topic Re: CSS and non standard ftp port in Application Networking https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335146#M5507 <HTML><HEAD></HEAD><BODY><P>You'll need to move the FTP server to a standard port for now. See CSCeb22950.</P></BODY></HTML> Thu, 09 Sep 2004 05:01:40 GMT kevin.graham 2004-09-09T05:01:40Z CSS and non standard ftp port https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335145#M5506 <P>We have an ftp server running on port 10021. Is there a way to have the CSS translate the IP in the payload when not using port 21? On an IOS router one can use the ip nat service command. I have not seen anything like this on the CSS.</P><P></P><P>We currently have a VIP and a sourcegroup with matching IP's configured for the ftp server.</P><P></P><P>Thanks!</P> Wed, 08 Sep 2004 20:21:14 GMT https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335145#M5506 clayton-price 2004-09-08T20:21:14Z Re: CSS and non standard ftp port https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335146#M5507 <HTML><HEAD></HEAD><BODY><P>You'll need to move the FTP server to a standard port for now. See CSCeb22950.</P></BODY></HTML> Thu, 09 Sep 2004 05:01:40 GMT https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335146#M5507 kevin.graham 2004-09-09T05:01:40Z Re: CSS and non standard ftp port https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335147#M5508 <HTML><HEAD></HEAD><BODY><P>Kevin, this bug applies to CSM - not CSS.</P><P></P><P>Gilles.</P></BODY></HTML> Thu, 09 Sep 2004 11:14:37 GMT https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335147#M5508 Gilles Dufour 2004-09-09T11:14:37Z Re: CSS and non standard ftp port https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335148#M5509 <HTML><HEAD></HEAD><BODY><P>Clayton,</P><P></P><P>try to use the command 'application ftp' in the content rule definition.</P><P></P><P>Regards,</P><P></P><P>Gilles.</P></BODY></HTML> Thu, 09 Sep 2004 11:15:09 GMT https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335148#M5509 Gilles Dufour 2004-09-09T11:15:09Z Re: CSS and non standard ftp port https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335149#M5510 <HTML><HEAD></HEAD><BODY><P>That seemed to resolve the fact that the address in the ftp payload was not being translated. However....Our ftp server is configured to tell clients to connect on ports 8550-8650. It seems that the content switch is passing a port outside this range back to the client. The CSS then maps the port it sent to the client to a port in the range of 8550-8650. Is there a way to have the CSS pass the port specified by the server?</P><P></P><P>Thanks!</P><P>Clayton</P></BODY></HTML> Thu, 09 Sep 2004 14:05:37 GMT https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335149#M5510 clayton-price 2004-09-09T14:05:37Z Re: CSS and non standard ftp port https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335150#M5511 <HTML><HEAD></HEAD><BODY><P>Configure your VIP for port 21 traffic and the service for port 10021.</P><P>service HP17_5001 </P><P> ip address 10.254.236.7 </P><P> protocol tcp </P><P> port 10051 </P><P> active </P><P></P><P>content DDN1 </P><P> vip address 192.67.251.15 </P><P> port 21 </P><P> protocol tcp </P><P> add service HP17_5001 </P><P> application ftp-control </P><P> active</P><P></P><P>Hope ths helps.</P></BODY></HTML> Thu, 09 Sep 2004 14:51:42 GMT https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335150#M5511 jnorman 2004-09-09T14:51:42Z Re: CSS and non standard ftp port https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335151#M5512 <HTML><HEAD></HEAD><BODY><P>I appreciate all the responses! In this case the CSS is also translating the high order port the server informs clients to connect to.</P><P></P><P>I'm likely going to configure a port 21 VIP in addition to the port 10021 VIP in order to get around some other firewall issues.</P><P></P><P></P></BODY></HTML> Thu, 09 Sep 2004 18:02:44 GMT https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335151#M5512 clayton-price 2004-09-09T18:02:44Z Re: CSS and non standard ftp port https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335152#M5513 <HTML><HEAD></HEAD><BODY><P>Clayton,</P><P></P><P>this is normal behavior.</P><P>CSS changes TCP ports.</P><P>There is no way to prevent this.</P><P></P><P>Gilles.</P></BODY></HTML> Fri, 10 Sep 2004 06:38:53 GMT https://community.cisco.com/t5/application-networking/css-and-non-standard-ftp-port/m-p/335152#M5513 Gilles Dufour 2004-09-10T06:38:53Z