Using scp top copy configuration files and update software on Cisco equipment is a much better and secure way than tftp\/ftp. Here are the basics for a couple Cisco devices. <\/p>\n
ASA 5525:
\nTo enable scp on a Cisco ASA running version 9.x:
\n(config)# ssh scopy enable<\/p>\n
To harden ssh on a Cisco ASA running version 9.x:
\n(config)# ssh stricthostkeycheck
\n(config)# ssh timeout 60
\n(config)# ssh version 2
\n(config)# ssh cipher encryption medium
\n(config)# ssh cipher integrity medium
\n(config)# ssh key-exchange group dh-group14-sha1<\/p>\n
How to copy a running configuration using scp:
\n# copy system:\/running-config scp:\/\/username@aaa.bbb.ccc.ddd\/myconfigname.cfg<\/p>\n
3750 Switch Notes:
\nTo enable scp on a 3750 switch:
\n#ip scp server enable<\/p>\n
How to copy a running configuration from the ASA using scp:
\n#copy system:\/running-config scp:\/\/username@aaa.bbb.ccc.ddd\/myconfigname.cfg<\/p>\n
How to copy from remote linux client:
\n# scp username@aaa.bbb.ccc.ddd:system:running-config .<\/p>\n","protected":false},"excerpt":{"rendered":"
Using scp top copy configuration files and update software on Cisco equipment is a much better and secure way than tftp\/ftp. Here are the basics for a couple Cisco devices. ASA 5525: To enable scp on a Cisco ASA running version 9.x: (config)# ssh scopy enable To harden ssh on a Cisco ASA running version [&hellip<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[319,474,317],"class_list":["post-1675","post","type-post","status-publish","format-standard","hentry","category-documentation","tag-cisco","tag-scp","tag-ssh"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1675","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1675"}],"version-history":[{"count":2,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1675\/revisions"}],"predecessor-version":[{"id":1688,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/1675\/revisions\/1688"}],"wp:attachment":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1675"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}