I am having some difficulty getting ftp transfers working the following scenario:
Computer sitting behind an 877 (that allows ports 20 and 21) on the wan connecting to an ip address on the wan interface of an ASA, which redirects to a Windows 2003 IIS FTP site on the LAN. There is no explicit natting on the 877 - just acls allowing ftp and ftp-data.
I can connect to the ftp site and authenticate - but when I try to list or upload data I get connection timeouts.
I realise that in most implementations extra ports need to be opened for static natting - as I'm not using nat on the WAN side what can I do to eliminate my issue?
Appreciate the help and advice.
Unfortunately too much of the config has been wiped off clean. I cannot really see what is wrong. Please just replace your public IPs alone with some imaginary ones when attaching configs and remove the passwords. Leave the private IPs as it is as they do not make a difference. Please do this and attach the config again.
But as i said in my previous post, try modifying the ACL on the 877 to allow all TCP traffic and also using Active FTP too if possible.