Possible to store foreign ssh key on the firewall (for key-based scp transfer)?

[dsegel]

I want to be able to use scp from the firewall to transfer a config file to a remote server without entering a password. So I need to store the remote user's public ssh key in the equivalent of an authorized_keys file on the firewall. Is this possible?

What I'm trying to do is schedule an automatic pull of the running-config.xml down to a server. I want to do this like this:

ssh 10.2.1.254 scp export configuration to isg@sauron.shs.ucd:. from running-config.xml

10.2.1.254 is my firewall. I have the key set up in the other direction so the ssh command goes through without a password, but the reverse direction (the  scp command) doesn't work without a password.

[BPry · Accepted solution]

Wouldn't this be easier to accomplish under a API script that is set to execute at a determined time. This is what I'm doing for our equipment.

[dsegel]

Yeah, that looks like what I want. I'm new to PAN and just didn't know how this kind of thing should be handled. I found a reference so I'm good to go.

Thanks.