The ftp ipv6 server-source command specifies an IPv6 source address for an FTP server.
The undo ftp ipv6 server-source command cancels the IPv6 source address specified for an FTP server.
By default, the IPv6 source address of an FTP server is ::.
ftp ipv6 server-source -a ipv6_address [ -vpn-instance vpn_name ]
undo ftp ipv6 server-source
| Parameter | Description | Value |
|---|---|---|
-a ipv6_address |
Specifies an IPv6 source address for an FTP server. |
The total length of an IPv6 source address is 128 bits, which are divided into eight groups. Each group contains four hexadecimal digits. The value is in the format X:X:X:X:X:X:X:X. |
-vpn-instance vpn_name |
Specifies the name of a VPN instance. |
The value is a string of 1 to 31 case-sensitive characters. It cannot contain spaces. The VPN instance name cannot be _public_. If the string is enclosed in double quotation marks (" "), the string can contain spaces. |
Usage Scenario
By default, an FTP server accepts connection requests from all IPv6 addresses, as a result of which system security is low. For security purposes, run the ftp ipv6 server-source command to specify an IPv6 source address for the FTP server. In this case, users can log in to the FTP server only using this IPv6 address.
Prerequisites
A VPN instance has been created before you specify it for an FTP server. Otherwise, the ftp ipv6 server-source command cannot be executed.
Configuration Impact
After an IPv6 source address is specified for an FTP server, FTP users can log in to the FTP server only using this IPv6 address. This configuration applies to the FTP users who attempt to log in to the FTP server, not to the FTP users who have logged in to the server.
Precautions
After an IPv6 source address is specified for an FTP server using this command, ensure that FTP users can access this IPv6 address at Layer 3. Otherwise, FTP users will fail to log in to the FTP server.
If the specified IPv6 source address is bound to a VPN instance, the FTP server is also bound to the VPN instance.