Configuring Basic Parameters; Configuring Authentication And Authorization - HP 10500 Series Configuration Manual

Configuring basic parameters

Step
1. Enter system view.
2. Enable the FTP server.
3. (Optional.) Use an ACL to
control access to the FTP
server.
(Optional.) Associate an SSL
4.
server policy with the FTP
server to ensure data security.
5. (Optional.) Set the FTP
connection idle-timeout timer.
6. (Optional.) Set the DSCP
value for outgoing FTP
packets.
7. (Optional.) Set the maximum
number of concurrent FTP
users.

Configuring authentication and authorization

Perform this task on the FTP server to authenticate FTP clients and set the authorized directories that
authenticated clients can access.
The following authentication modes are available:
Local authentication—The device looks up the client's username and password in the local user
•
account database. If a match is found, authentication succeeds.
Remote authentication—The device sends the client's username and password to a remote
•
authentication server for authentication. The user account is configured on the remote
authentication server rather than the device.
The following authorization modes are available:
Command
system-view
ftp server enable
ftp server acl { acl-number |
ipv6 acl-number6 }
ftp server ssl-server-policy
policy-name
ftp timeout minutes
•
For an IPv4 FTP server:
ftp server dscp
dscp-value
•
For an IPv6 FTP server:
ftp server ipv6 dscp
dscp-value
aaa session-limit ftp
max-sessions
76
Remarks
N/A
By default, the FTP server is disabled.
By default, no ACL is used for access
control.
By default, no SSL server policy is
associated with the FTP server.
By default, the FTP connection
idle-timeout timer is 30 minutes.
If no data transfer occurs on an FTP
connection within the idle-timeout
interval, the FTP server closes the FTP
connection to release resources.
By default, the DSCP value is 0.
The default maximum number is 32.
Changing this setting does not affect
users who are currently online. If the
current number of online FTP users is
equal to or greater than the new setting,
no additional FTP users can log in until
online users log out.
For more information about this
command, see Security Command
Reference.