Optional) Specifying A Port Number For The Ftp Server - Huawei netengine80e Configuration Manual

HUAWEI NetEngine80E/40E Router
Configuration Guide - Basic Configurations
The system view is displayed.
Step 2 Run:
set default ftp-directory
The default FTP working directory is configured.
Step 3 Run:
aaa
The AAA view is displayed.
Step 4 Run:
local-user
The local user name and the password are configured.
Step 5 Run:
local-user
The FTP service type is configured.
Step 6 Run:
local-user
The authorization directory about the FTP user is configured.
----End

6.3.3 (Optional) Specifying a Port Number for the FTP Server

You can configure or change the monitoring port number of the FTP server. After the port
number is changed, only the user knows the current port number, which guarantees the security.
Context
By default, the listening port number of an FTP server is 21. Users can directly log in to the
router by using the default listening port number. Attackers probably access the default listening
port, reducing available bandwidth, affecting performance of the server, and causing valid users
unable to access the server. After the listening port number of the FTP server is changed, attackers
do not know the new listening port number. This effectively prevents attackers from accessing
the listening port.
Do as follows on the router that serves as the FTP server:
Procedure
Step 1 Run:
system-view
Issue 02 (2011-09-10)
NOTE
The configuration in this step is valid for only TACACS users.
user-name password { simple | cipher } password
user-name service-type ftp
user-name ftp-directory directory
NOTE
If the FTP is not enabled, change the FTP port as required.
If the FTP service is enabled, run the
the FTP port.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
directory
undo ftp server command to disable the FTP service, and then change
6 Managing File System
113