Pix 7.1 and Ftp access

[john-boyd]

hi,

Having a few issues with pix 7.1 and ftp access to a server behind, worked fine on 6.3, but now since i have upgraded it doies not work anymore. Just rejects the password every time.

I have a static conversation and open up the ports, but twhen i got to authenticate it just chucks it back saysin wrong password.

However i can use the ftp fro a higher security interface and on the server iotself so i know that the password is correct.

So whe i am outside the network it really does not like me. Pls pls pls help.

John

[a.kiprawih]

Hi John,

I guess you config will look like this:

static (inside,outside) netmask 255.255.255.255

access-list outside permit tcp any host eq 21 (or ftp)

access-group outside in interface outside

When you got the wrong password message, do you see any login attempt/process failed in your FTP server?

If YES, then the FTP request is successfully reached your FTP server -> need to check your server then.

If NO, then it might be the firewall who intercepted and tried to authenticate your ftp access/request.

BTW, do you have authentication proxy parameter in your config, something like "aaa authentication match" (not the aaa authentication http}telnet...).

Rgds,

AK