Optional) Specifying A Port Number For The Ftp Server - Huawei AR1200 Series User Configuration Manual

Huawei AR1200 Series Enterprise Routers
Configuration Guide - Basic Configuration
The default FTP working directory is configured.
Step 3 Run:
aaa
The AAA view is displayed.
Step 4 Run:
local-user user-name password { simple | cipher } password
The local user name and password are configured.
Step 5 Run:
local-user user-name service-type ftp
The FTP service type is configured.
Step 6 Run:
local-user user-name ftp-directory directory
The authorized directory for the FTP user is configured.
----End

6.3.3 (Optional) Specifying a Port Number for the FTP Server

You can configure or change the listening port number for an FTP server. After the port number
is changed, only the user knows the current port number and this protects system security.
Context
The default listening port number for an FTP server is 21. Users can log in to the router directly
by using the default listening port number. Attackers can also access the default listening port
to launch attacks that reduce available bandwidth and affect server performance, preventing
valid users from accessing the server. Changing the FTP server listening port number effectively
prevents attackers from accessing the server through the listening port.
Do as follows on the router that serves as the FTP server:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ftp server port port-number
The port number of the FTP server is configured.
Issue 04 (2012-05-15)
NOTE
The configuration in this step takes effect only with TACACS users.
NOTE
If FTP is not enabled, change the FTP port as required.
If FTP is enabled, run the undo ftp server command to disable FTP, and then change the FTP port.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Managing the File System
111