Example For Configuring An Acl Of The Ftp Server - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Basic Configuration

8.7.2 Example for Configuring an ACL of the FTP Server

In this example, an ACL is configured to allow only a certain host to log in to the FTP server.
Networking Requirements
As shown in
The routes between PC1, PC2, and FTP server are reachable. On the S2700 that functions as the
FTP server, it is required that the FTP server should permit only PC1 with the IP address as
172.16.104.111 to download and upload files through FTP, and PC2 should not connect to the
FTP server after the ACL is configured.
Figure 8-2 Networking diagram for configuring an ACL of the FTP server
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
Data Preparation
To complete the configuration, you need the following data:
l
l
Procedure
Step 1 Configure basic FTP functions.
For details, see
Step 2 Configure an ACL.
<Quidway> system-view
[Quidway] acl number 2001
[Quidway-acl-basic-2001] rule permit source 172.16.104.111 0.0.0.0
Issue 01 (2011-07-15)
Figure 8-2, the IP address of the FTP server is 172.16.104.110/24.
FTP Server
172.16.104.111/24
Perform basic configurations on the FTP server.
Configure the ACL on the FTP server.
Name of the FTP user set as u1 and password set as huawei on the server
Number of the ACL
8.7.1 Example for Configuring the FTP
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
172.16.104.110/24
172.16.105.111/24
PC1 PC2
8 FTP and TFTP
Server.
110