NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
kawivukan
Sep 12, 2020Guide
Help with RAX20 and port forwarding FTP
I just got this router today and have it setup through a Xfinity Gateway in bridged mode. Previous to this on the Gateway, I was able to port forward my Raspberry PI FTP server (port 21) and access i...
- Sep 13, 2020
There is only one port 21/TCP ... if the router is configured on ReadyShare to FTP, port 21/TCP is obviously already occupied. Disable the FTP service on the advanced ReadyShare settings.
I would expect that this does free up port 21/TCP on the WAN interface to become available for the port forwarding. Netgear has an old flaw on port 443 (the default https one) - even with the https remote access service and https ReadyShare disabled or relocated to an alternate port, the port 443/TCP isn't becoming available for port forwarding.
Something general ref. ftp: These routers (including your previous one) have an application layer gateway (ALG) listening on the standard ports, e.g. 21/TCP for FTP on the handshake communication for the passive connection, dynamically adding a port forward to that port. If using FTPS (encryption) the ALG can't work so you need to configure the passive port range configured on the ftp server in a port forward range.
kawivukan
Sep 13, 2020Guide
I had gotten a little ahead of myself thinking I fixed it but was able to sort the rest out and it works now. I do have limited networking knowledge and it just seemed a lot easier to setup with the Xfinity gateway. A lot of it was my fault as I had the port range setup from ’20/21’ instead of the ‘21/22’. (Port 21 still refuses to connect but SFTP Port 22 (FTP over SSH?) works just fine) That and I needed to setup a Static IP on my Raspberry PI. (I didn’t with the Xfinity Gateway and not exactly sure why it worked fine on that) Connecting locally to SFTP first worked and once I fixed the rest of my mistakes, I had no problem connecting remotely.
antinode
Sep 14, 2020Guru
> [...] I had the port range setup from '20/21' instead of the `21/22'.
> (Port 21 still refuses to connect but SFTP Port 22 (FTP over SSH?) works
> just fine) [...]
Conventional FTP uses ports 20 (data) and 21 (control). SSH
(including its SFTP subsystem) uses port 22. Two different protocols,
two different (sets of) ports. Passive mode FTP uses a port other than
20. for data.