TFTP To A Server On A PIX Outside Interface Help

[RomualPiecyk]

I am trying to TFTP from my PIX 501 firewall at home over the internet to a TFTP server behind a PIX 515 firewall at my place of work, and it keeps timing out.

The messages on my SYSLOG server at home are as follows:
<165>Mar 14 2004 14:09:10: %PIX-5-111001: Begin configuration: 172.20.24.50 writing to tftp
<166>Mar 14 2004 14:09:10: %PIX-6-110001: No route to xx.xx.xx.xx from 172.20.24.1
<165>Mar 14 2004 14:09:15: %PIX-5-111004: 172.20.24.50 end configuration: FAILED
<165>Mar 14 2004 14:09:15: %PIX-5-111008: User 'enable_15' executed the 'write net xx.xx.xx.xx:ron.txt' command.

It seems like it wants to look for the address on my inside interface only.

Is it possible to TFTP to a device that exists on the outside interface? FYI, I am able to access the device via other apps with no problems, like RDP and HTTP, so it is not a routing issue.

I have indeed configured the 515 to allow incoming TCP and UDP port 69, and created a static mapping of this port to the TFTP server on its inside interface, for those who were going to ask!

Any thoughts would be highly appreciated. Thanks.

 

[chicocouk]

You can, but shouldn't, use tftp to save your config out the outside interface of your pix. I'm assuming that's what you're doing, due to the "writing to tftp" in the error messages.

Have a look at this thread, it may address what you're trying to do;

http://www.tek-tips.com/viewthread.cfm?SQID=796071&SPID=35&page=1

CCNA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP

 

[RomualPiecyk]

Thanks for the link. I am going to check out that CatTools, but for other purposes. Doesn't really help me much here though...

Thanks anyway...