SCP Not working

[feude.dieudonne.leumaleu]

Hello,

i am trying to Upload the image from an FTP server to a  cisco catalyst C3850 and i am having the below error message

% Connection timed out; remote host not responding

%Error opening scp://*****@****/cat3k_caa-universalk9.16.12.05b.SPA.bin (Undefined error)

i was able to upload this image to our second cisco catalyst c3850 without any issue .

Please any help will be much appreciated !

Thank you

[Kasun Bandara]

HI,

1. check connectivity between SCP server to switch

2. disable host firewall in server

3. set "ip ssh source-interface" to correct switch interface vlan

rate this and mark as answer if this soled your concern

[balaji.bandi]

The information is confusing here ?

you trying to use FTP, but syntax mentioned SCP ?

is the other 3850 working with FTP or SCP ?

also check the source of VLAN or Interface or VRF it using to reach that server SCP make sure keys are matched ?

what kind of Logs you see on SCP or FTP Server ?

[feude.dieudonne.leumaleu]

Hello Balaji,

yes the Upload of the image worked fine on the second C3850 with scp,

scp is the protocol we use in my organization to transfer file despite the fact the Image are logged on the FTP server,

the logs of the FTP looks fine , nothing much to said , do we have a work around in this case ?

for example use the working C3850 as FTP server as he already has the image to transfer it into the non working one ?

If yes any idea about the command to follow ?

Thank you !

[tlovely]

compare the ssh configuration of the working device against the failed one

sh run all | s ssh

pay particular attention to the key entries.

check your control plane policy (lift it to see if the scp transfer works) 

your switch can act as an  scp server but you will need to enable it with the ip scp serve enable command, you will need to make sure ssh is permitted both in and out on your vty lines (transport input ssh/transport output ssh)

duplicate those changes on the client device.  depending on what the problem is this work around may not work either.