Ftp Server Acl - H3C S6550X-HI Series Command Reference Manual

ftp server acl

Use
ftp server acl
Use
undo ftp server acl
Syntax
ftp server
{ advanced-acl-number | basic-acl-number } }
undo ftp server acl [ ipv6 ]
Default
No ACL is used to control FTP clients' access to the FTP server.
Views
System view
Predefined user roles
network-admin
Parameters
advanced-acl-number
basic-acl-number
ipv6 advanced-acl-number
3999.
ipv6 basic-acl-number
Usage guidelines
When no ACL is applied, all FTP clients can access the FTP server. To control FTP access, specify
an ACL that exists and has rules so that only FTP clients permitted by the ACL can access the FTP
server. If you specify an ACL that does not exist or does not have rules, no FTP clients can access
the FTP server.
If a VPN instance is specified in an ACL rule, the rule applies only to the packets of the VPN instance.
If no VPN instance is specified in an ACL rule, the rule applies only to the packets on the public
network.
The ACL takes effect only for FTP connections to be established. It does not impact existing FTP
connections.
If you execute this command multiple times, the most recent configuration takes effect.
For more information about ACLs, see ACL and QoS Configuration Guide.
Examples
# Use ACL 2001 to allow only client 1.1.1.1 to access the FTP server.
<Sysname> system-view
[Sysname] acl basic 2001
[Sysname-acl-ipv4-basic-2001] rule 0 permit source 1.1.1.1 0
[Sysname-acl-ipv4-basic-2001] rule 1 deny source any
[Sysname-acl-ipv4-basic-2001] quit
[Sysname] ftp server acl 2001
to use an ACL to control FTP clients' access to the FTP server.
to restore the default.
acl { advanced-acl-number
: Specifies an advanced IPv4 ACL number in the range of 3000 to 3999.
: Specifies a basic IPv4 ACL number in the range of 2000 to 2999.
: Specifies an advanced IPv6 ACL number in the range of 3000 to
: Specifies a basic IPv6 ACL number in the range of 2000 to 2999.
| basic-acl-number
4
| ipv6