Chapter 49 System Remote Management
UAG CLI Reference Guide
255
49.7 Configuring FTP
You can upload and download the UAG’s firmware and configuration files using FTP. To use this
feature, your computer must have an FTP client.
49.7.1 FTP Commands
The following table describes the commands available for FTP. You must use the configure
terminal
command to enter the configuration mode before you can use these commands.
49.7.2 FTP Commands Examples
This command sets a service control rule that allowed the computers with the IP addresses
matching the specified address object to access the specified zone using FTP service.
Table 156 Command Summary: FTP
COMMAND DESCRIPTION
[no] ip ftp server Allows FTP access to the UAG. The no command disables FTP access to the
UAG.
[no] ip ftp server cert
certificate_name
Sets a certificate to be used to identify the UAG. The
no command resets the
certificate used by the FTP server to the factory default.
[no] ip ftp server port <1..65535> Sets the FTP service port number. The
no command resets the FTP service port
number to the factory default (21).
[no] ip ftp server tls-required Allows FTP access over TLS. The
no command disables FTP access over TLS.
ip ftp server rule
{rule_number|append|insert
rule_number} access-group
{ALL|address_object} zone
{ALL|zone_object} action
{accept|deny}
Sets a service control rule for FTP service.
address_object: The name of the IP address (group) object. You may use 1-31
alphanumeric characters, underscores(
_), or dashes (-), but the first character
cannot be a number. This value is case-sensitive.
zone_object: The name of the zone. Use up to 31 characters (a-zA-Z0-9_-).
The name cannot start with a number. This value is case-sensitive.
The UAG uses pre-defined zone names like DMZ, LAN1, LAN2, SSL VPN, IPSec
VPN, and WAN.
ip ftp server rule move rule_number
to rule_number
Changes the index number of a service control rule.
no ip ftp server rule rule_number Deletes a service control rule for FTP service.
show ip ftp server status Displays FTP settings.
Router# configure terminal
Router(config)# ip ftp server rule 4 access-group Sales zone WAN action accept