The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Secure Shell (SSH) includes support for SSH File Transfer Protocol (SFTP), which is a new standard file transfer protocol introduced in SSHv2. This feature provides a secure and authenticated method for copying device configuration or device image files.
SSH must be enabled.
The ip ssh source-interface interface-type interface-number command must be configured.
The SFTP server is not supported.
SFTP boot is not supported.
The sftp option in the install add command is not supported.
The SFTP client functionality is provided as part of the SSH component and is always enabled on the corresponding device. Therefore, any SFTP server user with the appropriate permission can copy files to and from the device.
An SFTP client is VRF-aware; you can configure the secure FTP client to use the virtual routing and forwarding (VRF) associated with a particular source interface during connection attempts.
The following sections provide information about the various tasks that comprise an SFTP configuration.
Perform the following steps:
To configure a Cisco device for SFTP client-side functionality, the ip ssh source-interface interface-type interface-number command must be configured first.
| Command or Action | Purpose | |
|---|---|---|
|
Step 1 |
enable Example: |
Enables privileged EXEC mode. Enter your password, if prompted. |
|
Step 2 |
configure terminal Example: |
Enters global configuration mode. |
|
Step 3 |
ip ssh source-interface interface-type interface-number Example: |
Defines the source IP for the SSH session. |
|
Step 4 |
exit Example: |
Exits global configuration mode and returns to privileged EXEC mode. |
|
Step 5 |
show running-config Example: |
(Optional) Displays the SFTP client-side functionality. |
|
Step 6 |
debug ip sftp Example: |
(Optional) Enables SFTP debugging. |
SFTP copy takes the IP or hostname of the corresponding server if Domain Name System (DNS) is configured. To perform SFTP copy operations, use the following commands in privileged EXEC mode:
|
Command |
Purpose |
|---|---|
|
Device# copy ios-file-system:file sftp://user:pwd@server-ip//filepath Or Device# copy ios-file-system: sftp: |
Copies a file from the local Cisco IOS file system to the server. Specify the username, password, IP address, and filepath of the server. |
|
Device# copy sftp://user:pwd@server-ip //filepath ios-file-system:file Or Device# copy sftp: ios-file-system: |
Copies the file from the server to the local Cisco IOS file system. Specify the username, password, IP address, and filepath of the server. |
The following example shows how to configure the client-side functionality of SFTP:
Device> enable
Device# configure terminal
Device(config)# ip ssh source-interface gigabitethernet 1/0/1
Device(config)# exit
|
Related Topic |
Document Title |
|---|---|
|
Secure Shell Version 1 and 2 Support |
Configuring Secure Shell |
|
Description |
Link |
|---|---|
|
The Cisco Support and Documentation website provides online resources to download documentation, software, and tools. Use these resources to install and configure the software and to troubleshoot and resolve technical issues with Cisco products and technologies. Access to most tools on the Cisco Support and Documentation website requires a Cisco.com user ID and password. |
The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.|
Feature Name |
Releases |
Feature Information |
|---|---|---|
|
SSH File Transfer Protocol (SFTP) |
Cisco IOS Release 15.2(7)E |
SSH includes support for SFTP, a new standard file transfer protocol introduced in SSHv2. |
Feedback