Forum Discussion

swathi_sankabat's avatar
swathi_sankabat
Icon for Nimbostratus rankNimbostratus
May 09, 2018

FTPS VIP creation

Hello All,

 

I need a detailed information of how to create VIP for FTPS communication for two backend servers in my F5 device. Which ports do I need to allow for this passive FTP communication in F5 and Firewall. How can I know on which ports FTPS passive communication is happening from server or client end. Please explain me about this passive FTP communication and how it works.

 

Thanks in Advance

 

BIG-IP
security
  • Domai's avatar
    Domai
    Icon for Altostratus rankAltostratus
    May 09, 2018

    For the passive FTP, the ports are actually configured on the server. Lets say you allocate 3001 - 3005 for passive FTP communication then when you create a VIP you need to assign that port range. Make sure your firewall also allows those ports. Firewall rule would look like

     

    ANY---->(Allow port 3001-3005,21)---->VIP

     

    Passive FTP is where the data channel is opened by the server and communicated to the client asking the client to come and connect to it using the ports that it opened to get the data.

     

  • Domai's avatar
    Domai
    Icon for Altostratus rankAltostratus
    May 09, 2018

    Ok FTP and FTPS are 2 diff things. Looks like you are trying to set up FTPS. Are you using source address as persistence?