13 replies to this topic

[Peter H]

Hi All

I have come across a problem using tftpd32 with our 6509 Cisco Core which I have seen mentioned elsewhere but haven't seen a fix.

Basically TFTPD32 is installed on a management machine for occasional collection of configs/images etc and works fine. Fine that is until we upgraded to 6509 core switches. Any attempt to copy from the 6509 to TFTPD32 gives a "Permission Denied" error on the Cisco Console and error 32 on TFTPD32.

I have prepared filtered capture files of the transfer and the same (working) transfer to Solar Winds TFTP Server... it appears the 6509 sends out two write requests at the start of the conversation - both identical (apart from the packet number). Solar Winds replies both times with an acknowlegment at block 0 whereas TFTPD32 replies to the second one that the file is busy and can't be opened, then fails.

I actually believe the error is cisco's as there's no reason to send two identical write requests in my view, however Solar Winds works so I suspect it's a feature of TFTP.

Is anyone aware of a fix or will this be one for a future update?

[TopBrick]

Hi!
we have the same core switch and don't have any problems.
try to use older version of tftp32 - I used 2.XX
if u want additional information about ios on my switch and exact version of my tftp - i can answer, but i need to check them - i dont remeber.
regards.

[Peter H]

Hi!
we have the same core switch and don't have any problems.
try to use older version of tftp32 - I used 2.XX
if u want additional information about ios on my switch and exact version of my tftp - i can answer, but i need to check them - i dont remeber.
regards.

Thanks TB - our local friendly consultant raised a TAC call with Cisco and it seems something in the UDP config is the issue but I haven't had a full explanation yet.

I know it's udp related cos soemone left UDP packet debugging on the core and then when a vc first thing in the morning the network slowed to a crawl. Took us an hour to notice!

[Jonathan Hall]

Thanks TB - our local friendly consultant raised a TAC call with Cisco and it seems something in the UDP config is the issue but I haven't had a full explanation yet.

I know it's udp related cos soemone left UDP packet debugging on the core and then when a vc first thing in the morning the network slowed to a crawl. Took us an hour to notice!

We've just started using tftpd32, after we hit the file size issue with Solarwinds, and we're having exactly the same issues on our new Catalyst 6509s with Sup720s running IOS 12.2(xx)SX train.

As suggested we've tried v2.88 as well as v3.23. Both have the same problem.

If you find a fix/work around for this please let us know.

[Peter H]

We've just started using tftpd32, after we hit the file size issue with Solarwinds, and we're having exactly the same issues on our new Catalyst 6509s with Sup720s running IOS 12.2(xx)SX train.

As suggested we've tried v2.88 as well as v3.23. Both have the same problem.

If you find a fix/work around for this please let us know.

My Colleague is going to look at this with a friendly Cisco TAC representative today - they are backing away from the case as they are attempting to blame TFTPD32. I'm still not convinced - about 50% of the TFTP software we try works and 50% doesn't including the Solsoft built in TFTP server we REALLY need to work.

I use TFTPD32 as its free and recommended by Cisco, as I say I've done TCPDUMPS and the 6509 opens the file twice in the setup phase hence the error. I still believe TFTPD32 is right and the other's are badly written apps but I'm not sure if the TFTP spec allows this.

Do you use HSRP as we were suspecting that?? IF you Wish PM me and we can discuss. Bear in mind I check the forum only occasionally.

[Jonathan Hall]

My Colleague is going to look at this with a friendly Cisco TAC representative today - they are backing away from the case as they are attempting to blame TFTPD32. I'm still not convinced - about 50% of the TFTP software we try works and 50% doesn't including the Solsoft built in TFTP server we REALLY need to work.

Do you use HSRP as we were suspecting that?? IF you Wish PM me and we can discuss. Bear in mind I check the forum only occasionally.

We do use HSRP on these switch/routers. However I'm also running HSRP on some older 6506 boxes with Sup2 and MSFC2 in hybrid mode (CatOS 6.4(21) and IOS 12.1(26)E8) where I don't see this problem. So it may be a combination of the IOS on the SUP720 and HSRP that's the issue?

