topic Re: PIX 501 TFTP Problem in Network Security

PIX 501 TFTP Problem

steve.wadge — Fri, 21 Feb 2020 06:41:04 GMT

I wish to upgrade a PIX501 from 6.2 to 6.3 to enable remote management (SSH etc) via IPSEC VPN.

The problem I've encountered is that the PIX 501 won't seem to communicate to/from a TFTP server on the inside network.

I've tried:

wr net

copy tftp flash

tftp server

monitor mode

I can ping to/from the TFTP server address & telnet to PIX but no TFTP connection works.

The TFTP server is working as I proved it from a PIX 506 using the same commands.

Re: PIX 501 TFTP Problem

tvanginneken — Sat, 12 Apr 2003 21:46:41 GMT

I always use the 'copy tftp flash' command and it works fine.

Please check the following:

- can you ping your tftp server form the pix?

- did you specify the correct .bin filename to download?

- is the .bin file in the correct directory on the tftp server?

What error messages do you get when using the 'copy tftp flash' command?

Kind Regards,

Tom

Re: PIX 501 TFTP Problem

steve.wadge — Mon, 14 Apr 2003 10:01:07 GMT

Tom,

Yes can ping the tftp server from PIX.

Yes .bin filename specified correctly

Yes directory on tftp server corrctly set.

The problem is unique to the PIX501 (replicated on a second) as can all works from a PIX506 to the same TFTP server.

Re: PIX 501 TFTP Problem

gfullage — Mon, 14 Apr 2003 21:36:56 GMT

As the previous poster asked:

"What error messages do you get when using the 'copy tftp flash' command?"

Also, do you see any errors on the TFTP server? Does the 501 even send any TFTP packets out?

Re: PIX 501 TFTP Problem

steve.wadge — Tue, 15 Apr 2003 09:01:15 GMT

The error message is just a TFTP timeout.

There is nothing seen on the TFTP server logs.

Using sniffer on my laptop + TFTP server I'm seeing a tftp request (UDP 69) from the PIX ethernet1 to the TFTP server but no response. The TFTP server (Cisco or Pumkin) are both working on the same machine to/from other PIX's & Routers.

Re: PIX 501 TFTP Problem

pmartiny — Tue, 15 Apr 2003 13:39:23 GMT

i had already this error. i solve the problem to increase the timeout in the configuration of the tftp server.

Hope that help you

Paul Martiny