Optional) Specifying A Port Number For The Ftp Server - Huawei AR2200 Series Configuration Manual

Huawei AR2200 Series Enterprise Routers
Configuration Guide - Basic Configuration
The system view is displayed.
Step 2 Run:
set default ftp-directory directory
The default FTP working directory is configured.
Step 3 Run:
aaa
The AAA view is displayed.
Step 4 Run:
local-user user-name password { simple | cipher } password
The local user name and the password are configured.
Step 5 Run:
local-user user-name ftp-directory directory
The authorization directory about the FTP user is configured.
----End

6.3.3 (Optional) Specifying a Port Number for the FTP Server

You can configure or change the monitoring port number of the FTP server. After the port
number is changed, only the user knows the current port number, which guarantees the security.
Context
By default, the listening port number of an FTP server is 21. Users can directly log in to the
router by using the default listening port number. Attackers probably access the default listening
port, reducing available bandwidth, affecting performance of the server, and causing valid users
unable to access the server. After the listening port number of the FTP server is changed, attackers
do not know the new listening port number. This effectively prevents attackers from accessing
the listening port.
Do as follows on the router that serves as the FTP server:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ftp server port port-number
Issue 02 (2011-10-15)
NOTE
The configuration in this step is valid for only TACACS users.
NOTE
If the FTP is not enabled, change the FTP port as required.
If the FTP service is enabled, run the undo ftp server command to disable the FTP service, and then change
the FTP port.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Managing File System
91