Configuring Authentication And Authorization On The Ftp Server - HP A7500 Series Configuration Manual

To do...
Manually release the FTP
connection established with the
specified username

Configuring authentication and authorization on the FTP server

To allow an FTP user to access certain directories on the FTP server, you must create an account for the
user, authorize the user to access the directories, and configure a password for the user.
Make the following configuration to perform authentication and authorization on a local FTP user. To
authenticate remote FTP users, you must configure authentication, authorization and accounting (AAA).
For detailed configuration about AAA, see Security Command Reference.
In local authentication, the device checks the input username and password against those configured on
the device. In remote authentication, the device sends the input username and password to the remote
authentication server for authentication.
Follow these steps to configure authentication and authorization for FTP server:
To do...
Enter system view
Create a local user and
enter its view
Assign a password to
the user
Assign the FTP service to
the user
Configure user
properties
NOTE:
For more information about the local-user, password, service-type ftp, and authorization-attribute
commands, see
When the switch serves as the FTP server, if the client is to perform the write operations (such as upload,
delete, and create) on the device's file system, the FTP login users must be level 3 users. If the client is to
perform other operations such as the read operation, the switch has no restriction on the user level of the
FTP login users.
Use the command...
free ftp user username
Use the command...
system-view
local-user user-name
password { simple | cipher }
password
service-type ftp
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute
| level level | user-profile
profile-name | vlan vlan-id |
work-directory directory-name } *
Security Command Reference
Remarks
Optional
Remarks
—
Required
No local user exists by default, and the system
does not support FTP anonymous user access.
Required
Required
By default, the system does not support
anonymous FTP access, and does not assign
any service. If the FTP service is assigned, the
root directory of the device is used by default.
Optional
By default, the FTP/SFTP users can access the
root directory of the device, and the user level
is 0. You can change the default configuration
by using this command.
.
83