PIX 501 TFTP Problem

[steve.wadge]

I wish to upgrade a PIX501 from 6.2 to 6.3 to enable remote management (SSH etc) via IPSEC VPN.

The problem I've encountered is that the PIX 501 won't seem to communicate to/from a TFTP server on the inside network.

I've tried:

wr net

copy tftp flash

tftp server

monitor mode

I can ping to/from the TFTP server address & telnet to PIX but no TFTP connection works.

The TFTP server is working as I proved it from a PIX 506 using the same commands.

[tvanginneken]

I always use the 'copy tftp flash' command and it works fine.

Please check the following:

- can you ping your tftp server form the pix?

- did you specify the correct .bin filename to download?

- is the .bin file in the correct directory on the tftp server?

What error messages do you get when using the 'copy tftp flash' command?

Kind Regards,

Tom

[steve.wadge]

Tom,

Yes can ping the tftp server from PIX.

Yes .bin filename specified correctly

Yes directory on tftp server corrctly set.

The problem is unique to the PIX501 (replicated on a second) as can all works from a PIX506 to the same TFTP server.

[gfullage]

As the previous poster asked:

"What error messages do you get when using the 'copy tftp flash' command?"

Also, do you see any errors on the TFTP server? Does the 501 even send any TFTP packets out?

[steve.wadge]

The error message is just a TFTP timeout.

There is nothing seen on the TFTP server logs.

Using sniffer on my laptop + TFTP server I'm seeing a tftp request (UDP 69) from the PIX ethernet1 to the TFTP server but no response. The TFTP server (Cisco or Pumkin) are both working on the same machine to/from other PIX's & Routers.

[pmartiny]

Hi

i had already this error. i solve the problem to increase the timeout in the configuration of the tftp server.

Hope that help you

Paul Martiny