Cisco ASA – TFTP Copy over a VPN connection

While looking into doing some automated backups of configuration files of Cisco ASA and other devices I found some routing issues while doing TFTP copies. Below is the syntax for TFTP copy command.

tftp://[user[:password]@]server[:port]/[path/]filename[;int=interface_name]

After using the int=INTERFACE allowed the TFTP copy to work over the tunnel.

copy /noconfirm running-config tftp://192.168.1.1/config/FW01.cfg;int=DMZ

Also good thing to know is you can set this same setting on the default TFTP client settings.

config t

tftp-server DMZ 192.168.1.1 config/FW01.cfg

After this set you can just do use some commands to take advantage of short hand.

write net

or

copy running tftp

Good References

http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/c4.html#wp2171368

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008072142a.shtml