Home / server / Questions / 418262
Accepted
kafka
Asked: 2012-08-17 06:47:03 +0800 CST

SFTP not connecting through Cisco 877 router

  • 772

I am configuring a Cisco 877 router in a test environment. We use a non-standard port for SFTP, 3030. On my inbound ACL I am setting permit tcp any any eq 3030 but the remote SFTP connection is being refused.

We use a non-standard port for SQL too, and this is set on the same ACL, but works fine. When I do sh access-list it doesn't show any matches for the SFTP rule at all, unless I attempt a port probe. All other ACL rules work fine.

What am I missing to allow through this connection? I've even tried to set port-map SSH 3030, as this is the protocol used once a connection has been established, to no avail.

cisco

1 Answers

  1. Best Answer

    Thanks to petrus above. I was testing external connectivity from our web server. I used Wireshark to determine that it was in fact the web server's firewall which wasn't allowing the connection out. Have now successfully proved that our firewall will allow connections in as desired.

    • 0