Juniper JUNOSE 11.3, Руководство по настройке

Страница: 327 / 632

2.
Configure user authentication methods.
3.
Configure the vty lines to use the host access lists and user authentication methods.
You can specify authentication by a RADIUS server or by password checking. If you choose
no authentication service, any client can access the FTP server. For information about
authentication on vty lines, see “Managing the System” on page 239.
Configuration Tasks
FTP is disabled by default. You must enable the FTP server with the ftp-server enable
command before the system allows FTP clients to connect.
ftp-server enable
•
Use to enable the FTP server and to monitor the FTP port for attempts to connect to
the FTP server.
•
You can enable the FTP server on the default virtual router only.
•
Example
host1(config)# ftp-server enable
•
Use the no version to terminate current FTP sessions and to disable the FTP server.
•
See ftp-server enable.
Configuration Example
Figure 23 on page 297 shows the scenario for this configuration example.
Figure 23: FTP Configuration Example
In this example, two FTP lines are required for administrators on the data center subnet,
and two more lines are required for users on the POP subnet. The system verifies
passwords of administrators on the data center subnet through either a RADIUS server
or through simple line authentication if the RADIUS server is unreachable. However, the
system verifies passwords of users on the POP subnet only through the RADIUS server.
The following example shows all steps for configuring this scenario, from specifying a
RADIUS server to enabling the FTP line:
1.
Configure the RADIUS server.
host1(config)# radius authentication server 10.6.131.51
host1(config-radius)# key abc123
host1(config-radius)# udp-port 1645
297 Copyright © 2010, Juniper Networks, Inc.
Chapter 5: Managing the System