Tavve zoneranger User Manual page 109

Thus a set of static TFTP proxy rules may be configured to indicate how ZoneRanger processes
incoming TFTP requests from managed devices. ZoneRanger TFTP proxy feature also can be used
together with the SNMP proxy feature to handle the situation where managed devices are instructed to
transfer configuration files using an SNMP set request. When the ZoneRanger sees an SNMP set request
that instructs a device to perform a configuration file transfer, it can modify the request, effectively
redirecting the request to use the ZoneRanger's TFTP server, then when the managed device initiates the
request, ZoneRanger will proxy the file through the Ranger Gateway to the originally requested TFTP
server.
This capability can be enabled by checking the Enable Single-Use SNMP triggered rules checkbox. In
this case, ZoneRanger generates a single use TCP proxy rule based on the SNMP set proxied via the
Ranger Gateway. Note, this feature is triggered by sets using the CISCO-CONFIG-COPY-MIB (Cisco
IOS software release 12.0) and the OLD-CISCO-SYSTEM-MIB/OLD-CISCO-FLASH-MIB (Cisco IOS
software release 10.2 and later).
The SNMP triggered rules timeout field specifies the maximum life span for the SNMP triggered
single use rules. If the ZoneRanger managed device uses the TFTP server on the ZoneRanger, that rule
will be used, then removed so it will not be used again. If the rule is not used within this life span, the
rule will expire and be discarded.
Files available via TFTP located on the ZoneRanger can be managed using the Ranger Gateway. The
Tools > TFTP Manager window from the Ranger Gateway Viewer as well as Ranger Gateway
commands downloadTftpFile and uploadTftpFile can be used to add and remove files from
the ZoneRanger when it is acting as a TFTP server.
ZoneRanger 5.5 User's Guide 109