HP 6125G HP 6125G & 6125G/XG Blade Switches Fundamentals Configuration - Page 83

Configuring authentication and authorization, Fast mode, Normal mode, Command, Remarks

Page 83 highlights

• Fast mode-The FTP server starts writing data to the Flash after a file is transferred to the memory. This prevents the existing file on the FTP server from being corrupted in the event that anomaly, such as a power failure, occurs during a file transfer. • Normal mode-The FTP server writes data to the Flash while receiving data. This means that any anomaly, such as a power failure, during file transfer might result in file corruption on the FTP server. This mode, however, consumes less memory space than the fast mode. To configure basic parameters for the FTP server: Step Command 1. Enter system view. system-view 2. Enable the FTP server. ftp server enable 3. Set the DSCP value for IPv4 to use for outgoing FTP packets. ftp server dscp dscp-value 4. Use an ACL to control FTP access. ftp server acl acl-number 5. Configure the idle-timeout timer. ftp timeout minutes 6. Set the file update mode for the FTP server. ftp update { fast | normal } 7. Return to user view. quit 8. Release the FTP connection established by a specific user. free ftp user username Remarks N/A By default, the FTP server is disabled. Optional. The default is 0. Optional. By default, no ACL is used for access control. Optional. The default idle-timeout timer is 30 minutes. If no data is transferred within the idle-timeout time, the connection is terminated. Optional. By default, normal update is used. N/A Optional. Configuring authentication and authorization Perform this task on the FTP server to authenticate FTP clients and specify the directories that authenticated clients can access. The following authentication modes are available: • Local authentication-The device looks up the client's username and password in the local user account database. If a match is found, authentication succeeds. • Remote authentication-The device sends the client's username and password to a remote authentication server for authentication. If this approach is used, the user account is configured on the remote authentication server rather than the device. To assign an FTP user write access (including upload, delete, and create) to the device, assign level-3 (Manage) user privileges to the user. For read-only access to the file system, any user privilege level is OK. For more information, see Security Configuration Guide. To configure authentication and authorization for the FTP server: 77

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135

77
Fast mode
—The FTP server starts writing data to the Flash after a file is transferred to the memory.
This prevents the existing file on the FTP server from being corrupted in the event that anomaly, such
as a power failure, occurs during a file transfer.
Normal mode
—The FTP server writes data to the Flash while receiving data. This means that any
anomaly, such as a power failure, during file transfer might result in file corruption on the FTP server.
This mode, however, consumes less memory space than the fast mode.
To configure basic parameters for the FTP server:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable the FTP server.
ftp server enable
By default, the FTP server is disabled.
3.
Set the DSCP value for IPv4 to
use for outgoing FTP packets.
ftp server dscp
dscp-value
Optional.
The default is 0.
4.
Use an ACL to control FTP
access.
ftp server acl
acl-number
Optional.
By default, no ACL is used for access
control.
5.
Configure the idle-timeout
timer.
ftp
timeout
minutes
Optional.
The default idle-timeout timer is 30
minutes.
If no data is transferred within the
idle-timeout time, the connection is
terminated.
6.
Set the file update mode for
the FTP server.
ftp update
{
fast
|
normal
}
Optional.
By default, normal update is used.
7.
Return to user view.
quit
N/A
8.
Release the FTP connection
established by a specific user.
free ftp user
username
Optional.
Configuring authentication and authorization
Perform this task on the FTP server to authenticate FTP clients and specify the directories that
authenticated clients can access.
The following authentication modes are available:
Local authentication
—The device looks up the client's username and password in the local user
account database. If a match is found, authentication succeeds.
Remote authentication
—The device sends the client's username and password to a remote
authentication server for authentication. If this approach is used, the user account is configured on
the remote authentication server rather than the device.
To assign an FTP user write access (including upload, delete, and create) to the device, assign level-3
(Manage) user privileges to the user. For read-only access to the file system, any user privilege level is
OK.
For more information, see
Security Configuration Guide
.
To configure authentication and authorization for the FTP server: