HP 5120 EI Switch Series User Manual

232
To do…
Use the command…
Remarks
Enter system view
system-view
—
Configure the SFTP connection
idle timeout period
sftp server idle-timeout time-out-
value
Optional
10 minutes by default
Configuring the device an SFTP client
Specifying a source IP address or interface for the SFTP client
You can configure a client to use only a specified source IP address or interface to access the SFTP server,
enhancing the service manageability.
Follow these steps to specify a source IP address or interface for the SFTP client:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Specify a
source IP
address or
interface for the
SFTP client
Specify a
source IPv4
address or
interface for the
SFTP client
sftp client source { ip ip-address |
interface interface-type interface-
number }
Required
Use either command.
By default, an SFTP client uses the
IP address of the interface
specified by the route of the
device to access the SFTP server.
Specify a
source IPv6
address or
interface for the
SFTP client
sftp client ipv6 source { ipv6 ipv6-
address | interface interface-type
interface-number }
Establishing a connection to the SFTP server
This configuration task will enable the SFTP client to establish a connection to the remote SFTP server and
enter SFTP client view.
Follow these steps to enable the SFTP client:
To do…
Use the command…
Remarks
Establish a
connection to
the remote SFTP
server and
enter SFTP
client view
Establish a
connection to
the remote IPv4
SFTP server
and enter SFTP
client view
sftp server [ port-number ] [identity-key { dsa | rsa }
| prefer-ctos-cipher { 3des | aes128 | des } |
prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-
96 } | prefer-kex { dh-group-exchange | dh-
group1 | dh-group14 } | prefer-stoc-cipher { 3des
| aes128 | des } | prefer-stoc-hmac { md5 | md5-
96 | sha1 | sha1-96 } ] *
Required
Use either
command in
user view.

HP 5120 EI Switch Series Specifications

General

Model	HP 5120 EI Switch Series
Layer	Layer 3
Forwarding Rate	96 Mpps
MAC Address Table Size	16K
Power Supply	Internal
Management	CLI, Web GUI, SNMP
Features	IPv6 support
Routing Protocol	RIP, OSPF, BGP
Security Features	ACLs
Layer 3 Features	OSPF, BGP, VRRP
Redundancy	VRRP
Operating Temperature	0°C to 45°C
SFP Slots	4
VLAN Support	4094
Jumbo Frames	9216 bytes

Summary

AAA Configuration

RADIUS Protocol

HWTACACS Protocol

AAA Configuration Considerations and Task List

Outlines the tasks and considerations required for configuring AAA on a NAS device.

Configuring AAA Schemes

Details the process of configuring AAA schemes, including local, RADIUS, and HWTACACS schemes.

Configuring Local Users and Groups

Configuring RADIUS and HWTACACS Schemes

Describes configuring RADIUS and HWTACACS schemes, specifying servers, shared keys, and parameters.

Configuring AAA Methods for ISP Domains

Configuring AAA Authentication, Authorization, and Accounting Methods

Details the configuration of authentication, authorization, and accounting methods for users within an ISP domain.

802.1X Configuration

Configuring 802.1X

Provides steps for enabling 802.1X, setting access control, and configuring guest/Auth-Fail VLANs.

Enabling 802.1X and Access Control

Details enabling 802.1X globally and on ports, along with specifying access control methods.

MAC Authentication Configuration

MAC Authentication Configuration Task List

Lists tasks for configuring MAC authentication, including basic setup and examples.

Basic Configuration for MAC Authentication

Covers the basic steps for configuring MAC authentication globally and on ports.

MAC Authentication Configuration Examples

Portal Configuration

Configuring Layer 2 Portal Authentication

Details the steps to configure Layer 2 portal authentication, including VLAN assignment and Auth-Fail VLAN.

Portal Configuration Examples

Triple Authentication Configuration

Configuring Triple Authentication

Provides steps to configure triple authentication by enabling portal, MAC, and 802.1X authentication.

Triple Authentication Configuration Examples

Port Security Configuration

Port Security Features and Modes

Enabling Port Security and Setting Mode

Provides steps to enable port security and set its mode, like autoLearn or secure.

User Profile Configuration

User Profile Configuration Task List

Creating and Enabling User Profiles

Details creating and enabling user profiles to apply configurations and restrict user behaviors.

Password Control Configuration

Password Control Configuration Task List

Lists tasks for configuring password control, including global, group, and local user settings.

Configuring Password Control

Details enabling password control features like aging, history, and complexity checking.

Password Control Configuration Example

Public Key Configuration

Configuring the Local Asymmetric Key Pair

Details creating, destroying, displaying, and exporting local RSA or DSA key pairs.

Configuring a Peer Public Key

PKI Configuration

PKI Configuration Task List

Lists tasks for configuring PKI, including entity DN, PKI domain, and certificate requests.

Configuring an Entity DN and PKI Domain

Details configuring entity DN parameters and PKI domains for certificate requests.

Submitting and Retrieving Certificates

Explains submitting certificate requests in auto/manual modes and retrieving certificates.

Configuring PKI Certificate Verification

SSH2.0 Configuration

Configuring the Device as an SSH Server

Provides steps to configure the device as an SSH server, including key generation and user setup.

SSH Server Configuration Task List

Lists tasks for configuring the SSH server, such as key pair generation and enabling the server.

Configuring the Device as an SSH Client

Details configuring the device as an SSH client, including source IP and connection setup.

SSH Client Configuration Examples

SFTP Configuration

Configuring the Device as an SFTP Server

Provides steps to enable and configure the device as an SFTP server.

Configuring the Device an SFTP Client

Details configuring the device as an SFTP client, including source IP and connection setup.

SFTP Client Configuration Example

SFTP Server Configuration Example

SSL Configuration

SSL Configuration Task List

Configuring an SSL Server Policy

Details setting SSL parameters for a server, including PKI domain and cipher suites.

Configuring an SSL Client Policy

TCP Attack Protection Configuration

Enabling the SYN Cookie Feature

IP Source Guard Configuration

Static IP Source Guard Binding

Dynamic IP Source Guard Binding

Configuring IPv4 Source Guard Binding

Configuring IPv6 Source Guard Binding

ARP Attack Protection Configuration

ARP Attack Protection Configuration Task List

Configuring ARP Defense Against IP Packet Attacks

Configuring ARP Detection

ND Attack Defense Configuration

Enabling Source MAC Consistency Check for ND Packets

Configuring the ND Detection Function