Configuring Sftp; Overview; Fips Compliance; Configuring The Switch As An Sftp Server - HP 3600 v2 Series Configuration Manual

Configuring SFTP

Overview

The Secure File Transfer Protocol (SFTP) is a new feature in SSH2.0.
SFTP uses the SSH connection to provide secure data transfer. The switch can serve as the SFTP server,
allowing a remote user to log in to the SFTP server for secure file management and transfer. The switch
can also serve as an SFTP client, enabling a user to log in from the switch to a remote device for secure
file transfer.
With SSH connection across VPNs, you can configure the switch as an SFTP client to establish
connections with SFTP servers in different MPLS VPNs. For more information about this function, see
"Configuring

FIPS compliance

The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode (see

Configuring the switch as an SFTP server

Before you configure this task, complete the following tasks:
• Configure the SSH server.
Use the ssh user service-type command to set the service type of SSH users to sftp or all.
•
For more information about the configuration procedures, see

Enabling the SFTP server

This configuration task will enable the SFTP service so that a client can log in to the SFTP server through
SFTP.
When the switch acts as the SFTP server, the following restrictions are imposed on the SFTP client:
Only one client can access the SFTP server at a time. If the SFTP client uses WinSCP, a file on the
•
server cannot be modified directly. It can only be downloaded to a local place, modified, and then
uploaded to the server.
The user privilege level for the SFTP client must be correctly configured.
•
Set the user privilege level to 3 if the SFTP client executes the following commands: delete,
remove, rename, rmdir, and mkdir.
Set the user privilege level to 3 if the SFTP client executes the put command and uses the
uploaded local file to overwrite the file on the SFTP server.
Set the user privilege level to 2 if the SFTP client executes the put command and does not use the
uploaded local file to overwrite the file on the SFTP server.
SSH2.0."
"Configuring
"Configuring
330
FIPS") and non-FIPS mode.
SSH2.0."