You can use CCA and set it up in a DMZ under "Configure>Security>Firewall & DMZ". From there you can Add a DMZ service, you'll be asked for the IP address and server type (FTP is in the drop-down list).
Thanks for the responses you've provided today. I asked which version you were using because I believe due to the complexity of your issues regarding the SR520-Ethernet, you would be best served by reaching out to TAC if you haven't already, and open a case to get the answers you're looking for. The TAC support engineers would be your best resource on the phone to help you out on these issues.
From your response then, I assume you are not using CCA to configure the SR520? With that said you'll have to configure Access List to allow the FTP and ICMP traffic. A good reference for that can be found by clicking here. As far as SSH is concerned, instructions to configure that can be found by clicking here. Keep in mind however, that making configuration changes with CCA MAY impact changes you've made with CLI and vice-versa, but it sounds like you would rather stick to CLI. BTW, SSH should be configured for you with CCA by default I believe, but the CLI instructions are here for your reference.
But sorry.. The links you have provided, is how you do "normal/old" ssh, access-list and so on.
SR520 uses Zone Based Firewall - and that is where my lack of knowledge starts.. I can do it the old way with blindfolds on.
I can use CCA to configure the DMZ/FTP thing and other basic things, so the Zone Based Firewall will work, but do I want to configure SSH or FTP/Inside, then the CCA can not do the trick and I have to use CLI - and I do not know how to make changes in the Zone Based Firewall configuration.
Configure DHCP WAN Settings on the RV34x Router
A Wide Area Network (WAN) is a network that covers a broad area. A user or network of users can connect to the Internet through an Internet Service Provider (ISP) who offer...
Configure Static IP WAN Settings on the RV34x Router
A Wide Area Network (WAN) is a network that covers a broad area. A user or network of users can connect to the Internet through an Internet Service Provider (ISP) who ...