NimbostratusHello All,
I need a detailed information of how to create VIP for FTPS communication for two backend servers in my F5 device. Which ports do I need to allow for this passive FTP communication in F5 and Firewall. How can I know on which ports FTPS passive communication is happening from server or client end. Please explain me about this passive FTP communication and how it works.
Thanks in Advance
AltostratusFor the passive FTP, the ports are actually configured on the server. Lets say you allocate 3001 - 3005 for passive FTP communication then when you create a VIP you need to assign that port range. Make sure your firewall also allows those ports. Firewall rule would look like
ANY---->(Allow port 3001-3005,21)---->VIP
Passive FTP is where the data channel is opened by the server and communicated to the client asking the client to come and connect to it using the ports that it opened to get the data.
AltostratusOk FTP and FTPS are 2 diff things. Looks like you are trying to set up FTPS. Are you using source address as persistence?