H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 232)

217
To do… Use the command… Remarks
Configure user
properties
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute
| level level | user-profile
profile-name | vlan vlan-id |
work-directory directory-name } *
Optional
By default, the FTP/SFTP users can access the
root directory of the device, and the user level
is 0. You can change the default configuration
by using this command.
NOTE:
When the device serves as the FTP server, to perform the write operations (for example, upload, delete,
create, and delete) on the device’s file system, the FTP login users must be level 3 users; to perform other
operations, for example, read operation, users of any level from 0 to 3 are allowed.
FTP server configuration example
Network requirements
• As shown in Figure 68 , use SecBlade as an FTP server, and the PC as the FTP client. Their IP
addresses are 1.2.1.1/16 and 1.1.1.1/16 respectively. SecBlade and PC are reachable to each other.
• PC keeps the newest boot file of SecBlade. Use FTP to upgrade the SecBlade and back up the
configuration file.
• Set the username to abc and the password to abc for the FTP client to log in to the FTP server.
Figure 68 Upgrading using the FTP server
Configuration procedure
1. Configure SecBlade (FTP server)
# Create an FTP user account abc, set its password to abc and the user privilege level to level 3 (the
manage level). Allow user abc to access the root directory cfa0, and specify abc to use FTP.
system-view
[SecBlade] local-user abc
[SecBlade-luser-abc] password simple abc
[SecBlade-luser-abc] authorization-attribute level 3
[SecBlade-luser-abc] authorization-attribute work-directory cfa0:/
[SecBlade-luser-abc] service-type ftp
[SecBlade-luser-abc] quit
Internet
1.2.1.1/16
FTP server
FTP client
1.3.1.1/16
Device
SecBlade
NSC
1.1.1.1/16
PC