Forum Discussion

DennisJann's avatar
DennisJann
Icon for Nimbostratus rankNimbostratus
Sep 09, 2006

How to enable or disable FTP Profile via iRule?

I'm trying to configure a port 21 virtual server on BIG-IP v9.1.2 that will supports both FTP and FTPS (FTP over SSL). SSL will be terminated on the Nodes behind the LTM.

 

 

The problem I've come up against is that it appears that Active mode FTP won't work without an FTP Profile, and FTPS won't work with an FTP Profile.

 

 

I do realize that I could configure separate virtual servers for FTP and FTPS traffic. However, I was hoping to selectively disable the FTP Profile by creating an iRule like:

 

 

when CLIENT_ACCEPTED {

 

TCP::collect 4

 

}

 

when CLIENT_DATA {

 

if { [TCP::payload 4] contains "AUTH" } {

 

FTP::disable

 

}

 

}

 

 

but there is no FTP::disable command equivalent of the HTTP::disable and SSL::disable commands.

 

 

Is there another way to accomplish this using iRules? Might an FTP::disable or FTP::enable command appear in a later release of the BIG-IP software?
No RepliesBe the first to reply