FTP connection Error on Cisco ISE

[May21]

Hi,

We are new to ISE and trying to establish a FTP connection between cisco ISE and FTP-server over a network.

The device where my FTP reside is not directly reachable to ISE but Natted. 

On ISE, when creating repository, we are using NAT IP address as the server name which in turn gets natted to another IP which resolves resolves to the system IP where FTP resides. I am using the path as /<folder name>/.

It keeps throwing me the error message when validating the repository connection as attached.

Have changed the user password, FTP home directory, yet the error keeps coming.

Are we missing anything here?

Thanks

[MHM Cisco World]

As I know there are two IP field, 
one in the IP header 
other is NAS-ID, 
IP header is effect by the NAT but the NAS-ID is not effect by it.
please check this point 

[thomas]

Have you tested access to your FTP server using any other regular FTP client? Does it work?

This works for me with a local FTP server:

* Repository Name	FTP
* Protocol	FTP
Location
* Server Name	198.18.133.1
* Path	/
Credentials
* User Name	ise
* Password	*********

[hslai]

Please check the support doc on the network device performing the NAT. For example, pfSense® software > Network Address Translation > FTP Limitations.