Operation Manual – FTP and TFTP
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1
FTP and TFTP Configuration
1-4
Note:
z Only one user can access an S3600 Ethernet switch at a given time when the latter
operates as an FTP server. FTP services are implemented in this way: An FTP
client sends FTP requests to the FTP server. The FTP server receives the requests,
perform operations accordingly, and return the results to the FTP client.
z To prevent unauthorized accesses, an FTP server disconnects a FTP connection
when it does not receive requests from the FTP client for a specific period of time
known as the connection idle time.
z Operating as an FTP server, an S3600 Ethernet switch cannot receive a file whose
size exceeds its storage space. The clients that attempt to upload such a file will be
disconnected with the FTP server due to lack of storage space on the FTP server.
z When you log in to a Fabric consisting of multiple switches through an FTP client,
after the FTP client passes authentication, you can log in to the master device of the
Fabric.
Note:
To protect unused sockets again attacks, the S3600 Ethernet switch provides the
following functions:
z TCP 21 is enabled only when you start the FTP server.
z TCP 21 is disabled when you shut down the FTP server.
To use FTP services, a user must provide a user name and a password for being
authenticated by the FTP server.
III. Specifying the source interface and source IP address for an FTP server
You can specify the source interface and source IP address for an FTP server to
enhance server security. After this configuration, FTP clients can access this server
only through the IP address of the specified interface or the specified IP address.
Note:
Source interface refers to the existing VLAN interface or Loopback interface on the
device. Source IP address refers to the IP address configured for the interface on the
device. Each source interface corresponds to a source IP address. Therefore,
specifying a source interface for the FTP server is the same as specifying the IP
address of this interface as the source IP address.