ADC

Application Layer Gateway for FTP, ICMP, and TFTP Protocols

You can enable or disable ALG for the FTP protocol for an LSN configuration by enabling or disabling the FTP option of the LSN group of the LSN configuration.

ALG for the ICMP protocol is enabled by default, and there is no provision to disable it.

ALG for the TFTP protocol is disabled by default. TFTP ALG is enabled automatically for an LSN configuration when you bind a UDP LSN application profile, with endpoint-independent-mapping, endpoint-independent filtering, and destination port as 69 (well-known port for TFTP), to the LSN group.

Sample LSN Configuration for FTP ALG:In the following sample LSN configuration, FTP ALG is enabled for subscribers that have IP address in the range 192.0.2.30-192.0.2.100.

add ns acl LSN-ACL-1 ALLOW -srcIP 192.0.2.30-192.0.2.100 Done apply acls Done add lsn client LSN-CLIENT-1 Done bind lsn client LSN-CLIENT-1 –aclname LSN-ACL Done add lsn pool LSN-POOL-1 Done bind lsn pool LSN-POOL-1 203.0.113.10 Done add lsn group LSN-GROUP-1 -clientname LSN-CLIENT-1 -FTP ENABLED Done bind lsn group LSN-GROUP-1 -poolname pool1 LSN-POOL-1 Done 

Sample LSN Configuration for TFTP ALG:

In the following sample LSN configuration, endpoint-independent mapping and endpoint-independent filtering are enabled for TFTP protocol (UDP port 69). The Citrix ADC appliance automatically enables TFTP ALG for this LSN configuration.

add lsn client LSN-CLIENT-2 Done bind lsn client LSN-CLIENT-2 -network 198.51.100.0 -netmask 255.255.255.0 Done add lsn pool LSN-POOL-2 Done bind lsn pool LSN-POOL-2 203.0.113.10-203.0.113.11 Done add lsn group LSN-GROUP-2 -clientname LSN-CLIENT-2 Done bind lsn group LSN-GROUP-2 -poolname pool1 LSN-POOL-2 Done add lsn appsprofile LSNAPPSPROFILE-TFTP-2 UDP -mapping ENDPOINT-INDEPENDENT –filtering ENDPOINT-INDEPENDENT Done bind lsn appsprofile LSNAPPSPROFILE-TFTP-2 69 Done bind lsn group LSN-GROUP-1 -applicationprofilename LSNAPPSPROFILE-TFTP-2 Done 
Application Layer Gateway for FTP, ICMP, and TFTP Protocols