Please let me know if you make any progress with Cisco TAC. I may try that angle myself now I know it's not just TFTPD32 that suffers from this problem.

[Jonathan Hall]

We do use HSRP on these switch/routers. However I'm also running HSRP on some older 6506 boxes with Sup2 and MSFC2 in hybrid mode (CatOS 6.4(21) and IOS 12.1(26)E8) where I don't see this problem. So it may be a combination of the IOS on the SUP720 and HSRP that's the issue?

Please let me know if you make any progress with Cisco TAC. I may try that angle myself now I know it's not just TFTPD32 that suffers from this problem.

I've just upgraded our Catalyst 6509s to 12.2(33)SXH1 and that seems to have fixed the problem.

[Peter H]

I've just upgraded our Catalyst 6509s to 12.2(33)SXH1 and that seems to have fixed the problem.

Latest update - (thanks for the memory jog JH )

Cisco TAC spent some time and decided we have a Cisco ION image rather than IOS - this seems to be a Modular version of IOS which allows in-situ upgrades and some segmentation of code.

This seems to be why the first TAC engineer couldn't replicate the problem.

Cisco have now accepted the issue but we ar consulting on whether to go to a proper IOS build or get the new ION image.

[Jonathan Hall]

Latest update - (thanks for the memory jog JH )

Cisco TAC spent some time and decided we have a Cisco ION image rather than IOS - this seems to be a Modular version of IOS which allows in-situ upgrades and some segmentation of code.

This seems to be why the first TAC engineer couldn't replicate the problem.

Cisco have now accepted the issue but we ar consulting on whether to go to a proper IOS build or get the new ION image.

Sorry, should have mentioned sooner. We are running Modular IOS (AKA ION) too!

Upgrading to 12.2(33)SXH1 modular IOS seems to have fixed the problem for us.

[Peter H]

Sorry, should have mentioned sooner. We are running Modular IOS (AKA ION) too!

Upgrading to 12.2(33)SXH1 modular IOS seems to have fixed the problem for us.

Thanks Jonathan - Cisco have now confirmed there is a problem with the ION image we have. We are deciding which way to go as the ION was loaded in error by consultants and not set up correctly so we may go back to IOS. Slightly off topic but if anyone has any thoughts I'd be grateful.

[Peter H]

Sorry, should have mentioned sooner. We are running Modular IOS (AKA ION) too!

Upgrading to 12.2(33)SXH1 modular IOS seems to have fixed the problem for us.

Hi Jonathan

Just to confirm to all and sundry we finally got downtime to properly install ION (12.2(33)SXH1 and you're right - TFTP works correctly now. Many thanks for the tips. Just need to repeat the feat at two more sites and correctly install ION!

[Peter H]

Sorry, should have mentioned sooner. We are running Modular IOS (AKA ION) too!

Upgrading to 12.2(33)SXH1 modular IOS seems to have fixed the problem for us.

Hi Jonathan

Just to confirm to all and sundry we finally got downtime to properly install ION (12.2(33)SXH1 and you're right - TFTP works correctly now. Many thanks for the tips. Just need to repeat the feat at two more sites and correctly install ION!

[xpwe]

Hi,

I do not have a chance to upgrade our C6509-E from 12.2.(18)SFX10 but I would like to use TFTPD32 to save our FWSM config files to.

Is there a way that I can do that? Does somebody have a solution for it?

At the moment I try 3 times and it does work after that.

Kind regards,

Patrick

[Peter H]

Hi,

I do not have a chance to upgrade our C6509-E from 12.2.(18)SFX10 but I would like to use TFTPD32 to save our FWSM config files to.

Is there a way that I can do that? Does somebody have a solution for it?

At the moment I try 3 times and it does work after that.

Kind regards,

Patrick

We spent a long time trying to find a workaround but none was found. If you can't upgrade I'm afraid you'll need to try another TFTP server, the old cisco one WILL work because it seems to ignore the second request. Others may work too.