Technicolor - Thomson SpeedTouchTM620 Remote FTP Access, =service system ifadd name=FTP group=wan

Chapter 8

SpeedTouch™ Remote Access

8.5 Remote FTP Access

Introduction The SpeedTouch™ FTP interface is provided by the SpeedTouch™ FTP server. Access to this server and hence the FTP interface is controlled by the SpeedTouch™ FTP service. By default, the FTP service is configured to let the SpeedTouch™ FTP server accept FTP requests from LAN side only. In addition the SpeedTouch™ provides FTP over SSH.

FTP over SSH provides a more secure way of accessing the SpeedTouch™ FTP service and should therefore be used.

Default HTTP Use the following CLI command to see the default FTP service configuration. service configuration

=>:service system list name=FTP expand=enabled			State
Idx Name	Protocol	SrcPort DstPort Group

--------------------------------------------------------------------

1 FTP	tcp	21	enabled
	Description		File Transfer
	Properties		server
	Managed parameters		state port acl map log
	Interface Access List		lan
	Ip Access List		any
	NAT Port List		21

Configuration via CLI commands

To have FTP access via WAN, additional configuration of the SpeedTouch™ FTP service is needed.

Use the following CLI command to allow WAN FTP access to the SpeedTouch™ via CLI commands.

=>:service system ifadd name=FTP group=wan

Use the following CLI command to look at the FTP service configuration, we notice that the wan group is added to the Interface Access List:

=>:service system list name=FTP expand=enabled			State
Idx Name	Protocol	SrcPort DstPort Group

-----------------------------------------------------------------------

1 FTP	tcp	21	enabled
	Description		File Transfer
	Properties		server
	Managed parameters		state port acl map log
	Interface Access List		lan wan
	Ip Access List		any
	NAT Port List		21

The added rules will allow any user on the WAN to open an FTP session to the SpeedTouch™ and access the file system after authentication.

E-DOC-CTC-20051017-0155 v1.0 97