164Enabling the SFTP server functionThis SFTP server function enables clients to log in to the device through SFTP.To enable the SFTP server function:Step Command Remarks1. Enter system view. system-view N/A2. Enable the SFTP serverfunction. sftp server enable By default, the SFTP server functionis disabled.Configuring the user interfaces for Stelnet clientsDependent on different SSH applications, an SSH client can be an Stelnet, SFTP, or SCP client.The Stelnet client accesses the device through a VTY user interface. You must configure the user interfacesfor SSH clients to allow SSH login. The configuration takes effect only on the clients at next login.The SFTP or SCP client accesses the device without using a VTY user interface.To configure the user interfaces for Stelnet clients:Step Command Remarks1. Enter system view. system-view N/A2. Enter VTY user interface view. user-interface vty number[ ending-number ] N/A3. Set the login authenticationmode to scheme. authentication-mode schemeBy default, the authenticationmode is password.For more information about thiscommand, see FundamentalsCommand Reference.Configuring a client's host public keyIf the server uses publickey authentication to authentication a client, it compares the SSH username andhost public key that it receives from the client with those locally saved. If the information is consistent, itchecks the digital signature that the client sends. The digital signature is calculated by the clientaccording to the private key that corresponds to the host public key.For SSH servers that use publickey authentication, password-publickey authentication, or anyauthentication, you must configure the client's DSA or RSA host public key on the server, and specify thecorresponding host private key on the client to generate the digital signature, so that the client can passpublickey authentication with correct digital signature. If the device serves as a client, corresponding hostprivate key is specified by the specified public key algorithm.You can manually configure the host public key of an SSH client on the server, or import it from the publickey file:
