All Products
Search

This Product

    Bastionhost:SFTP O&M

    Document Center

    Bastionhost:SFTP O&M

    Last Updated:Jun 20, 2026

    You can use an SFTP client to log on to Bastionhost, select an asset, and transfer files. This topic describes the logon process, using SecureFX and FileZilla as examples.

    Prerequisites

    • You have imported assets and users to the Bastionhost instance and granted the users permissions on the assets. For more information, see Create a host, Manage users, and Authorize users to manage specified assets and asset accounts.

    • You have obtained the O&M address of the bastion host instance. You can find the O&M address in the Bastion Host Information section on the Overview page. For more information, see Overview of the Bastionhost console.概览

      Note

      Bastionhost provides a fixed O&M address as a domain name and uses dynamic IP addresses to prevent attacks. The IP address that is resolved from the O&M address may change. To prevent O&M failures caused by IP address changes, you must use the domain name provided by Bastionhost for O&M.

    • You have installed an SFTP client, such as SecureFX, on your local machine.

    Connect to Bastionhost and select an asset

    1. Start the SecureFX client.

    2. In the upper-left corner, click Connect. In the dialog box that appears, click the 加号图标 icon.

    3. Enter the O&M address, port number, and username for Bastionhost, and then click OK.

      The default SSH port is 60022. To change the O&M port for Bastionhost, see Configure Bastionhost.

    4. Select the newly created Bastionhost connection and click Connect.

    5. Enter your Bastionhost username and password, and then click OK.

    6. If two-factor authentication is enabled for the Bastionhost user, enter the verification code and click OK.

      For more information about how to configure two-factor authentication for a Bastionhost user, see Enable two-factor authentication.

    7. After you log on, the asset management page is displayed. Double-click a transcoding directory. Ignore any error messages that appear. Then, right-click the directory and select Refresh to start the transcoding process.

      A transcoding directory name has a format like !now_gb18030,next_UTF-8.

      If you cannot access the host directory, try the following methods to resolve the issue:

      • Check whether the host account password is stored in Bastionhost. If not, configure the account password for the host. For more information, see Manage host accounts.

      • Clear the cache of your SFTP client.

      For more information about SFTP file transfer issues, see SFTP file transfer issues.

      Note

      If the issue persists after you try the preceding methods, join the DingTalk group (ID: 33797269) to contact technical support.

    8. Optional: Log on to Bastionhost to view audit records for file uploads or downloads. For more information, see Log on to the system and Search for and view sessions.

    SSH proxy and FileZilla for direct asset connection

    1. Open a command-line terminal application.

    2. Run the following command and press Enter: ssh -T -N -D 127.0.0.1:1080 -oport=60022 <username>@<Bastionhost O&M address>

      The default SSH port is 60022. To change the O&M port for Bastionhost, see Configure Bastionhost.

    3. Enter the Bastionhost password and press Enter to connect to Bastionhost. Do not close this window.

    4. If two-factor authentication is enabled for the Bastionhost user, enter the verification code.

      For more information about how to configure two-factor authentication for a Bastionhost user, see Enable two-factor authentication.

    5. Open the FileZilla client and go to the settings page. Click Generic proxy, select SOCKS5, set Proxy host to 127.0.0.1 and Port to 1080, and then click OK.

    6. In Site Manager, enter the asset's IP address, set Port to 22, and set Logon Type to Normal. Then, enter the username and password for the asset, click Connect, and click OK in the dialog box that appears.

    7. After accessing the asset, you can transfer files. All operations are audited by Bastionhost.

    8. Optional: Log on to Bastionhost to view audit records for file uploads or downloads. For more information, see Log on to the system and Search for and view sessions.

    References

    For information about how to troubleshoot SFTP file transfer issues, see SFTP file transfer issues.