1-17If you specify to authenticate a client through public key on the server, the client needs to read the localprivate key when logging in to the SFTP server. Since both RSA and DSA are available for public keyauthentication, you need to use the identity-key key word to specify the algorithms to get correct localprivate key; otherwise you will fail to log in. For details, see SSH Operation Manual.Specifying the source interface or source IP address for an SFTP clientYou can specify the source interface or source IP address for a switch acting as an FTP client, so that itcan connect to a remote SFTP server.Follow these steps to specify the source interface or source IP address for an SFTP client:To do… Use the command… RemarksEnter system view system-view —Specify an interface as thesource interface of thespecified SFTP clientsftp source-interfaceinterface-type interface-numberSpecify an IP address as thesource IP address of thespecified SFTP clientsftp source-ip ip-addressUse either commandNot specified by default.Display the source IP addressused by the current SFTP client display sftp source-ip OptionalAvailable in any viewSFTP Configuration ExampleNetwork requirementsAs shown in 0, establish an SSH connection between the SFTP client (switch A) and the SFTP server(switch B). Log in to switch B through switch A to manage and transmit files. An SFTP user with theusername client001 and password abc exists on the SFTP server.Network diagramFigure 1-6 Network diagram for SFTP configurationConfiguration procedure1) Configure the SFTP server (switch B)# Create key pairs. system-view[Sysname] public-key local create rsa
