ACE. FTP Error

[Jaime Soto Valenzuela]

Hi,

I configured FTP LB, but when I try to enter the VIP via FTP or through a Telnet to port 21 I see the following error:

C:\>telnet 10.1.2.65 21

530 Connection refused, unknown IP address.
421 Service not available, closing control connection.

Se ha perdido la conexión con el host.


C:\>ftp 10.1.2.65

Conectado a 10.1.2.65.
530 Connection refused, unknown IP address.
421 Service not available, closing control connection.
Conexión cerrada por el host remoto.

I think the configurations are correct:

rserver host galileo_3_www
  ip address 10.4.2.4

  inservice

serverfarm host ADMIN1
  rserver galileo_2_www
    inservice

class-map match-all VIP-Admin1
  2 match virtual-address 10.1.2.65 tcp range 23 65535
class-map match-all VIP_Admin1
  2 match virtual-address 10.1.2.65 any
class-map match-all VIP_Admin1-FTP
  2 match virtual-address 10.1.2.65 tcp range 20 22

policy-map type loadbalance first-match ADMIN1
  class class-default
    serverfarm ADMIN1

policy-map multi-match POLICY

class VIP_Admin1-FTP

    loadbalance vip inservice
    loadbalance policy ADMIN1
    nat dynamic 1 vlan 2
    inspect ftp
  class VIP-Admin1
    loadbalance vip inservice
    loadbalance policy ADMIN1
    nat dynamic 1 vlan 2
    inspect ftp
  class VIP_Admin1
    loadbalance vip inservice
    loadbalance policy ADMIN1
    nat dynamic 1 vlan 2

service-policy input POLICY

Regards,

Jaime.

[Gilles Dufour]

Should work.

Get a sniffer trace on the server and see what is going on.

Did you try directly to the server ?

Gilles.

[Jaime Soto Valenzuela]

Thanks Glen, the problem was the server. I had to enable security policies in the server to accept connections of IP NAT that performs ACE.

Now, it works fine.

Regards,

Jaime