FBBR – Troubleshooting – FTPS Backup

Default Port: 21 tcp

https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-vcenter-installation/GUID-AFF34FA6-B7CF-4AE0-9C12-C674F160682C.html

“Only explicit mode is supported for FTPS”

Explicit FTPS involves the client explicitly requesting the server to establish a secure session using SSL/TLS on port 21 before authentication. This means the client initially connects to the typically insecure port 21 and then explicitly asks for a secure connection.

In contrast, Implicit FTPS has the client connecting to a dedicated implicit FTPS port, typically 990, where SSL/TLS connections are automatically provided without any explicit request. This allows the unencrypted channel on port 21 to remain open when necessary, as Implicit FTPS utilizes a specific port for secure connections.

Step 1 – Using FTP Client

You can download FTP Clients like Filezilla to test FTP Server.

Enter the location as ftpes, username and password and port number if custom port is being used.

Select Create directory and enter it. Because the backup process involves creating a directory and changing to the directory and listing the contents.

If successful, try creating files.

If file creation is also successful, there is no issues on the permissions unless there is ACL set on the FTP Server.

If failure, you would see the Response code being listed.

In this example, the error code is 550 which indicates Requested action not taken. File unavailable (e.g., file not found, no access).

Alternatively, you can also use WinSCP.

Step 2 – Using vCenter

The vCenter still uses ftp location incase of curl.

To test the connectivity, use the below command

curl -v --ssl-reqd ftp://<FTP_SERVER_IP>/Directory/ -u <username> -k

Change Directory

curl -v --ssl-reqd ftp://<FTP Server> -Q 'CWD <Directory_Name>' -u <Username> -k

If changing directory and listing file fails, you would see the FTP Server response code.

In the below example, had provided an wrong Directory name and hence received 550.

To upload a file,

curl -v --ssl-reqd ftp://<FTP_SERVER_IP> -T <file_name>  -u <username> -k

To download a file,

curl -v --ssl-reqd ftp://<FTP_SERVER_IP>/<DIRECTORY_NAME>/<FILE_NAME> -o "<FILE_NAME>" -u <username> -k

In the Series:

• File-Based Backup and Restore – vCenter
• FBBR – Troubleshooting – Using Self Backup
• FBBR – Troubleshooting – FTP Backup
• FBBR – Troubleshooting – FTP Retention
• FBBR – Troubleshooting – FTPS Backup
• FBBR – Troubleshooting – FTPS Retention
• FBBR – Troubleshooting – HTTP
• FBBR – Troubleshooting – HTTPS Backup
• FBBR – Troubleshooting – HTTPS Retention
• FBBR – Troubleshooting – SCP
• FBBR – Troubleshooting – SFTP
• FBBR – Troubleshooting – SFTP Backup
• FBBR – Troubleshooting – SFTP Retention
• FBBR – Troubleshooting – NFS Backup
• FBBR – Troubleshooting – SMB Backup
• FBBR – Troubleshooting – SMB – 6.x/Upto 7.0U3e
• FBBR – Troubleshooting – SMB – From 7.0U3f/8.x
• File-Based Backup and Restore – Strict Certificate Validation
• File-Based Backup and Restore – Steps to Restore
• File-Based Backup and Restore – VCHA