R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

• The latest system software image soft-version2.bin and the latest configuration file new-config.cfg

are both saved in the aaa directory of the FTP server.

• The Firewall and FTP server can reach each other.

• A user can log in to the Firewall via Telnet, and the user and Firewall can reach each other.

Figure 18 Network diagram

Configuration procedure

1. Configure the FTP server (configurations may vary with different types of servers):

# Set the access parameters for the FTP client (including enabling the FTP server function, setting

the FTP username to aaa and password to hello, and setting the user to have access to the

flash0:/aaa directory).

<FTP-Server> system-view

[FTP-Server] ftp server enable

[FTP-Server] local-user aaa

[FTP-Server-luser-aaa] password cipher hello

[FTP-Server-luser-aaa] service-type ftp

[FTP-Server-luser-aaa] authorization-attribute work-directory flash0:/aaa

# Use text editor on the FTP server to edit batch file auto-update.txt. The following is the content of

the batch file:

return

startup saved-configuration new-config.cfg

boot-loader file soft-version2.bin main

reboot

2. Configure the Firewall:

# Log in to the FTP server.

<Firewall> ftp 2.2.2.2

Trying 2.2.2.2 ...

Press CTRL+K to abort

Connected to 2.2.2.2.

220 WFTPD 2.0 service (by Texas Imperial Software) ready for new user

User(2.2.2.2:(none)):aaa

331 Give me your password, please

Password:

FTP Client

FTP Server

User

Telnet

Firewall

1.1.1.1/24

2.2.2.2/24

Internet