HP MSR SERIES Command Reference

414
prefer-ctos-cipher: Specifies the preferred client-to-server encryption algorithm. The default is aes128.
Algorithms des, 3des, aes128, and aes256 are arranged in ascending order in the aspects of security
strength and calculation time.
• 3des: Specifies the encryption algorithm 3des-cbc.
• aes128: Specifies the encryption algorithm aes128-cbc.
• aes256: Specifies the encryption algorithm aes256-cbc.
• des: Specifies the encryption algorithm des-cbc.
prefer-ctos-hmac: Specifies the preferred client-to-server HMAC algorithm. The default is sha1.
Algorithm sha1 features stronger security but costs more time in calculation than md5.
• md5: Specifies the HMAC algorithm hmac-md5.
• md5-96: Specifies the HMAC algorithm hmac-md5-96.
• sha1: Specifies the HMAC algorithm hmac-sha1.
• sha1-96: Specifies the HMAC algorithm hmac-sha1-96.
prefer-kex: Specifies the preferred key exchange algorithm. The default is dh-group-exchange in
non-FIPS mode and dh-group14 in FIPS mode. Algorithm dh-group14 features stronger security but costs
more time in calculation than dh-group1.
• dh-group-exchange: Specifies the key exchange algorithm diffie-hellman-group-exchange-sha1.
• dh-group1: Specifies the key exchange algorithm diffie-hellman-group1-sha1.
• dh-group14: Specifies the key exchange algorithm diffie-hellman-group14-sha1.
prefer-stoc-cipher: S
pecifies the preferred server-to-client encryption algorithm. The default is aes128.
prefer-stoc-hmac: Specifies the preferred server-to-client HMAC algorithm. The default is sha1.
dscp dscp-value: Specifies the DSCP value in the IPv6 SFTP packets sent by the SFTP client, in the range
of 0 to 63. The default value is 48. The DSCP value determines the transmission priority of the packet.
publickey keyname: Specifies the host public key of the server, which is used to authenticate the server.
The keyname argument is a case-insensitive string of 1 to 64 characters.
source: Specifies a source IP address or source interface for IPv6 SFTP packets. By default, the IPv6 SFTP
packets automatically select an IPv6 address as their source address in compliance with RFC 3484. For
successful IPv6 SFTP connections, use one of the following methods:
• Specify the loopback interface or dialer interface as the source interface.
• Specify the IPv6 address of the loopback interface or dialer interface as the source IPv6 address.
interface interface-type interface-number: Specifies a source interface by its type and number. The IPv6
address of this interface is the source IP address to send packets.
ipv6 ipv6-address: Specifies a source IPv6 address.
Usage guidelines
In publickey authentication, the client must get the local private key for digital signature. Because
publickey authentication uses either RSA or DSA algorithm, you must specify a public key algorithm by
using the identity-key keyword. In this way, the client can get the correct local private key.
Examples
# Connect an SFTP client to the IPv6 SFTP server 2000::1 and specify the public key of the server as svkey.
The SFTP client uses publickey authentication. Use the following algorithms:
• Preferred key exchange algorithm is dh-group14.

HP MSR SERIES Specifications

General

Brand	HP
Model	MSR SERIES
Category	Network Router
Language	English