ASA TFTP issue with VPN

[rakeshvelagala]

Hi All,

Please kindly advise on the below.

We have an ASA in production. We are trying to upgrade it. The issue is, we are not able to upload files remotely to ASA. We have both ftp and tftp inspection enabled.

Below is the scenario

         Inside----ASA----outside

We are connecting to ASA by using client from outside interface. After able to connect successfully, I try to initiate the copy from ASA (copy tftp disk0:).

I can see from my tftpd, there is a connection initiated but the connection just drops. I tried to ping and see only (?????).

Question:

Do I need to enable

#permit same-security permit intra-interface or any other thing I need to check? Please advise.

I am yet to do staging to replicate the issue.

Thanks in advance

[viveknathmangalat33]

hi , please try if scp works.

! command to configure scp on a cisco firewall

ssh scopy enable

[Adeolu Owokade]

Hi,

There is a similar thread here about SSH and TFTP maybe it can help you: https://supportforums.cisco.com/discussion/12460006/cannot-get-ssh-or-tftp-travel-accross-vpn-tunnel

[rakeshvelagala]

Hi Adeolu Owokade,

Thanks for the help. I did some staging with my colleague and managed to resolve it. The resolution is same as that in the blog.

Thanks