Scenario:
Make: Cisco [Firewalls, Switches, Routers]
Model: ASA 5506-X, ASA 5506 W-X, ASA 5508-X, Cisco 2960, etc
Mode: CLI (Command Line Interface)
Description: In this article, we will discuss the issue and solution of Timeout Error while data backup or image/IOS transfer through TFTP to Cisco ASA Firewalls, Switches and/or Routers in rommon mode. Sometimes we get “Unspecified Error While Transferring File” to cisco ASA through TFTP.
Problem
Sometimes while backing up data or recovering the IOS of Cisco devices like Cisco ASA, Cisco Switches or Cisco Router, we get an error “TFTP Timeout”. Though we can ping the TFTP server.
rommon #1> ADDRESS=192.168.0.3 rommon #2> GATEWAY=192.168.0.1 rommon #3> IMAGE=asa708-k8.bin rommon #4> SERVER=192.168.0.1 rommon #5> rommon #5> sync Updating NVRAM Parameters… rommon #6> ping 192.168.0.1 Link is UP Sending 20, 100-byte ICMP Echoes to 192.168.0.1, timeout is 4 seconds: ?!!!!!!!!!!!!!!!!!!! Success rate is 95 percent (19/20)
As shown above, the device can ping the TFTP Server but still, sometimes we get Timeout Error.
rommon #7> tftpdnld ROMMON Variable Settings: ADDRESS=192.168.0.3 SERVER=192.168.0.1 GATEWAY=192.168.0.1 PORT=Management0/0 VLAN=untagged IMAGE=asa708-k8.bin CONFIG= LINKTIMEOUT=20 PKTTIMEOUT=4 RETRY=20 tftp asa708-k8.bin@192.168.0.1 via 192.168.0.1
%Error opening tftp://192.168.0.3/asa708-k8.bin (Timed out)
Solution
There could be many reasons for this timeout. Ensure the below points
- Ensure device can ping the TFTP Server
- Try using TFTPD32 software for TFTP
- Check if there is any firewall issue or tftp application on the computer
- Ports are opened
- Make sure your TFTP server is turned on.
- Check the file extension, If possible copy the exact file extension from TFTP server file and paste on the router/firewall/switch
If all the points mentioned above are taken care of and still TFTP connection is timing out then try the solution mentioned below.
Change the PKTTIMEOUT = 99999999 as shown below.
rommon #8> tftpdnld
ROMMON Variable Settings:
ADDRESS=192.168.0.3
SERVER=192.168.0.1
GATEWAY=192.168.0.1
PORT=Management0/0
VLAN=untagged
IMAGE=asa708-k8.bin
CONFIG=
LINKTIMEOUT=20
PKTTIMEOUT=99999999
RETRY=20
Refer to the linked articles if you are looking to upgrade the firmware/IOS/image of Cisco ASA Firewalls or Cisco 2960 Switch Stack also refer to the article if firmware upgrade of one member of switch stack is failing.
Source: Cisco, Knowledge Base, Lab
EA00096