Ftp - Juniper ACX1000 Configuration Manual

Copyright © 2017, Juniper Networks, Inc.
Chapter 31: Configuring Network Address Translation (NAT) and Stateful Firewall Services
}
}
}
Binding service sets to the interface.
4.
[edit]
interfaces {
ge-0/1/0 {
media-type copper;
unit 0 {
family inet {
service {
input {
service-set set-dns;
}
output {
service-set set-dns;
}
}
address 50.50.50.1/24;
}
}
}
ge-0/1/1 {
media-type copper;
unit 0 {
family inet {
address 60.60.60.1/24;
}
}
}
ms-0/2/0 {
unit 0 {
family inet;
}
}
}

FTP

FTP is the File Transfer Protocol, specified in RFC 959. In addition to the main control
connection, data connections are also made for any data transfer between the client
and the server; and the host, port, and direction are negotiated through the control
channel.
For non-passive-mode FTP, Junos OS stateful firewall service scans the client-to-server
application data for the PORT command, which provides the IP address and port number
to which the server connects. For passive-mode FTP, Junos OS stateful firewall service
scans the client-to-server application data for the PASV command and then scans the
server-to-client responses for the 227 response, which contains the IP address and port
number to which the client connects.
1013