NimbostratusWe want to implement FTP services through ltm in our environment bypassing ssl offloading at F5 level and doing offloading at server level but we are getting issue with data channel traffic, while user is trying to longing he unable to do.
NacreousIf the channel is encrypted then F5 can't inspect the data and control channels with the FTP profile. You will need to configure masquerading on the FTPS server.
Please see the following guide: https://devcentral.f5.com/questions/ftps-loadbalancing
NimbostratusWe are getting below mentioned error:
TYPE A 200 Type set to A. PASV 227 Entering Passive Mode (172,19,100,186,199,91). LIST -a Connecting to 172.19.100.186:51035 ... 150 Opening ASCII mode data connection. 425 Cannot open data connection. 3 Could not retrieve directory listing Got reply 4 to the command 2 LIST with -a failed, will try pure LIST Retrieving directory listing... TYPE A 200 Type set to A. PASV 227 Entering Passive Mode (172,19,100,186,199,92). LIST Connecting to 172.19.100.186:51036 ... 150 Opening ASCII mode data connection. 425 Cannot open data connection. Could not retrieve directory listing Got reply 4 to the command 2 (ECommand) Error listing directory '/'. Could not retrieve directory listing Cannot open data connection.
NacreousLooks like an issue with your data channel.
Are you receiving this from the FTP client? Do you have an FTP profile on the virtual server?
Also, are you allowing TCP/51036 through your network, i.e. do you have any firewalls that may be blocking the flow?
NimbostratusYes we are receiving the error on FTP server also we are not using ftp profile.Now we have used FastL4 profile to run SFTPS and it's working now. Thanks for your comments.