Does IOS Firewall block TFTP?

[louky]

Hello!

I have enabled the IOS Firewall on a Cisco 2610 (IOS 12.0(7)T). I can no longer TFTP anything (e.g. copy run tftp) even though I have a permit tftp in the ACL (permit udp any any eq tftp). This ACL is applied IN on the lan ethernet port (no OUT ACL exists). is there something about "ip inspect Ethernet_0_0 in" (i.e. firewall) that disables TFTP?

I used Cisco's "Config Maker" to set up most of the config
since I am new to Cisco. Perhaps the "no service udp-small-servers" it put in the config has something to do with it, though I do not see how.

Any insight would be mucho appreciated!

 

[philmcgarry]

Never use config maker. It is rubbish.


Small services do not include tftp. Echo discard are small services.

You do not want to close anything on the inside. All traffic coming on from the outside world should have an inspect statement.

Go to this addresss it's excellent.

http://www.cisco.com/warp/public/707/index.shtml