SFTP configuration on Cisco switches and router

benjo.rulloda · ‎06-04-2013

Hi all,

SFTP is new to me. How can I configure it on the following Cisco devices: WS-C3750X, WS-C4503-E, and Cisco ASR1001?

Reza Sharifi · ‎06-04-2013

Hi,

SFTP is not available on the 3750s, you can however use SCP.

copy scp ....

HTH

benjo.rulloda · ‎06-04-2013

Hi Reza,

How about for the WS-C4503-E and Cisco ASR1001?

Regards,

Benjo

Leo Laohoo · ‎06-04-2013

How about for the WS-C4503-E and Cisco ASR1001?

The best way to determine what is supported is to run the command "copy ?".

benjo.rulloda · ‎06-05-2013

Hi Leo,

Is there a way that I can disable tftp or ftp transfer on a Cisco device? The "no tftp-server ..." does not seem to work.

Leo Laohoo · ‎06-05-2013

What exactly are you trying to do?

benjo.rulloda · ‎06-05-2013

Our client needs to disable the ftp/tftp service on the Cisco devices and suggested to use SFTP. but based on reza's response, Cisco 3750X does not support SFTP. So now I'm trying to figure out how will I disable tftp service on Cisco. This is part of their Cisco hardening. Can you help me out?

Leo Laohoo · ‎06-05-2013

So now I'm trying to figure out how will I disable tftp service on Cisco.

1. You use a firewall to block TFTP transfers; or

2. You put an ACL to block TFTP.

Frankly, I'd prefer firewall because you make the change in one place. Imagine if you want to apply an ACL to all yoiur appliances.

benjo.rulloda · ‎06-05-2013

Is there a way to disable TFTP service instead?

Leo Laohoo · ‎06-05-2013

Is there a way to disable TFTP service instead?

Not that I'm aware of. ACL or a FW rule can do this for you.

mahesh18 · ‎11-07-2013

Hi Leo,

The best way to determine what is supported is to run the command "copy ?".

I was told by our managemnet to use SFTP on cisco devices.

Read your post and got the answer.

Best regards

MAhesh

dumontrich1 · ‎09-18-2019

Spoiler

you can use the copy SCP: (filename)

@mahesh18 wrote:
Hi Leo,

The best way to determine what is supported is to run the command "copy ?".

I was told by our managemnet to use SFTP on cisco devices.
Read your post and got the answer.

Best regards

MAhesh

flash:(file name) command works great just need to set users in the SCP server SolarWinds has a nice SFTP/SCP server

you can use the copy SCP: (filename) wrote:Hi Leo, The best way to determine what is supported is to run the command "copy ?". I was told by our managemnet to use SFTP on cisco devices.Read your post and got the answer. Best regards MAhesh wrote:Hi Leo, The best way to determine what is supported is to run the command "copy ?". I was told by our managemnet to use SFTP on cisco devices.Read your post and got the answer. Best regards MAheshflash:(file name) command works great just need to set users in the SCP server SolarWinds has a nice SFTP/SCP server