fixup, multi ftp ports on nat

[leoMysta]

I want to have multi ftp sites on my IIS server and would like multiple ftp port access.

I have configured the pix515 with a fixup range from 21 to 22, so different users can ftp on 21 and 22, and applied it to my access list for my server which is translated from internal to and external IP.

I can access port 21 and 22 internally and it works fine but not externally ... am I doing somehting wrong????

 

[haknwak]

see

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/df.htm#42126

for usage of fixup -
there are examples of multiple ports for FTP.

You do have necessary static mappings and ACLs in place, right?

"If you lived here, you'd be home by now!"

George Carlin

 

[yizhar]

HI.

TCP port 22 is reserved for SSH traffic.
While it should be possible to use it for other task like FTP, it is better practice to use other high ports instead.

Bye


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[leoMysta]

Thanx, haknwak .... link much appreciated & helpful.