This may be a little lengthy but hopefully someone can point me in the right direction. Scenario: I am located at a facility that has a point to point frame relay line into a customer site with a FTP Server that I need access to. I actually target a registered address that is then natted to the customer's ftp server at my 2524 that is onsite at the customer location. That router is currently running version c2500-is-l.121-15. The customer has requested that we use the non standard port 2021 for all ftp's targeting their server. I have configured the 2524 with the ip nat service list 10 ftp tcp port 2021, and created an acl 10 permit statement for the customer's actual internal IP address configured on their ftp server. Connectivity to the Server isn't the issue..I can actually log onto the ftp server, enter pasv mode and as soon as I issue a stor command the connection with the Server times out. I have also ensured that all nat translations are happening. In my firewall here I see the correct source and destination nat'd addresses. I'm thinking that my 2524 that is onsite at the customers location is performing the nat translation but appears to be ignoring the payload of the ftp packets. Does anyone have any advice?
YOu enabled the NAT router to check the payload of the FTP packets coming in at port 2021. using the "ip nat service" command. But the NAT router will stop checking ftp packets, which are control packets (when you issue commands) which are still using port 21.
So if the control connections are still running on 21, while data is running over 20..... you should be configuring two commands as follows.
thanks for the quick response, I will give it a try. Also, the acl that I configured that the ip nat service command references.....should that acl reflect the actual customer internal address of the ftp server or should I configure it so that the acl reflects the registered address that we are targeting to get to the ftp server? Thanks again.
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...