DataPower

DataPower

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Using Public IP instead of Internal IP for FTPS Connection

    Posted Fri September 13, 2024 04:59 AM

    I'm using Data Power to connect to an FTPS server in explicit mode. When I issue the PASV command, using ftp quate command/or select request passive mode.the FTP server responds with an internal IP address. However, I need to use the public IP address of the FTP server instead of the internal IP address.

     

    Is there a way to force Data Power to use the public IP address of the FTP server for the FTPS connection, rather than the internal IP address returned by the server?

     

    Current behavior:

     

    - Connect to FTPS server in explicit mode

    - Issue PASV command

    - Server responds with internal IP address (e.g. 10.x.x.x)

    - Data Power uses internal IP address for connection

     

    Desired behavior:

     

    - Connect to FTPS server in explicit mode

    - Issue PASV command

    - Server responds with internal IP address (e.g. 10.x.x.x)

    - Data Power uses public IP address of FTP server (e.g. 192.168.1.1) for connection instead

     

    Please assist me in achieving this configuration.



    ------------------------------
    Shah Wajahat
    ------------------------------


  • 2.  RE: Using Public IP instead of Internal IP for FTPS Connection

    Posted Fri September 13, 2024 10:27 AM

    How are you issuing the PASV command?

    Is the internal IP (the 10 dot) deterministic in a way to just map it in an XML or JS file and then just use some XSLT or GWS to convert?   If you have direct protocol step-by-step control, this is what I'd do.

    Not the best solutions, but here are a couple of things to try if the above doesn't pan out:

    A really cheap hack (and I have no idea if this will work) might be to just set up either a static route or host alias from the 10 dot to the public????  If you try this, and it works, let me know.  I'm laughing at the idea as I write it!!!

    Maybe another cheap hack (again, just swinging blindly) is to set up a TCP service to just translate the 10 dot to the public???  Again, if you try and this works, I'll laugh along with you.



    ------------------------------
    Joseph Morgan
    CEO - Independent
    Joseph Morgan
    Dallas TX
    ------------------------------

    Original Message


  • 3.  RE: Using Public IP instead of Internal IP for FTPS Connection

    Posted Mon September 16, 2024 10:12 AM

    Hi Shah,

    You might have configured a FTP Server handler, and you may wan to check a configuration to set the alternate passive IP address. Sharing the link for more information: https://www.ibm.com/docs/en/datapower-gateway/10.5.0?topic=fsh-ftp-server-handler-properties-control-communication-ftp-client

    Hope this helps.

    Best regards,

    Karan Thakur



    ------------------------------
    Karan Thakur
    ------------------------------

    Original Message


Related Content