Filter
Top Products
To do… Use the command… Remarks
Configure user properties
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute
| level level | user-profile
profile-name | user-role
security-audit | vlan vlan-id |
work-directory directory-name } *
Optional
By default, the FTP/SFTP users can
access the root directory of the
switch, and the user level is 0. You
can change the default
configuration by using this
command.
NOTE:
• For more information about the local-user, password, service-type ftp, and authorization-attribute
commands, see the
Security Command Reference
.
• When the switch serves as the FTP server, if the client is to perform the write operations (such as upload,
delete, and create) on the device’s file system, the FTP lo
g
in users must be level 3 users; if the client is to
perform other operations such as the
read operation, the switch has no restriction on the user level of the
FTP login users.
FTP server configuration example
Network requirements
• As shown in Figure 38, use the device as an FTP server, and the PC as the FTP client. Their IP
addresses are 1.2.1.1/16 and 1.1.1.1/16 respectively. The device and PC can reach each other.
• PC keeps the updated system software image file of the device. Use FTP to upgrade the device and
back up the configuration file.
• Set the username to ftp and the password to pwd for the FTP client to log in to the FTP server.
Figure 38 Upgrading using the FTP server
Configuration procedure
1. Configure the device (FTP Server)
# Create an FTP user account ftp, set its password to pwd and the user privilege level to level 3 (the
manage level). Allow user ftp to access the root directory of the flash, and specify ftp to use FTP.
<Sysname> system-view
[Sysname] local-user ftp
[Sysname-luser-ftp] password simple pwd
[Sysname-luser-ftp] authorization-attribute level 3
[Sysname-luser-ftp] authorization-attribute work-directory flash:/
[Sysname-luser-ftp] service-type ftp
[Sysname-luser-ftp] quit
# Enable FTP server.
[Sysname] ftp server enable
[Sysname] quit
93