WRITE NET through RA VPN problem - ASA 8.2.1

[Radim Jurica]

Hi,

I have problem with backuping my conf through RA VPN using WRITE NET command.

MYASA(config)# write net 192.168.255.1:test.txt

Building configuration...

Cryptochecksum: c366c4dc eaea3f0c f2f87a80 8ba48cd0

!!!!!!!!!!!!!!!!!!

%Error writing tftp://192.168.255.1///grc.txt;int=OUTSIDE (Timed out attempting to connect)

[FAILED]

On my RA VPN connected PC with TFTP server listening I can see this:

File size unknown, 0 byte transfered

From TFTP log:

Connection received from Public_Outside_IP on port 47874 [09/09 08:51:07.451]

Write request for file <test.txt>. Mode octet [09/09 08:51:07.451]

Using local port 1276 [09/09 08:51:07.451]

<test.txt>: rcvd 0 blk, 0 bytes in 1 s. 0 blk resent [09/09 08:51:08.451]

Connection received from 193.179.220.250 on port 47874 [09/09 08:51:22.405]

Write request for file <test.txt>. Mode octet [09/09 08:51:22.420]

Using local port 1282 [09/09 08:51:22.420]

<test.txt>: rcvd 0 blk, 0 bytes in 1 s. 0 blk resent [09/09 08:51:23.420]

Version of ASA code is 8.2.1, personal FW on PC is off.

Thank you in advance for help.

RJ

[andrew.prince]

Looks like the tftp server is not answering, from internal network can you ping the remote tftp server?

[Radim Jurica]

Yes, I can ping my remote PC from ASA, to assigned pool IP.

RJ

[andrew.prince]

What does the debug of the tftp server indicate?

[Radim Jurica]

There is no debug tftp on ASA. Log from TFTP server I posted before...

RJ

[andrew.prince]

OK - there are a few confusing things from your original post:-

"MYASA(config)# write net 192.168.255.1:test.txt"

BUT the ASA reports

"%Error writing tftp://192.168.255.1///grc.txt"

BUT your tftp debug reports

"Write request for file "

Can you perform a tftp upload again, and post ALL debugs?

[Radim Jurica]

Sorry for that confusion. Everything was originally grc.txt, I rewrited it only for this post purpose.

Are there any other debug possibilities?

Thank you!

RJ