Example for Configuring the FTPS Server

Procedure

1. Configure the FTP server function on the server and upload the digital certificate to the server.
   # Enable the FTP server function and configure FTP user information.

   <HUAWEI> system-view
   [HUAWEI] sysname FTPS_Server
   [FTPS_Server] ftp server enable
   [FTPS_Server] aaa
   [FTPS_Server-aaa] local-user admin password irreversible-cipher huawei@6789
   [FTPS_Server-aaa] local-user admin service-type ftp
   [FTPS_Server-aaa] local-user admin privilege level 3 
   [FTPS_Server-aaa] local-user admin ftp-directory flash:
   [FTPS_Server-aaa] quit
   [FTPS_Server] quit

   # Open the Windows CLI and run the ftp command to connect to the FTP server. Enter the correct user name and password to connect to the FTP server. Upload the digital certificate and private key to the FTP server.

   Run the dir command on the FTP server to check that the digital certificate and private key are uploaded successfully.

   <FTPS_Server> dir
   Directory of flash:/
   
   Idx  Attr     Size(Byte)  Date        Time         FileName
       0  drw-              -  May 10 2011 05:05:40   src
       1  -rw-        524,575  May 10 2011 05:05:53   private-data.txt
       2  -rw-            446  May 10 2011 05:05:51   vrpcfg.zip
       3  -rw-          1,302  May 10 2011 05:32:05   4_servercert_der_dsa.der
       4  -rw-            951  May 10 2011 05:32:44   4_serverkey_der_dsa.der
   ...
   65,233 KB total (7,289 KB free)

2. Configure an SSL policy and load a digital certificate.
   # Create the security directory and move the digital certificate to the security directory.

   <FTPS_Server> mkdir security/
   <FTPS_Server> move 4_servercert_der_dsa.der security/
   <FTPS_Server> move 4_serverkey_der_dsa.der security/

   Run the dir command in the security directory to check that the digital certificate and private key have been moved successfully.

   <FTPS_Server> cd security/
   <FTPS_Server> dir
   Directory of flash:/security/
   
     Idx  Attr     Size(Byte)  Date        Time       FileName
       0  -rw-          1,302  May 10 2011 05:44:34   4_servercert_der_dsa.der
       1  -rw-            951  May 10 2011 05:45:22   4_serverkey_der_dsa.der
   
   65,233 KB total (7,289 KB free)

   # Create an SSL policy and load a digital certificate in the ASN1 format.

   <FTPS_Server> system-view
   [FTPS_Server] ssl policy ftp_server
   [FTPS_Server-ssl-policy-ftp_server] certificate load asn1-cert 4_servercert_der_dsa.der key-pair dsa key-file 4_serverkey_der_dsa.der
   [FTPS_Server-ssl-policy-ftp_server] quit

3. Enable the FTPS server function and configure the local FTP user.

   # Enable the FTPS server function.

   

   Disable the FTP server function before enabling the FTPS server function.

   [FTPS_Server] undo ftp server
   [FTPS_Server] ftp secure-server ssl-policy ftp_server
   [FTPS_Server] ftp secure-server enable

   # Configure the local FTP user.

   Use the admin user configured in Step 1.

4. Connect to the FTPS server using third-party software.

   For details, see related third-party documentation.

5. Verify the configuration.

   # Run the display ssl policy command on the FTPS server to view information about the SSL policy.

   [FTPS_Server] display ssl policy
   
          SSL Policy Name: ftp_server
        Policy Applicants:
            Key-pair Type: DSA
    Certificate File Type: ASN1
         Certificate Type: certificate
     Certificate Filename: 4_servercert_der_dsa.der
        Key-file Filename: 4_serverkey_der_dsa.der
                Auth-code: 
                      MAC:
                 CRL File:
          Trusted-CA File:
              Issuer Name:
      Validity Not Before:
       Validity Not After:

   # Run the display ftp-server command on the FTPS server to view the SSL policy name and the FTPS server status. The command output indicates that the FTPS server status is running.

   [FTPS_Server] display ftp-server
      FTP server is stopped
      Max user number                 5
      User count                      1
      Timeout value(in minute)        30
      Listening port                  21
      Acl number                      0
      FTP server's source address     0.0.0.0
      FTP SSL policy                  ftp_server
      FTP Secure-server is running

   # The FTP server supporting SSL can securely connect to the FTPS server, upload files, and download files.