The ftp ipv6 server-source command configures the specified loopback address as the source address of the IPv6 FTP server.
The undo ftp ipv6 server-sourcecommand cancels the specified source IPv6 address of a FTP server.
By default, the source IPv6 address is ::.
ftp ipv6 server-source -a source-ipv6-address [ vpn-instance vpn-instance ]
undo ftp ipv6 server-source
| Parameter | Description | Value |
|---|---|---|
-a source-ipv6-address |
Specifies the source IPv6 address for an FTP server. |
The value is a 32-digit hexadecimal number, in the format of X:X:X:X:X:X:X:X. |
vpn-instance vpn-instance |
Specifies the name of a VPN instance for an FTP server. |
The value is a string of 1 to 31 case-sensitive characters, spaces and question marks are not supported. In addition, the VPN instance name must not be _public_. When double quotation marks are used around the string, spaces are allowed in the string |
Usage Scenario
An FTP server receives login requests from all ipv6 addresses, leading to low system security. To improve system security, you can run the ftp ipv6 server-source command to specify a source IPv6 address for the FTP server. Then only authorized users can log in to the FTP server.
Prerequisites
A VPN instance has been created before you run the command. Otherwise, the command cannot be executed.
Configuration Impact
If a source IPv6 address is specified for an FTP server, the server allows FTP users to log in through the specified source IPv6 address only, and denies access of FTP users who attempt to log in through other IPv6 addresses. This configuration applies to the FTP users who attempt to log in to the FTP server, not to the FTP users who have logged in to the server.
Precautions
If a source IPv6 address is specified for an FTP server, FTP users must be able to communicate with the specified source IPv6 address at Layer 3 to ensure that authorized FTP users can log in to the FTP server.
If the interface to which the specified source IPv6 address belongs is bound to a VPN instance, the -vpn-instance parameter must be specified when you specify the IPv6 address for the client.
# Set the source IPv6 address of the FTP server to 1::1.
<sysname> system-view [sysname] ftp ipv6 server-source -a 1::1 Warning: To make the server source configuration take effect, the FTP server will be restarted. Continue? [Y/N]: y Info: Succeeded in setting the source interface of the FTP server to LoopBack0. Info: Succeeded in starting the FTP server.