topic FTP and AAA in Network Access Control https://community.cisco.com/t5/network-access-control/ftp-and-aaa/m-p/63750#M818 <P>I am recently upgraded to 6.1(4) and I noticed that I have an issue with ftp. When ever I connect to an FTP server on the internet I can not dowload anything. I am also using AAA with Cisco ACS 2.6(4). I found a bug on the cisco site (CSCdx81167)</P><P>Sympton: FTP session would fail if PIX(v6.2.1) AAA is enabled and client connect to a FTP site with long banner </P><P>(approximate 600bytes or longer) before or after logon prompt. This is because the banner was truncated, and the</P><P> truncated portion includes the FTP response code such as '230' and the CR/LF. Solution: Remove the banner size limitation.</P><P></P><P>The only question is how to remove the banner size limitation. I tried no fixup protocol 21 and it did not work. Am I missing something?</P> Fri, 21 Feb 2020 18:03:08 GMT mtumarinson 2020-02-21T18:03:08Z FTP and AAA https://community.cisco.com/t5/network-access-control/ftp-and-aaa/m-p/63750#M818 <P>I am recently upgraded to 6.1(4) and I noticed that I have an issue with ftp. When ever I connect to an FTP server on the internet I can not dowload anything. I am also using AAA with Cisco ACS 2.6(4). I found a bug on the cisco site (CSCdx81167)</P><P>Sympton: FTP session would fail if PIX(v6.2.1) AAA is enabled and client connect to a FTP site with long banner </P><P>(approximate 600bytes or longer) before or after logon prompt. This is because the banner was truncated, and the</P><P> truncated portion includes the FTP response code such as '230' and the CR/LF. Solution: Remove the banner size limitation.</P><P></P><P>The only question is how to remove the banner size limitation. I tried no fixup protocol 21 and it did not work. Am I missing something?</P> Fri, 21 Feb 2020 18:03:08 GMT https://community.cisco.com/t5/network-access-control/ftp-and-aaa/m-p/63750#M818 mtumarinson 2020-02-21T18:03:08Z Re: FTP and AAA https://community.cisco.com/t5/network-access-control/ftp-and-aaa/m-p/63751#M819 <HTML><HEAD></HEAD><BODY><P>the banner size limitation is within the pix code, not something that can be configured. the solution relates to the engineering fix within the code. you will need to obtain a fixed version when it becomes available to prevent this problem.</P></BODY></HTML> Tue, 03 Sep 2002 04:17:13 GMT https://community.cisco.com/t5/network-access-control/ftp-and-aaa/m-p/63751#M819 pgolding 2002-09-03T04:17:13Z