ftpfaq_en

21/03/2022 19:09 https://192.168.0.49/common/tools/FTP_FAQ/ftpfaq_en.html?2020.12.04.
18
Background
WebLMT supports MML-based or GUI-based file upload and download.
For example, software, data configuration files, and license files can be downloaded to an NE. Such file operations require an FTP server to have
been installed and configured.
The following is an example of file upload through FTP.

On the WebLMT, enter the FTP server IP address, user name, and password and execute the MML command.
NOTE：
The FTP server IP address is the IP address of the PC where the FTP server is deployed.
The FTP upload and download path is the root directory of the FTP server. For a file download, the file must have been saved in the root
directory of the FTP server.
To specify a path, ensure that the path relative to the root directory of the FTP server is used.
To ensure data transmission security, the FTP server that supports FTPS transmission is recommended. This document describes how to use
FileZilla Server and Windows IIS to deploy an FTP server.
NOTE：
1. Ensure that the FTP server IP address and the NE IP address are in the same network segment.
2. File transfer between an FTP server and an NE is allowed only when the WebLMT is locally logged in.
3. Destination file(directory) name cannot contain Chinese.
Deploying an FTP Server Using FileZilla Server(Recommended)

FileZilla Server is a common open-source FTP server software. It can be deployed on 32-bit and 64-bit Windows 7 or Windows 10 operating systems.
FileZilla Server must be downloaded from the home site of FileZilla Server. An encrypted file transfer through FTPS requires (FTPS by default) t
Support State Firewall be set to No(No) in the MML command SET FTPSCLT on the WebLMT (SET FTPSCLT: ENCRYMODE=Encrypted, SPTSTATEFWL=No). Otherwi
the NE cannot connect to the FTP server. It is recommended that this setting be restored after the FTP file transfer. If SSL is not used, this
configuration can be ignored.
Steps:
1.1 Downloading FileZilla Server Software Package(Mandatory)
1. In the browser address text box, enter https://download.filezilla-project.org/server/FileZilla_Server-0_9_43.exe to downlo

FileZilla Server. There may be compatibility problems with other versions.
1.2 Installing FileZilla Server(Mandatory)
1. Double-click the FileZilla Server software package on the local PC. Then, click I Agree.
2. Select the type for the installation (Standard is selected by default).
https://192.168.0.49/common/tools/FTP_FAQ/ftpfaq_en.html?2020.12.04.18 1/19
21/03/2022 19:09 https://192.168.0.49/common/tools/FTP_FAQ/ftpfaq_en.html?2020.12.04.18
3. Specify the installation directory.
4. Specify the start mode. Choose a start mode from the drop-down list for FileZilla Server, which can be:
1. Install as service, started with Windows (default)
2. Install as service, started manually
3. Do not install as service, start server automatically (not recommended)
If there are no special requirements, the default value is recommended. Then, specify an administration port of FileZilla
which is 14147 by default. This port can be customized as long as it does not conflict with common service ports (for exam
port 80). This port is also needed for configuring FileZilla Server.
5. Specify the start mode of FileZilla Server Interface (FileZilla console). The FileZilla console is used to configure and m
the FTP server. In this step, use the default value.
6. Click Install.The installation automatically starts the FileZilla console.
1.3 Configuring FileZilla Server(Mandatory)
1. The following figure shows the console login page of FileZilla Server. By default, the FileZilla console is connected to t
local computer where FileZilla Server is deployed. If a remote FTP server needs to be managed, enter the IP address to the
server.
It is noteworthy that the port must be the one specified for management during FileZilla Server installation. By default,
administrator password does not need to be entered unless this password is set on the FileZilla console. It is recommended
Always connect to this server be selected so that the console manages the FileZilla service of the local host every time t
console is started. Then, click OK to enter the console page.
2. The following figure shows the home page of the FileZilla Server console.
3. Add an FTP user. Choose Edit > User on the menu bar to display the Users page, click Add and enter the user name, select
password box, and set the password of the user in the dialog box, and click OK to set the home directory of the user.
4. Set a home directory. Click Shared folders. In the displayed page, click Add and then add a directory. The letter H on the
indicates that this is the home directory of FTP Server. After the directory is added, click the directory and specify the
permissions of this folder for FTP user ftpuser. It is recommended that all permissions be selected.
5. after the home directory is configured, click OK to save the configuration.Then, the basic settings that ensure the normal
running of FileZilla Server are complete.
6. Generate the private key and certificate file for the FTP server to support FTPS transmission. This setting is required wh
connection is used. Choose Edit > Settings on the menu bar to display the FileZilla Server Options page, and click FTP ove
SSL/TLS Settings.
Click Generate new certificate. Then, complete the settings as required, specify the certification path, and click Generat
certificate to generate a certificate.
Key size: Choose 2048 bit or 4096 bit. A greater key size makes data transfer more secure, but needs a longer time to gene
the certificate.
2-Digit country code: It is mandatory. It must be a 2-digit country code.
Full state or province: It is optional. It indicates the name of a state or province.
Locality(City): It is optional. It indicates the name of a city.
Organization: It is optional. It indicates the name of an organization.
Organization unit: It is optional. It indicates the name of an organization unit.
Contact E-Mail: It is optional. It indicates an email address of a contact.
Common name (Server address): It is optional. It is a common name.
Save key to this file: It is mandatory. It indicates the path and name of the directory to save the certificate. Ensure th
certificate path is separated from the home directory of the FTP server.
7. Configure a TLS-based encrypted connection for the FTP server.

