R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

201
FTP server configuration example
Network requirements
• As shown in Figure 110, use the Firewall as an FTP server, and the PC as the FTP client. Their IP
addresses are 1.2.1.1/16 and 1.1.1.1/16 respectively. The Firewall and PC are reachable to each
other.
• PC keeps the newest boot file of the Firewall. Use FTP to upgrade the Firewall and back up the
configuration file.
• Set the username to abc and the password to abc for the FTP client to log in to the FTP server.
Figure 110 Network diagram
Configuration procedure
1. Configure the Firewall (FTP server):
# Create an FTP user account abc, set its password to abc and the user privilege level to level 3 (the
manage level). Allow user abc to access the root directory of the flash, and specify abc to use FTP.
<Sysname> system-view
[Sysname] local-user abc
[Sysname-luser-abc] password simple abc
[Sysname-luser-abc] authorization-attribute level 3
[Sysname-luser-abc] authorization-attribute work-directory flash0:/
[Sysname-luser-abc] service-type ftp
[Sysname-luser-abc] quit
# Enable FTP server.
[Sysname] ftp server enable
[Sysname] quit
# Check the available space of the Flash. Ensure adequate space for the boot file to be uploaded.
<Sysname> dir
Directory of flash0:/
0 -rw- 25535 Feb 17 2011 14:20:02 system.xml
1 -rw- 1780 Feb 17 2011 14:20:04 startup.cfg
2 -rw- 14617560 Feb 15 2011 12:30:39 main.bin
3 drw- - Jan 06 2011 14:46:09 domain1
4 -rw- 891 Jan 06 2011 14:46:18 default_ca.cer
5 -rw- 1411 Jan 06 2011 14:46:18 default_local.cer
6 drw- - Jan 06 2011 14:46:07 seclog
1048192 KB total (1018012 KB free)
2. Configure the PC (FTP client)
# Log in to the FTP server through FTP.
c:\> ftp 1.1.1.1
Connected to 1.1.1.1.
220 FTP service ready.