Table of Contents
Advertisement
Parameters
name
Guidelines
The certificate-aaa-policy command assigns the AAA policy that determines
whether a password is required for secondary authentication of the information in
the TLS/SSL certificate that is provided during TLS negotiation after the AUTH
TLS command to the FTP server. Primary authentication is done by the SSL Proxy
Profile, which can completely reject a certificate. This authentication stage controls
whether an FTP password will be demanded or not. If the result of this
authentication succeeds, the FTP client will only have to use the USER command
to login after the AUTH TLS. If this authentication fails, the FTP client will have to
use both the USER and PASS commands to complete the login process. If no
Certificate AAA Policy is configured, USER and PASS will always be required. If
the AUTH TLS command is not used by the FTP client, USER and PASS will
always be required.
data-encryption
Controls the use of encryption of data connections (file transfers).
Syntax
data-encryption {disallow | allow | require}
Parameters
disallow
allow (Default) Allows, but does not require, the FTP client to encrypt data
require
Guidelines
The data-encryption command controls whether the FTP server allows, does not
allow, or requires the FTP client to encrypt data connections (file transfers).
Data encryption is controlled by the FTP PROT P command.
default-directory
Specifies the working directory on the FTP server.
Syntax
default-directory directory
Parameters
directory
Specifies the name of an existing AAA Policy object.
Does not allow the FTP client to encrypt data connections.
connections. TLS must be allowed on data connections.
Requires the FTP client to encrypt data connections. TLS should be
required on data connections.
Specifies the initial working directory for all users on this FTP server. The
default is the root directory (/).
Chapter 23. FTP Server Front Side Handler mode
301
Advertisement
Table of Contents
