H3C Technologies H3C SecBlade LB Cards - Manual (Page 102)

93
Step Command Remarks
2. Create a local user
account and enter
its view.
local-user user-name
By default, no authorized local user account
exists, and the system does not support FTP
anonymous user access.
3. Set a password for
the user account. password { simple | cipher }
password
N/A
4. Assign FTP service
to the user account. service-type ftp
By default, no service type is specified. If the
FTP service is specified, the root directory of
the device is by default used.
5. Configure
authorization
attributes.
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute
| level level | user-profile
profile-name | user-role { guest |
guest-manager | security-audit } |
vlan vlan-id | work-directory
directory-name } *
Optional.
By default, the FTP users can access the root
directory of the device, and the user level is 0.
You can change the default configuration
using this command.
For more information about the local-user, password, service-type ftp, and authorization-attribute
commands, see Security Command Reference.
FTP server configuration example
Network requirements
Create a local user account with the username abc and password abc and enable FTP server on the LB
product in Figure 34 . Use the user account to log in to the FTP server from the FTP client, upload the file
newest.bin from the FTP client to the FTP server, and download the configuration file config.cfg from the
FTP server to the FTP client for backup.
Figure 34 Network diagram
Configuration procedure
1. Configure LB (FTP server):
# Create a local user account abc, set its password to abc and the user privilege level to level 3 (the
manage level), specify the root directory of the Flash as the authorized directory, and specify the
service type as FTP.
system-view
[LB] local-user abc
[LB-luser-abc] password simple abc
[LB-luser-abc] authorization-attribute level 3
[LB-luser-abc] authorization-attribute work-directory flash0:/
[LB-luser-abc] service-type ftp
[LB-luser-abc] quit