NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
sam_reitich
Jun 03, 2019Tutor
How to enable FTP Port 21
I am trying to port forward a server using my public ip, but it doesn't work. Using a local host works, but when I try to scan my public ip, it says: "99.51.65.59 isn't responding on port 21 (ftp...
CrimpOn
Jun 04, 2019Guru - Experienced User
So, you used the Advanced tab on the Orbi web interface, selected Advanced Setup->Port Forwarding, and then entered the IP address of the FTP server on your internal network. Correct?
sam_reitich
Jun 04, 2019Tutor
yes
- CrimpOnJun 04, 2019Guru - Experienced User
Sorry, I neglected to ask about how the Orbi is connected. Sometimes the internet modem is actually a "modem/router", which results in what people call a "double NAT". The Orbi may have forwarded port 21, but the modem/router which is in front of the Orbi may not have.
What happens when you do a trace route to 8.8.8.8?
i.e. open a Windows command window and type "tracert 8.8.8.8"?
The first line should be the Orbi itself, usually 192.168.1.1 The second line should be a "public" IP address, that is NOT a "192.168" or a "10.x"
- ekhalilJun 04, 2019MasterInstead of port forwarding port 21 which is used by Orbi, please port forwad one of the free ports like 8121 to port 21 on the target device, and then use your public IP and port 8121 to connect remotely to port 21 on the target device
- CrimpOnJun 04, 2019Guru - Experienced User
While it is good to have a solution, it seems a bit strange that the first (and most obvious) service that Orbi offers to forward is FTP. Why would the option exist if Orbi will refuse to do it?
- sam_reitichJun 04, 2019Tutor
the first line is 10.x and the second is 192.x
- CrimpOnJun 04, 2019Guru - Experienced User
sam_reitich wrote:the first line is 10.x and the second is 192.x
Well, there's the issue. The Orbi is acting as a router creating 'private' IP addresses (192.168.x.x), but is behind another router which is also creating 'private' IP addresses (10.x) Three choices (1) put the Orbi in AP mode and create a port forward in the other router, (2) put the other router in 'modem only' mode and create the forwarding rule on the Orbi, or (3) give up.
I cverified this by configuring an FTP server on a Windows 10 machine and created an Orbi FTP rule pointing to it. Worked like a charm AFTER I dealt with Windows Firewall issues and figuring out what my "real" IP address on my phone was. (Hint: what the phone says is its IP address is not true, because the phone - like everything else in the world - is behind a NAT firewall.) This would not have been an issue except that I had set up the FTP server to allow only connections from the Orbi LAN and one outside IP address. I actually found my phone's IP address by looking in the Orbi log for what IP address was connected to my internal FTP server. Nice to see that Orbi logs that. Better have strong passwords if FTP is opened to the world (actually FTPS or TLS would be better, but I have not tried those).
Good Luck