We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x
Private

Using SCP with Cisco ASA 5545X

wrt1mea
wrt1mea asked
on
High Priority
144 Views
Last Modified: 2020-01-27
On my lap ASA, I can successfully copy files from my ASA to my SCP Folder using SolarWinds SCP Server. The problem I am having is copying files from my SCP Server to the ASA using CLI. IT fails to copy do disk0:/ on the ASA.

 I can see the file being copied from the SCP Server via the SCP Log:

      10/23/2019 12:19 PM      Unknown      Authenticated user cisco from IP 192.168.1.1.
      10/23/2019 12:19 PM      Unknown      User cisco from IP 192.168.1.1 downloading file at "TestFile.txt".


 See the information below:


ciscoasa# copy scp://cisco:cisco@192.168.1.10/TestFile.txt disk0:/TestFile.txt

Address or name of remote host [192.168.1.10]?

Source username [cisco]?

Source filename [TestFile.txt]?

Destination filename [TestFile.txt]?

Accessing scp://cisco:cisco@192.168.1.10/TestFile.txt...
%Error reading scp://cisco:cisco@192.168.1.10/TestFile.txt (Success)
ciscoasa#
Comment
Watch Question

Technical Architect
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
Assuming you enabled SCP?

ciscoasa (config)# ssh scopy enable

try

ciscoasa# copy scp://cisco:cisco@192.168.1.10//TestFile.txt disk0:/TestFile.txt

instead?

</p>

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Pete LongTechnical Architect
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
p.s. tftp is a lot simpler its done me for 20 years :)

</p>

Author

Commented:
Can't use it...
TimotiStSenior Network Engineer
Top Expert 2012

Commented:
The path scp://cisco:cisco@192.168.1.10/TestFile.txt will likely try to access it from the root folder, is that what we want?
Also, possibly check permissions on the file on the solarwinds side, the scp server might not be able to read it.

Author

Commented:
TimotiSt,

Yes, that is what we want...I have verified in troubleshooting that the folder is Everyone>Full Control/

I am backing up Cisco 2960's using the same SCP Server and folder path and there is no problems...

I have any any rules on my lab firewall
TimotiStSenior Network Engineer
Top Expert 2012

Commented:
Does the
debug ip scp
command work on the ASA?

Author

Commented:
no it does not

Author

Commented:
Sorry for the delay!!!!
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.