TFTP Error While Saving a PIX configuration

[bubarooni]

Here is the quick network setup

cable modem -> PIX 506 -> 1750 Router -> My Network

I can write the 1750's config file to a TFTP server (192.168.1.224) on my network. When I try to write the PIX config I get the following error:

will_pix# write net ixorig
Building configuration...
TFTP write '/tftproot/pixorig' at 192.168.1.224 on interface 1
Unspecified Error
[FAILED]

The only thing I can figure is I can't get the TFTP to forward across the router since it is an UDP service. I have tried 'ip forward-protocol udp tftp' on the router and even used the 'ip helper-address 192.168.1.224' and went back and blocked everything but the tftp with the 'no ip forward-protocol udp 37'.

If this sounds like the problem to you and you know how I can fix it please help me. Any direction here will be welcomed!

Thanks,
Kelly

 

[bubarooni]

just trying to keep near the top of the list where a guru can tell me what my tftp error is and how to solve it...

 

[wybnormal]

since I'm still waking up.. I will toss out the simple answer

THe pix doesnt like the TFTP server or there are incorrect permissions set. I had a case not long ago where I used a Cisco Web server to serve/save TFTP configs. Worked great with everything EXCEPT the PIX. I had to use a newer TFTP server instead of what was built into this unit. So that tells me that all TFTP is not the same.. and the PIX is a bit different then the routers. I never dug into it more to find out why.. no time at the time.

What server are you using?

MikeS
Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu

 

[bubarooni]

I just use the Cisco TFTP server which I downloaded off Cisco's site.

 

[baddos]

Try this:

wr net 192.168.1.224:bleh

 

[bubarooni]

Same thing:

will_pix# wr net 192.168.1.224ixorig
Building configuration...
TFTP write '/tftproot/pixorig' at 192.168.1.224 on interface 1
Unspecified Error
[FAILED]

Is it because I'm passing it back across the router?

 

[wybnormal]

Let me ask this.. do you have a static routing pointing BACK to the router as the route for the subnet of the TFTP server? If not, it will fail. The PIX will not know where to send the TFTP traffic to. Normal internet traffic doesnt need this route since it's gen'ed locally and goes OUT. But to gen it outside and come back in needs the route.

MikeS
Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu