Huawei Quidway S3700 Series Configuration Manual page 262

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Figure 10-5 Networking diagram for configuring an ACL6 to control FTP users
SwitchA
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Data Preparation
To complete the configuration, you need the following data:
l
l
Procedure
Step 1 Configure basic FTP functions.
See Example for Configuring the FTP Server.
Step 2 Configure a basic ACL6.
<Quidway> system-view
[Quidway] acl ipv6 number 2001
[Quidway-acl-basic-2001] rule deny source 3001::2/128
[Quidway-acl-basic-2001] quit
Step 3 Bind the basic ACL6 to the FTP server.
[Quidway] ftp ipv6 acl 2001
Step 4 Verify the configuration.
# Connect PC1 to the FTP server.
c:\ ftp 3002::1
Connected to 3002::1
220 FTP service ready.
User (3003::5:(none)):u1
331 Password required for u1
Password:
230 User logged in.
ftp>
# Connect PC2 to the FTP server.
c:\ ftp 3002::1
Connected to 3002::1
Issue 01 (2011-07-15)
VLAN 10
GE0/0/1
3001::1/64
Perform basic configurations on the FTP server.
Configure a basic ACL6.
Bind the basic ACL6 to the FTP server.
FTP user name and password configured on the FTP server
Basic ACL6 number
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
SwitchB
GE0/0/1
3001::2/64
10 ACL Configuration
Loopback2
3002::2/64
249