ftp acl

Function

The ftp acl command configures the ACL to control the access of clients to the FTP server.

The undo ftp acl command cancels the configuration of the ACL.

By default, no ACL is configured for FTP server.

Format

ftp acl { acl-number | name }

undo ftp acl

Parameters

Parameter	Description	Value
acl-number	Specifies the basic or advanced ACL number.	ACL number is an integer data type. The basic acl number value ranges from 2000 to 2999, the advanced acl number value ranges from 3000 to 3999.
name	Specifies the ACL name.	The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter (a to z or A to Z, case sensitive).

Parameter

Description

Value

acl-number

Specifies the basic or advanced ACL number.

ACL number is an integer data type. The basic acl number value ranges from 2000 to 2999, the advanced acl number value ranges from 3000 to 3999.

name

Specifies the ACL name.

The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter (a to z or A to Z, case sensitive).

Views

System view

Default Level

3: Management level

Task Name and Operations

Task Name	Operations
ftp-server	write

Usage Guidelines

Usage Scenario

When a device serves as FTP server, you can configure the ACL on the device to control the login of the clients to the device.

For ACL configurations, refer to the chapter " ACL4 Configuration Commands " in the VRP Command Reference - IP Service.

FTPS only supports ACL matching based on the following parameters: source IP address, destination IP address, source port number, destination port number, and

Precautions

If no rule is configured, the incoming and outgoing calls are not restricted after the command ftp acl is run.

The command ftp acl only takes effect for ipv4 client.

Example

# Set the ACL number as 2000 to access the FTP server.

<HUAWEI> system-view
[~HUAWEI] acl 2000
[*HUAWEI-acl4-basic-2000] commit
[~HUAWEI-acl4-basic-2000] quit
[~HUAWEI] ftp acl 2000