Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

TFTP Error While Saving a PIX configuration

Status
Not open for further replies.

bubarooni

Technical User
Joined
May 13, 2001
Messages
506
Location
US
Here is the quick network setup

cable modem -> PIX 506 -> 1750 Router -> My Network

I can write the 1750's config file to a TFTP server (192.168.1.224) on my network. When I try to write the PIX config I get the following error:

will_pix# write net :pixorig
Building configuration...
TFTP write '/tftproot/pixorig' at 192.168.1.224 on interface 1
Unspecified Error
[FAILED]

The only thing I can figure is I can't get the TFTP to forward across the router since it is an UDP service. I have tried 'ip forward-protocol udp tftp' on the router and even used the 'ip helper-address 192.168.1.224' and went back and blocked everything but the tftp with the 'no ip forward-protocol udp 37'.

If this sounds like the problem to you and you know how I can fix it please help me. Any direction here will be welcomed!

Thanks,
Kelly
 
just trying to keep near the top of the list where a guru can tell me what my tftp error is and how to solve it...
 
since I'm still waking up.. I will toss out the simple answer :)

THe pix doesnt like the TFTP server or there are incorrect permissions set. I had a case not long ago where I used a Cisco Web server to serve/save TFTP configs. Worked great with everything EXCEPT the PIX. I had to use a newer TFTP server instead of what was built into this unit. So that tells me that all TFTP is not the same.. and the PIX is a bit different then the routers. I never dug into it more to find out why.. no time at the time.

What server are you using?

MikeS
Find me at
"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu
 
I just use the Cisco TFTP server which I downloaded off Cisco's site.

 
Same thing:

will_pix# wr net 192.168.1.224:pixorig
Building configuration...
TFTP write '/tftproot/pixorig' at 192.168.1.224 on interface 1
Unspecified Error
[FAILED]

Is it because I'm passing it back across the router?

 
Let me ask this.. do you have a static routing pointing BACK to the router as the route for the subnet of the TFTP server? If not, it will fail. The PIX will not know where to send the TFTP traffic to. Normal internet traffic doesnt need this route since it's gen'ed locally and goes OUT. But to gen it outside and come back in needs the route.

MikeS
Find me at
"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top