topic Here's what I do: in Network Security

asa and scp

Yves-Buecking_2 — Fri, 21 Feb 2020 08:53:22 GMT

How do I use scp with my asa to copy the running-config to a linux device ?

Thanks

Re: asa and scp

khinze — Mon, 09 Jun 2008 15:00:56 GMT

Since this was posted in '06, has no one else had this question? I can scp files to the ASA and can even scp files from disk0 on the ASA to/from a linux box. I cannot however figure out how to grab system:running-config to get the config the same way you would from a tftp. This is for backup purposes to replace tftp.

Re: asa and scp

Farrukh Haroon — Tue, 10 Jun 2008 01:34:10 GMT

As I mentioned in my earlier post, you could setup a VPN between the ASA|PIX and the Server running the TFTP daemon to secure the communication, I would give it a try. You can use transport mode for this purpose for minimal overhead.

Regards

Farrukh

Here's what I do:

btarver — Tue, 17 Mar 2015 19:14:45 GMT

Here's what I do:

When logged into an ASA via ssh, I run

asa# copy run filename.txt

Then, I scp the file down to my local machine by running

linux$ scp user@sf-fw-loc2.domain.com:filename.txt .

TIP: If I have used tftp before on the respective ASA, the filename I could use will be in 'sh run tftp':

asa# sh run tftp
tftp-server inside 10.0.0.21 sf-fw-loc2.txt

My tftp config line will have identifying information in the filename, e.g. ny-fw-loc1.txt, so that I can know which firewall the config is from when I need to restore a file. The filename you create is arbitrary.

TIP: By utilizing ssh keys, you could achieve these scp transfers without passwords. By not using passwords, you could also automate the download process using cron.