Помогите чайнику
Хочу дать доступ извне к фтп

Не дает по следующей причине:

Non-matching address [IP_address] used in [chars] -- FTP client [IP_address] FTP server [IP_address]

Cisco пишет по этому поводу :
Explanation   An FTP client has attempted to use a PORT command or the FTP server has attempted to use the response to a PASV command to trick the firewall into opening access to a third-party host that is different from the two hosts engaged in the FTP connection. This message indicates that a suspicious violation was detected while attempting to modify the security policy in the firewall. The command is rejected, and the connection is reset by the firewall.

Recommended Action   This message is for informational purposes only, but it may indicate that an attempt was made to grant or open access to unauthorized hosts.

Вопрос: Что конкретно нужно сделать ?

• Доступ к FTP,dmitrytim, 13:13 , 28-Ноя-06
  • Доступ к FTP,Spoiler, 18:42 , 06-Дек-06

>Помогите чайнику
>Хочу дать доступ извне к фтп
>
>Не дает по следующей причине:
>
>Non-matching address [IP_address] used in [chars] -- FTP client [IP_address] FTP server
>[IP_address]
>
>Cisco пишет по этому поводу :
>Explanation   An FTP client has attempted to use a PORT
>command or the FTP server has attempted to use the response
>to a PASV command to trick the firewall into opening access
>to a third-party host that is different from the two hosts
>engaged in the FTP connection. This message indicates that a suspicious
>violation was detected while attempting to modify the security policy in
>the firewall. The command is rejected, and the connection is reset
>by the firewall.
>
>Recommended Action   This message is for informational purposes only, but
>it may indicate that an attempt was made to grant or
>open access to unauthorized hosts.
>
>Вопрос: Что конкретно нужно сделать ?
У вас нат стоит а за натом фтп ? ТОгда все просто. из вопроса непонятно что в данный момент есть на циске и как это организовано.

>>Помогите чайнику
>>Хочу дать доступ извне к фтп
>>
>>Не дает по следующей причине:
>>
>>Non-matching address [IP_address] used in [chars] -- FTP client [IP_address] FTP server
>>[IP_address]
>>
>>Cisco пишет по этому поводу :
>>Explanation   An FTP client has attempted to use a PORT
>>command or the FTP server has attempted to use the response
>>to a PASV command to trick the firewall into opening access
>>to a third-party host that is different from the two hosts
>>engaged in the FTP connection. This message indicates that a suspicious
>>violation was detected while attempting to modify the security policy in
>>the firewall. The command is rejected, and the connection is reset
>>by the firewall.
>>
>>Recommended Action   This message is for informational purposes only, but
>>it may indicate that an attempt was made to grant or
>>open access to unauthorized hosts.
>>
>>Вопрос: Что конкретно нужно сделать ?
>У вас нат стоит а за натом фтп ? ТОгда все просто.
>из вопроса непонятно что в данный момент есть на циске и
>как это организовано.

Создайте extended access-list