In this video, we're going to take a look
at the implementation and transferring
of files using SCP, the secure copy protocol, and if required,
troubleshooting as well.
All right, let's take a look at our plan
and then work our plan.
So here is our plan.
We'll make 2911-01 the first router and SCP server.
We'll use the image.bin file again as an example.
And we'll have this second router as our client.
And we'd want to verify some basics.
Do we have connectivity between the client and server? WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Do we have connectivity between the client and server?
We also want to make sure on the server
that SSH is enabled because SCP relies on SSH as a transport
mechanism for the copies.
So if SSH isn't working or setup,
that would be a reason why the SCP fails.
So let's head over to the first router
and make it an SCP server.
All right.
So here we are in router one, and the syntax to enable SCP
as a server is config, configuration mode IP, SCP,
and a question mark.
Server.
Enable.
And now that it's enabled, let's go ahead and try it WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And now that it's enabled, let's go ahead and try it
from the client, which is router two.
So we'll go down to 10.0.0.2, which is router two.
Do a DIR real quick.
And I had delete flash image.bin.
So to get rid of that file because we're
about to copy again.
And so the syntax is copy.
SCP: // and then we can go ahead and embed our user.
Now, we still have a username over there, and that is Bob. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now, we still have a username over there, and that is Bob.
And instead of putting in his password here, we can take Bob
and there's @ and it will prompt us for a password.
10.0.0.1/image.bin and then flash.
All right.
Confirming the image.
Error opening.
Undefined error.
So if SSH is not working on router one on the server,
this isn't going to work, either.
So let's go take a look and verify. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So let's go take a look and verify.
And type in exit.
And let's verify on the server if SSH is working.
So we'll do a show IP SSH.
And this says that--
and I wasn't expecting that.
I guess it's enabled because we enabled
HTTP secure server earlier.
All right.
So SSH is enabled.
And let's try it.
Let's do an SSH-L for log in.
And we'll log in as Bob.
We created a local user called Bob a couple videos ago.
And then we can force the version if we want to. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then we can force the version if we want to.
So 199 means it's willing to do version one or two.
So we'll go ahead and do version two.
And then 10.0.0.1.
We're just SSHing to ourself.
Just want to make sure SSH is working.
All right.
That was a quick trip.
Faster than I thought it would be.
Let's do a show run.
Section line.
OK.
So these are brand new, well, I just opened these boxes today
and loaded up some defaults.
And I didn't muck with them. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And I didn't muck with them.
So based on this model and look in the VTY lines,
no log in, which would mean no login required.
And that's a problem for SHH.
And transport input none.
So that's a huge problem.
That means nobody's logging in with telnet or SSH
or anything for that matter.
So let's fix that.
Config to line, VTY.
We'll do all of them.
Zero through 15, 16 VTY lines.
And we'll say login local.
Now because this is what we need for us,
stage display username and password. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
stage display username and password.
Also, if we want to use AAA and specify a method
list for the local database, that would work as well.
The login local and transport input SSH.
Then we'll do a show line again.
Just to make sure.
OK.
So the privilege level 15 doesn't need to be there.
But it's not hurting our functionality.
The transport input SSH login local, that looks good.
Let's try SSHing to ourselves. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Let's try SSHing to ourselves.
SSH-lBob-v version two 10.0.0.1.
Now, how do we know we're actually SSH'd in?
We can do a show SSH.
That's one great way.
Shows us version two.
And I'm going to do a show IP--
well that's it.
We're in.
We can do a show users.
Or another command is for that, who,
the same thing as show users.
And that shows that we're logged in as Bob on logical VTY line. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And that shows that we're logged in as Bob on logical VTY line.
We're coming in from our own address.
All right, let's type in exit and type
in who again just make sure we're
back on the console, which we are.
And let's also force version two IP SSH version two.
And that way--
And let's just try it again.
So if I log in without saying version two and do a show SSH.
Yeah, I just want to make sure it's working. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Yeah, I just want to make sure it's working.
All right.
So SSH is working.
We've enabled the SSH server, or the SCP server.
So if we do a show control plane host, open ports,
it's still going to show us that we have
22, which is being used by SSH.
It's also going to be used by the secure copy protocol.
All right.
So let's go to our client at 10.0.0.2.
And here let's do a copy SCP:// and we'll put in Bob @, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And here let's do a copy SCP:// and we'll put in Bob @,
then we'll go to 10.0.0.1.image.bin space.
And we'll say we want a copy that over to our flash.
All right.
Destination file name is image.bin.
Yep.
Password is Bob's password, which I will supply.
All right.
And if you do a DIR, there it is.
All right.
So a couple of troubleshooting things WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So a couple of troubleshooting things
we had to do there was we needed to make sure
that SSH was working successfully
because that's what SCP uses to go ahead
and actually do the copy.
It's the underlying infrastructure.
So thank you for joining me in these videos with my two
new buddies, the 2911s, as they've
helped us to demonstrate some management protocols, including
HTTP and FTP and TFTP and SCP that can be used,
some for access to the box, like SSH and HTTP,
as well as some that can be used or file transfer, like HTTP, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
as well as some that can be used or file transfer, like HTTP,
which is doing double duty, and SCP and TFTP.
So I look forward to seeing you in another set of videos.
Meanwhile, I hope this has been informative for you.
And I'd like to thank you for viewing.