ftp problem

dannyruckel

unread,

Nov 25, 2009, 3:04:01 PM11/25/09

to

i am trying to put a windows machine, dual nics, between two AIX
servers. it seems i can ftp from the windows machine to one of the
AIX servers, but not the other.

/etc/inetd.conf is identical on both AIX servers and i can ftp between
the 2 AIX servers.

any ideas why i can't ftp from the windows machine to both AIX
servers?

thanks,

danny

Pierre

unread,

Nov 26, 2009, 5:10:53 AM11/26/09

to

Hi Danny,

First question but it could be important, are the both AIX on the same
IP adress mask with the windows machine ?

Do you see the two AIX serveur with the windows machine ?

Other possibility : Have the ftp user the same right on both AIX ?

Pierre

dannyruckel

unread,

Nov 27, 2009, 11:49:38 AM11/27/09

to

hey pierre,

the machines are on different subnets but both are seen and can be
pinged from the windows machine.

i never get a 220 response from the target machine so can't speak to
the user rights.

thanks again for taking the time to respond.

danny

Mike Wooding

unread,

Nov 27, 2009, 12:58:49 PM11/27/09

to

In your shoes, I'd check basic network connectivity before going anywhere
near FTP.

So, apologies if any / all of what follows seems obvious, but as you say
both AIX servers are identical and that you can FTP between the two AIX
boxes, I'd look first and foremost at the Windows box.

Do both interfaces show up when you perform a "route print" (from a "CMD"
prompt) on the Windows box?

Are the active routes for the two interfaces correct? Are they persistent?

Can you ping both AIX boxes from the Windows box?

What about "TRACERT"? Is the connection to each AIX box going out over the
correct interface?

Are you using the "Network Bridge" feature on the Windows box?

Which Windows OS are you using?

If you can get back with the answers to these questions, I'll be in a much
better position to help you.

Again, my apologies if you've already tried all the above.

Regards

Mike Wooding

dannyruckel

unread,

Dec 1, 2009, 5:03:21 PM12/1/09

to

nothing about the network is obvious to me mike!

my IPv4 address is 192.168.3.75. i want to ftp to 192.168.3.200.

C:\Users\daru>ping 192.168.3.200

Pinging 192.168.3.200 with 32 bytes of data: ***AIX box that I cannot
FTP to***
Reply from 192.168.3.200: bytes=32 time=46ms TTL=255
Reply from 192.168.3.200: bytes=32 time=23ms TTL=255
Reply from 192.168.3.200: bytes=32 time=23ms TTL=255
Reply from 192.168.3.200: bytes=32 time=23ms TTL=255

Ping statistics for 192.168.3.200:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 23ms, Maximum = 46ms, Average = 28ms

C:\Users\daru>ping 200.0.0.2

Pinging 200.0.0.2 with 32 bytes of data: ***AIX box that I can FTP
to***
Reply from 200.0.0.2: bytes=32 time<1ms TTL=255
Reply from 200.0.0.2: bytes=32 time<1ms TTL=255
Reply from 200.0.0.2: bytes=32 time<1ms TTL=255
Reply from 200.0.0.2: bytes=32 time<1ms TTL=255

Ping statistics for 200.0.0.2:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Users\daru>C:\Users\daru>print route
Unable to initialize device PRN

C:\Users\daru>route print ***Both interfaces appear***
===========================================================================
Interface List
11 ...00 22 19 16 f6 46 ...... Broadcom BCM5708C NetXtreme II GigE
(NDIS VBD Client) #2
10 ...00 22 19 16 f6 44 ...... Broadcom BCM5708C NetXtreme II GigE
(NDIS VBD Client)
1 ........................... Software Loopback Interface 1
12 ...00 00 00 00 00 00 00 e0 isatap.{B4B91AF6-B207-43C7-AEDA-
A51E6A48B58A}
13 ...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
14 ...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway
Interface Metric
0.0.0.0 0.0.0.0
200.0.0.250 200.0.1.48 11
0.0.0.0 0.0.0.0
192.168.3.99 192.168.3.75 266
127.0.0.0 255.0.0.0 On-
link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link
127.0.0.1 306
127.255.255.255 255.255.255.255 On-link
127.0.0.1 306
192.168.3.0 255.255.255.0 On-link
192.168.3.75 266
192.168.3.75 255.255.255.255 On-link
192.168.3.75 266
192.168.3.255 255.255.255.255 On-link
192.168.3.75 266
200.0.0.0 255.255.254.0 On-link
200.0.1.48 266
200.0.1.48 255.255.255.255 On-link
200.0.1.48 266
200.0.1.255 255.255.255.255 On-link
200.0.1.48 266
224.0.0.0 240.0.0.0 On-link
127.0.0.1 306
224.0.0.0 240.0.0.0 On-link
200.0.1.48 266
224.0.0.0 240.0.0.0 On-link
192.168.3.75 266
255.255.255.255 255.255.255.255 On-link
127.0.0.1 306
255.255.255.255 255.255.255.255 On-link
200.0.1.48 266
255.255.255.255 255.255.255.255 On-link
192.168.3.75 266
===========================================================================
Persistent Routes: Network Address Netmask Gateway Address
Metric
0.0.0.0 0.0.0.0 200.0.0.250 1
0.0.0.0 0.0.0.0 192.168.3.99 Default
===========================================================================

