H3C S5500-SI Series, Руководство по эксплуатации

Страница: 1024 / 1217

3-2
When the device serves as the TFTP client, you need to perform the following configuration:
Table 3-1 Configuration when the device serves as the TFTP client
Device Configuration Remarks
Device (TFTP client)
z
Configure the IP address and routing function, and
ensure that the route between the device and the
TFTP server is available.
z
Use the tftp command to establish a connection to
the remote TFTP server to upload/download files
to/from the TFTP server
—
PC (TFTP server)
Enable TFTP server on the PC, and configure the TFTP
working directory.
—
Configuring the TFTP Client
When a device acts as a TFTP client, you can upload a file on the device to a TFTP server and
download a file from the TFTP server to the local device. You can use either of the following ways to
download a file:
z
Normal download: The device writes the obtained file to the storage medium directly. In this way, if
you use a filename that exists in the directory, the original system file will be overwritten and if file
download fails (for example, due to network disconnection), the device cannot start up normally
because the original system file has been deleted.
z
Secure download: The device saves the obtained file to its memory and does not write it to the
storage medium until the whole file is obtained. In this way, if file download fails (for example, due
to network disconnection), the device can still start up because the original system file is not
overwritten. This mode is more secure but consumes more memory.
You are recommended to use the secure mode or, if you use the normal mode, specify a filename not
existing in the current directory as the target filename when downloading the startup file or the startup
configuration file.
Source address binding means to configure an IP address on a stable interface such as a loopback
interface, and then use this IP address as the source IP address of a TFTP connection. The source
address binding function simplifies the configuration of ACL rules and security policies. You just need to
specify the source or destination address argument in an ACL rule as this address to filter inbound and
outbound packets on the device, ignoring the difference between interface IP addresses as well as the
affect of interface statuses. You can configure the source address by configuring the source interface or
source IP address. The primary IP address configured on the source interface is the source address of
the transmitted packets. The source address of the transmitted packets is selected following these
rules:
z
If no source address of the TFTP client is specified, a device uses the IP address of the interface
determined by the matched route as the source IP address to communicate with a TFTP server.
z
If the source address is specified with the tftp client source or tftp command, this source address
is adopted.
z
If you use the tftp client source command and the tftp command to specify a source address
respectively, the source address configured with the tftp command is used to communicate with a
TFTP server.
The source address specified with the tftp client source command is valid for all TFTP connections
and the source address specified with the tftp command is valid only for the current tftp connection.