Alternaive FTP ports

[AJ1982]

Hi,

Our cisco PIX firewall connection allows persons to log into the FTP servers inside our network (connections from outside) on ports 21 and 1021 (two servers)

However, when attempting to do a DIR , port 1021 simply hangs yet port 21 works.

Have done a fixup on both port numbers, traffic is obviously ok cos I can get the login box etc on both servers.

What obvious thing have I missed this time?

Ta

Fat

===

Fatman Superstar (Andrew James)

CCNA,
(CCNA Cisco Academy Instructor Trained)

 

[rshendrix]

Fat,

You ever find out anything on this issue?

I am having the exact same problem. I have ftp setup on 3 different ports 21, 921, & 9921. Using port 21 works great, however, both port 921 & 9921 work for some outside users but not all. Most importantly it does not work for the one user we need it to work for. It does the same thing you describe, it just hangs and then times out.

Sure hope you have some good news for me!

 

[AJ1982]

Hi,

Nope,

Good to know im not crazy though!!!

Ta

Fat

===

Fatman Superstar (Andrew James)

CCNA,
(CCNA Cisco Academy Instructor Trained)

 

[computerhighguy]

Hi guys. The PIX can handle FTP on different ports, but the client needs to use PASV (passive) mode to do this. I have on on port 30. Cisco recommends that you stay in 1024 or less range. You will need the

fixup protocol ftp 30

command for this to work. If you are using IE, there is an intereting quark you should be aware of. I personally like to send my clients FTP URLs with the username and password embedded for them.

Here is an example:


ftp://usernameassword@youripaddressherortnumber

ftp://computerhighguy:mypass@10.10.10.10:30

But you should be aware that that IE is an active FTP client by default.

To change the Internet Explorer FTP client mode:

Start Internet Explorer.
Click Internet Options on the Tools menu.
Click the Advanced tab.
Click Enable Folder View for FTP sites.

Internet Explorer is an Active mode FTP client when you select the Enable Folder View for FTP sites option (no matter what the Use Passive FTP Option says).

Internet Explorer can be enabled for a passive mode FTP client when you clear this option.

You can get more info on this here.

http://www.jsiinc.com/SUBJ/tip4700/rh4753.htm