Forum Discussion

sysadmin_209494's avatar
sysadmin_209494
Icon for Nimbostratus rankNimbostratus
Jul 06, 2015

Passive FTP Port Range

We have an FTP application that is using Port 9021 for the incoming FTP Port. Once this is established with the backend FTP Application, the application then opens up a random FTP Passive Port from ...
application delivery
design
LTM
eskindir_27991's avatar
eskindir_27991
Icon for Nimbostratus rankNimbostratus
Sep 16, 2015

The below should work for both FTP or FTPS. If your server does not support Active transfer mode you can ignore the SNAT configuration section. If you have only one server behind the F5 you may not need the source address based configuration. Finally as the virtual server is listening in all ports you may want to add irule to drop packets destined to ports that your FTP server is not listening to both control and the passive data range.

 

https://support.f5.com/kb/en-us/solutions/public/9000/300/sol9347.html

 

syedimam_147051's avatar
syedimam_147051
Icon for Nimbostratus rankNimbostratus
Feb 27, 2016
Can you please advise if it works? I have same problem and it works with TCP profile but failed after receiving PASV entrance from server.