Article ID:2920
Objective
This document explains how to configure the NSS for FTP Access on NSS300. The NSS can be configured to allow the FTP protocol to be used for file transfers between the NSS over the Internet. After the FTP access is globally enabled, it can be allowed or disallowed on a per-share basis.
Note: The default setting is to disable FTP access. FTP access must be enabled before users can access the NSS storage through FTP regardless of their per-share settings.
Applicable Devices
• NSS3000
Configuration NSS for FTP Access
Step 1. Use the web configuration utility and choose Shares > FTP Setup. The FTP Setup page opens:
Step 2. Check Enable FTP to enable the FTP.
Step 3. Enter a message that appears when a user first connects to the NSS In the Banner Message box.
Step 4. Check Allow only FTPS Connections to allow only file transfers using FTPS.
Note: If selected, make sure the Allow Anonymous Access checkbox is deselected.
Step 5. (Optional) Check Allow Anonymous Access to allow anonymous FTP access.
Step 6. If you allow anonymous access, choose the volume that will be used as the anonymous root directory from the Anonymous Root Directory drop-down list.
Step 7. Check Anonymous Upload to allow anonymous users to have write access to the NSS.
Step 8. Check Allow Download of Uploaded Files to allow anonymous users to download files that have been uploaded by other anonymous users.
Step 9. Enter the maximum transfer rate for anonymous users in the Maximum Anonymous Transfer Rate field. The default rate is 0.
Step 10. Choose the number of minutes to disconnect the FTP connection in the Disconnect Idle Sessions drop-down list. FTP connection will be disconnected after a certain period of time when the connection is idle.
Step 11. Choose the number of minutes to disconnect the FTP connection in the Disconnect Stalled Transfers drop-down list. FTP connection will be disconnected after a certain length of time has passed during a file transfer.
Step 12. Enter the maximum number of FTP connections that can be made from a single client IP address in the Max Connections per IP Address field.
Step 13. Check the Defaults File Creation Attributes. FTP permissions are global to all files and folders created through FTP regardless of the share to which they are assigned. The options available are the following :
• Group Readable — Members of the user who created the file or folder’s primary group have read permission.
• Group Writable — Members of the user who created the file or folder’s primary group have write permission.
• Everyone Readable — All authenticated users can view the file.
• Everyone Writable — All authenticated users have write permission to the file.
Step 14. Check Allow users to delete or rename other users’ files and folders. This field determines if users who have write permission to a share can delete or rename files or folders within that share that they do not own.
Step 15. (Optional) Enter the router’s WAN IP address in the PASV IP Address field if you want users to access the NSS through Passive Mode FTP via a firewall and/or router.
Step 16. Enter the minimum and maximum port range for passive FTP port connections in the specified fields.
• Minimum port for passive mode (PASV) connections — If your network has FTP connections that pass through a firewall, set the minimum port for the port range. The default is 1025.
• Maximum port for passive mode (PASV) connections — Set the maximum port number for the port range. The default is 4000. Ensure your router is configured to forward the entire configured Passive Mode FTP port range to the NSS.
Step 17. Click Update to save the settings.