HP 5500 Ei 5500 Si Switch Series Configuration Guide

 69 
Configuration procedure 
# Create ACL 2000, and configure rule 1 to permit packets sourced from Host B, and rule 2 to permit 
packets sourced from Host A. 
 system-view 
[Sysname] acl number 2000 match-order config 
[Sysname-acl-basic-2000] rule 1 permit source 10.110.100.52 0 
[Sysname-acl-basic-2000] rule 2 permit source 10.110.100.46 0 
[Sysname-acl-basic-2000] quit 
# Associate the ACL with the SNMP community and the SNMP group.  
[Sysname] snmp-agent community read aaa acl 2000 
[Sysname]...

 70 
Figure 36 Network diagram 
 
 
Configuration procedure 
# Create ACL 2000, and configure rule 1 to permit packets sourced from Host B. 
 system-view 
[Sysname] acl number 2030 match-order config 
[Sysname-acl-basic-2030] rule 1 permit source 10.110.100.52 0 
# Associate the ACL with the HTTP service so only Web users from Host B are allowed to access the 
device. 
[Sysname] ip http acl 2030  

 71 
Configuring FTP 
File Transfer Protocol (FTP) is an application layer protocol based on the client/server model. It is used to 
transfer files from one host to another over a TCP/IP network. 
FTP server uses TCP port 20 to transfer data and TCP port 21 to transfer control commands. For more 
information about FTP, see RFC 959. 
FTP supports the following transfer modes: 
•   Binary mode —Used to transfer image files, such as  .app and .bin files. 
•   ASCII mode —Used to transfer text files, such as...

 72 
The ftp client source command setting applies to all FTP sessio ns. When you set up an FTP session by 
using the ftp  or ftp ipv6 command, you can also specify a different  source IP address for the FTP session.   
 
 IMPORTANT: 
To avoid FTP connection failures, when you specify a so
urce interface for FTP packets, make sure that the
interface has been assigned a primary IP address.  
 
To establish an IPv4 FTP connection:  
Step Command Remarks 
1.   Enter system view. 
system-view N/A 
2....

 73 
Step Command Remarks 
1.  Enter system view.  system-view  N/A 
2.  Set the DSCP value for 
IP to use for outgoing 
FTP packets. • For IPv4: 
ftp client dscp  dscp-value 
• For IPv6: 
ftp client ipv6 dscp  dscp-value The default is 0, whether the FTP 
client is running IPv4 or IPv6. 
 
Managing directories on the FTP server 
After the device establishes a connection to an FTP server, you can create or delete folders in the 
authorized directory on the FTP server. 
To manage the directories on the...

 74 
Task Command Remarks 
Query a directory or file on the 
FTP server. ls
 [ remotefile  [ localfile  ] ]  The 
ls command displays the name of a 
directory or file only, while the dir  
command displays detailed information 
such as the file size and creation time. 
Delete the specified file on the 
FTP server permanently.  delete 
remotefile   N/A 
Set the file transfer mode to 
ASCII.  ascii 
By default, ASCII mode is used. 
Set the file transfer mode to 
binary.  binary 
By default, ASCII mode is...

 75 
Task Command Remarks 
Terminate the FTP connection without exiting FTP 
client view. • disconnect 
• close   Use either command in FTP 
client view. 
Terminate the FTP connection and return to user 
view. •
 bye 
• quit  Use either command in FTP 
client view.  
FTP client configuration example  
Network requirements 
As shown in Figure 38
, the IRF fabric that comprises two member devices acts as the FTP client and the 
PC acts as the FTP server. The IRF fabric and the PC can reach each other. An...

 76 
•  Download the file  newest.bin from the PC to the Flash root directory of the subordinate device (with 
member ID of 2). 
[ftp] get newest.bin slot2#flash:/newest.bin 
# Set the transfer mode to ASCII and upload the configuration file  config.cfg f ro m  t h e  I R F  f a b ri c  t o  t h e  PC  
for backup. 
[ftp] ascii 
[ftp] put config.cfg back-config.cfg 
227 Entering Passive Mode (10,1,1,1,4,2). 
125 ASCII mode data connection already open, transfer starting for /conf\
ig.cfg. 
226 Transfer...

 77 
•  Fast mode —The FTP server starts writing data to the Flas h after a file is transferred to the memory. 
Th i s  p reve n t s  t h e  exi s t i n g  fi l e  o n  t h e  F T P  s e r ve r  f r om being corrupted in the event that anomaly, such 
as a power failure, occurs during a file transfer. 
•   Normal mode —The FTP server writes data to the Flash  while receiving data. This means that any 
anomaly, such as a power failure, during file transfer might result in file corruption on the FTP server....

 78 
Step Command Remarks 
1.  Enter system view.  system-view  N/A 
2.  Create a local user 
account and enter 
its view.  local-user 
user-name  By default, no local 
user account exists, and 
the system does not support FTP anonymous 
user access. 
3.   Set a password for 
the user account.  password 
{ simple |  cipher } 
password   N/A 
4.
  Assign FTP service 
to the user account  service-type ftp  By default, no service type is specified. If the 
FTP service is specified, the root directory of...