TFTP and FTP file transfer
What TFTP and FTP provide for image and configuration transfers, transport differences, and operational caveats.
TFTP versus FTP
| Property | TFTP | FTP |
|---|---|---|
| Transport | Starts on UDP 69, then per-transfer IDs | TCP 21 control; data from server TCP20 to a negotiated client port (active) |
| Authentication | None | Username/password (cleartext) |
| Reliability | Application-level ACK per block; no session | TCP-reliable |
| Features | Read/write files only — no listing, no directories | Directory listing, rename, delete |
| Use | IOS images, configs in a controlled LAN | General file transfer where a session protocol fits |
On Cisco devices the classic transfers are copy running-config tftp: (backup), copy tftp: running-config (restore/merge), and copy tftp: flash: (image staging). TFTP's simplicity makes it perfect for network boot and device configs — and completely unsuitable where authentication or integrity checking matters.
FTP active vs passive: in active mode the data channel originates *from* the server's TCP 20 *to* a negotiated client port — inbound to the client, often blocked by firewalls/NAT. Passive mode has the client open both connections — friendlier to NAT and firewalls. Expect this distinction in troubleshooting scenarios.
Archive running-config to a TFTP server — Privileged EXEC
Cisco IOS / IOS XE
copy running-config tftp://192.168.99.20/sw1-backup.cfg
show running-config | include logging|archive dir flash: show archive config differences
- The file appears on the server with a sane size.
- Image transfers verify with the published checksum.
copy tftp: running-configMERGES — it does not replace; use startup-config for full replacement.- TFTP has no auth or encryption — only use on a trusted management network.
Read-only verification commands.
Related resources
Sources
- Cisco CCNA 200-301 v1.1 Exam Topics (official PDF) — reviewed 2026-11-02
- RFC 1350 — The TFTP Protocol (Revision 2) — reviewed 2026-11-02
- RFC 959 — File Transfer Protocol (FTP) — reviewed 2026-11-02
Targets CCNA 200-301 v1.1 objectives. Supplemental blocks are labeled beyond exam scope.