H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 231)

216
To do… Use the command… Remarks
Enter system view system-view —
Enable the FTP server ftp server enable
Required
Disabled by default.
Use an ACL to control FTP clients’
access to the device
ftp server acl acl-number
Optional
By default, no ACL is used to control
FTP clients’ access to the device.
Configure the idle-timeout timer ftp timeout minutes
Optional
30 minutes by default.
Within the idle-timeout time, if there is
no information interaction between
the FTP server and client, the
connection between them is
terminated.
Set the file update mode for the FTP
server
ftp update { fast | normal }
Optional
Normal update is used by default.
Quit to user view quit —
Manually release the FTP
connection established with the
specified username
free ftp user username
Optional
Available in user view
Configuring authentication and authorization on the FTP server
To allow an FTP user to access certain directories on the FTP server, you need to create an account for the
user, authorize the user to access the directories and configure a password for the user.
Make the following configuration to perform authentication and authorization on a local FTP user. To
authenticate remote FTP users, you need to configure authentication, authorization and accounting
(AAA).
In local authentication, the device checks the input username and password against those configured on
the device. In remote authentication, the device sends the input username and password to the remote
authentication server for authentication.
Follow these steps to configure authentication and authorization for FTP server:
To do… Use the command… Remarks
Enter system view system-view —
Create a local user and
enter its view
local-user user-name
Required
No local user exists by default, and the system
does not support FTP anonymous user access.
Assign a password to
the user password { simple | cipher }
password
Required
Assign the FTP service to
the user
service-type ftp
Required
By default, the system does not support
anonymous FTP access, and does not assign
any service. If the FTP service is assigned, the
root directory of the device is used by default.