− Choose Edit > Settings on the menu bar to display the FileZilla Server Options page.
− Click FTP over SSL/TLS Settings, and select Enable FTP over SSL/TLS support (FTPS) and the generated certificate file. I
password is configured when the certificate is generated, enter the password as well.
− Select Allow explicit FTP over TLS (default: yes). If Disallow plain unencrypted FTP is selected, the FTP client is not
to connect to the FTP server in plain text. If it is not selected, the connection can be both in plain text and encrypted
NOTE： For an FTPS file transfer, set Support State Firewall to No(No) in the MML command SET FTPSCLT (SET FTPSCLT:
ENCRYMODE=Encrypted, SPTSTATEFWL=No). Setting this parameter to No(No) is likely to interrupt normal FTP connections betwe
NE and an FTP server. It is good practice to restore the setting after the FTP file operation is complete.
8. When you upload or download files by running MML commands or using GUI on the Web LMT, you need to enter the relative path
refers to the home directory of the FTP user. If you enter an absolute path, the file transfer will fail.
An absolute path is a full path with a drive letter. For example: G:\ftpserver\test\subfolder\brdlog.dat.
The relative path does not contain the drive letter. It refers to the path relative to the home directory of the FTP user.
relative path must be sub directory of the FTP home directory. For example: if G:\ftpserver is set to the FTP home directo
relative path of the G:\ftpserver\test\subfolder\brdlog.dat file is \test\subfolder\brdlog.dat.
1.4 Completing Other Common Settings of FileZilla Server(Optional)
1. Change the port number and the number of threads of the FTP server. Port 21 is the default FTP port number. You are advise
to change the default port number. Increasing the number of threads may increase the transmission rate. Choose Edit > Sett
the menu bar to display the FileZilla Server Options page. On the General settings area, change the port number (21 by def
and usually does not need to be changed) and the number of threads (2 by default and can be changed based on the PC perfor
and 50 is recommended).
2. Choose the local port for data transfer in passive mode for the FTP server. You can set this parameter when you need to sp
the data port used by the FTP server. Choose Edit > Settings on the menu bar to display the FileZilla Server Options page.
Passive mode settings and then click Use custom port range and enter the start and end port numbers. In most cases, the de
settings can be used and the passive mode settings are not needed.
Deploying an FTP Server Using Windows IIS

1. Windows7
2. Windows10
The Windows IIS service supports the FTP server function. In case that a local connection to WebLMT fails and an external access is not availab
the Windows IIS service allows for a rapid configuration of an FTP server. This section describes how to deploy the FTP server using the Window
IIS service.
Steps:
1.1 Enabling FTP of the Windows Operating System(Mandatory)
1. Open the control panel (Start > Control Panel) and click Programs and Features and then click Turn Windows features on or off
2. On Windows Features, choose FTP Server and IIS Management Console.
1.2 Adding an FTP Site(Mandatory)
1. Open the Windows control panel and click System and Security and then click Administrative Tools. Then, open Internet Informa
Services (IIS) Manager.
2. In the displayed window, right-click the root node and choose Add FTP Site... from the shortcut menu.
3. Enter the FTP site name and specify the root directory.
When you upload or download files by running MML commands or using GUI on the Web LMT, you need to enter the relative path,
refers to the home directory of the FTP user. If you enter an absolute path, the file transfer will fail.
An absolute path is a full path with a drive letter. For example: G:\ftpserver\test\subfolder\brdlog.dat.
The relative path does not contain the drive letter. It refers to the path relative to the home directory of the FTP user. Th
relative path must be sub directory of the FTP home directory. For example: if G:\ftpserver is set to the FTP home directory,
relative path of the G:\ftpserver\test\subfolder\brdlog.dat file is \test\subfolder\brdlog.dat.
NOTE:
Choose the IP address bound to the FTP server and set the listening port (21 by default). Then, select Allow SSL under SSL. T
following is a setting note to configure SSL.
− If No SSL is selected, SSL is not used and a connection will be in plain text, inviting security risks.
− If Allow SSL is selected, SSL is supported and the FTP client determines whether to use an SSL connection. SSL certif
is required for this option.
− If Require SSL is selected, the FTP server does not support plain text connections and SSL must be used. SSL certific
is required for this option.
− SSL certificate: If the FTP server supports SSL, an SSL certificate must be specified. If Not Selected is selected, a
certificate is not configured, and SSL connections will be not available. For details, see Configuring SSL Certificates. Plea
refer to this section to add a new certificate for this FTP server. If you use existing certificate, it may cause connection
problem.
NOTE:
1. If All Unassigned is selected, all IP addresses configured on the PC can be used to access the FTP site. If a fixed
address is specified, a reconfiguration is needed upon an IP address change.
2. It is recommended that Start FTP Site automatically be deselected to reduce security risks so that the FTP server d
not start after the PC restarts until manually started in the IIS manager (The operations are as follows: Right-cli
the site name and choose Manage FTP Site and then choose Start).
4. Choose Basic under Authentication. Choose Specified users under Authorization and enter the specified user name or user group
name (Windows user name or user group name. For details, see Configuring an FTP User). Specify the read and write permissions
under Permissions.
5. After the setting is complete, the FTP site named demo will be displayed in Internet Information Services (IIS) Manager.
6. Start the FTP site.
1.3 Performing Advanced FTP Settings(Mandatory)
1. Right-click the demo node and choose Manage FTP Site > Advanced Settings.
2. On the Advanced Settings window, change C o n t r o l C h a n n e l T i m e o u t or D a t a C h a n n e l T i m e o u t . For example, change K e e p P a r

