94
To configure authentication and authorization for FTP server:
Ste
Command
Remarks
1. Enter system view.
system-view —
2. Create a local user
and enter its view.
local-user user-name
Required.
No local user exists by default, and the system does not
support FTP anonymous user access.
For more information about local-user, see Security
Command Reference.
3. Assign a password
to the user.
password { simple |
cipher } password
Required.
For more information about password, see Security
Command Reference.
4. Assign the FTP
service to the user.
service-type ftp
Required.
By default, the system does not support anonymous FTP
access, and does not assign any service. If the FTP
service is assigned, the root directory of the switch is
used by default.
For more information about service-type ftp, see
Security Command Reference.
5. Configure user
properties.
authorization-attribute
{ acl acl-number |
callback-number
callback-number |
idle-cut minute | level
level | user-profile
profile-name | user-role
security-audit | vlan
vlan-id | work-directory
directory-name } *
Optional.
By default, the FTP/SFTP users can access the root
directory of the switch, and the user level is 0. Change
the default configuration by using this command.
For more information about authorization-attribute, see
Security Command Reference.
FTP server configuration example
Network requirements
• As shown in Figure 15, use Device as an FTP server, and the PC as the FTP client. Their IP addresses are
1.2.1.1/16 and 1.1.1.1/16 respectively. Device and PC are reachable to each other.
• PC keeps the updated boot file of the device. Use FTP to upgrade the device and back up the
configuration file.
• Set the username to ftp and the password to pwd for the FTP client to log in to the FTP server.
Figure 15 Upgrading using the FTP server