Configuring Ftp; Fips Compliance - HP MSR Series Configuration Manual

Configuring FTP

NOTE:
FTP is not supported in FIPS mode.
File Transfer Protocol (FTP) is an application layer protocol based on the client/server model. It is used to
transfer files from one host to another over a TCP/IP network.
FTP server uses TCP port 20 to transfer data and TCP port 21 to transfer control commands. For more
information about FTP, see RFC 959.
FTP supports the following transfer modes:
• Binary mode—Used to transfer image files, such as .bin and .btm files.
ASCII mode—Used to transfer text files, such as .txt, .bat, and .cfg files.
•
FTP can operate in either of the following modes:
Active mode (PORT)—The FTP server initiates the TCP connection. This mode is not suitable when
•
the FTP client is behind a firewall, for example, when the FTP client resides in a private network.
Passive mode (PASV)—The FTP client initiates the TCP connection. This mode is not suitable when
•
the server does not allow the client to use a random unprivileged port greater than 1024.
FTP operation mode varies depending on the FTP client program.
The device can act as the FTP client or FTP server.
Figure 46 FTP application scenario

FIPS compliance

Table 26 shows the support of devices for the FIPS mode that complies with NIST FIPS 140-2 requirements.
Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For
more information about FIPS mode, see Security Configuration Guide.
Table 26 Hardware and FIPS mode compatibility matrix
Hardware
MSR900
MSR93X
MSR20-1X
MSR20
MSR30
MSR50
FIPS mode
No.
No.
No.
Yes.
Yes except on MSR30-16.
Yes.
120