Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

My IOS doesn't support "ip inspect"

I have (C1700-Y-M), Version 12.4(16) and am unable to do:

conf term

ip inspect alert-off

ip inspect name ftpfilter ftp timeout 30

int fast 0.2

ip inspect ftpfilter in

IOS complains that is does know about "ip inspect". I've looked at the Feature Navigator and my IOS is supposed to support this featureset.

Can someone please help?

Thanks, Ryan

New Member

Re: My IOS doesn't support "ip inspect"

Okay, I figured out what I was doing and now I understand that I really need to look at my specific image: c1700-y-mz.124-16. This image does NOT support "ip inspect".

It seems odd that this images only has the "IP" feature set but requires 48/16 while my 2621 running c2600-io3-mz.123-1a includes "IP/FW/IDS" and only requires 32/8.

My 1721 only has 48/32 so I am unable to go with c1700-advipservicesk9-mz.12.4-16 which requires 96/32 but seems like it would support inspection.

*** Perhaps there's another way to accomplish what I need to do. I simply need to allow FTP access to an internal IP address. The way I've dones this in the pass is with the "ip inspect name ftpfilter ftp timeout 30" command and then do "ip inspect ftpfilter in" on my public facing interface.

*** Is there another way to accomplish this with just the IP feature set?

Thanks, Ryan