ArubaOS and Controllers

Reply
Occasional Contributor II
Posts: 18
Registered: ‎05-05-2010

dst-nat ftp fails

I am testing a dst-nat to an FTP server. The FTP connection is dropped right after the client sends a PASV command. All other protocols work fine. This is what the setup looks like:

-)))(((- ----- -----

SERVER IP: 10.1.50.21

The user role that the laptop is using will allow any on the network. So it has full access to the network when it’s connected to the correct SSID.

We are testing a DST-NAT rule. When we use the DST-NAT rule everything works fine except for FTP. In other words, the rule is set so that the LAPTOP can communicate with the FTP SERVER on IP 2.2.2.2.

Here is the dst-nat rule:
Source : Destination : Service : Action
Any : host 2.2.2.2 : any : dst-nat ip 10.1.50.21

I am using FileZilla as the FTP Client and FileZilla as the FTP Server. As soon as the client sends a PASV command, the communication between the server and client stops. If I try to do this from the laptop to the server on the regular IP’s everything works fine. Also if I try some other protocols like SSH, SFTP, RDP over the dst-nat 2.2.2.2 IP etc.. it works fine.

Any ideas if there is a bug that needs to get resolved? This is on ArubaOS 5.0.2.1. If anyone would like to test this they should be able to add the same dst-nat rule like I have and nothing on the SSID will be affected. The only difference is that now you will be able to talk to the device pointing to a different IP.

Thanks,
Fernando
Guru Elite
Posts: 20,819
Registered: ‎03-29-2007

Packet Capture

Can you possibly post a packet capture of the conversation?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 18
Registered: ‎05-05-2010

An RFE has been issued

We ran packet captures for a couple of days to see what was the problem. When discussed with Aruba support they issued an RFE. Here is the email:


I am afraid currently Aruba does not support Passive FTP if the inside traffic is natted under the VLAN interface. However RFE (Request for enhancement) has already been filed in regard to this issue ani believe we will get the fix soon.
Search Airheads
Showing results for 
Search instead for 
Did you mean: