40-9
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter40 Configuring Management Access
Configuring File Access
The FTP client configuration is changed and the change is saved to the running configuration.
Configuring the ASA as a Secure Copy Server
You can enable the secure copy server on the ASA. Only clients that are allowed to access the ASA using
SSH can establish a secure copy connection.
Restrictions
This implementation of the secure copy server has the following limitations:
•The server can accept and terminate connections for secure copy, but cannot initiate them.
•The server does not have directory support. The lack of directory support limits remote client access
to the ASA internal files.
•The server does not support banners.
•The server does not support wildcards.
•The ASA license must have the VPN-3DES-AES feature to support SSH Version 2 connections.
To configure the ASA as a secure copy server, perform the following steps:
Detailed Steps
Step1 From the Configuration > Device Management > Management Access > File Access > Secure Copy
(SCP) Server pane, check the Enable secure copy server check box.
Step2 Click Apply.
The changes are saved to the running configuration. The ASA can function as an SCP server for
transferring files to and from the device.
Configuring the ASA as a TFTP Client
TFTP is a simple client/server file transfer protocol, which is described in RFC 783 and RFC 1350 Rev.
2. You can configure the ASA as a TFTP client so that it can transfer a copy of its running configuration
file to a TFTP server by choosing either File > Save Running Configuration to TFTP Client or Tools
> Command Line Interface. In this way, you can back up and propagate configuration files to multiple
ASAs.
The ASA supports only one TFTP client. The full path to the TFTP client is specified in Configuration
> Device Management > Management Access > File Access > TFTP Client. After the TCP client has
been configured in this pane, you can use a colon (:) to specify the IP address in the CLI configure net
and copy commands. However, any other authentication or configuration of intermediate devices
necessary for communication from the ASA to the TFTP client is done apart from this function.