Setting Up Basic FTP Server Share: How to Listen on Local IP (Windows 11)

To set up a basic FTP server share on Windows 11 that listens on your local IP address, you must first enable the "FTP Server" feature within the System settings. Once installed, configure the binding in IIS Manager to ensure it accepts connections on your specific LAN IP rather than just localhost. Finally, verify that Windows Defender Firewall allows inbound traffic on port 21 so that other devices on your network can access the shared files securely and reliably.

Enabling the FTP Server Feature

Windows 11 does not include an FTP server by default; it is part of the Internet Information Services (IIS) suite. You need to install this component before you can create any shares. Open the Start menu and type "Turn Windows features on or off". Select the top result to open the dialog box. In the list, expand "Internet Information Services" and then locate "FTP Server". Check both "FTP Service" and "FTP Extensibility". It is also wise to ensure that "Web Management Tools" are selected if you plan to manage the server via the graphical interface later. Click OK and wait for Windows to apply the changes. A restart may be required depending on your current system state.

Configuring the Binding to Local IP

After installation, the FTP service starts but often binds to all available addresses or localhost by default. To restrict it to your local IP, open the Run dialog with Win + R, type inetmgr, and press Enter. This launches the IIS Manager. In the left Connections pane, click on the computer name at the root level. Double-click "Bindings" in the Features View. Click "Add" to create a new entry. Set the type to "ftp", the IP address to your specific local IPv4 address (e.g., 192.168.1.50), and the port to 21. If you leave the IP as "All Unassigned", the server will listen on every interface, which might expose it to unwanted networks if your PC has multiple adapters. Confirm the settings and close the manager.

Creating the FTP Site and User Permissions

Right-click on "Sites" in the IIS Manager and select "Add FTP Site". Give the site a name and specify the physical path where the files will be stored. On the next screen, enter the SSL settings; for basic internal sharing, you can choose "No SSL" for simplicity, though encryption is recommended for sensitive data. The crucial step here is setting authorization rules. You can choose to allow specific users or all users. If you select "Specific users," enter your Windows username. Ensure the permissions box for "Read" is checked so clients can download files. If you want them to upload, check "Write". Apply these settings to finalize the site creation.

Configuring Windows Firewall Rules

Even with the server running, Windows Firewall will block incoming connections unless explicitly allowed. Open the Control Panel and navigate to "Windows Defender Firewall with Advanced Security". Click on "Inbound Rules" and then "New Rule". Select "Port" and click Next. Choose "TCP" and specify port 21 for control connections. It is also necessary to allow passive ports if you expect large file transfers. Add a rule for TCP ports 4000-5000 (or your chosen range) to handle data transfer. Allow the connection for Domain, Private, and Public profiles to ensure connectivity regardless of your network location. Name the rule "FTP Server Inbound" and finish the wizard. For more details on network connectivity issues, see Windows 11: Solving DNS Drops and Failures.

Testing the Connection

Open File Explorer on another machine on the same network. In the address bar, type ftp://[Your Local IP]. You should be prompted for credentials. Enter the username and password you configured earlier. If successful, you will see the contents of your designated folder. If it fails, ensure the FTP service is actually running by checking the Services app (services.msc) for "FTP Publishing Service". Also, verify that your router is not blocking local traffic, although this is rare for LAN-only communication.

Frequently Asked Questions

Why can't I connect from my phone?

Your phone must be on the exact same Wi-Fi network as the PC hosting the FTP server. If you are using cellular data, the local IP will not be reachable from the internet without complex port forwarding, which is not recommended for security reasons.

Is FTP secure enough for personal use?

Standard FTP sends credentials and data in plain text, making it vulnerable to sniffing on public networks. For home use on a trusted LAN, it is generally acceptable, but consider enabling SSL/TLS in the IIS bindings if you are handling sensitive documents.

What happens if my IP address changes?

If your router assigns a new DHCP lease to your PC, the old FTP link will break. You should either set a static IP reservation in your router settings or use a dynamic DNS service if you need external access, though the latter requires additional firewall configuration.

How do I stop the FTP server?

You can simply stop the "FTP Publishing Service" in the Windows Services management console. Alternatively, you can disable the FTP site in IIS Manager by right-clicking the site and selecting "Stop". This prevents unauthorized access while keeping the software installed.

Can I share different folders for different users?

Yes, IIS allows you to create multiple FTP sites. Each site can point to a different physical directory and have its own set of user authorization rules, allowing you to segment access based on who needs what data.