This article describes how to build an FTP site using Windows instances. This article uses Win2019_DataCenter_64bit_CN as an example.

Procedures

Step 1: Add IIS and FTP service roles

1．Log in to the ECS Console.

2．Click Start > Server Manager.

3．Enter the Dashboard page and click Add Roles and Features.

4．The Add Role and Function Wizard page opens. On the tab before Start, click Next.

5．Select Role-based or Feature-based Installation and click Next.

6．Select the Server from the Server Pool and click Next.

7．Click Web Server (IIS), in the Add Role and Function Wizard dialog box that opens, click Add Function, then click Next.

8．Click Next twice to enter the Role Service tab of the Select Role Service page.

9．Check the FTP server, including FTP Service and FTP Extension, and click Next.

10．Enter the Confirm Installation Selection page and click Install to start deploying service roles.

11．After completing the installation, click Close.

Step 2: Create FTP user name and password

Create a Windows user name and password for FTP use. If you want anonymous users to be able to access, this step is not necessary.

1．On the Server Manager page, click Dashboard > Tools > Computer Management.

2．Enter the Computer Management page, click System Tools > Local Users and Groups > Users, right-click in the blank area on the right, and select New User.

3．In the New User page that opens, set the user name and password. In this example, the user name is ftptest.

Note: The password must include uppercase letters, lowercase letters, and numbers.

4．Click Create.

Step 3: Set permissions for shared files

Set access, modify and other permissions for folders shared with users on the FTP site.

1．Create a folder for FTP on the server. In this example, the file name is ftp. Right-click the folder and choose Properties.

2．Enter the Property page, click the Security tab, select Everyone, and click Edit.

Note: If Everyone is not available here, you can refer to the Supplement Operation.

3．Select Everyone, and check Everyone's permissions as needed. In this example, all permissions are allowed, and click Confirm.

4．On the Property page, click Confirm again to close the Property page.

Step 4: Add and set up FTP site

1．On the Server Manager page, click Dashboard > Tools > Internet Information Services (IIS) Manager.

2．Enter the Internet Information Services (IIS) Manager page, click the > icon in front of the server name to expand all displayed content.

3．Right-click on the Website and select Add FTP Site.

4．In the Add FTP Site page that opens, enter the FTP site name and the physical path of the shared folder, and click Next.

5．Enter the public IP address and port number of the ECS Instance. The default port number of FTP is 21, or you can set it.

6．Set up SSL as needed, and click Next.

Note:

• None: No SSL encryption is required.
• Allow: Allow non-SSL and SSL connections between the FTP server and the client.
• Need: SSL encryption is required for the communication between the FTP server and the client.

7．According to the following information, check the Authentication, Authorization, and Permission options, and click Finish.

Configuration item	Description
Authentication	There are two authentication methods: Anonymous: Allow any user who only provides the user name anonymous or ftp to access the content. Basic: The user is required to provide a valid user name and password to access the content. Note: Basic authentication does not encrypt the password when it is transmitted over the network. It is recommended to use this authentication method when confirming the security of the network connection between the client and FTP server.
Authorization	Under Allow Access, select an option. All users: All users can access the corresponding content. Anonymous users: Anonymous users can access the corresponding content. Designated role or user group: Only members of the designated role or user group can access the corresponding content. If you select this item, please enter the designated role or user group in the input box below. Designated users: Only designated users can access the corresponding content. If you select this item, please enter the specified user in the input box below.
Permission	Select Read and Write permissions for authorized users.

8．After completion, you can view the built FTP site.

Step 5: Configure FTP Firewall Support (Optional)

If you need to use the passive mode of the FTP server, you need to configure FTP firewall support.

1．Double-click FTP Firewall Support to enter the FTP Firewall Support page.

2．Configure the data channel port range and the external IP address parameters of the firewall.

Note:

• Data channel port range: Specify the port range used for passive connection. The port range that can be specified is 1025-65535. You can set it according to actual business needs.
• External IP address of the firewall: Enter the public IP address of the ECS Instance.

3．Click Apply in the right operation region.

Note: Click Cancel in the Operation region, you can cancel the FTP firewall support.

Step 6: Set up security groups and firewalls

After the FTP site is built, you need to add a rule to allow FTP ports in the inbound direction of the ECS Instance security group. For more information, see Configure Security Group Rules.

The server firewall used for FTP service allows TCP port 21 by default. If you choose another port, you need to add an inbound rule to allow this port in the firewall.

Step 7: Client test

1．Open the client IE browser.

2．In the path bar, enter: ftp: // FTP server IP address: FTP port, for example: ftp: // 101.89.95.105:21.

Note: If you do not fill in the port information, you will access port 21 by default.

3．A dialog box for entering the user name and password opens, indicating that the configuration is successful. Enter the correct user name and password to operate the FTP file with corresponding permissions.

Note: If FTP Firewall Support is not configured, the client needs to set the IE browser when using this method to access the FTP site. Only after the configuration is complete can the FTP folder be opened. You can open the IE browser, select Settings > Internet Options > Advanced, check the Enable FTP Folder View in the Browsing area, uncheck Use passive FTP.

Supplementary Operation

If there are no Evevyone users to choose from when setting folder properties, follow the steps below to add Evevyone users.

1．Under the Security tab group or user name area, click Edit.

2．In the Permission page that opens, click Add.

3．In the Select User or Group page that opens, click Advanced.

4．On the right side of the General Query area, click Find Now, select Everyone in the search results area, and click Confirm.

5．Click Confirm twice to complete the Add.