09-20-2011 06:36 AM
Hi,
i tried to import a IOS from a network device into the software repository but the job fails with the following line in the log:
sw-10-ed24#
sw-10-ed24#dir /all flash:
Directory of flash:/
2 -rwx 3755882 Mar 01 1993 02:29:05 +01:00 c2940-i6k2l2q4-mz.121-22.EA10a.bin
3 -rwx 1048 Jun 29 2011 00:50:48 +02:00 multiple-fs
4 -rwx 4416 Jul 26 2011 11:23:18 +02:00 vlan.dat
5 -rwx 271 Mar 01 1993 01:26:09 +01:00 info
6 -rwx 5520 Jun 29 2011 00:50:47 +02:00 config.text
405 -rwx 271 Mar 01 1993 01:28:34 +01:00 info.ver
7 -rwx 1955 Jun 29 2011 00:50:48 +02:00 private-config.text
7612416 bytes total (3840512 bytes free)
sw-10-ed24#
sw-10-ed24#disable 0
sw-10-ed24>
sw-10-ed24>
sw-10-ed24>_tune_
sw-10-ed24>
sw-10-ed24>
The chosen protocol ist SCP and the option "Use SSH for software image upgrade
and software image import through CLI(with fallback to TELNET)." is enabled.
Any help us much appreciated. Thank you.
Solved! Go to Solution.
09-21-2011 08:46 AM
You can use the other protocol listed on the Admin -> Software Mgmt page like tftp , for scp you have to setup the server on the device, for tftp the device behaves as a client.
09-20-2011 12:26 PM
Here are a few initial setup details to use SCP
SCP (Secure Copy Protocol) Issues
Be aware of the prerequisites necessary for SCP to work well in RME:
Ensure that you have enabled SSH on the device and have the credentials available in DCR.
The SCP server should be enabled on the device.
Note that SWIM acts as an SCP client (different from other protocols).
For configuring SCP on CiscoWorks
To enable the configuration archive to gather the configurations using the scp protocol, modify your device configurations.
To configure local User name:
aaa new-model
aaa authentication login default local
aaa authentication enable default none
aaa authorization exec default local
username admin privilege 15 password 0 system
ip ssh authentication-retries 4
ip scp server enable
To configure TACACS User name:
aaa new-model
aaa authentication login default group tacacs+
aaa authentication enable default none
aaa authorization exec default group tacacs+
ip ssh authentication-retries 4
ip scp server enable
User on the TACACS Server should be configured with priv level 15:
user = admin {
default service = permit
login = cleartext "system"
service = exec {
priv-lvl = 15
}
}
09-21-2011 02:16 AM
Hi Thomas,
thank you for your reply. You´re right, some of our devices don´t support scp in IOS (Catalyst 2950T-24).
Does this mean that the only way to download/upload IOS to the devices can be done only through telnet?
Thanks,
Regards,
C.
09-21-2011 07:46 AM
In general you need either ssh or telnet access.
09-21-2011 08:06 AM
Well, ssh is enabled on every device and it doesn´t work. Is the scp server mandatory for copying the IOS firmware?
09-21-2011 08:46 AM
You can use the other protocol listed on the Admin -> Software Mgmt page like tftp , for scp you have to setup the server on the device, for tftp the device behaves as a client.
09-22-2011 12:10 AM
Hi Michael, hi Thomas,
after removing scp and adding tftp as a protocol everything worked as expected. Thank you so much.
Cheers,
Chris
09-21-2011 11:05 PM
You can check if your SCP server on lms is running using pdshow CSSCPServer
Have you filled the username and password under common services -> Server -> Admin -> System Preferences ?
Have you tried in manually using the CLI? something like this?
copy flash:/c3750-ipbasek9-mz.122-50.SE1.bin scp://michel:didata@10.170.46.163/temp/ios.bin
Cheers,
Michel
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide