FTP issue

[bberry]

I have set up a new FTP server. It is vsFTP running on Linux 8 server. I added a user for FTPing IOS to and from my hardware. I ma using the defaults out of the box for vsftpd.conf file. I added the IP FTP username and IP FTP password to my router. This is where it gets interesting. I am able to FTP from the router to the server but not the other way. I get all the questions in regards to filename and what not but seems to hang when actually connecting to and starting the transfer. I though ok maybe I missed something in regards to security so I tested things from a DOS prompt and am able to transfer to and from server using the same FTP credentials as the router with no problems. I have tried this on several different routers and switches all with the same results . I can send from the hardware to the FTP server but nothing from the FTP server to the hardware. Anyone know what I might have missed?

[steve.busby]

Sounds like a Userid/Permissions or acl on the IOS device(s).

[bberry]

That is what i am looking into now. The issue though is that I am using the same ID to FTP from the DOS prompt that I am from the IOS. I created an ftp-user on the server and used that to send IOS images to the server. I turned around and used that same ID to pull them back to my pc. No issues either way. The only ACL on my network is blocking ports 135,137,139,445 and the like. This is applied outbound on my serial interfaces.

[milan.kulik]

Hi, just some ideas:

1. Is there any other device (router, firewall) between your router and server, which could block the data connaction?

2. Aren't you running FTP in passive mode?

3. When you try to copy a file (startup config, e.g.) to/from your FTP server via CLI commands issed on your router console, are you able to copy to the server and not from the server?

Regards,

Milan

[bberry]

1. My server is connected to a 3550 switch that in turn is connected to my core 4506. I have tested with routers connected directly to the 4506 as well as routers out on my WAN.

2. Commands I used to configure the router were:

IP ftp username

IP ftp password

IP ftp passive

3. Yes I can copy to the server just not back from the server.

[milan.kulik]

Hi,

it seems to me as an application incompatibility between your FTP server and IOS.

Have you tested any other FTP server?

3Com 3CDaemon (http://support.3com.com/software/utilities_for_windows_32_bit.htm) is an excellent one wich worked with all IOSes I ever met.

What happens if you remove the IP ftp passive from the config?

Have you tried to debug your FTP session by debug ip ftp CLI command?

I've also found some bugs which might be useful: CSCdv40863, CSCef18170,CSCdx85632. But you can find about 350 bugs related to general FTP and IOS by the TAC Bug Toolkit (http://www.cisco.com/cgi-bin/Support/Bugtool/launch_bugtool.pl). So I think you should go there and try to find if there isn't any bug related to your specific IOS and ftp server.

Regards,

Milan