Configuring Authentication And Authorization - HP 830 Series Configuration Manual

Step
2. Enable the FTP server.
3. Use an ACL to control FTP
access to the server.
4. Configure the idle-timeout
timer.
5. Set the file update mode for
the FTP server.
6. Return to user view.
7. Manually release the FTP
connection established with
the specified username.

Configuring authentication and authorization

Perform this task on the FTP server to authenticate FTP clients and specify the directories that
authenticated clients can access.
The following authentication modes are available:
Local authentication—The device looks up the client's username and password in the local user
•
account database. If a match is found, authentication succeeds.
Remote authentication—The device sends the client's username and password to a remote
•
authentication server for authentication. The user account is configured on the remote
authentication server rather than the device.
To assign an FTP user write access (including upload, delete, and create) to the device, assign level-3
(Manage) user privileges to the user. For read-only access to the file system, any user privilege level is
acceptable.
For more information, see the chapter on AAA configuration in Security Configuration Guide.
To configure authentication and authorization for the FTP server:
Step
1. Enter system view.
2. Create a local user
account and enter
its view.
3. Set a password for
the user account.
Command
ftp server enable
ftp server acl acl-number
ftp timeout minutes
ftp update { fast | normal }
quit
free ftp user username
Command
system-view
local-user user-name
password { simple | cipher }
password
66
Remarks
By default, the FTP server is disabled.
Optional.
By default, no ACL is used for access
control.
Optional.
The default idle-timeout timer is 30
minutes.
If no data is transferred within the
idle-timeout time, the connection is
terminated.
Optional.
By default, normal update is used.
N/A
Optional.
This command is available in user
view.
Remarks
N/A
By default, no local user account exists, and
the system does not support FTP anonymous
user access.
N/A