Archive with Secure Copy

Question

Hi all,
I have been using automatic archive configurations with TFTP and it works great. However, I'd like to switch to SCP as the file transfer mechanism to improve security on the router and for the file server. I have a test router configured with:
archive
path scp://user:pwd@host/file
time-period 5
This should automatically archive every five minutes with the specified username and password. However, it does not automatically archive, but I can manually archive by typing archive config. I visually watch the router successfully log in to the SCP server and put the file in the correct directory. Is SCP not supported for automatic archive or am I missing something?
thanks,

Answer 1

think since ssh is working and scp is not, in order to avoid fragmentation issues, you can try to set the mss to 1300 and clear the df bit (replace with the internal interface of each router and set the right ip address for the client/server). For example, on the spoke:
access-list 199 permit ip host host
route-map DF_CLEAR permit 10
match address 199
set ip df 0
exit
int
ip policy route-map DF_CLEAR
ip tcp adjust-mss 1300
exit
I dont think there is a way to exchange keys and signature so that SSH session can be established automatically.