A-14
File Transfers
Downloading Switch Software
Disable TFTP and Auto-TFTP for Enhanced Security
Using the ip ssh filetransfer command to enable Secure FTP (SFTP) automat-
ically disables TFTP and auto-TFTP (if either or both are enabled).
Figure A-5. Example of Switch Configuration with SFTP Enabled
If you enable SFTP, then later disable it, TFTP and auto-TFTP remain disabled
unless they are explicitly re-enabled.
Operating rules are:
■ The TFTP feature is enabled by default, and can be enabled or disabled
through the CLI, the Menu interface, or an SNMP application. Auto-TFTP
is disabled by default and must be configured through the CLI.
ProCurve(config)# ip ssh filetransfer
Tftp and auto-tftp have been disabled.
ProCurve(config)# sho run
Running configuration:
; 498358-B21 Configuration Editor; Created on release #Z.14.04
hostname "ProCurve"
module 1 type J8702A
module 2 type J702A
vlan 1
name "DEFAULT_VLAN"
untagged A1-A24,B1-B24
ip address 10.28.234.176 255.255.240.0
exit
ip ssh filetransfer
no tftp-enable
password manager
password operator
Enabling SFTP automatically disables TFTP
and auto-tftp and displays this message.
Viewing the configuration shows that SFTP is
enabled and TFTP is disabled.
