Configure the FTP server in Microsoft IIS by binding it to the correct IP address and port, ensuring the firewall allows inbound traffic on port 21. Verify that the camera’s network settings match the IIS user credentials and directory permissions to resolve local access issues.
Verify IIS FTP Service Installation
The first step in troubleshooting is confirming that the FTP service feature is actually installed on the Windows Server or workstation running IIS. By default, IIS may only have the HTTP/HTTPS features enabled. Navigate to Control Panel > Programs and Features > Turn Windows features on or off. Expand Internet Information Services and ensure that FTP Server is checked. Under this node, verify that both FTP Service and FTP Extensibility are selected. If these were not previously installed, check them now and click OK to apply changes. A restart of the server may be required depending on your version of Windows.
Configure the FTP Site in IIS Manager
Open IIS Manager from the Start menu. In the Connections pane on the left, right-click Sites and select Add FTP Site. Provide a name for the site and specify the physical path where camera images will be stored. Crucially, set the IP Address to either "All Unassigned" or the specific local IP address of the server. Set the Port to 21. For SSL, choose No SSL if the camera does not support secure FTP, though this is less secure. Click Next to proceed to authentication and authorization settings.
Authentication and Authorization
Select Basic authentication for most standard cameras, as it is widely supported. Create a dedicated Windows user account for the camera rather than using an admin account. Grant this user Read and Write permissions to the specified physical path. Ensure the folder permissions in Windows Explorer also allow this user full control. Mismatches between IIS permissions and NTFS file system permissions are a common cause of silent failures.
Firewall and Network Configuration
Even with correct IIS settings, the Windows Firewall may block incoming connections. Open Windows Defender Firewall with Advanced Security. Create a new Inbound Rule for port 21 (TCP). Allow the connection for all profiles (Domain, Private, Public). Additionally, FTP uses dynamic ports for data transfer. You must configure the FTP Firewall Helper. In IIS Manager, select the server node, double-click FTP Firewall Support, and set the Data Channel Port Range to a static range, such as 50000-50010. Add another inbound firewall rule for this TCP range. Without this, passive mode transfers will fail.
Camera Network Settings Verification
Ensure the camera is on the same subnet as the IIS server. Check the camera’s IP configuration via its web interface or serial console. Enter the correct IP address of the IIS server into the camera’s FTP client settings. Input the username and password created earlier. Some cameras require the full path to the directory, while others expect just the root. Test connectivity by pinging the IIS server IP from the camera’s diagnostic tools. If ping fails, there is a Layer 3 network issue unrelated to FTP.
Testing Connection
Use a tool like FileZilla Client on a separate machine on the same network. Connect using the IIS server’s IP, port 21, and the test credentials. Try uploading a small file. If this succeeds, the IIS configuration is correct, and the issue lies in the camera’s specific implementation or cable integrity. If it fails, check the IIS logs located in %SystemDrive%\inetpub\logs\LogFiles for error codes.
Common Error Codes and Solutions
Error 530 indicates authentication failure. Re-verify the username and password, ensuring no trailing spaces. Error 550 means file access is denied. Check NTFS permissions again. Error 425 often relates to the firewall data channel range not being open. Review the inbound rules for the dynamic port range. If you encounter intermittent drops, check for cable faults or switch port saturation.
Frequently Asked Questions
Why can I connect to FTP but cannot upload files?
This is usually a permission issue. Ensure the Windows user account has Write access in both IIS Manager and the underlying NTFS folder properties. Check that the folder is not read-only in Windows Explorer.
Does the camera need to support SFTP?
No, standard IIS FTP supports Basic FTP over TCP. SFTP requires additional software like WinSCP or third-party modules. Most industrial cameras use standard FTP or FTPS, not SFTP.
How do I reset the FTP site binding?
In IIS Manager, select the FTP site, click Bindings in the Actions pane. Remove any conflicting bindings and re-add the correct IP and port 21. Restart the site afterward.
Can I use IPv6 for camera communication?
Yes, if your network supports it. Configure the FTP site to listen on the IPv6 address and ensure the firewall rule allows IPv6 traffic on port 21. The camera must also be configured with an IPv6 address.
What if the camera says "Connection Refused"?
This indicates the port is blocked. Verify the Windows Firewall inbound rule for port 21 is active. Also, ensure no other application is using port 21. Use netstat -ano | findstr :21 to check for conflicts.