|
需求: 配置,一台AR3路由器和一台AR4路由器, 图中右边的AR4为ftp服务器,左边为需要升级系统的路由器。
在华为设备上实现FTP服务的模板和配置手册
$ m+ x: o8 G: d$ Z0 r- N/ r
; Y4 o3 K. C7 |+ A" ^# {1)网络可达性测试:
& Q! E1 |% m y3 @8 Y, Q/ ^[AR3]PING 10.1.1.2 PING 10.1.1.2: 56 data bytes, press CTRL_C to break Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=255 time=30 ms Reply from 10.1.1.2: bytes=56 Sequence=2 ttl=255 time=10 ms Reply from 10.1.1.2: bytes=56 Sequence=3 ttl=255 time=20 ms Reply from 10.1.1.2: bytes=56 Sequence=4 ttl=255 time=20 ms Reply from 10.1.1.2: bytes=56 Sequence=5 ttl=255 time=10 ms 9 o. B4 W; b7 b3 l7 W' D M
--- 10.1.1.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 10/18/30 ms =============================================================== ! W" Q" E1 Q w( C! K7 B) O
2)前期工作[AR3]dir--------------------验证AR3的文件夹目录 Directory of flash:/ , c3 h1 f7 z4 @2 ?0 p8 _+ A
Idx Attr Size(Byte) Date Time(LMT) FileName 0 drw- - Mar 02 2016 15:01:09 dhcp 1 -rw- 121,802 May 26 2014 09:20:58 portalpage.zip 2 -rw- 2,263 Mar 02 2016 15:00:52 statemach.efs 3 -rw- 828,482 May 26 2014 09:20:58 sslvpn.zip - X7 J/ w2 I' t& k
1,090,732 KB total (784,528 KB free) ---确保可用空间充足
+ {/ }# N2 u9 g/ m: N2 G% h4 ^[AR4]dir-------------------验证AR4的文件夹目录
0 V Q) c4 P7 y) j0 U. \; ZDirectory of flash:/ 9 E! T# V$ J8 h. G
Idx Attr Size(Byte) Date Time(LMT) FileName 0 drw- - Mar 02 2016 15:01:07 dhcp 1 -rw- 121,802 May 26 2014 09:20:58 portalpage.zip 2 -rw- 2,263 Mar 02 2016 15:00:50 statemach.efs 3 -rw- 828,482 May 26 2014 09:20:58 sslvpn.zip
5 b4 ^" y- [6 h5 X1,090,732 KB total (784,528 KB free) ' b) D. T! p1 b) a9 C- a+ D, {/ u
[AR4]save AR4.zip-------------在AR4上保存一个配置文件,文件命名为AR4.zip " E7 u2 l3 g; B" A
Are you sure to save the configuration to AR4.zip? (y/n)[n]:y It will take several minutes to save configuration file, please wait....... Configuration file had been saved successfully Note: The configuration file will take effect after being activated ===================================================================
/ j4 X8 A$ `0 u[AR4]dir---------------------验证配置文件AR4.zip文件存在于目录中。 Directory of flash:/ 0 q3 N7 [1 F# t5 S8 ?: B
Idx Attr Size(Byte) Date Time(LMT) FileName 0 -rw- 544 Mar 02 2016 15:20:04 AR4.zip 1 drw- - Mar 02 2016 15:01:07 dhcp 2 -rw- 121,802 May 26 2014 09:20:58 portalpage.zip 3 -rw- 2,263 Mar 02 2016 15:00:50 statemach.efs 4 -rw- 828,482 May 26 2014 09:20:58 sslvpn.zip 5 -rw- 249 Mar 02 2016 15:19:43 private-data.txt 6 -rw- 544 Mar 02 2016 15:19:42 vrpcfg.zip + U. r2 ~0 X5 W* W8 `9 H0 M
1,090,732 KB total (784,504 KB free) ; |4 r# v( c5 V! T9 u8 W
4)实施
* x- Q( h: L, j* R2 H5 Q2 v4 J[AR4]ftp server enable----------------------启用ftp服务器 Info: Succeeded in starting the FTP server [AR4]aaa---------------------启用授权,验证和账户 安全许可 [AR4-aaa]local-user huawei password cipher huawei privilege level 15 ftp-directory flash: Info: Add a new user. 9 K: M8 r/ t( \, ]! Z: N" F8 S
创建本地用户名huawei,密码采用暗码huawei,用户等级15,可访问目录为根目录。 0 B% j# x9 X3 W$ b/ t( u
[AR4-aaa]local-user huawei service-type ftp---------本地用户huawei的服务器协议类型为ftp. | 1 |( [+ G1 A. I" j+ I8 \: H1 L9 r
# h- L" K5 g, `% K; W0 J
) \* c6 Y; y- b3 J1 b
[AR4-aaa]display this------------------验证3a安全配置 [V200R003C00] # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-user admin service-type http local-user huawei password cipher %$%$-2nU'HfV$O#nY7+j)<:OZf.h%$%$ local-user huawei privilege level 15 local-user huawei ftp-directory flash: local-user huawei service-type ftp # Return ===================================================================
2 V- X1 ?1 C5 i8 o5)验证<AR3>ftp 10.1.1.2-----------------回到AR3路由器上访问AR4上的服务器地址,输入之前在AR4上创建的本地用户名huawei和密码huawei. + ]0 D6 S! p" x* M0 y0 w& e! [- c# Y
Trying 10.1.1.2 ... Press CTRL+K to abort Connected to 10.1.1.2. 220 FTP service ready. User(10.1.1.2:(none)):huawei 331 Password required for huawei. Enter password: 230 User logged in. ===========================================================
. @. V- x9 |. @: a8 p% }* W! ~. U) K, b2 |) q% _6 c# e
[AR3-ftp]get huawei.zip--------------在AR3上获取AR4的服务器配置文件。 2 g: _5 E. Q3 @+ K1 E
Warning: The file huawei.zip already exists. Overwrite it? (y/n)[n]:y 200 Port command okay. 150 Opening ASCII mode data connection for huawei.zip. 226 Transfer complete. FTP: 544 byte(s) received in 0.250 second(s) 2.17Kbyte(s)/sec. ================================================================= 6 X8 F$ i l. M) Y* N/ E% n9 Z: ]: {
5 g- q# S o( N" t- o: p
<AR3>dir-------------------验证是否获取成功! Directory of flash:/ * T6 Q$ l6 v: S8 O- N2 d
Idx Attr Size(Byte) Date Time(LMT) FileName 0 -rw- 544 Mar 02 2016 16:03:21 huawei.zip 1 drw- - Mar 02 2016 15:01:09 dhcp 2 -rw- 121,802 May 26 2014 09:20:58 portalpage.zip 3 -rw- 2,263 Mar 02 2016 15:00:52 statemach.efs 4 -rw- 828,482 May 26 2014 09:20:58 sslvpn.zip 8 G6 P% r0 P( i" E) K" u) A7 y
1,090,732 KB total (784,524 KB free) / @" a: B- F4 H3 _- u: _' w; k
|