Cisco Config Backup
& Restore via TFTP
A practical cheat sheet and companion guide for backing up and restoring Cisco device configurations using a TFTP server — covering commands, prerequisites, troubleshooting, and security considerations.
🎯 Project Overview
This cheat sheet is a structured reference guide for network engineers and students who need to quickly recall the commands and setup steps for transferring Cisco device configurations via TFTP (Trivial File Transfer Protocol).
TFTP operates over UDP port 69 and is widely used in lab environments and trusted internal networks for lightweight, fast configuration transfers. The guide covers backup, restore, and troubleshooting workflows for both running and startup configurations.
🔍 Why It Was Built
During router provisioning, firmware upgrades, or recovery scenarios, engineers frequently need a reliable process to save and restore device configurations. This guide was created as a companion to a LinkedIn video walkthrough, distilling the essential steps into a format that is fast to reference during real work.
📋 Prerequisites
- TFTP server installed and running — e.g., TFTPD64 (Windows) or
tftp-hpa(Linux) - TFTP server reachable from the Cisco device via IP (confirm with
ping) - Correct folder permissions set on the TFTP server's root directory
- UDP port 69 open in any intermediate firewall rules
🔁 Core Commands
Backing up configurations to a TFTP server:
# Back up Running Configuration
Router# copy running-config tftp:
Address or name of remote host []? 192.168.1.100
Destination filename [running-config]? rtr1-running-config
# Back up Startup Configuration
Router# copy startup-config tftp:
Address or name of remote host []? 192.168.1.100
Destination filename [startup-config]? rtr1-startup-config
Restoring configurations from TFTP:
# Restore to Running Configuration
Router# copy tftp: running-config
Address or name of remote host []? 192.168.1.100
Source filename []? rtr1-running-config
# Restore to Startup Configuration
Router# copy tftp: startup-config
Address or name of remote host []? 192.168.1.100
Source filename []? rtr1-startup-config
Example successful session output:
Router# copy running-config tftp:
Address or name of remote host []? 192.168.1.100
Destination filename [running-config]? rtr1-backup
!!
1234 bytes copied in 2.345 secs (526 bytes/sec)
⚠️ Common Issues & Fixes
| Issue | Likely Cause | Fix |
|---|---|---|
| %Error opening tftp://... | File not found or permission denied | Check file path, firewall rules, and folder access rights |
| Transfer timeout | Device cannot reach TFTP server | Verify routing and ping the TFTP server IP first |
| Incomplete copy | Server folder is read-only or out of space | Set correct write permissions; confirm available disk space |
🔐 Security Considerations
TFTP transmits data in plaintext with no authentication. It should only be used within trusted, isolated lab or management networks. For production environments, consider these secure alternatives:
# Secure Copy Protocol (recommended for production)
Router# copy running-config scp:
# SSH-based file transfer (SFTP)
Router# ip scp server enable