Comware

I have noticed that you can disable a tftp-server service with the command "no tftp server", but what is the reason for the server to be started by default?

What can it be used for? Can I download something from the tftp server? Os image or configuration files?

#tftp

Yep, it can be handy when copying the running flash image from one switch to another... copy tftp flash <IP address=""> flash pri|sec

</IP>

Thank you for your reply!

So I can download the os image, but not the running/startup configuration?

(Since the lack of authentication in tftp that would not be nice.)

Anyway, would it be recommended to turn the tftp server off if I do not intend to use it?

try the following (from 9300 manual):

USING THE CLI
To initiate transfers of configuration files to or from a TFTP server using the CLI, enter one of the following
commands:

copy startup-config tftp <TFTP-IP-ADDR> <FILENAME>
- Use this command to upload a copy of the startup configuration file from the Routing Switch to a TFTP server.

copy running-config tftp <TFTP-IP-ADDR> <FILENAME>
- Use this command to upload a copy of the running configuration file from the Routing Switch to a TFTP server.

copy tftp startup-config <TFTP-IP-ADDR> <FILENAME>
- Use this command to download a copy of the startup configuration file from a TFTP server to a Routing Switch.</FILENAME></TFTP-IP-ADDR></FILENAME></TFTP-IP-ADDR></FILENAME></TFTP-IP-ADDR>

Thank you Steven for your reply.

I do think the command you have mentioned however is for the tftp client on the Procurve switches, and I was looking for some information (and potential danger) with the built-in tftp server.

By default the TFTP is 'secured' in that you cannot copy startup/running-config from it. You can un-secure it by setting a particular SNMP OID (this is how I believe PCM+ copies over the configurations when using TFTP). Once it has copied it over, it secures it again.

If I wanted to use a 3rd party tool to back up the switches, how can I set this OID so that I can back the switches up?

 

Otherwise, I end up with an 'access violation'

 

Cheers,

Thanks Matt!