HP (Hewlett-Packard) A3100-8 DC EI ユーザーズマニュアル

ページ / 157
 
To do… 
Use the command… 
Remarks 
Use an ACL to control FTP clients’ 
access to the switch 
ftp server acl acl-number 
Optional 
By default, no ACL is used to control 
FTP clients’ access to the switch. 
Configure the idle-timeout timer 
ftp timeout minutes 
Optional 
30 minutes by default. 
Within the idle-timeout time, if there is 
no information interaction between 
the FTP server and client, the 
connection between them is 
terminated. 
Set the file update mode for the FTP 
server 
ftp update { fast | normal } 
Optional 
Normal update is used by default. 
Quit to user view 
quit 
— 
Manually release the FTP 
connection established with the 
specified username 
free ftp user username 
Optional 
Available in user view 
 
Configuring authentication and authorization on the FTP server 
To allow an FTP user to access certain directories on the FTP server, you must create an account for the 
user, authorizing access to the directories and associating the username and password with the account. 
The following configuration is used when the FTP server authenticates and authorizes a local FTP user. If 
the FTP server needs to authenticate a remote FTP user, you must configure authentication, authorization 
and accounting (AAA) policy instead of the local user. For detailed configuration, see the Security 
Command Reference
.  
In local authentication, the switch checks the input username and password against those configured on 
the switch. In remote authentication, the switch sends the input username and password to the remote 
authentication server, which then checks whether they are consistent with those configured on the switch.  
Follow these steps to configure authentication and authorization for FTP server: 
To do… 
Use the command… 
Remarks 
Enter system view 
system-view 
— 
Create a local user and enter its 
view 
local-user user-name 
Required 
No local user exists by default, and 
the system does not support FTP 
anonymous user access. 
Assign a password to the user 
password { simple | cipher } 
password 
Required 
Assign the FTP service to the user 
service-type ftp 
Required 
By default, the system does not 
support anonymous FTP access, 
and does not assign any service. If 
the FTP service is assigned, the root 
directory of the switch is used by 
default. 
92