For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Harry1's avatar
Harry1
Icon for Nimbostratus rankNimbostratus
Oct 04, 2017

FTPS is not working

Hi ,

 

I followed "ftps-offload-via-irules" article for FTPS configuration but i am getting "directory listing error". i can see lots of article in Devcentral but answer is not posted any of the question/discussion.

 

8 Replies

  • Harry1's avatar
    Harry1
    Icon for Nimbostratus rankNimbostratus

    if someone will revert on this, will appreciate . i have to do this configuration .

     

  • Hey Harry,

     

    could you run a tcpdump from client to server and post the result here ? In the same time open your FTP client (for example Winscp) and reproduce the issue.

     

    example: tcpdump -nni 0.0:nnnp host client_IP

     

    Thanks

     

  • Are you sure that the VS IP is 172.16.0.110 ? because I can see that the client is connecting to 172.16.0.109 not 172.16.0.110...

     

    Also could you confirm that 172.16.0.245 is the self ip ?

     

    Thanks

     

  • Harry1's avatar
    Harry1
    Icon for Nimbostratus rankNimbostratus

    yes 172.16.0.245 is the self ip and 172.16.0.110 is the VIP . as per the article I found on devcentral"ftps-offload-via-irules"i have created three VS and three iRULEs. I am also attaching new tcpdump in pcap format

     

  • Harry1's avatar
    Harry1
    Icon for Nimbostratus rankNimbostratus

    I can attach one more details tcpdump in pcap format. could you please let me know how can I upload PCAP because I cant find any option here

     

  • Harry1's avatar
    Harry1
    Icon for Nimbostratus rankNimbostratus

    Hi JTI,

     

    could you please let me know your mail id so that I can send you the packet capture.

     

  • Harry1's avatar
    Harry1
    Icon for Nimbostratus rankNimbostratus

    ssl offload for FTP VS didn't work but pass-through FTPS is working and somehow I configured it with the help of K9364 article.