I've setup FTP as show in the configuration examples. Passive FTP works fine but for some reason active FTP breaks.
The client reported that he can authenticate to the FTP server with no problem. However when he issues a FTP command such as LIST the connection just hangs. Eventually he has to abort the connection. 10.24.32.75 is my source NAT address.
200 PORT command successful.
150 Opening ASCII mode data connection for /bin/ls.
425 Can't open data connection.
When I look at the sniff trace between the NAT and server I see the ftp server initiate the ftp-data connection on port 20. But then the ACE receives it and sends a reset back to the ftp server.
Anyone know of commands that can be executed that can show details as to why the connection gets reset by the ACE?
I have a TAC case opened but still waiting for an engineer to respond. Just thought I'd post to see if anyone else has experienced this.
The ACE performs the FTP command inspection process as follows:
•Prepares a dynamic secondary data connection. The channels are allocated in response to a file upload, a file download, or a directory listing event and must be prenegotiated. The port is negotiated through the PORT or PASV commands.
Why do you need native HA: The native HA feature allows two Cisco DCNM
appliances to run as active and standby applications, with their
embedded databases synchronized in real time. Therefore, when the active
DCNM is not functioning, the standby DCNM will...
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...