sorrry, i meant ports 20 and 21
-Jim
here is the situation
I cannot get the Scan to FTP Function to work on a Kyocera 3535 network scanner on one subnet but the scan to FTP function on exactly the same network scanner works on a different subnet
There is another scanner that works and it sits on subnet 192.168.2.0 255.255.255.0
The device that all the scanned documents are being sent to also sits on 192.168.2.0 255.255.255.0
The scanner where i can't get the scan to FTP function working sits on subnet 192.168.7.0 255.255.255.0
I need to be able to scan to the device that sits on subnet 192.168.2.0
The settings on the scanner as far as the location i am scanning to are the same
These 2 subnets are linked together on Cisco ASA Security Appliance
I can ping the device i am trying to scan my documents to from the 7.0 subnet
and when i go to the RUN prompt when i am on the 7.0 subnet and try to access the folder that i am scanning my documents to \\192.168.2.57\input
i get a username and password prompt so i am reaching the device, my username and password just are not being recognized or registered by the device
I can however access shared folders on the device/...............
Somehow this issue i believe has to due with the fact that the scanner that isn't able to scan to FTP to the device that sits on the other subnet has to due with the fact that it is on another subnet
the device that i am scanning to is what is basically a black box
This server that I am scanning my documents to is not part of the domain!!!
Not sure what else to include for info right now
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
what do you mean when you say scan to smb?
actually the better way to rule out the ASA is to use either a 3rd party FTP client or the built in one in Windows to attempt to access the "Black Box" check to see if the responses are the same, from both subnets----(how would i do this?)
how do i check responses too, from the black box?
thanks
SMB is "Server Message Block" and fancy term for Windows file sharing
when you access a shared folder by using \\servername\sharename that is SMB
FTP is File Transfer Protocol, and requires a "client" to access a folder on a FTP server, the Kyocera supports both SMB and FTP i am assuming that the black box support both.
to see if FTP works open a command prompt and type
FTP 192.168.2.57
(if this is the IP address of the box) it should return and ask for username and password, try logging in, if this works try the same from a workstation on the other subnet, make sure your results are the same. keep in mind, just because you can log in, does not mean that you have the rights to save files there. are the permissions for the user you are loggin in as have write permissions?
-Jim
it may be called scan to folder
it also probably is not turned on
IN ORDER TO DO THIS
at the copier type
1087
1087 (which puts the machine in maintenance mode)
512
START (BUTTON)
you should see Scan to SMB (and it probably is off)
SELECT ON and press Start
001
START
now with a browser you can go to the ip address of the copier and setup the scan to smb/folder section.
-Jim
also i had a guy try to connect to the box via command prompt by typing ftp 192.168.2.57 from the subnet where the scanner IS working
and he can get to the box but the login fails
I did not no this yesterday so I got there support on the line because that kind of told me it is probably not the ASA
He tried to change some permissions to the folder on the black box so i can get to the shared folder where the folder i am scanning my documents to are but when we try to open the share folder we get an access is denied prompt so he has to escalate this to a higher tier of support
does anyone know why i would be able to get to the share on the black box but not be able to access anything in it
i am trying to access this share from 192.168.7.0 subnet and the black box sits on subnet 192.168.2.0
I am on a domain
the black box is not on a domain, it is part of a workgroup
The black box, may be deny access based on network location, it would consider the 192.168.7.0 as an outside entity. it may have some inherent rights that are built into just based on the network address (or there could a table that have the other subnet entered into it)
Save the "turn on SMB" on the copier instructions, those may come in handy some day.
-Jim
to answer your question about the access (and subsequent access denied)
when using FTP protocol there are basically two layers of permissions
Those that can login (and read)
and those that can login (and read and write)
and it sounds like you do not have write permissions based on the credentials that you are using. you should be able to modifiy and give additional permissions to the folddler structure for the user account that you are using.
-Jim
Business Accounts
Answer for Membership
by: fredbfruglePosted on 2009-01-28 at 18:28:14ID: 23493832
The Kyocera 3535 supports scan to email, ftp, and smb. In this situation, i would rule out the ASA by temporarily moving (if possible) the copier to the other subnet.
actually the better way to rule out the ASA is to use either a 3rd party FTP client or the built in one in Windows to attempt to access the "Black Box" check to see if the responses are the same, from both subnets.
I suspect, that ports 21 and 22 are either not allowing traffic or are being "inspected" by the ASA
you will have to make acls (or not inspect FTP) on the ASA
once you can "talk" to the box from a windows machine, you will be able to make the MFP(copier) talk....it's lack of error codes and visual responses, leave alot to be desired.
BTW, my personal preference is scan to smb on the Krack-O-cera's
-Jim