93
To configure the FTP server:
Step Command Remarks
1. Enter system view. system-view —
2. Enable the FTP server
ftp server enable
Required.
Disabled by default.
3. Use an ACL to control FTP
clients’ access to the switch.
ftp server acl
acl-number
Optional.
By default, no ACL is used to control FTP
clients’ access to the switch.
4. Configure the idle-timeout
timer.
ftp timeout minutes
Optional.
30 minutes by default.
Within the idle-timeout time, if there is no
information interaction between the FTP server
and client, the connection between them is
terminated.
5. Set the file update mode for
the FTP server.
ftp update { fast |
normal }
Optional.
Normal update is used by default.
6. Quit to user view.
quit —
7. Manually release the FTP
connection established with
the specified username.
free ftp user username
Optional.
Available in user view.
Configuring authentication and authorization on the FTP server
To allow an FTP user to access certain directories on the FTP server, you must create an account for the user,
authorizing access to the directories and associating the username and password with the account.
The following configuration is used when the FTP server authenticates and authorizes a local FTP user. If the
FTP server needs to authenticate a remote FTP user, you must configure authentication, authorization and
accounting (AAA) policy instead of the local user. For detailed configuration, see the Security Command
Reference.
In local authentication, the switch checks the entered username and password against those configured on
the switch. In remote authentication, the switch sends the entered username and password to the remote
authentication server, which then checks whether they are consistent with those configured on the switch.
When the switch serves as the FTP server, if the client is to perform the write operations (upload, delete,
create, and delete for example) on the device’s file system, the FTP login users must be level 3 users; if the
client is to perform other operations, for example, read operation, the switch has no restriction on the user
level of the FTP login users.