Archiving user access logs to ftp server

[pehlivanalparsla]

I want to export user access logs to ftp server which I setup in company network. I fill in the gaps like in your help document. I write FTP server IP to archive server part And ı write FTP user And directory but I can't success this work. As a default port FTP use port 21 but Juniper trying to connect to FTP server at port 20. I set up different kinds of FTP server And make user profiles And directories. And ı use this profiles And directories while ı was setting archiving parameters but it didn't work. Do you have more detailed document Or video about archiving user access logs to FTP Server. If you respond me ı will be very pleased. Or can you explain step by step how to set up archiving server parameters with examples. 

Thanks a lot !!

[zanyterp_]

as jayLaiz said, it will use port 20 & 21 both for the FTP archive (or 22 if using SCP).

does your server/router/firewall all allow 20 & 21 access to/from the IVE & FTP server?

[jayLaiz_]

Hi,

Hi,

The configuration is pretty straightforward.

I think you have active ftp mode on backend hence SA/MAG is trying to connect to ftp server at port 20, is tcp  20 port  allowed in between SA/MAG and FTP server?

Acticve ftp uses tcp port 21 for command channel and port 21 for data transfer.

Passive ftp users port 21 for command channel and a random port for data

You can enable passive ftp mode on server and try also.

Regards,

Jay