Configuring basic parameters

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable the FTP server.

ftp server enable

By default, the FTP server is disabled.

3. (Optional.) Use an ACL to control access to the FTP server.

ftp server acl { ipv4-acl-number | ipv6 ipv6-acl-number }

By default, no ACL is used for access control.

4. (Optional.) Enable logging for FTP login attempts that are denied by the FTP login control ACL.

ftp server acl-deny-log enable

By default, logging is disabled for FTP login attempts that are denied by the FTP login control ACL.

5. (Optional.) Associate an SSL server policy with the FTP server to ensure data security.

ftp server ssl-server-policy policy-name

By default, no SSL server policy is associated with the FTP server.

6. (Optional.) Set the FTP connection idle-timeout timer.

ftp timeout minutes

By default, the FTP connection idle-timeout timer is 30 minutes.

If no data transfer occurs on an FTP connection within the idle-timeout interval, the FTP server closes the FTP connection to release resources.

7. (Optional.) Set the DSCP value for outgoing FTP packets.

  • For an IPv4 FTP server:ftp server dscp dscp-value

  • For an IPv6 FTP server:ftp server ipv6 dscp dscp-value

By default, the DSCP value is 0.

8. (Optional.) Set the maximum number of concurrent FTP users.

aaa session-limit ftp max-sessions

By default, the maximum number of concurrent FTP users is 32.

Changing this setting does not affect users who are currently online. If the new limit is less than the number of online FTP users, no additional FTP users can log in until the number drops below the new limit.

For more information about this command, see Security Command Reference.