TFTP communication over WAN link

[jithu p]

Hi all i am gettinfg the following error while copy the configuration from 6590 to tftp server

%Error opening tftp://x.x.x.x/yyyy (Timed out)

1) The file is getting created in the TFTP server but it is empty and a Zero Kb file
2 ) I can able to ping to the FTTP server from the switch
3)  I can able to ping to switch from the tftp server
4) The same tftp server is working wih all another Switches (i have checked with anothed TFTP softwares also but the same problem)
5) The switch is in the different subnet, the switch is having several SVIs. Also Configured the command "ip tftp source interface vlan361" (This interface can able to ping from the tftp server and also can do extended Ping from this IP to the tftp server)
6)The communication between Ftp server and the switch want to cross Point to Point WAN link (Another switches can communicate with the tftp server through the same wan link)
7)If i run FTP server on the same System and try to copy running config from 6509 to FTP some times it is working and some times it is giving the error

Please help me to solve this problem

[Giuseppe Larosa · Accepted solution]

Hello Jithu,

it looks like an MTU problem on the path

Perform ICMP tests using ip source = SVI vlan 361 ip destination= TFTP server, wiith MTU= 1500 with and without DF bit set.

Report on test results on this thread

Hope to help

Giuseppe

[jithu p]

Hi Giuseppe,

You are correct i am getting packet drops with data size 1500,Please look below ping result and help me to solve this problem

6509-SW2#ping 10.168.1.180 size 1500 df-bit source 10.168.141.58

Type escape sequence to abort.
Sending 5, 1500-byte ICMP Echos to 10.168.1.180, timeout is 2 seconds:
Packet sent with a source address of 10.168.141.58
Packet sent with the DF bit set
!!.!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 44/44/44 ms
METDR_6509-SW2#ping 10.168.1.180 size 1500 source 10.168.141.58

Type escape sequence to abort.
Sending 5, 1500-byte ICMP Echos to 10.168.1.180, timeout is 2 seconds:
Packet sent with a source address of 10.168.141.58
!!.!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 44/45/48 ms
6509-SW2#

10.168.1.180  ---- is my TFTP server IP

10.168.141.58 ---- is the Ip address of the VLAN 361

The next hope for reaching 10.168.1.180 is through the trunk port .And there is no physical port added in the VLAN 361

Do i need to change the MTU in the Interface vlan 361 ? or Interface gig 1/48 (Trunk port)?

[Leo Laohoo]

Sounds like firewall is blocking.