This is a question about the functions supported by ZD1200. (FTP, password change log, Management Ac

[msk]

Hello. I am writing this article because of a request from a customer using zd-1200 (firmware: 10.4.1.0. build 214).

1. The customer confirmed that FTP was enabled on the zd-1200 device while conducting a network security audit. And for security reasons,
1) Can FTP be disabled?
2) If FTP is a necessary function for ZD-1200 operation, can it be turned on and off at will?
3) Does the process of enabling/disabling FTP affect the wireless Internet service via APC?
4) Do I need to add settings when disabling and re-enabling FTP?

2. There are several user accounts and administrator accounts used to manage the zd-1200 device. Is there a way to check the password change history of each account? I couldn't find it in the user guide menu and cli reference document.

3. Is there another way to control access to the web interface of the zd1200 device other than Management Access Control? Please check.

Thank you.

[pranav · Accepted solution]

Hello Msk,

Yes, FTP can be disabled on the ZD-1200 through the command-line interface (CLI). The command to disable the FTP server is:

login to the ZD cli go to enable mode --> go to config mode--> enter system mode--> enter no ftp (to disable) and ftp (to enable ftp)

ruckus> en
ruckus# config
You have all rights in this mode.

ruckus(config)# system
ruckus(config-sys)# no ftp
The FTP access has been disabled.
ruckus(config-sys)# ftp
The FTP access has been enabled.
ruckus(config-sys)# exit
Your changes have been saved.
ruckus(config)#

FTP is necessary for communication between the ZoneDirector (ZD) and its managed access points (APs), such as for firmware upgrades and certain management functions. Disabling FTP can disrupt these processes. 

Regards,

Pranav Anand