70
4. (Optional.) Associate an SSL
server policy with the FTP
server to ensure data
security.
ssl-server-policy
policy-name
By default, no SSL server policy is
associated with the FTP server.
5. (Optional.) Set the FTP
connection idle-timeout
timer.
ftp
timeout
minutes
By default, the FTP connection
idle-timeout timer is 30 minutes.
If no data transfer occurs on an FTP
connection within the idle-timeout
interval, the FTP server closes the FTP
connection to release resources.
6. (Optional.) Set the DSCP
value for outgoing FTP
packets.
•
running IPv4:
ftp
dscp-value
•
running IPv6:
ftp
dscp-value
By default, the DSCP value is 0.
7. (Optional.) Set the maximum
number of concurrent FTP
users.
aaa session-limit ftp
max-sessions
By default, the
concurrent FTP users is 32.
Changing this setting does not affect
online users. If the current number of
online FTP users is equal to or greater
than the new setting, no additional FTP
users can log in until online users log
out.
For more information about this
command, see
Reference.
Configuring authentication and authorization
Perform this task on the FTP server to authenticate FTP clients and set the authorized directories
that authenticated clients can access.
The following authentication modes are available:
Local authentication—The device looks up the client's username and password in the local
user account database. If a match is found, authentication succeeds.
Remote authentication—The device sends the client's username and password to a remote
authentication server for authentication. The user account is configured on the remote
authentication server rather than the device.
The following authorization modes are available:
Local authorization—The device assigns authorized directories to FTP clients based on the
locally configured authorization attributes.
Remote authorization—A remote authorization server assigns authorized directories on the
device to FTP clients.
For information about configuring authentication and authorization, see Security Configuration
Guide.