1710 tftp uploads through tunnel fail

[drumrb0y]

I'm attempting to upgrade the IOS image on a 1710 router connected via VPN tunnel to a 3000 concentrator; it routes all inside traffic to the tunnel, but since the 1710 attempts to communicate itself from the outside interface, it cannot see the TFTP server I have set up on the inside network on the concentrator side of the tunnel - it tries to out the wrong interface... I've tried to configure a source-interface to force the 1710 to look to the tunnel, but the inside interface will look inbound to the internal remote network, not the internal network across the VPN tunnel, where I want it to go

What is the best way to have the 1710 reach my TFTP server across the VPN tunnel, instead of going through the outside interface and exposing the TFTP server to the Internet?

Thanks for your input,

Marc

[gfullage]

You should just need the following:

ip tftp source-interface

The 1710 will then source all TFTP packets from the inside interface, and as long as that is included in the crypto ACL then it will be encrypted and sent over the tunnel.

[cscherb]

Uhhh .. great !

Is a similar command available in PIX OS for outgoing scep (simple certificate enrollment protocoll) traffic ?