Set ACL for Passive FTP - "ERROR: unknown error"

[techmail4sam]

Hi,

When I try to configure ACL for passive FTP it gives me following error.

n1000v(config-acl)# permit tcp any host 192.168.4.107 gt 1023 established
ERROR: unknown error

[mohp]

Hi,

Yes, this is a known issue and this will be fixed in future N1KV releases.

Thanks,

mohan

[admin11111]

permit tcp any host 192.168.4.107 gt 1023 established
ERROR: unknown error

In the current N1K release, "established" sub option is not supported. It will be supported in future releases.

The command  "permit tcp any host 192.168.4.107 gt 1023" (without "established" keyword) will still allow all  tcp  traffic  on ports greater 1023 and destined to 192.168.4.107 (including TCP established sessions traffic).

Srini.