THOMSON SpeedTouch 620, Руководство оператора

Страница: 107 / 216

Chapter 8
SpeedTouch™ Remote Access
E-DOC-CTC-20051017-0155 v1.0
97
8.5 Remote FTP Access
Introduction
The SpeedTouch™ FTP interface is provided by the SpeedTouch™ FTP server.
Access to this server and hence the FTP interface is controlled by the SpeedTouch™
FTP service. By default, the FTP service is configured to let the SpeedTouch™ FTP
server accept FTP requests from LAN side only. In addition the SpeedTouch™
provides FTP over SSH.
FTP over SSH provides a more secure way of accessing the SpeedTouch™ FTP
service and should therefore be used.
Default HTTP
service configuration
Use the following CLI command to see the default FTP service configuration.
Configuration via
CLI commands
To have FTP access via WAN, additional configuration of the SpeedTouch™ FTP
service is needed.
Use the following CLI command to allow WAN FTP access to the SpeedTouch™ via
CLI commands.
Use the following CLI command to look at the FTP service configuration, we notice
that the
wan group is added to the
Interface Access List
:
The added rules will allow any user on the WAN to open an FTP session to the
SpeedTouch™ and access the file system after authentication.
=> :service system list name=FTP expand=enabled
Idx Name Protocol SrcPort DstPort Group State
--------------------------------------------------------------------
1 FTP tcp 21 enabled
Description................ File Transfer
Properties................. server
Managed parameters......... state port acl map log
Interface Access List...... lan
Ip Access List............. any
NAT Port List.............. 21
=> :service system ifadd name=FTP group=wan
=> :service system list name=FTP expand=enabled
Idx Name Protocol SrcPort DstPort Group State
-----------------------------------------------------------------------
1 FTP tcp 21 enabled
Description................ File Transfer
Properties................. server
Managed parameters......... state port acl map log
Interface Access List ...... lan
wan
Ip Access List............. any
NAT Port List.............. 21