6-88
Only users with the manage level can use the
ftp
command to log in to an FTP server, enter FTP client
view, and execute directory and file related commands. However, whether the commands can be
executed successfully depends on the authorizations of the FTP server.
Establishing an FTP Connection
To access an FTP server, an FTP client must establish a connection with the FTP server. Two ways are
available to establish a connection: using the
ftp
command to establish the connection directly; using
the
open
command in FTP client view.
Source address binding means to configure an IP address on a stable interface such as a loopback
interface or Dialer interface, and then use this IP address as the source IP address of an FTP
connection. The source address binding function simplifies the configuration of ACL rules and security
policies. You just need to specify the source or destination address argument in an ACL rule as this
address to filter inbound and outbound packets on the device, ignoring the difference between interface
IP addresses as well as the affect of interface statuses. You can configure the source address by
configuring the source interface or source IP address. The primary IP address configured on the source
interface is the source address of the transmitted packets. The source address of the transmitted
packets is selected following these rules:
z
If no source address is specified, the FTP client uses the IP address of the interface determined by
the matched route as the source IP address to communicate with an FTP server.
z
If the source address is specified with the
ftp client source
or
ftp
command, this source address is
used to communicate with an FTP server.
z
If you use the
ftp client source
command and the
ftp
command to specify a source address
respectively, the source address specified with the
ftp
command is used to communicate with an
FTP server.
The source address specified with the
ftp client source
command is valid for all FTP connections and
the source address specified with the
ftp
command is valid only for the current FTP connection.
Follow these steps to establish an IPv4 FTP connection:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Configure the source address of
the FTP client
ftp client source
{
interface
interface-type interface-number
|
ip
source-ip-address
}
Optional
A device uses the IP address
of the interface determined by
the matched route as the
source IP address to
communicate with the FTP
server by default.
Exit to system view
quit
—
Log in to the remote FTP server
directly in user view
ftp
[
server-address
[
service-port
]
[
vpn-instance
vpn-instance-name
]
[
source
{
interface
interface-type
interface-number
|
ip
source-ip-address
} ] ]
Use either approach.
The
ftp
command is available
in user view, and the
open
command is available in FTP
Summary of Contents for SR6600 SPE-FWM
Page 112: ...6 101...
