Fibre Channel (SAN)

Reply
Contributor
Posts: 34
Registered: ‎03-02-2010

unable to take a back-up of the config using SCP. Error: "Configupload not permitted (scp failed)"

Unable to take a back-up of the config using SCP. Error:  "Configupload not permitted (scp failed)"

Did configure SCP for configupload/download by setting the "cfgload.secure" value to '0'

root> configure

Not all options will be available on an enabled switch.

To disable the switch, use the "switchDisable" command.

root> Configure...

System services (yes, y, no, n):

ssl attributes (yes, y, no, n):

rpcd attributes (yes, y, no, n):

cfgload attributes (yes, y, no, n): y

Enforce secure config Upload/Download (yes, y, no, n): yes

Enforce signature validation for firmware (yes, y, no, n):

webtools attributes (yes, y, no, n):

System (yes, y, no, n):

root> configshow |grep -i cfgload

cfgload.secure:1

cfgload.signed:0

Did initiate configupload. ..No-Go Error configUpload not permitted (scp failed) is displayed

Able to ping the server

Did set the "cfgload.secure" value back to '0' afterwhich, Did try configupload via ftp. ..No-Go Error configUpload not permitted (ftp failed). Could not connect to remote host.

Did try to capture supportsave. ..No-Go Error Could not connect to 1x.xx.xxx.xxx -- try again later: Connection timed out.

Logging-in via admin account & have write permission to the directory on the SCP server

admin> userconfig --show

Account name: admin
Role: admin
Description: Administrator
Enabled: Yes
Password Last Change Date: Thu Aug  2 2012
Password Expiration Date: Not Applicable
Locked: No
AD membership: 0-255
Home AD: 0

Please advise

Contributor
Posts: 44
Registered: ‎02-05-2013

Re: unable to take a back-up of the config using SCP. Error: "Configupload not permitted (scp failed)"

In Brocade Fabric OS V4.4 and later, SCP is a new protocol that is available for upload and download tasks. It provides full data encryption, focused on configuration files and not firmware downloads. It can be enforced or disabled using the configure command (cfgload attributes ).

In this case, the cfgload attributes was disabled from the configure command.

SW1-CAL:admin> configure

Not all options will be available on an enabled switch.

To disable the switch, use the switchDisable command.

Configure the following:

System services (yes, y, no, n):
    ssl attributes (yes, y, no, n):
    http attributes (yes, y, no, n):
    rpcd attributes (yes, y, no, n):
    cfgload attributes (yes, y, no, n): y

        Enforce secure config Upload/Download (yes, y, no, n): n

This is applicable to all B-series switches

Join the Community

Get quick and easy access to valuable resource designed to help you manage your Brocade Network.

vADC is now Pulse Secure
Download FREE NVMe eBook