| 2.4 |  | Router Management |
| 2.4.4 |  | Software and configuration maintenance |

| Local administration of routers is often the preferred method. In this case, using the terminal is the best choice for loading a new configuration. The configuration files would be stored on the computer attached to the console and the copy/paste buffer on the local machine can be used for transferring the configuration to the router. Only a few lines should be copied at a time to ensure that the entire configuration file is transferred successfully.

If remote administration is allowed and the IOS is newer than version 12.0, the ftp protocol may be used to transfer the configuration files to and from the router. Figure shows how to save the startup configuration to a file. This procedure should be used for emergencies only, and is not recommended between IOS versions.

Figure demonstrates how to load a new configuration to the startup configuration. Before loading a configuration this way, make sure that all the configurations in the NVRAM have been saved.

Other protocols, such as rcp and tftp, are less secure than ftp, and should not be used for remote loading or saving router configurations.

An even more secure file transfer method is Secure Copy (SCP). The Secure Copy (SCP) feature provides a secure and authenticated method for copying router configuration or router image files. SCP relies on Secure Shell (SSH), an application and a protocol that provide a secure replacement for the Berkeley r-tools. SCP is available in IOS version 12.2T and greater.

The behavior of SCP is similar to that of remote copy (rcp), which comes from the Berkeley r-tools suite, except that it relies on SSH for security. In addition, SCP requires that AAA authorization be configured so the router can determine whether the user has the correct privilege level.

SCP allows a user who has appropriate authorization to copy any file that exists in the Cisco IOS File System (IFS) to and from a router by using the copy command. An authorized administrator may also perform this action from a workstation. Several SCP clients are available such as WinSCP and PuTTY SCP.

| Web Links Security Advisories http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/ products_tech_note09186a0080132a8a.shtml#advisories http://www.cert.org/advisories/

Putty
http://www.chiark.greenend.org.uk/~sgtatham/putty/

WinSCP
http://winscp.vse.cz/eng/download.php

Cisco
http://www.cisco.com/en/US/products/
sw/iosswrel/ps1839/products_feature_guide
09186a0080087b18.html