000 Upgrade Manual page 108

HUAWEI USG6000&USG9500
Upgrade Guide
[FW] ssh user sftpadmin
[FW] ssh user sftpadmin authentication-type password
[FW] aaa
[FW-aaa] manager-user sftpadmin
[FW-aaa-manager-user-sftpadmin] service-type ssh
[FW-aaa-manager-user-sftpadmin] level 3
[FW-aaa-manager-user-sftpadmin] password
Enter Password:
Confirm Password:
[FW-aaa-manager-user-sftpadmin] quit
[FW-aaa] quit
[FW] ssh user sftpadmin service-type sftp
[FW] ssh user sftpadmin sftp-directory hda1:
Step 3 Generate a local key pair on the USG6000.
[FW] rsa local-key-pair create
The key name will be: FW_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Input the bits in the modulus[default = 512]:
Generating keys...
.......++++++++++++
..........++++++++++++
...................................++++++++
......++++++++
Step 4 Generate a local key pair on PC2. The local key pair consists of host key and server key.
Step 5 Use password RsaKey001 to copy the host key of PC2 to the USG6000.
[FW] rsa peer-public-key RsaKey001
Enter "RSA public key" view, return system view with "peer-public-key end".
[FW-rsa-public-key] public-key-code begin
Enter "RSA key code" view, return last view with "public-key-code end".
[FW-rsa-key-code] 3047
[FW-rsa-key-code] 0240
[FW-rsa-key-code] BFF35E4B C61BD786 F907B5DE 7D6770C3 E5FD17AB
[FW-rsa-key-code] 203C8FCB BBC8FDF2 F7CB674E 519E8419 0F6B97A8
[FW-rsa-key-code] EA91FC4B B9E18836 5E74BFD5 4C687767 A89C6B43
[FW-rsa-key-code] 1D7E3E1B
[FW-rsa-key-code] 0203
[FW-rsa-key-code] 010001
[FW-rsa-key-code] public-key-code end
[FW-rsa-public-key] peer-public-key end
Step 6 On PC2, connect the SFTP client to the SSH server.
----End
Example
After the SFTP client connects to the SSH server, run the display ssh server status and
display ssh server session commands on the SSH server to check whether the SFTP service
is enabled and whether the SFTP client is connected to the SSH server.
l
l
[FW] display ssh server session
Session 1:
Issue 01 (2018-01-16)
Check SSH server status.
[FW] display ssh server status
SSH version
SSH connection timeout
SSH server key generating interval
SSH Authentication retries
SFTP server
STELNET server
Check SSH server connection information.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
: 1.99
: 60 seconds
: 0 hours
: 3 times
: Enable
: Disable
1 USG6000
99