Tftp server on procurve switch?

[RicN]

I have noticed that you can disable a tftp-server service with the command "no tftp server", but what is the reason for the server to be started by default?

What can it be used for? Can I download something from the tftp server? Os image or configuration files?

[Matt Hobbs]

Yep, it can be handy when copying the running flash image from one switch to another... copy tftp flash flash pri|sec

[RicN]

Thank you for your reply!

So I can download the os image, but not the running/startup configuration?

(Since the lack of authentication in tftp that would not be nice.)

Anyway, would it be recommended to turn the tftp server off if I do not intend to use it?

[Steven Piercy_1]

try the following (from 9300 manual):

USING THE CLI
To initiate transfers of configuration files to or from a TFTP server using the CLI, enter one of the following
commands:

copy startup-config tftp
- Use this command to upload a copy of the startup configuration file from the Routing Switch to a TFTP server.

copy running-config tftp
- Use this command to upload a copy of the running configuration file from the Routing Switch to a TFTP server.

copy tftp startup-config
- Use this command to download a copy of the startup configuration file from a TFTP server to a Routing Switch.

[RicN]

Thank you Steven for your reply.

I do think the command you have mentioned however is for the tftp client on the Procurve switches, and I was looking for some information (and potential danger) with the built-in tftp server.

[Matt Hobbs · Accepted solution]

By default the TFTP is 'secured' in that you cannot copy startup/running-config from it. You can un-secure it by setting a particular SNMP OID (this is how I believe PCM+ copies over the configurations when using TFTP). Once it has copied it over, it secures it again.

[RicN]

Thanks Matt!

[John_RMIT]

If I wanted to use a 3rd party tool to back up the switches, how can I set this OID so that I can back the switches up?

Otherwise, I end up with an 'access violation'

Cheers,