ftp secure-server enable

Function

The ftp secure-server enable command enables the FTPS server function on a device to allow FTP users to securely log in to the device.

The undo ftp secure-server command disables the FTPS server function to prevent FTP user login.

By default, the FTPS server function is disabled.

Format

ftp [ ipv6 ] secure-server enable

undo ftp [ ipv6 ] secure-server

Parameters

Parameter	Description	Value
ipv6	Indicates the IPv6 FTPS server function.	-

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

An FTP server has been configured with an SSL policy to provide SSL-based FTP services. Before using FTPS services, run the ftp secure-server enable command to enable the FTPS server function. You can use an FTP client to log in to a device enabled with the FTPS server function to securely operate files transmitted between the client and server.

Prerequisites

The following configurations have been complete:

Run the ssl policy command in the system view to create an SSL policy and displays the SSL policy view.
Run the certificate load command in the SSL policy view to load a digital certificate or a certificate chain.
Run the ftp secure-server ssl-policy command in the system view to configure an SSL policy for the FTP server.
Run the ftp secure-server enable command in the system view to enable the FTPS server function.

Configuration Impact

After the FTPS server function is enabled, users can log in to the FTPS server to manage files only after being authenticated.

After the FTPS server function is disabled, no users can log in to the FTP server. FTP users that have been logged in to the FTP server cannot perform any operation except logout.

Precautions

Enabling the FTPS server function triggers an SSL handshake. Note the following points in the SSL handshake process:

If the server has a digital certificate, the SSL handshake succeeds, and the FTPS service becomes available.
If the server does not have a digital certificate, the SSL handshake causes the server to apply for a digital certificate. Certificate application takes a comparatively long time. During this period, the SSL handshake fails, and the FTPS service is unavailable.

In this situation, run the ftp secure-server enable command repeatedly until the FTPS server function is successfully enabled.

Example

# Enable the FTPS server function.

<sysname> system-view
[sysname] ftp secure-server enable