For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Old-Greg-MD's avatar
Old-Greg-MD
Icon for Nimbostratus rankNimbostratus
Mar 25, 2016

Age old passive FTP questions

Just realized I posted this in discussions vs questions. Re-posting   This has probably been beaten down enough at this point, but I can't seem to find the answer anywhere. Here is the setup:   ...
application delivery
LTM
passive ftp
awilhelm's avatar
awilhelm
Icon for Employee rankEmployee
Mar 29, 2016

Starting in 11.5.0, there is an iRule command, FTP::port, which allows you to limit passive FTP port selection to a specified range.

 

You may need to specify a port range with greater than just ten ports - I would recommend at least several times the number of TMMs on your system. Unless you have near-fully populated VIPRION 4800, 100 ports should be fine. You can experiment, but you should have at least the same number of ports as the number of TMMs on your system.

 

You may also specify a smaller number of ports and disable CMP for that virtual server, but doing so is not recommended as it can impact performance and limit capacity.