The SFTP protocol runs over the SSH protocol, therefor, if you wish to get access to a DAL router file system via SFTP, you must first verify that SSH access to the device is enabled.
Navigate to Device Configuration > Services > SSH and toggle its Enable slider such that it's blue (enabled):
When SSH access is enabled, a specific firewall rule that grants access to TCP port 22 will be added automatically.
NOTE: If you wish to get access through a WAN interface, an additional firewall rule must be added manually for the “External” zone:
“Interactive shell access” for the appropriate Group of users also need to be enabled.
As shown in the example below, it is enabled for the group “admin”:
Navigate to Device Configuration > Authentication > Groups > admin and enable Interactive shell access:
If this setting is not enabled, the following error message will show up when connecting using an SFTP application:
Once this setting is enabled, the connection works as expected:
Last updated:
Aug 18, 2026