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
13 1110 ::/0 2002:c058:6301::c058:6301
1 306 ::1/128 On-link
13 1010 2002::/16 On-link
13 266 2002:c800:130::c800:130/128
On-link
11 266 fe80::/64 On-link
11 266 fe80::19e6:4fdf:dccf:8527/128
On-link
1 306 ff00::/8 On-link
11 266 ff00::/8 On-link
===========================================================================
Persistent Routes:
None

C:\Users\daru>
Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\daru>tracert 192.168.3.200 ***Executing from my windows
machine 192.168.3.75***

Tracing route to 192.168.3.200 over a maximum of 30 hops

1 22 ms 22 ms 22 ms 192.168.3.200

Trace complete.

C:\Users\daru>ipconfig

Windows IP Configuration

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::19e6:4fdf:dccf:8527%11
IPv4 Address. . . . . . . . . . . : 192.168.3.75
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.3.99

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
IPv4 Address. . . . . . . . . . . : 200.0.1.48
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 200.0.0.250

Tunnel adapter Local Area Connection* 8:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter Local Area Connection* 9:

Connection-specific DNS Suffix . :
IPv6 Address. . . . . . . . . . . : 2002:c800:130::c800:130
Default Gateway . . . . . . . . . : 2002:c058:6301::c058:6301

Tunnel adapter Local Area Connection* 11:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

C:\Users\daru>

thanks in advance for any insights!

danny

dannyruckel

unread,

Dec 1, 2009, 5:05:08 PM12/1/09

to

On Nov 27, 9:58 am, "Mike Wooding" <mikewood...@email.com> wrote:

mike,

neglected to answer your last 2 questions. we are not using network
bridge and this box is running windows server 2008.

thanks again,

danny

Mike Wooding

unread,

Dec 3, 2009, 5:39:28 AM12/3/09

to

dannyruckel wrote:
> On Nov 27, 9:58 am, "Mike Wooding" <mikewood...@email.com> wrote:
>> dannyruckel wrote:
>>> i am trying to put a windows machine, dual nics, between two AIX
>>> servers. it seems i can ftp from the windows machine to one of the
>>> AIX servers, but not the other.
>>
>>> /etc/inetd.conf is identical on both AIX servers and i can ftp
>>> between the 2 AIX servers.
>>
>>> any ideas why i can't ftp from the windows machine to both AIX
>>> servers?
>>
>>> thanks,
>>
>>> danny

>> In your shoes, I'd check basic network connectivity before going
>> anywhere near FTP.
>>

> nothing about the network is obvious to me mike!
>
> my IPv4 address is 192.168.3.75. i want to ftp to 192.168.3.200.
>
> Microsoft Windows [Version 6.0.6002]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>
> C:\Users\daru>ping 192.168.3.200
>
> Pinging 192.168.3.200 with 32 bytes of data: ***AIX box that I cannot
> FTP to***
> Reply from 192.168.3.200: bytes=32 time=46ms TTL=255
> Reply from 192.168.3.200: bytes=32 time=23ms TTL=255
> Reply from 192.168.3.200: bytes=32 time=23ms TTL=255
> Reply from 192.168.3.200: bytes=32 time=23ms TTL=255
>
> Ping statistics for 192.168.3.200:
> Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
> Approximate round trip times in milli-seconds:
> Minimum = 23ms, Maximum = 46ms, Average = 28ms
>

>
> thanks in advance for any insights!
>
> danny

Thanks for all that Danny. The fact you can ping 192.168.3.200 from
192.168.3.75 but cannot FTP to it suggests permissions rather than routing.

Do you have a hardware firewall? How is your DMZ configured? Has a rule
been added to allow FTP between both NICs of the Windows box and the
corresponding Aix box? Does your Windows box have a software firewall
installed, perhaps included with a Security Suite / Anti-Virus? Does it
have the relevant rule added to allow FTP between 192.168.3.75 and
193.168.3.200?

What about the AIX box?

What, exactly, happens when you do "ftp 192.68.3.200" from a command prompt
on the Windows box?

Sorry to keep asking questions but it is the only way to get to the bottom
of this.

Thanks

Regards

Mike Wooding