How to setup FTP and Secure FTP for XD Series

Transcription

1 How to setup FTP and Secure FTP for XD Series Use the following steps prior to enabling support for FTP services on XD Series: 1) Create NAS volume and Share(s) 2) Create Users and Groups 3) Select an Authentication method (this example is based on ADS) (Note: It is essential that groups and users access are set properly both on ADS as well as the XD system. Denial of access to the directory and subdirectories using FTP services are Often due to incorrect access setup. ) 4) At the ADS server selected users and groups should have recursive permission to files and directories for ftp user password option to work properly. Configure FTP settings under Configuration > NAS settings. Default setting for Encryption is None or standard FTP. For Secure FTP, choose SSL/TLS and apply. Note: The default FTP port is set to 21. When choosing a different port, ensure that the client side FTP is configured to use the same port to connect to the server. Page 1

2 To grant access to users for selected shares under FTP, Go to Configuration > NAS resources, and Select a share already created that you want to enable access to, then Select administrators and users to grant access to, and Note: Access to a share through FTP, SMB and ATP (if enabled) protocols are done simultaneously. Page 2

3 To grant access to groups for selected shares under FTP, Go to configuration -> NAS resources, and Select a share to enable access, then Select the groups to grant access to, and To this point, we have assigned access to select users and groups. To enable FTP for a share, Select configuration -> NAS resources, Select the desired share listed under Shares on the left pane, Select use FTP under FTP settings, Select Anonymous mode or users with password (in this document we use the user with password) Click to apply. Page 3

4 Guidelines and Troubleshooting: 1) Selecting Anonymous mode will enable FTP sharing with anonymous users. The access is set to READ+WRITE by default for all IPs. To change that, enter desired IP addresses in the Allow access IP and Write access IP fields. Clicking Apply will make the share available over FTP. 2) Selecting the Users with password mode will enable secure FTP sharing with username and password authorization. There are few FTP clients which support SFTP(SSL/TLS). Here is a list of the software which has been tested: CoreFTP (Windows), FileZilla (Windows), IgloFTP (Windows and Linux), SSLFTP (Linux console client). When the Users with password option are enabled, users have access to the share after inputting the authorized username and password. 3) To connect to this share FTP client software is required /- e.g. Internet Explorer has FTP support. To connect with IE when using the Anonymous mode, please enter the following in the address line: ftp://<server IP>/pub/ (e.g. ftp:// /pub/). When using an SFTP client, please type in the following: ftp://<server IP>/share/ (e.g. ftp:// /share/). Share is a keyword. Many FTP client programs need a username and a password to establish connection. If the NAS server uses Windows domain authorization the short domain name along with a plus sign must precede the username, e.g. DOMAIN+Administrator eg: ftp://domain+administrator eg: ftp://domin+administrator@ /shares/test (will ask for password) 4) If you are unable to see any directories when connected to the FTP server; please make sure that you have the rights to access any share over FTP. If you still cannot see any directories, switch your FTP client to passive mode. Also, you can check your directoy s ACL under Configuration -> NAS resources, Click Shares on the left pane, Under ACL click on the corresponding LVXXXX until you arrive at the desired directory (s) Highlight a directory, Click on users & Groups (check/modify user and group accesses) Click on Access Permissions (make sure all permission are set) Page 4

5 5) Secure FTP has been tested under CoreFTP and is known to work 6) In some instances, a listing of subdirectories will show extra characters appended to the name that was assigned at creation time under SMB. In such cases, clicking on the subdirectory name in the list will not open the subdirectory. To get to the subdirectory, the subdirectory name needs to be manually appended to the path at the client FTP application level (e.g. a browser s address line.) Page 5