ftp acl

Function

The ftp acl command specifies an ACL number for the current FTP server so that the FTP client with the same ACL number can access the FTP server.

The undo ftp acl command deletes an ACL number of the current FTP server.

By default, no ACL is configured for FTP server.

Format

ftp [ ipv6 ] acl acl-number

undo ftp [ ipv6 ] acl

Parameters

Parameter	Description	Value
ipv6	Specifies the IPv6 FTP server.	-
acl-number	Specifies the number of the ACL.	The value is an integer that ranges from 2000 to 3999.

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

When the device functions as an FTP server, you can configure an access control list (ACL) on the device to control the source IP address, destination IP address, source port, destination port, VPN instance, and packets whose protocol type is TCP, allows specific clients to log in to the device through FTP.

Precautions

The ftp server acl command takes effect only after you run the rule command to configure the ACL rule.

Example

# Allow the client whose ACL number is 2000 to log in to the FTP server.

<HUAWEI> system-view
[HUAWEI] acl 2000
[HUAWEI-acl-basic-2000] rule permit source 10.10.10.1 0
[HUAWEI-acl-basic-2000] quit
[HUAWEI] ftp acl 2000