≥ 2012r2 configure IIS FTP

1、 Configuration environment

function powershell Input Get-WindowsFeature -Name NET-*, Web-* | Install-WindowsFeature This command is enough

If you don't want IIS-Ftp-Server, You can enter Get-WindowsFeature -Name Web-Ftp* | Uninstall-WindowsFeature uninstall , Here we mainly introduce IIS-FTP No uninstall , Although I don't like it very much , I'm usually used to it mini sftp server, Simple and easy 、 Security （ Premise , Password setting is more complicated ）http://coreftp.com/server/download/mini-sftp-server.exe

Double click to open and fill in the user name 、 password 、 route （ I usually write simply c:\） spot start, A lightweight sftp server It's ready to go , Default port 22, Security team release 22 after , The client with filezilla or xftp Or others ftp Client software is OK , Of course, you can change the port , What you fill in is released by the security team , Be careful not to conflict with other running service ports .

2、 Set up ftp Site

function inetmgr open IIS Manager

It needs to be prepared in advance test user

net user user name password /add

for example

All in all , Configuration that's pretty simple

3、 Configure passive mode port range

Note that right click on the root above the application pool （ No ftp Right click on the site ）, Right click to see the following figure FTP A firewall , Double click it , Fill in the port range , commonly 20 Less than is enough , Outside the firewall IP Write server extranet IP

4、 The server firewall is usually turned off , Configure inbound rules in the security group , Outbound rules generally release all , The main reason is that inbound rules should be configured well

Inbound rule release 21 port 、 Passive mode port 、 Service port, for example web port 、 The remote port is OK （ In case of active mode release 21 and 20 that will do ）

Set inbound as shown in the figure above 、 After outbound rule , Client I use filezilla It can be connected in both active and passive modes , But some clients may only use passive mode , This is mainly limited by the client network .

Here's a special note , Microsoft official website configuration IIS FTP Passive mode used , Besides ,filezilla etc. ftp The client software also recommends passive mode connection , The main purpose is to improve client compatibility （ What initiative 、 Passive mode , It's a waste of time on my own , I will use it. mini-sftp-server.exe, Double click to fill in the user name 、 password 、 The path is settled immediately , Safe, stable and reliable , It has been used for many years ）.

Microsoft ：

https://docs.microsoft.com/en-us/iis/publish/using-the-ftp-service/configuring-ftp-firewall-settings-in-iis-7

Filezilla：