Forum Discussion

DMB_19518's avatar
DMB_19518
Icon for Altocumulus rankAltocumulus
Sep 19, 2016
Solved

LTM: Configuring outgoing (passive) FTP connections

I have a number of internal nodes behind a LTM (11.4.1 HF3) using non-routable IP addresses. These nodes need to connect to external FTP servers to retrieve data from them using passive FTP.   Th...
application delivery
BIG-IP
LTM
  • DMB_19518's avatar
    DMB_19518
    Mar 08, 2017

    Just to finish this topic, i have configured a SNAT only and FTP works perfectly for outgoing connections initiated from members in the internal realm.

    For reference, this is the SW build I ended up using:

    Main Package
  Product  BIG-IP
  Version  11.4.1
  Build    711.0
  Edition  Hotfix HF11
  Date     Tue Aug 30 12:18:51 PDT 2016
James_Thomson_1's avatar
James_Thomson_1
Historic F5 Account

I believe your best bet is to configure a 0.0.0.0/0 virtual server of type Standard with an FTP profile assigned to it and no pool and with your SNAT.

 

The FTP profile is the Application Layer Gateway that will allow the dynamic FTP ports to be opened up appropriately.

 

DMB_19518's avatar
DMB_19518
Icon for Altocumulus rankAltocumulus
Dec 13, 2016

Thanks a lot for the answer! However, the FTP is outgoing from the internal nodes to the outside, so there is no need to configure a standard VS as i will not be balancing over any member or pool. I simply want FTPS connections going out and use the LTM to provide a routable IP address.

 

Sorry if this was not clear in the description.