To do…

Use the command…

Remarks

authorization-attribute { acl acl-number callback-number callback-number idle-cut minute

Configure user properties level level user-profile profile-name user-role security-audit vlan vlan-id work-directory directory-name} *

Optional

By default, the FTP/SFTP users can access the root directory of the switch, and the user level is 0. You can change the default configuration by using this command.

NOTE:

•For more information about the local-user, password, service-type ftp, and authorization-attribute commands, see the Security Command Reference.

•When the switch serves as the FTP server, if the client is to perform the write operations (such as upload, delete, and create) on the device’s file system, the FTP login users must be level 3 users; if the client is to perform other operations such as the read operation, the switch has no restriction on the user level of the FTP login users.

FTP server configuration example

Network requirements

•As shown in Figure 38, use the device as an FTP server, and the PC as the FTP client. Their IP addresses are 1.2.1.1/16 and 1.1.1.1/16 respectively. The device and PC can reach each other.

•PC keeps the updated system software image file of the device. Use FTP to upgrade the device and back up the configuration file.

•Set the username to ftp and the password to pwd for the FTP client to log in to the FTP server.

Figure 38 Upgrading using the FTP server

Configuration procedure

1.Configure the device (FTP Server)

#Create an FTP user account ftp, set its password to pwd and the user privilege level to level 3 (the manage level). Allow user ftp to access the root directory of the flash, and specify ftp to use FTP.

<Sysname> system-view [Sysname] local-user ftp [Sysname-luser-ftp] password simple pwd

[Sysname-luser-ftp] authorization-attribute level 3

[Sysname-luser-ftp] authorization-attribute work-directory flash:/

[Sysname-luser-ftp] service-type ftp

[Sysname-luser-ftp] quit

# Enable FTP server.

[Sysname] ftp server enable

[Sysname] quit

93