Re: Routers as tftp servers [7:27912]
Ok, I guess I need to explain my question in other words. If you are at the console of route A, can you upload a config file from router A to Router B? Thanks John Tafasi Nicolas FEVRIER wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... TFTP does not provide any security for file transfers, so it should not be available to a public firewall interface. Unauthorized users can upload new config files to your router, as well as download your current stored configs for analysis. How can you configure the router to accept TFTP file uploads? I use : tftp-server flash:c3640-is-mz.121-5.T9.bin in my source router to allow other routers to copy the ios image from this one. Check this out : http://www.cisco.com/warp/public/63/copyimage.html Nicolas. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=28035t=27912 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Routers as tftp servers [7:27912]
JP wrote: It is a lot saver and easy to manage if you just use a PC, I do not see why you would want to use your router as tftp server. Your PC might not be in the appropriate location to act as the tftp server. For example, at an ISP, the routers are internet connected and the PCs are on a management LAN behind a firewall. You'd have to punch a hole in that firewall, but the routers are obviously directly connected to each other. Jason author, Boson bcmsn1, bscn2, bsci2, Quizware ccie Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=27938t=27912 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Routers as tftp servers [7:27912]
JP wrote: Nicolas, It is a lot saver and easy to manage if you just use a PC, I do not see why you would want to use your router as tftp server. JP Hi JP, to give you a good example (good because I had to do it last week ;)). I had several core routers connected with high bandwidth lines (FastEthernet and ATM OC3), and I needed to upgrade them but I only had access to a subsidiary office connected to the main network via an ISDN line. So I just upload the first router of the main network (via ISDN... take a while...), and I configured this router to be a tftp server. Then I uploaded my IOS image in the others backbone routers from the first one. It's just an example, and I'm sure there is many reasons not to use a router as a tftp server (security, cpu consumption, ...) but the feature exists and it's good to know it :) Regards, Nicolas. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=27939t=27912 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Routers as tftp servers [7:27912]
the-other -jason wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... JP wrote: It is a lot saver and easy to manage if you just use a PC, I do not see why you would want to use your router as tftp server. Your PC might not be in the appropriate location to act as the tftp server. For example, at an ISP, the routers are internet connected and the PCs are on a management LAN behind a firewall. You'd have to punch a hole in that firewall, but the routers are obviously directly connected to each other. Where are your servers receiving snmp traps? As Nicolas mentioned, there are maybe exceptions, but that's how far I would go. Jason author, Boson bcmsn1, bscn2, bsci2, Quizware ccie Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=27957t=27912 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Routers as tftp servers [7:27912]
TFTP does not provide any security for file transfers, so it should not be available to a public firewall interface. Unauthorized users can upload new config files to your router, as well as download your current stored configs for analysis. How can you configure the router to accept TFTP file uploads? I use : tftp-server flash:c3640-is-mz.121-5.T9.bin in my source router to allow other routers to copy the ios image from this one. Check this out : http://www.cisco.com/warp/public/63/copyimage.html Nicolas. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=27913t=27912 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Routers as tftp servers [7:27912]
Nicolas, It is a lot saver and easy to manage if you just use a PC, I do not see why you would want to use your router as tftp server. JP Nicolas FEVRIER wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... TFTP does not provide any security for file transfers, so it should not be available to a public firewall interface. Unauthorized users can upload new config files to your router, as well as download your current stored configs for analysis. How can you configure the router to accept TFTP file uploads? I use : tftp-server flash:c3640-is-mz.121-5.T9.bin in my source router to allow other routers to copy the ios image from this one. Check this out : http://www.cisco.com/warp/public/63/copyimage.html Nicolas. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=27918t=27912 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