U p l o a d s to True and D a t a C h a n n e l T i m e o u t to 300 (in the unit of second).
1.4 Configuring an FTP User(Mandatory)
1. A new user can be added to an FTP server.Right-click Computer and choose Manage from the shortcut menu. Expand Local Users an
Groups and right-click Users and choose New User… from the shortcut menu.
2. In the displayed window, enter the user name and password and click Create to create a user.
NOTE:
1. The password must meet the Windows password policy. The default password policy is as follows:
1) : The password must contain at least eight characters.
2) : The password complexity conformity requires at least three of the following types of characters:
→ Capital letters (A through Z)
→ Lowercase letters (a through z)
→ Digits (0 through 9)
→ Special characters (such as !, $, #, and %).
2. This account is a Windows system account and can access the Windows operating system. The user name and password mu
appropriately kept and a more complex password helps reduce security risks.
3. Click demo and double-click FTP Authorization Rules on the right pane.
4. A rule can be added or edited and a new user that is allowed to use the FTP site can be specified.
1.5 Generating an SSL Certificate(Optional)
1. An FTP server requires a certificate to support SSL connections.
2. On IIS Manager, double-click Server Certificates and then click Create Self-Signed Certificate under Actions.
3. Specify the name for the certificate.
4. On IIS Manager, double-click FTP SSL Settings.
5. Specify an SSL certificate and click Apply on the right.
3. Windows Server 2008

4. Windows Server 2012
Huawei Proprietary and Confidential

Copyright © Huawei Technologies Co., Ltd

ftpfaq_en

Uploaded by

Document Informationclick to expand document information

Document Informationclick to expand document information

Copyright:

Available Formats

ftpfaq_en

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

ftpfaq_en

Uploaded by

Copyright:

Available Formats

21/03/2022 19:09 https://192.168.0.49/common/tools/FTP_FAQ/ftpfaq_en.html?2020.12.04.

The following is an example of file upload through FTP.

3. Destination file(directory) name cannot contain Chinese.

Deploying an FTP Server Using FileZilla Server(Recommended)

1.1 Downloading FileZilla Server Software Package(Mandatory)

1. In the browser address text box, enter https://download.filezilla-project.org/server/FileZilla_Server-0_9_43.exe to downlo

1.2 Installing FileZilla Server(Mandatory)

2. Select the type for the installation (Standard is selected by default).

3. Specify the installation directory.

6. Click Install.The installation automatically starts the FileZilla console.

1.3 Configuring FileZilla Server(Mandatory)

7. Configure a TLS-based encrypted connection for the FTP server.

1.4 Completing Other Common Settings of FileZilla Server(Optional)

Deploying an FTP Server Using Windows IIS

1.1 Enabling FTP of the Windows Operating System(Mandatory)

2. On Windows Features, choose FTP Server and IIS Management Console.

1.2 Adding an FTP Site(Mandatory)

6. Start the FTP site.

1.3 Performing Advanced FTP Settings(Mandatory)

2. On the Advanced Settings window, change C o n t r o l C h a n n e l T i m e o u t or D a t a C h a n n e l T i m e o u t . For example, change K e e p P a r

1.4 Configuring an FTP User(Mandatory)

1.5 Generating an SSL Certificate(Optional)

1. An FTP server requires a certificate to support SSL connections.

3. Specify the name for the certificate.

4. On IIS Manager, double-click FTP SSL Settings.

5. Specify an SSL certificate and click Apply on the right.

3. Windows Server 2008

Huawei Proprietary and Confidential

You might also like