Product Documentation

Application Layer Gateway for FTP, ICMP, and TFTP Protocols

Jan 07, 2016

You can enable or disable ALG for the FTP protocol for an LSN configuration by enabling or disabling the FTP option of the LSN group of the LSN configuration.

ALG for the ICMP protocol is enabled by default, and there is no provision to disable it.

ALG for the TFTP protocol is disabled by default. TFTP ALG is enabled automatically for an LSN configuration when you bind a UDP LSN application profile, with endpoint-independent-mapping, endpoint-independent filtering, and destination port as 69 (well-known port for TFTP), to the LSN group.

Sample LSN Configuration for FTP ALG 複製

In the following sample LSN configuration, FTP ALG is enabled for subscribers that have IP address in the range 192.0.2.30-192.0.2.100.

> add ns acl LSN-ACL-1 ALLOW -srcIP 192.0.2.30-192.0.2.100

Done

> apply acls
Done

> add lsn client LSN-CLIENT-1
Done

> bind lsn client LSN-CLIENT-1 –aclname LSN-ACL
Done

> add lsn pool LSN-POOL-1
Done

> bind lsn pool LSN-POOL-1 203.0.113.10
Done

> add lsn group LSN-GROUP-1 -clientname LSN-CLIENT-1  -FTP ENABLED
Done

> bind lsn group LSN-GROUP-1 -poolname pool1 LSN-POOL-1
Done

Sample LSN Configuration for TFTP ALG 複製

In the following sample LSN configuration, endpoint-independent mapping and endpoint-independent filtering are enabled for TFTP protocol (UDP port 69). The NetScaler appliance automatically enables TFTP ALG for this LSN configuration.  

> add lsn client LSN-CLIENT-2
Done

> bind lsn client LSN-CLIENT-2 -network 198.51.100.0 -netmask 255.255.255.0
Done

> add lsn pool LSN-POOL-2
Done

> bind lsn pool LSN-POOL-2 203.0.113.10-203.0.113.11
Done

> add lsn group LSN-GROUP-2 -clientname LSN-CLIENT-2
Done

> bind lsn group LSN-GROUP-2 -poolname pool1 LSN-POOL-2
Done

> add lsn appsprofile LSNAPPSPROFILE-TFTP-2 UDP -mapping ENDPOINT-INDEPENDENT –filtering  ENDPOINT-INDEPENDENT
Done

> bind lsn appsprofile LSNAPPSPROFILE-TFTP-2 69
Done

>bind lsn group LSN-GROUP-1 -applicationprofilename LSNAPPSPROFILE-TFTP-2
Done