File Maintenance Over Wan; Backup Configuration Using Tftp; Tftp Command Example - ZyXEL Communications ZyWALL 5 User Manual

ZyWALL 5 Internet Security Appliance

35.3.5 File Maintenance Over WAN

TFTP, FTP and Telnet over the WAN will not work when:
1. The firewall is active (turn the firewall off in menu 21.2 or create a firewall rule to allow access
from the WAN).
2. You have disabled Telnet service in menu 24.11.
3. You have applied a filter in menu 3.1 (LAN) or in menu 11.5 (WAN) to block Telnet service.
4. The IP you entered in the Secured Client IP field in menu 24.11 does not match the client IP. If it
does not match, the ZyWALL will disconnect the Telnet session immediately.
5. You have an SMT console session running.

35.3.6 Backup Configuration Using TFTP

The ZyWALL supports the up/downloading of the firmware and the configuration file using TFTP
(Trivial File Transfer Protocol) over LAN. Although TFTP should work over WAN as well, it is not
recommended.
To use TFTP, your computer must have both telnet and TFTP clients. To backup the configuration
file, follow the procedure shown next.
Use telnet from your computer to connect to the ZyWALL and log in. Because TFTP does not have
1.
any security checks, the ZyWALL records the IP address of the telnet client and accepts TFTP
requests only from this address.
Put the SMT in command interpreter (CI) mode by entering 8 in Menu 24 – System Maintenance.
2.
Enter command "sys stdio 0" to disable the SMT timeout, so the TFTP transfer will not be
3.
interrupted. Enter command "sys stdio 5" to restore the five-minute SMT timeout (default) when
the file transfer is complete.
Launch the TFTP client on your computer and connect to the ZyWALL. Set the transfer mode to
4.
binary before starting data transfer.
Use the TFTP client (see the example below) to transfer files between the ZyWALL and the
5.
computer. The file name for the configuration file is "rom-0" (rom-zero, not capital o).
Note that the telnet connection must be active and the SMT in CI mode before and during the TFTP
transfer. For details on TFTP commands (see following example), please consult the documentation of
your TFTP client program. For UNIX, use "get" to transfer from the ZyWALL to the computer and
"binary" to set binary transfer mode.

35.3.7 TFTP Command Example

The following is an example TFTP command:
tftp [-i] host get rom-0 config.rom
Where "i" specifies binary image transfer mode (use this mode when transferring binary files), "host"
is the ZyWALL IP address, "get" transfers the file source on the ZyWALL (rom-0, name of the
configuration file on the ZyWALL) to the file destination on the computer and renames it config.rom.
35.3.8 GUI-based TFTP Clients
The following table describes some of the fields that you may see in GUI-based TFTP clients.
35-4 Firmware and Configuration File Maintenance