Application Layer Gateway for FTP, ICMP, and TFTP Protocols
You can enable or disable ALG for the FTP protocol for an LSN configuration by enabling or disabling the FTP option of the LSN group of the LSN configuration.
ALG for the ICMP protocol is enabled by default, and there is no provision to disable it.
ALG for the TFTP protocol is disabled by default. TFTP ALG is enabled automatically for an LSN configuration when you bind a UDP LSN application profile, with endpoint-independent-mapping, endpoint-independent filtering, and destination port as 69 (well-known port for TFTP), to the LSN group.
Sample LSN Configuration for FTP ALG: In the following sample LSN configuration, FTP ALG is enabled for subscribers that have IP address in the range 192.0.2.30-192.0.2.100.
add ns acl LSN-ACL-1 ALLOW -srcIP 192.0.2.30-192.0.2.100
Done
apply acls
Done
add lsn client LSN-CLIENT-1
Done
bind lsn client LSN-CLIENT-1 –aclname LSN-ACL
Done
add lsn pool LSN-POOL-1
Done
bind lsn pool LSN-POOL-1 203.0.113.10
Done
add lsn group LSN-GROUP-1 -clientname LSN-CLIENT-1 -FTP ENABLED
Done
bind lsn group LSN-GROUP-1 -poolname pool1 LSN-POOL-1
Done
Sample LSN Configuration for TFTP ALG:
In the following sample LSN configuration, endpoint-independent mapping and endpoint-independent filtering are enabled for TFTP protocol (UDP port 69). The NetScaler appliance automatically enables TFTP ALG for this LSN configuration.
add lsn client LSN-CLIENT-2
Done
bind lsn client LSN-CLIENT-2 -network 198.51.100.0 -netmask 255.255.255.0
Done
add lsn pool LSN-POOL-2
Done
bind lsn pool LSN-POOL-2 203.0.113.10-203.0.113.11
Done
add lsn group LSN-GROUP-2 -clientname LSN-CLIENT-2
Done
bind lsn group LSN-GROUP-2 -poolname pool1 LSN-POOL-2
Done
add lsn appsprofile LSNAPPSPROFILE-TFTP-2 UDP -mapping ENDPOINT-INDEPENDENT –filtering ENDPOINT-INDEPENDENT
Done
bind lsn appsprofile LSNAPPSPROFILE-TFTP-2 69
Done
bind lsn group LSN-GROUP-1 -applicationprofilename LSNAPPSPROFILE-TFTP-2
Done
Related information