Strange TFTP problem via Pix

Mar 16, 2006 3 Replies

Hello,



the following scenario:



Router -------- Pix ---------- TFTP-Server



The router is a Cisco 2851, the Pix is a 515 with software 712. I tried to upgrade the ROMMON on the router via upgrade rom-monitor file tftp://a.b.c.d/c2800nm_rm2_srec.124-1r and I got: Loading C2800NM_RM2_SREC.124-1R from a.b.c.d (via GigabitEthernet0/0): !!... [timed out] I tried the same with a direct connection between the router and the tftp server and it worked. So it must be the Pix.



I have no problem saving the router's configuration to the very tftp server. I am able to upgrade the IOS software via this tftp server. All with the Pix in-between. So what is different with this ROMMON file? I noticed that it is larger than a config file but a lot smaller than an IOS image. On the other hand it is all ASCII. I enabled debugging on the Pix and got:



Mar 16 16:35:36 10.1.1.1 Mar 16 2006 16:35:36: %PIX-6-302015: Built inbound UDP connection 6450994 for outside:192.168.2.254/57622 (192.168.2.254/57622) to inside:a.b.c.d/69 (a.b.c.d/69)



Mar 16 16:35:36 10.1.1.1 Mar 16 2006 16:35:36: %PIX-6-302015: Built inbound UDP connection 6450996 for outside:192.168.2.254/50292 (192.168.2.254/50292) to inside:a.b.c.d/69 (a.b.c.d/69)



Mar 16 16:35:36 10.1.1.1 Mar 16 2006 16:35:36: %PIX-6-302016: Teardown UDP connection 6450994 for outside:192.168.2.254/57622 to inside:a.b.c.d/69 duration 0:00:00 bytes 4215



Mar 16 16:35:36 10.1.1.1 Mar 16 2006 16:35:36: %PIX-6-302016: Teardown UDP connection 6450996 for outside:192.168.2.254/50292 to inside:a.b.c.d/69 duration 0:00:00 bytes 4215



Mar 16 16:35:36 10.1.1.1 Mar 16 2006 16:35:36: %PIX-6-302015: Built inbound UDP connection 6450998 for outside:192.168.2.254/51429 (192.168.2.254/51429) to inside:a.b.c.d/69 (a.b.c.d/69)



Mar 16 16:35:55 10.1.1.1 Mar 16 2006 16:35:55: %PIX-6-302015: Built inbound UDP connection 6451033 for outside:192.168.2.254/56225 (192.168.2.254/56225) to inside:a.b.c.d/69 (a.b.c.d/69)



Mar 16 16:35:55 10.1.1.1 Mar 16 2006 16:35:55: %PIX-6-302016: Teardown UDP connection 6451033 for outside:192.168.2.254/56225 to inside:a.b.c.d/69 duration 0:00:00 bytes 4215


Any ideas?



Regards, Christoph Gartmann


CCO shows 7.1(2) as having being released very recently

Did you have the same issue with 7.1(1)?

Yes, had to downgroade because 7.1(2) causes the inside interface to no longer accept packets after about one hour :-(

Regards, Christoph Gartmann

There are MANY TFTP related bugs in 7.x software. Most however are associated with TFTPing to/from PIX ; not thru PIX.

If you have a support contract you should open a case with teh Cisco TAC.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required