# Client Connection: SFTP Fields with the asterisk **\*** are mandatory.

Properties	Description
STATUS	Enable or disable the client connection. Possible values: Enabled (default) Disabled
NAME *	Name of the SFTP connection you are creating. The maximum number of characters is 128. Blanks and the ' " \| special characters are not supported.
DESCRIPTION	Description of the SFTP connection you are creating. The maximum number of characters is 2048.
HOST *	Remote host IP Address or hostname.
PORT *	Port to connect to the remote host (1 to 65535).
USERNAME *	Username to be used for the connection. The maximum number of characters is 320.
PASSWORD *	User password.
CONNECTION TIMEOUT	Number of seconds without network activity to wait before closing a session due to inactivity. Default value: 60.
CLIENT AUTHENTICATION MODE *	Possible values: PUBLICKEY PASSWORD PASSWORD_AND_PUBLICKEY KEYBOARD_INTERACTIVE PUBLICKEY_AND_PASSWORD
CONNECTION MODE *	How data connection is established. Possible values: ACTIVE (default): the client opens the control connection to the server. When a data transfer is required, the server initiates the data connection back to the client. PASSIVE: the client opens the control connection and, when needed, also initiates the data connection to the server.
CONNECT THROUGH DMZ	Enable or disable DMZ proxy. Possible values: Enabled Disabled (default )
SELECT DMZ CLUSTER	When the Connect through DMZ toggle is enabled, this drop-down list displays all DMZ Clusters configured in Setup → DMZ Clusters. When you select one or more DMZ clusters, they will be applied to the client connection. If one of the selected DMZ clusters is unavailable, the remaining DMZ clusters will be used in RUNTIME or ROUNDROBIN mode. If no DMZ cluster is selected, all configured DMZ clusters will be used automatically.
CLIENT KEY LABEL	Key identifier to create the SSL connection. Enter a key configured in the Key Store. The ecda-sha2-nistp25 key algorithm is supported.
ACCEPTED CIPHER SUITES	Select the cipher suites. Possible values: ALL ONLY SPECIFIC VALUES. See ACCEPTED CIPHER SUITES for details.
MAC ALGORITHMS	Select the MAC SSH algorithms: ALL or specific values in the drop-down list. ALL ONLY SPECIFIC VALUES: HMAC_MD5 HMAC_SHA1 HMAC_SHA1_ETM HMAC_MD5_96 HMAC_SHA1_96 HMAC_SHA256 HMAC_SHA2_256 HMAC_SHA2_512 HMAC_SHA2_256_ETM HMAC_SHA2_512_ETM
KEY EXCHANGE ALGORITHMS	Select the SSH Key Exchange algorithms: ALL or specific values in the drop-down list. ALL ONLY SPECIFIC VALUES DIFFIE_HELLMAN_GROUP1_SHA1 DIFFIE_HELLMAN_GROUP14_SHA1 DIFFIE_HELLMAN_GROUP14_SHA256 DIFFIE_HELLMAN_GROUP15_SHA512 DIFFIE_HELLMAN_GROUP16_SHA512 DIFFIE_HELLMAN_GROUP17_SHA512 DIFFIE_HELLMAN_GROUP18_SHA512 DIFFIE_HELLMAN_GROUP_EXCHANGE_SHA1 DIFFIE_HELLMAN_GROUP_EXCHANGE_SHA256 ECDH_SHA2_NISTP256 ECDH_SHA2_NISTP384 ECDH_SHA2_NISTP521 CURVE25519_SHA256 CURVE25519_SHA256_LIBSSH_ORG
SESSION TIMEOUT	Define the number of seconds without network activity to wait before closing a session due to inactivity. Default value: 60.
READ BUFFER SIZE	Dimension of the buffer when reading a file on the SSH Channel. Default: 65536 bytes The values accepted are 32, 64 and 128 kb.
WRITE BUFFER SIZE	Dimension of the buffer when writing a file on the SSH Channel. Default: 32768 bytes The values accepted are 32, 64 and 128 kb.
AUXILIARY BUFFER SIZE	Dimension of the auxiliary buffer when reading or writing a file in the DataOne VFS Default: 8192 bytes
MAX RETRIES *	Maximum number of retries. If this field is empty or set to 0, no retries will be executed and the job will be set to Failed if the first attempt is not successful. A high value corresponds to a high number of retrying attempts.
RETRY INTERVAL	This field will appear only if you have set the maximum numbers of retries to 1 or greater. Time (in seconds) waited before retrying executing a job. The lower the value, the more frequent the retrying attempts. If this field is empty or set to 0, no retries will be executed and the job will be set to Failed if the first attempt is not successful.
CONFIGURATION TEST	Use this section to test that the Cluster and the STENG are connected correctly. Select a Cluster and a STENG you want to test and click the TEST button. Data One automatically selects a Cluster and a STENG to test the connection. Note that a Cluster will be selected only if it is the only one available. A message with a green check will confirm a successful connection. A message with a red exclamation mark will warn about an unsuccessful connection. The message also details the reason why the connection fails. The connection might not be successful for different reasons, each of them depending on the transport type and the configuration. The first time you try to test the connection, if trusting certificates are missing, an error message detailing the unsuccessful connection will appear. In this case, go to Setup → Untrusted Cache → Certificates tab and trust the relevant certificates. Note that trusting certificates in the Untrusted Cache page may not be sufficient to establish a successful connection. Refer to the Untrusted Cache section of this documentation for all the details.

The rsa-sha2-256 and rsa-sha2-512 signing algorithms (also called HostKeyAlgorithms) are included in the list of supported ssh-rsa and ssh-dss algorithms.\ They are hard-coded, so they cannot be configured. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.primeur.com/data-mover-1.21/transfer-protocols-and-connectors/client-connections/client-connection-sftp.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.