HP (Hewlett-Packard) A3100-24 v2 EI ユーザーズマニュアル

ページ / 157
 
To do… 
Use the command… 
Remarks 
Configure user properties 
authorization-attribute { acl 
acl-number | callback-number 
callback-number | idle-cut minute 
| level level | user-profile 
profile-name | user-role 
security-audit | vlan vlan-id | 
work-directory directory-name } * 
Optional 
By default, the FTP/SFTP users can 
access the root directory of the 
switch, and the user level is 0. You 
can change the default 
configuration by using this 
command. 
 
 
NOTE: 
• 
For more information about the local-user, password, service-type ftp, and authorization-attribute 
commands, see the 
Security Command Reference
• 
When the switch serves as the FTP server, if the client is to perform the write operations (such as upload,
delete, and create) on the device’s file system, the FTP login users must be level 3 users; if the client is to
perform other operations such as the read operation, the switch has no restriction on the user level of the
FTP login users. 
 
FTP server configuration example 
Network requirements 
 
As shown in 
, use the device as an FTP server, and the PC as the FTP client. Their IP 
addresses are 1.2.1.1/16 and 1.1.1.1/16 respectively. The device and PC can reach each other. 
 
PC keeps the updated system software image file of the device. Use FTP to upgrade the device and 
back up the configuration file. 
 
Set the username to ftp and the password to pwd for the FTP client to log in to the FTP server. 
Figure 38 Upgrading using the FTP server 
 
 
Configuration procedure 
1. 
Configure the device (FTP Server) 
# Create an FTP user account ftp, set its password to pwd and the user privilege level to level 3 (the 
manage level). Allow user ftp to access the root directory of the flash, and specify ftp to use FTP. 
<Sysname> system-view 
[Sysname] local-user ftp 
[Sysname-luser-ftp] password simple pwd 
[Sysname-luser-ftp] authorization-attribute level 3 
[Sysname-luser-ftp] authorization-attribute work-directory flash:/ 
[Sysname-luser-ftp] service-type ftp 
[Sysname-luser-ftp] quit 
# Enable FTP server. 
[Sysname] ftp server enable 
[Sysname] quit 
93