Configuring Authentication And Authorization On The Ftp Server - HP 5800 Series Configuration Manual

To configure the FTP server:
Step
1. Enter system view.
2. Enable the FTP server
3. Use an ACL to control FTP
clients' access to the switch.
4. Configure the idle-timeout
timer.
5. Set the file update mode for
the FTP server.
6. Quit to user view.
7. Manually release the FTP
connection established with
the specified username.

Configuring authentication and authorization on the FTP server

To allow an FTP user to access certain directories on the FTP server, you must create an account for the user,
authorizing access to the directories and associating the username and password with the account.
The following configuration is used when the FTP server authenticates and authorizes a local FTP user. If the
FTP server needs to authenticate a remote FTP user, you must configure authentication, authorization and
accounting (AAA) policy instead of the local user. For detailed configuration, see the Security Command
Reference.
In local authentication, the switch checks the entered username and password against those configured on
the switch. In remote authentication, the switch sends the entered username and password to the remote
authentication server, which then checks whether they are consistent with those configured on the switch.
When the switch serves as the FTP server, if the client is to perform the write operations (upload, delete,
create, and delete for example) on the device's file system, the FTP login users must be level 3 users; if the
client is to perform other operations, for example, read operation, the switch has no restriction on the user
level of the FTP login users.
Command
system-view
ftp server enable
ftp server acl
acl-number
ftp timeout minutes
ftp update { fast |
normal }
quit
free ftp user username
93
Remarks
—
Required.
Disabled by default.
Optional.
By default, no ACL is used to control FTP
clients' access to the switch.
Optional.
30 minutes by default.
Within the idle-timeout time, if there is no
information interaction between the FTP server
and client, the connection between them is
terminated.
Optional.
Normal update is used by default.
—
Optional.
Available in user view.