FTP Transfer failure after 1 hour through transparent ACE 4710

[robert.horrigan]

I have an FTP transfer that fails after what appears to be exactly one hour through a transparent ACE.  ACE is not natting to the rservers.  When I put the server infront of the ACE, the transfer completes fine.  Does anyone know what is causing this error?

[sachinga.hcl]

Hi Robert,

Are you using stickyness and ftp inspect ?

We're using a config similar to below and it works ok so hope this helps.

probe ftp FTP-21-PROBE
  interval 2
  passdetect interval 2
  passdetect count 1
  expect status 220 220

rserver host Server1
  ip address x.x.x.x
  inservice
rserver host Server2
  ip address x.x.x.x
  inservice

serverfarm host FTP-21-SF
  probe FTP-21-PROBE
  rserver Server1
    inservice
  rserver Server2
    inservice

sticky ip-netmask 255.255.255.255 address source FTP-21-SG
  timeout 60
  replicate sticky
  serverfarm FTP-21-SF

class-map match-all FTP-21-CM
  2 match virtual-address x.x.x.x tcp eq ftp

policy-map type loadbalance first-match FTP-21-PM
  class class-default
    sticky-serverfarm FTP-21-SG

policy-map multi-match FTP-INPUT-POLICY
  class FTP-21-CM
    loadbalance vip inservice
    loadbalance policy FTP-21-PM
    loadbalance vip icmp-reply active
    inspect ftp

[Cesar Roque · Accepted solution]

Try creating a parameter-map type connection to increase the inactivity timeout.  By default for TCP is 3600 sec.

It looks like this:

parameter-map type connection CONNECTION-PARAMETER
  set timeout inactivity 7200

[robert.horrigan]

That was the fix.  Thanks a lot

[Gilles Dufour]

What version do you run ?

As long as traffic is going through the data channel, the FTP connection should not time out.

Gilles.