F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices System Management and Maintenance Command Reference-6PW100

263
Syntax
tftp-server [ ipv6 ] acl acl-number
undo tftp-server [ ipv6 ] acl
Default
No ACL is used to control the device's access to a TFTP server.
Views
System view
Default command level
3: Manage level
Parameters
ipv6: References an IPv6 ACL. If it is not specified, an IPv4 ACL is referenced.
The following matrix shows the ipv6 keyword and firewalls and UTM devices compatibility:
Hardware Ke
y
word com
p
atible
F1000-A-EI/F1000-S-EI Yes
F1000-E Yes
F5000 Yes
Firewall module Yes
U200-A Yes
U200-S No
acl-number: Number of a basic ACL, in the range of 2000 to 2999.
Usage guidelines
You can use an ACL to deny or permit the device's access to a specific TFTP server.
For more information about ACL, see Access Control Configuration Guide.
Examples
# A l l o w t h e d e v i c e t o a c c e s s o n l y t h e T F T P s e r v e r a t 1.1.1.1.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 1.1.1.1 0
[Sysname-acl-basic-2000] quit
[Sysname] tftp-server acl 2000
# Allow the device to access only the TFTP server at 2001::1 only.
<Sysname> system-view
[Sysname] acl ipv6 number 2001
[Sysname-acl6-basic-2001] rule permit source 2001::1/128
[Sysname-acl6-basic-2001] quit
[Sysname] tftp-server ipv6 acl 2001
[Sysname]