Tftp issue with new devices (9300 & 3850)

[Leo Laohoo]

Uninstall 3CDaemon and use TFTPd32.

[ittechk4u1]

done..  but still the same issue

[Georg Pauwen]

Hello,

you have the below in your config:

archive
path tftp://10.18.2.17/$h

Is TFTP working to this IP ?

Typically UDP port 69 is being used by TFTP, as mentioned before by another contributor, make sure your Windows firewall or antivirus is not blocking that...

[ittechk4u1]

No its(10.18.2.17) also not working. Windows firewall and antivirus are not blocking .

Its working for all other devices(more then 200-300) but not for few ones, specially the new ones!

Thanks

[balaji.bandi]

I know you have tried different Options, just like to understand, what are devices involved in the network path from Switch to TFTP Server.

what happens if you connect the Laptop to same Switch and do TFTP ?

[ittechk4u1]

Hi,

issue with 3850.....have:

3850 Microwave connection switch(issue)

3850 - WAN Switch
PA3060 - Palo Alto Firewall
Nexus 5672 - Core
2960X - Edge --->TFTP Server

Issue with 9300 have..

9300 switch (Issue)

PA 220 Remote FW

4431 - Edge Router
!
VPN
!
4451 - WAN Router
3850 - WAN Switch
PA3060 - Palo Alto Firewall
Nexus 5672 - Core
2960X - Edge---> TFTP server

Thanks

[Richard Burts]

There are two things I would like to focus on.

1) Leo noticed something that I did not catch at first which is that in the output of the attempt to copy the first response was ! and then ... 

2) the original poster tells us that

i can see the request coming to TFTP server .

So we do not need to worry about possible routing or connectivity issues. And do not need to worry about possible security policies on a device in the path that prevent the tftp packets from reaching the server. We do need to look for possible issues on the tftp server. What exactly do the messages on the server show when attempting to do the tftp copy? Would debug for tftp on the cisco device perhaps have something helpful?

HTH

Rick

[ittechk4u1]

Hi,

Message on the server:

debug tftp events/packets:

PNXCI001#copy startup-config tftp:
Address or name of remote host []? 192.168.19.7
Destination filename [pnxci001-confg]?
!
Feb 12 05:50:35.285: TFTP: Sending write request (retry 0), len 36, optlen 13, socket_id 0x7F0E7719D990 len 36
7F0E6F820F50: 0002706E 78636930 30312D63 ..pnxci001-c
7F0E6F820F60: 6F6E6667 006F6374 65740062 6C6B7369 onfg.octet.blksi
7F0E6F820F70: 7A650038 31393200 00 ze.8192..
Feb 12 05:50:35.446: TFTP: Received OACK, socket_id 0x7F0E7719D990
Feb 12 05:50:35.446: TFTP: Processing OACK, socket_id 0x7F0E7719D990
Feb 12 05:50:35.446: TFTP: parsed option name blksize, value 8192
Feb 12 05:50:35.446: TFTP: Sending block 1 (retry 0), len 8192, socket_id 0x7F0E7719D990.
Feb 12 05:50:39.447: TFTP: Sending block 1 (retry 1), len 8192, socket_id 0x7F0E7719D990.
Feb 12 05:50:44.448: TFTP: Sending block 1 (retry 2), len 8192, socket_id 0x7F0E7719D990.
Feb 12 05:50:50.449: TFTP: Sending block 1 (retry 3), len 8192, socket_id 0x7F0E7719D990.
Feb 12 05:50:57.449: TFTP: Sending block 1 (retry 4), len 8192, socket_id 0x7F0E7719D990.
%Error writing tftp://10.18.19.7/pnxci001-confg (Timed out)
Feb 12 05:51:05.450: TFTP: Sending block 1 (retry 0), len 0, socket_id 0x7F0E7719D990.
Feb 12 05:51:09.451: TFTP: Sending block 1 (retry 1), len 0, socket_id 0x7F0E7719D990.
Feb 12 05:51:14.450: TFTP: Sending block 1 (retry 2), len 0, socket_id 0x7F0E7719D990.
Feb 12 05:51:20.450: TFTP: Sending block 1 (retry 3), len 0, socket_id 0x7F0E7719D990.
Feb 12 05:51:27.451: TFTP: Sending block 1 (retry 4), len 0, socket_id 0x7F0E7719D990.
PNXCI001#

Thnaks

[Leo Laohoo]

Wait ... Can you copy/move the file from one switch to another (via TFTP)?

[ittechk4u1]

No its also not working...

[Leo Laohoo]

---

@ittechk4u1 wrote:

Windows firewall and antivirus are not blocking .

---

Did you check network firewall?

[ittechk4u1]

yes we checked it.

FYI: these two switches are connected directly as a trunk port. Still TFTP not working!!

[ittechk4u1]

Sorry Leo, 

TFTP between these two switches are working .(I put the wrong TFTP server IP )

[Leo Laohoo]

---

@ittechk4u1 wrote:

TFTP between these two switches are working .(I put the wrong TFTP server IP )

---

As I've suspected, this is not a "network" issue.  It's an issue with the TFTP server.

[ittechk4u1]

Leo,

But same TFTP server is working for all other devices (example: router, firewall...etc). Only not working for Switches!

layout:

Thanks again.