Configuring the SCP Server
This section describes how to configure the SCP server to establish a secure connection to the SCP client to implement secure remote access.
Context
SCP is a secure file transfer method based on SSH2.0. To use SCP to access other devices, configure user interfaces to support SSH.
Procedure
- Configure VTY user interfaces to support SSH (for details, see Configuring VTY User Interfaces to Support SSH).
- Configure an SSH user (for details, see Configuring an SSH User and Specifying a Service Type).
- Perform the following operations as required:
- To enable the IPv4 SCP service, run the scp server enable or scp ipv4 server enable command.
- To enable the IPv6 SCP service, run the scp server enable or scp ipv6 server enable command.
- (Optional) Run ssh server dh-exchange min-len min-len
The minimum key length supported during diffie-hellman-group-exchange key exchange with the SSH client is configured.
If the SSH client supports the diffie-hellman-group-exchange key exchange algorithm with a length greater than 1024 bits, you are advised to run the ssh server dh-exchange min-len command to set the minimum key length to 3072 bits to improve security.
- Run commit
The configuration is committed.