PIX_TFTP

[amancuso]

I would like to back up the configurations from my PIX to a TFTP server. What files should I back up?

And what command (syntax) do I use?

Thank You

[jdepies]

You can only backup your config file:

write net IP_ADDRESS\FILENAME.TXT

the IP address is for your TFTP server

the filename.txt is what you want the config to be named when it is copied to your tftp server. Make sure you have the extension on the filename.

[dlac455]

Is there any restriction that the TFTP server must be on the inside interface?

[nkhawaja]

HI,

no, i dont think so

Thanks

Nadeem

[bfl1]

You can tftp to a machine on any interface, there is no restriction... but keeping with the Cisco SAFE principles, and common sense, make sure you put an acl rule if you are tftp'in to the outside interface - only allow the management address... also, please implement RFC 2827 filtering... only allow addresses within your subnet to leave the inside interface headed out... also, recommend creating an ipsec tunnel between the tftp server and the pix...