H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 634)

65-6
# Configure an IP address for VLAN interface 1, which the SSH client uses as the destination for SSH
connection.
[Switch] interface Vlan-interface 1
[Switch-Vlan-interface1] ip address 192.168.0.1 255.255.255.0
[Switch-Vlan-interface1] quit
# Set the authentication method on the user interface to AAA.
[Switch] user-interface vty 0 4
[Switch-ui-vty0-4] authentication-mode scheme
# Set the protocol that a remote user uses to login as SSH.
[Switch-ui-vty0-4] protocol inbound ssh
[Switch-ui-vty0-4] quit
# Create local user client001.
[Switch] local-user client001
[Switch-luser-client001] password simple aabbcc
[Switch-luser-client001] service-type ssh
[Switch-luser-client001] quit
# Set the SSH authentication method to password, service type to SFTP.
[Switch] ssh user client001 service-type sftp authentication-type password
If you set the SSH authentication method to publickey, you need to configure the host public key of AC.
For the specific configuration, refer to
When Using Publickey Authentication .
# Enable the SFTP server.
[Switch] sftp server enable
2) Configure the SFTP client (AC)
# Configure an IP address for VLAN interface 1.
<AC> system-view
[AC] interface vlan-interface 1
[AC-Vlan-interface1] ip address 192.168.0.2 255.255.255.0
[AC-Vlan-interface1] quit
[AC] quit
# Establish a connection to the remote SFTP server and enter SFTP client view.
<AC> sftp 192.168.0.1
Input Username: client001
Trying 192.168.0.1 ...
Press CTRL+K to abort
Connected to 192.168.0.1 ...
The Server is not authenticated. Continue? [Y/N]:y
Do you want to save the server public key? [Y/N]:y
Enter password:
sftp-client>