How do I setup an FTP Server behind the XRouter Aero Plus?

First, you will need to assign your computer a Static IP Address such as 192.168.123.2, Subnet Mask 255.255.255.0 and a Router/Gateway Address of 192.168.123.254. You will also want to add the Domain Name Server addresses issued by your ISP.

Second, you will go to the Virtual Server page in the XRouter and open up port 21 and redirect it to the Static IP of the computer hosting your FTP server, which would be 192.168.123.2 if you follow our example.

Now those outside the XRouter, can put the WAN or Public IP address of the XRouter into their browser and it will forward the request through to the proper computer.

More details:

The XRouter comes with a built-in firewall. The NAT (Network Address Translation) firewall stands between your private LAN and the public WAN. Requests for data or services (ie:requesting a web page) that originate on the LAN-side and therefore are recognized by NAT and are allowed back through.

But requests that originate from the WAN-side of the XRouter or certain Internet Services and Applications need to have holes opened in the firewall for the request to tunnel through the firewall.

In the case of individual ports, such as port 21 for FTP, the Virtual Server can open this virtual port to one computer with a Manual IP. There are ten fields provided to open individual ports. Some ports need to be opened to a specific protocol such as either TCP or UDP. For example, FileMaker Pro 5.0 must be opened to port 5003 for TCP only or it will not work. FTP should be left to both.

Note: To redirect a port to a computer, it is advised to give it a Manual IP as shown in the User Manual.

There are 65535 virtual ports for data to travel over on the Internet. You must obtain the correct ports to open from the software manufacturer. Typically this information is located in the manual or on their website.

For those Internet services that require a range of ports to be opened , the Special Application page was developed. Here you give a name to the service or application, name the trigger port which begins the session and name the port range to be opened.

When a particular computer is hosting a number of services which would consume too many ports in the Virtual Server and Special Application page, the DMZ Host can be used. Although this opens all ports to one particular computer, this can pose a serious security risk. We advise against using the DMZ Host if possible or do so with security on that particular machine.

Some FTP sites such as Earthlink's FTP site, require a reverse DNS Lookup. This helps them to verify that the FTP user is a current Earthlink member. Routers do not allow DNS Reverse Look Up. You will need to remove any router to be able to use this type of FTP site. This is a common issue with routers using NAT.


Unless otherwise stated, the content of this page is licensed under Creative Commons Attribution-ShareAlike 3.0 License