Problems using FTP through a 2811

[drew1701d]

Hi, we have a Cisco 2811 series router and my clients cannot transfer files via FTP, thought I had the access list setup correctly, can anyone provide guidance? Think I may need to open up inbound to allow data to transfer. We can connect via FTP, but are unable to get a directory listing, so there must be another piece to the puzzle I'm missing. heres the line from the inside access list:
access-list 103 permit tcp 192.168.0.0 0.0.0.255 any eq ftp

do i need to add a line to the outside access list so data can flow in?

TIA!

 

[KiscoKid]

Sounds like you need to permit the FTP data channel as well:

ccess-list 103 permit tcp 192.168.0.0 0.0.0.255 any eq 20

 

[drew1701d]

KiscoKid, close but no cigar, do i need to add a passive entry for the outside access list to allow incoming data channels?

 

[KiscoKid]

How you configure FTP via access control on a router depends on 2 things:

1. The location of the FTP server and your FTP clients (LAN or Internet)
2. The kind of FTP server (passive or active)


If you can answer the above 2 questions, I can probably advise further.

 

[drew1701d]

There are no local FTP Servers, the client workstations on the LAN are trying to access external FTP servers on the internet to retrieve binary files on a regular basis. The 2811 is configured to use its built-in firewall capabilites.
I added the following line on the outside access list: access-list 104 permit tcp any eq ftp-data any gt 1024 realizing that I needed to allow the full circle since a passive FTP connection is being established.
Now command line access to FTP sites works fine after adding the above line, but going through the web browser(Firefox or IE) still does not work.