Table of Contents
Advertisement
To configure basic parameters for the FTP server:
Step
1.
Enter system view.
2.
Enable the FTP server.
3.
Set the DSCP value for IPv4
to use for outgoing FTP
packets.
4.
Use an ACL to control FTP
access.
5.
Configure the idle-timeout
timer.
6.
Set the file update mode for
the FTP server.
7.
Return to user view.
8.
Release the FTP connection
established by a specific
user.
Configuring authentication and authorization
Perform this task on the FTP server to authenticate FTP clients and specify the directories that
authenticated clients can access.
The following authentication modes are available:
•
Local authentication—The device looks up the client's username and password in the local
user account database. If a match is found, authentication succeeds.
•
Remote authentication—The device sends the client's username and password to a remote
authentication server for authentication. If this approach is used, the user account is configured
on the remote authentication server rather than the device.
To assign an FTP user write access (including upload, delete, and create) to the device, assign
level-3 (Manage) user privileges to the user. For read-only access to the file system, any user
privilege level is OK.
For more information, see Security Configuration Guide.
To configure authentication and authorization for the FTP server:
Step
1.
Enter system
view.
2.
Create a local
user account and
enter its view.
Command
system-view
ftp server enable
ftp server dscp dscp-value
ftp server acl acl-number
ftp timeout minutes
ftp update { fast | normal }
quit
free ftp user username
Command
system-view
local-user user-name
71
Remarks
N/A
By default, the FTP server is
disabled.
Optional.
The default is 0.
Optional.
By default, no ACL is used for
access control.
Optional.
The default idle-timeout timer is 30
minutes.
If no data is transferred within the
idle-timeout time, the connection is
terminated.
Optional.
By default, normal update is used.
N/A
Optional.
Remarks
N/A
By default, no local user account authorized
with the FTP service exists, and the system
does not support FTP anonymous user
access.
Advertisement
Table of Contents
