It should be enabled by default IIRC
Otherwise make sure there's no "pasv_enable=NO" in the config file.
If it's already enabled then it's probably a firewall issue, you need to load ip-conntrack-ftp module
and have something like:
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
in your firewall rules