Errors during switch backup and restore ( Catalyst 2960 )

[gill1099@gmail.com]

I am doing a lab activity to back a switch config and restore it to the same switch using tftp. While restoring the switch config back to the same switch I am getting some errors. Please take a look at the following output:

Switch#copy tftp: run
Address or name of remote host [10.10.10.11]?
Source filename [running-config1]? running-config2
Destination filename [running-config]?
Accessing tftp://10.10.10.11/running-config2...
Loading running-config2 from 10.10.10.11 (via Vlan786): !
[OK - 8235 bytes]

3082023D 308201A6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
^
% Invalid input detected at '^' marker.

30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
^
% Invalid input detected at '^' marker.

69666963 6174652D 39343234 37353339 32301E17 0D393330 33303130 30303231
^
% Invalid input detected at '^' marker.

375A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
^
% Invalid input detected at '^' marker.

532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3934 32343735
^
% Invalid input detected at '^' marker.

33393230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
^
% Invalid input detected at '^' marker.

9EF422FC DCF829FD 7A36F3EE 33FD032D 3026E2EF 4A6E2F9F C19CF06B F6BC1CBE
^
% Invalid input detected at '^' marker.

E86D5F25 D8A6AA32 3B3A1C2A F4726A06 78264550 47E516A3 7AFD48BE 013B9CC0
^
% Invalid input detected at '^' marker.

8D009B54 D952F34F 02F618D6 801E6404 968F2DBD 78D3936F B50DDE5D 7F6F8DEF
^
% Invalid input detected at '^' marker.

5B409233 E49AE318 4BD890CE 0E2FDCC6 FBD90A97 A0252275 205EF553 15FA081B
^
% Invalid input detected at '^' marker.

02030100 01A36730 65300F06 03551D13 0101FF04 05300301 01FF3012 0603551D
^
% Invalid input detected at '^' marker.

11040B30 09820753 77697463 682E301F 0603551D 23041830 16801416 DF255176
^
% Invalid input detected at '^' marker.

56D4732F C15055EB 4CB5B212 764F3030 1D060355 1D0E0416 041416DF 25517656
^
% Invalid input detected at '^' marker.

D4732FC1 5055EB4C B5B21276 4F30300D 06092A86 4886F70D 01010405 00038181
^
% Invalid input detected at '^' marker.

00373269 C95274B1 F18A1D95 D12C3FD4 6E2AB2A2 88DB68FC 67D64901 AF08DE17
^
% Invalid input detected at '^' marker.

BE53F687 895F9838 903D0EB1 CCAAE21A 9E469F58 822D81C7 71F60E02 8AA59F35
^
% Invalid input detected at '^' marker.

25470847 E9CB8EA1 F41B5A59 3F68A7F2 23F23464 B889278F 1B981AA9 1C7EFD62
^
% Invalid input detected at '^' marker.

F40E531C B06188A8 C32365FE C06786E8 0792BE2B 69DA5FFA 1D43E317 DD97DC84 F3
^
% Invalid input detected at '^' marker.

quit
^
% Invalid input detected at '^' marker.

8235 bytes copied in 85.270 secs (97 bytes/sec)

Any clue why is this happening. Am I doing any step wrong? Please note I am trying to restore config to the same switch from which I backed up.

ThANKS!

[Leo Laohoo]

Post the complete output to the command "sh version".

[johnlloyd_13]

hi,

this is probably your RSA key (usually used or SSH or HTTPS) and doesn't need to be re-configured again (via TFTP) on the switch.

you can verify with the show crypto key mypubkey rsa and compare if output is the same.

[gill1099@gmail.com]

Hello John ,

So that means after I back up the config of a particular switch I need to chop the crypto part of the config before restoring it to the another or same switch ?

Like should I chop the following part from config file( before restoring ) :

crypto pki certificate chain TP-self-signed-942475392
certificate self-signed 01
9EF422FC DCF829FD 7A36F3EE 33FD032D 3026E2EF 4A6E2F9F C19CF06B F6BC1CBE
E86D5F25 D8A6AA32 3B3A1C2A F4726A06 78264550 47E516A3 7AFD48BE 013B9CC0
8D009B54 D952F34F 02F618D6 801E6404 968F2DBD 78D3936F B50DDE5D 7F6F8DEF
D4732FC1 5055EB4C B5B21276 4F30300D 06092A86 4886F70D 01010405 00038181
00373269 C95274B1 F18A1D95 D12C3FD4 6E2AB2A2 88DB68FC 67D64901 AF08DE17
BE53F687 895F9838 903D0EB1 CCAAE21A 9E469F58 822D81C7 71F60E02 8AA59F35
25470847 E9CB8EA1 F41B5A59 3F68A7F2 23F23464 B889278F 1B981AA9 1C7EFD62
F40E531C B06188A8 C32365FE C06786E8 0792BE2B 69DA5FFA 1D43E317 DD97DC84 F3
quit
!

Thanks in ADvance 

[johnlloyd_13 · Accepted solution]

yes, omit that part.

you'll need to generate a new crypto key when configuring a new switch:

crypto key generate rsa modulus 2048

[amk1]

Hello Guys,

I am facing the same error and did not understand the below solution "omit this part of data"

This data is the part of back-up. can someone please help me to find the answer.

gill1099@gmail.com did you find any solution.

switch model is WS-3850-24T-L

% Invalid input detected at '^' marker.

FDC26FA5 C3E5D8A3 67FF7985 5B60CD76 81D1A906 C994AD2C 8F239B99 D3D1C6C4
^
% Invalid input detected at '^' marker.

9793B492 18EDB927 3E76536C 6B
^
% Invalid input detected at '^' marker.

quit
^
% Invalid input detected at '^' marker.
Default AP group (default-group) is not configurable.
6284 bytes copied in 12.740 secs (493 bytes/sec)

Thanks in Advance

[johnlloyd_13]

hi,

if you've followed the thread, you need to omit or skip the RSA key part (from your copy/paste)

you'll need to generate a new RSA key: crypto key generate rsa modulus 2048 on the new switch you're dumping the config.

crypto pki certificate chain TP-self-signed-942475392
certificate self-signed 01
9EF422FC DCF829FD 7A36F3EE 33FD032D 3026E2EF 4A6E2F9F C19CF06B F6BC1CBE
E86D5F25 D8A6AA32 3B3A1C2A F4726A06 78264550 47E516A3 7AFD48BE 013B9CC0
8D009B54 D952F34F 02F618D6 801E6404 968F2DBD 78D3936F B50DDE5D 7F6F8DEF
D4732FC1 5055EB4C B5B21276 4F30300D 06092A86 4886F70D 01010405 00038181
00373269 C95274B1 F18A1D95 D12C3FD4 6E2AB2A2 88DB68FC 67D64901 AF08DE17
BE53F687 895F9838 903D0EB1 CCAAE21A 9E469F58 822D81C7 71F60E02 8AA59F35
25470847 E9CB8EA1 F41B5A59 3F68A7F2 23F23464 B889278F 1B981AA9 1C7EFD62
F40E531C B06188A8 C32365FE C06786E8 0792BE2B 69DA5FFA 1D43E317 DD97DC84 F3
quit

[amk1]

Hi John,

Thanks for your quick support.

I have check for generating new RSA key but did not get the way to generate this key.

Could you please suggest how to do the same 

is this some command "crypto key generate rsa modulus 2048"

if yes then it should be applied in which mode,  like privileged mode or config mode.

Thanks in Advance 

[johnlloyd_13]

hi,

generally it's under global config mode: configure terminal

[Anders Ballegaard]

Looks like your crypto key

You need to create a new one after restoring the configuration