|
需求: 配置,一台AR3路由器和一台AR4路由器, 图中右边的AR4为ftp服务器,左边为需要升级系统的路由器。
在华为设备上实现FTP服务的模板和配置手册
4 K1 c0 C# |$ T5 ? {* U! l. d8 c& n" C5 J D& W
1)网络可达性测试:. m) n8 @- s* R# K5 V& g
[AR3]PING 10.1.1.2 PING 10.1.1.2: 56 data bytes, press CTRL_C to break Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=255 time=30 ms Reply from 10.1.1.2: bytes=56 Sequence=2 ttl=255 time=10 ms Reply from 10.1.1.2: bytes=56 Sequence=3 ttl=255 time=20 ms Reply from 10.1.1.2: bytes=56 Sequence=4 ttl=255 time=20 ms Reply from 10.1.1.2: bytes=56 Sequence=5 ttl=255 time=10 ms
& j2 C9 S# F O9 }1 x/ z5 m/ {2 z" ]--- 10.1.1.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 10/18/30 ms ===============================================================
/ e; v; M$ @' b. Z+ E# ` I2)前期工作[AR3]dir--------------------验证AR3的文件夹目录 Directory of flash:/ . I" }9 V0 J# D6 f- j
Idx Attr Size(Byte) Date Time(LMT) FileName 0 drw- - Mar 02 2016 15:01:09 dhcp 1 -rw- 121,802 May 26 2014 09:20:58 portalpage.zip 2 -rw- 2,263 Mar 02 2016 15:00:52 statemach.efs 3 -rw- 828,482 May 26 2014 09:20:58 sslvpn.zip
% I* ^, X/ Q) z l5 a A/ d8 G1,090,732 KB total (784,528 KB free) ---确保可用空间充足 4 V b o1 k. Y2 q4 X( m
[AR4]dir-------------------验证AR4的文件夹目录 " s! z$ G+ a0 e: \0 G1 q" T) G; |$ i
Directory of flash:/ # d6 i; H0 p1 ?4 S5 f
Idx Attr Size(Byte) Date Time(LMT) FileName 0 drw- - Mar 02 2016 15:01:07 dhcp 1 -rw- 121,802 May 26 2014 09:20:58 portalpage.zip 2 -rw- 2,263 Mar 02 2016 15:00:50 statemach.efs 3 -rw- 828,482 May 26 2014 09:20:58 sslvpn.zip 4 X/ {$ H& k {* \9 Q
1,090,732 KB total (784,528 KB free) . b, i$ X G# i; \
[AR4]save AR4.zip-------------在AR4上保存一个配置文件,文件命名为AR4.zip 5 x0 }9 w4 I' l& v, o
Are you sure to save the configuration to AR4.zip? (y/n)[n]:y It will take several minutes to save configuration file, please wait....... Configuration file had been saved successfully Note: The configuration file will take effect after being activated =================================================================== " `9 E. C8 `2 W! E; O
[AR4]dir---------------------验证配置文件AR4.zip文件存在于目录中。 Directory of flash:/
+ M( W* Z+ h6 I4 D% Z. S% ?Idx Attr Size(Byte) Date Time(LMT) FileName 0 -rw- 544 Mar 02 2016 15:20:04 AR4.zip 1 drw- - Mar 02 2016 15:01:07 dhcp 2 -rw- 121,802 May 26 2014 09:20:58 portalpage.zip 3 -rw- 2,263 Mar 02 2016 15:00:50 statemach.efs 4 -rw- 828,482 May 26 2014 09:20:58 sslvpn.zip 5 -rw- 249 Mar 02 2016 15:19:43 private-data.txt 6 -rw- 544 Mar 02 2016 15:19:42 vrpcfg.zip * S/ U' r7 e1 I* _
1,090,732 KB total (784,504 KB free) * S/ n. Z. L' G; W( a2 L- ?' ~
4)实施
! W' C% O" c: T[AR4]ftp server enable----------------------启用ftp服务器 Info: Succeeded in starting the FTP server [AR4]aaa---------------------启用授权,验证和账户 安全许可 [AR4-aaa]local-user huawei password cipher huawei privilege level 15 ftp-directory flash: Info: Add a new user. + S- @8 ` e- S1 I' [, T
创建本地用户名huawei,密码采用暗码huawei,用户等级15,可访问目录为根目录。 2 K( G5 {2 b, r+ M6 a! T: q# d' e4 L u( d
[AR4-aaa]local-user huawei service-type ftp---------本地用户huawei的服务器协议类型为ftp. |
* ^2 T5 }" i" T. @
1 U$ _* L; p5 b6 Y& [+ [" c# @+ g+ v, c9 N& Q- P) k% j$ z
[AR4-aaa]display this------------------验证3a安全配置 [V200R003C00] # aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$ local-user admin service-type http local-user huawei password cipher %$%$-2nU'HfV$O#nY7+j)<:OZf.h%$%$ local-user huawei privilege level 15 local-user huawei ftp-directory flash: local-user huawei service-type ftp # Return ===================================================================
2 S m6 e) p- U( f1 T+ q5)验证<AR3>ftp 10.1.1.2-----------------回到AR3路由器上访问AR4上的服务器地址,输入之前在AR4上创建的本地用户名huawei和密码huawei.
$ J0 ~# T: ^7 }$ g' H8 nTrying 10.1.1.2 ... Press CTRL+K to abort Connected to 10.1.1.2. 220 FTP service ready. User(10.1.1.2:(none)):huawei 331 Password required for huawei. Enter password: 230 User logged in. =========================================================== 8 q/ N9 d r2 ~2 ~8 v
5 H& q3 j5 j6 U' ~$ h( C# @
[AR3-ftp]get huawei.zip--------------在AR3上获取AR4的服务器配置文件。
, G7 E$ @0 a) E- ]- KWarning: The file huawei.zip already exists. Overwrite it? (y/n)[n]:y 200 Port command okay. 150 Opening ASCII mode data connection for huawei.zip. 226 Transfer complete. FTP: 544 byte(s) received in 0.250 second(s) 2.17Kbyte(s)/sec. =================================================================
/ A9 |8 K$ ~. `5 }3 _( |$ l: e1 n9 ~: ^9 G
<AR3>dir-------------------验证是否获取成功! Directory of flash:/ % @# d( c( b7 j/ K
Idx Attr Size(Byte) Date Time(LMT) FileName 0 -rw- 544 Mar 02 2016 16:03:21 huawei.zip 1 drw- - Mar 02 2016 15:01:09 dhcp 2 -rw- 121,802 May 26 2014 09:20:58 portalpage.zip 3 -rw- 2,263 Mar 02 2016 15:00:52 statemach.efs 4 -rw- 828,482 May 26 2014 09:20:58 sslvpn.zip
2 |% M* G' J& z( G2 P5 ^- N1,090,732 KB total (784,524 KB free) 1 N4 K8 U4 O% j: Y
|