FTP through IPsec LAN-to-LAN tunnel

[bspasov]

I am trying to pass FTP through IPsec tunnel between Cisco VPN concentartor 3015 and Check Point NG.

The problem is that that FTP is using different ports 10521 and 10522. I can logged to the FTP server on the remote site, but the data channel is not working.

Please help.

Thanks.

[sachinraja]

Hi

what are the crypto ACL's u have defined ? have you given access for any ip traffic to flow between the two private LANs ? If not, please give full access and then try ... are there any firewalls between ur server and the VPN concentrators ??

Raj

[bspasov]

Hi Raj,

There is a FW on remote site, it is a IPsec tunnel between Cisco VPN 3015 and Check Point, but they assured me that everything is opened on their site. Also when I did a standard FTP to another FTP server from the same VPN domain works fine. The crypto ACL's are local my PC to remote two servers, ports any any.

[vnirmal112]

Hi,

Kindly Check if u have opened ports ftp and ftp-data at both the ends.

I think u might not have opened the port ftp-data.

Check and Revert.

Nirmal.