Hi Steve,
you almost there, this is what I understand in your post, you have a tftp server running on the vpn client machine, and when you vpn into your network you want to copy the asa configuration into that tftp server, please let me know if this is not correct but if the above is so you need to do few things in this scenario.
on the asa you have to define a tftp server and path. assume you have created a folder called root in tftp server , and assume VPN pool network is 10.20.20.0/24
i.e
asa(config)#
tftp-server inside :\root
thats it
once you vpn in and successfully connect you need to stop and restart tftp server on that machine so that tftp can also bind the ip assign by the ASA RA pool, so tftp udp port 69 will be listening on two IP addresses the local NIC of the PC and the VPN RA virtual IP.
once you have that then try copying running config to tftp
note the following:
when it ask you in the field bellow, you need to specify the RA client Virtual IP of 10.20.20.20 where tftp is running off.
Address or name of remote host [10.20.20.0]? 10.20.20.20
asa#copy running-config tftp
Source filename [running-config]?
Address or name of remote host [10.20.20.0]? 10.20.20.20
Destination filename []? asa_config _test9
Cryptochecksum: 913690bd 97637c7a aa5060dc 049c1919
!!!!!
if your scenario is a vpn tunnel same principle applies other than permitting udp for tftp in your nonat acl on that l2l tunnel.
Rgds
Jorge
Jorge Rodriguez
