Networking · Cisco IOS · Configuration Management

Cisco Config Backup
& Restore via TFTP

A practical cheat sheet and companion guide for backing up and restoring Cisco device configurations using a TFTP server — covering commands, prerequisites, troubleshooting, and security considerations.

Protocol: TFTP (UDP/69)
Platform: Cisco IOS
Type: Reference Guide
Level: Beginner → Intermediate
View on GitHub

🎯 Project Overview

This cheat sheet is a structured reference guide for network engineers and students who need to quickly recall the commands and setup steps for transferring Cisco device configurations via TFTP (Trivial File Transfer Protocol).

TFTP operates over UDP port 69 and is widely used in lab environments and trusted internal networks for lightweight, fast configuration transfers. The guide covers backup, restore, and troubleshooting workflows for both running and startup configurations.

🔍 Why It Was Built

During router provisioning, firmware upgrades, or recovery scenarios, engineers frequently need a reliable process to save and restore device configurations. This guide was created as a companion to a LinkedIn video walkthrough, distilling the essential steps into a format that is fast to reference during real work.

📋 Prerequisites

  • TFTP server installed and running — e.g., TFTPD64 (Windows) or tftp-hpa (Linux)
  • TFTP server reachable from the Cisco device via IP (confirm with ping)
  • Correct folder permissions set on the TFTP server's root directory
  • UDP port 69 open in any intermediate firewall rules

🔁 Core Commands

Backing up configurations to a TFTP server:

# Back up Running Configuration
Router# copy running-config tftp:
Address or name of remote host []? 192.168.1.100
Destination filename [running-config]? rtr1-running-config

# Back up Startup Configuration
Router# copy startup-config tftp:
Address or name of remote host []? 192.168.1.100
Destination filename [startup-config]? rtr1-startup-config

Restoring configurations from TFTP:

# Restore to Running Configuration
Router# copy tftp: running-config
Address or name of remote host []? 192.168.1.100
Source filename []? rtr1-running-config

# Restore to Startup Configuration
Router# copy tftp: startup-config
Address or name of remote host []? 192.168.1.100
Source filename []? rtr1-startup-config

Example successful session output:

Router# copy running-config tftp:
Address or name of remote host []? 192.168.1.100
Destination filename [running-config]? rtr1-backup
!!
1234 bytes copied in 2.345 secs (526 bytes/sec)

⚠️ Common Issues & Fixes

IssueLikely CauseFix
%Error opening tftp://...File not found or permission deniedCheck file path, firewall rules, and folder access rights
Transfer timeoutDevice cannot reach TFTP serverVerify routing and ping the TFTP server IP first
Incomplete copyServer folder is read-only or out of spaceSet correct write permissions; confirm available disk space

🔐 Security Considerations

TFTP transmits data in plaintext with no authentication. It should only be used within trusted, isolated lab or management networks. For production environments, consider these secure alternatives:

# Secure Copy Protocol (recommended for production)
Router# copy running-config scp:

# SSH-based file transfer (SFTP)
Router# ip scp server enable
View Full Project on GitHub