2.4.4 Set 'ip tftp source-interface' to the Loopback Interface

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Specify the IP address of an interface as the source address for TFTP connections.

Rationale:

This is required so that the TFTP servers can easily identify routers and authenticate requests by their IP address.

Impact:

Organizations should plan and implement trivial file transfer protocol (TFTP) services in the enterprise by setting 'tftp source-interface loopback', which enables the TFTP servers to identify routers and authenticate requests by IP address.

Solution

Bind the TFTP client to the loopback interface.

hostname(config)#ip tftp source-interface loopback {<em>loobpback_interface_number</em>}

Default Value:

The address of the closest interface to the destination is selected as the source address.

See Also

https://workbench.cisecurity.org/files/3801