ACE. FTP Error

Jaime Soto Valenzuela · ‎07-27-2010

Hi,

I configured FTP LB, but when I try to enter the VIP via FTP or through a Telnet to port 21 I see the following error:

C:\>telnet 10.1.2.65 21

530 Connection refused, unknown IP address.
421 Service not available, closing control connection.

Se ha perdido la conexión con el host.

C:\>ftp 10.1.2.65

Conectado a 10.1.2.65.
530 Connection refused, unknown IP address.
421 Service not available, closing control connection.
Conexión cerrada por el host remoto.

I think the configurations are correct:

rserver host galileo_3_www
ip address 10.4.2.4

inservice

serverfarm host ADMIN1
rserver galileo_2_www
inservice

class-map match-all VIP-Admin1
2 match virtual-address 10.1.2.65 tcp range 23 65535
class-map match-all VIP_Admin1
2 match virtual-address 10.1.2.65 any
class-map match-all VIP_Admin1-FTP
2 match virtual-address 10.1.2.65 tcp range 20 22

policy-map type loadbalance first-match ADMIN1
class class-default
serverfarm ADMIN1

policy-map multi-match POLICY

class VIP_Admin1-FTP

    loadbalance vip inservice
    loadbalance policy ADMIN1
    nat dynamic 1 vlan 2
    inspect ftp
class VIP-Admin1
    loadbalance vip inservice
    loadbalance policy ADMIN1
    nat dynamic 1 vlan 2
    inspect ftp
class VIP_Admin1
    loadbalance vip inservice
    loadbalance policy ADMIN1
    nat dynamic 1 vlan 2

service-policy input POLICY

Regards,

Jaime.

Gilles Dufour · ‎07-28-2010

Should work.

Get a sniffer trace on the server and see what is going on.

Did you try directly to the server ?

Gilles.

Jaime Soto Valenzuela · ‎07-28-2010

Thanks Glen, the problem was the server. I had to enable security policies in the server to accept connections of IP NAT that performs ACE.

Now, it works fine.

Regards,

Jaime