FTP Download Protocol Error

[CoryMurray]

Hello,

I am currently trying to upgrade my C4948s I successfully upgraded 5 units but one is giving me an issue. 

This is what I am doing:

Switch#config t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#int vlan 1
Switch(config-if)#ip add 192.168.1.146 255.255.255.0
Switch(config-if)#no shut
Switch(config-if)#ex
Switch(config)#ip ftp user bob
Switch(config)#ip ftp password password
Switch(config)#^Z
Switch#
00:08:38: %SYS-5-CONFIG_I: Configured from console by console
Switch#copy ftp: bootflash:
Address or name of remote host []? 192.168.1.90
Source filename []? cat4500-entservicesk9-mz.150-2.SG11.bin
Destination filename [cat4500-entservicesk9-mz.150-2.SG11.bin]?
Accessing ftp://192.168.1.90/cat4500-entservicesk9-mz.150-2.SG11.bin...
%Error opening ftp://192.168.1.90/cat4500-entservicesk9-mz.150-2.SG11.bin (Protocol error)

Any Ideas?

[Georg Pauwen]

Hello,

I assume the switch can ping the FTP server ? Do SCP and/or TFTP work ? The FTP server usually has some sort of log, what does that say ?

You might want to try and enter the line below as a whole instead of using the prompts:

switch#copy ftp://bob:password@192.168.1.90/cat4500-entservicesk9-mz.150-2.SG11.bin bootflash:

[Vijay Kumar Yadav]

Do you have any access list on this device blocking ftp?

[Richard Burts]

The original post says that 5 units have been upgraded successfully. Can you verify that these units were using the same FTP server and were loading the same image file? If so it would eliminate possible issues of files in correct directory of FTP, permitting remote read access, etc. 

The switch is configured with an IP in network 192.168.1.0/24. The address of the FTP server is in that range so we should be dealing with local access and would not have any issues about routing. Can you verify that the FTP server IP and mask also put it into that network? After you attempt the FTP would you do show arp and verify that your switch does have an entry for the FTP server address?

I agree that checking the logs of the FTP server might provide helpful information. Does the FTP server log indicate that it received the request from your switch? Does the log indicate any issue about responding to that request?

HTH

Rick

[CoryMurray]

I followed the same method for each of the switches as I mentioned above. All the same FTP and same Image. I don't get a response from the FTP when trying to connect with this particular switch. I do however have a successful ping to the FTP server from this switch. I have deleted all configurations on the units before setting up mine for the transfer. I also have the confreg set to ignore any configurations just in case i miss any. I can add the arp later today. 

[CoryMurray]

I tried the first suggested response with the entire command all at once and same outcome. 

Here is the output

Switch#copy ftp://bob:password@192.168.1.90/cat4500-entservicesk9-mz.150-2.SG1$
Destination filename [cat4500-entservicesk9-mz.150-2.SG11.bin]?
Accessing ftp://bob:password@192.168.1.90/cat4500-entservicesk9-mz.150-2.SG11.bin...
%Error opening ftp://bob:password@192.168.1.90/cat4500-entservicesk9-mz.150-2.SG11.bin (Protocol error)

Switch#sho arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 192.168.1.90 0 f8b1.56b0.67dd ARPA Vlan1
Internet 192.168.1.222 0 48f8.b3a0.e107 ARPA Vlan1
Internet 192.168.1.146 - 0022.557b.0a7f ARPA Vlan1 

[andrewswanson]

Hi

There is a bug (https://bst.cloudapps.cisco.com/bugsearch/bug/CSCtb34905/?rfs=iqvred)  regarding ftp and 4500 - not sure if you are using the affected release. I would have thought this bug would result in "Incorrect Login/Password" rather than "protocol error" so it may not be what you are experiencing.

hth
Andy

[Richard Burts]

Thanks for the additional information. It is helpful to know that other switches have used this server and this image file without problems. Is it possible that the user ID for FTP and/or the password for FTP are different on this switch?

The arp information does show that there is successful communication between the switch and the server at layer 2. And the fact that the switch is successful in ping to the server confirms IP connectivity and eliminates that as a potential problem.

Perhaps debug for ftp might provide some insight?

HTH

Rick