ASA FTP Special Character in password issue

Question

I am trying to copy a show tech from an ASA to a remote server via FTP. My issue is that the password I am providing has a '@' and it is being interpreted incorrectly by the CLI. I have tried putting a '\@' but the command still fails.

Anyone have any luck with this?

This works

  show tech-support file ftp://username:password@xxx.xxx.xxx.xxx/ASA-SHOW-TECH

This Does not work

  show tech-support file ftp://username:p@ssword@xxx.xxx.xxx.xxx/ASA-SHOW-TECH

score 6 · Answer 1 · answered Jun 17 '13 at 21:26

6

The problem here is that the device is interpreting the first @ as the delimiter between the credentials and the FTP server address.

Perhaps configuring the username and password in global-configuration mode and then redirecting the show tech without specifying the credentials would do the trick. Otherwise, and I know this is a wimpy solution, changing the password to not include that one character may be the easiest and perhaps most secure way of working around this issue.

answered Jun 17 '13 at 21:26

Yosef Gunsburg

1,615
10
19

Can you specify how you set ftp username and password in the global config? Thanks – Blake Jun 17 '13 at 21:50
2

I am not sure if it is the same syntax on an ASA, but on a Cisco router you use the commands `ip ftp username` and `ip ftp password` in global configuration mode to set a default username and password for FTP connections. – Yosef Gunsburg Jun 17 '13 at 21:56

score 0 · Answer 2 · answered Jun 18 '13 at 11:02

0

On IOS you can enter control-v to escape the next character. This lets you enter a question mark without pulling up help. Don't if that works on ASA but might be worth a try.

answered Jun 18 '13 at 11:02

Dave Noonan

950
7
16

This is ASA not IOS – Blake Jul 31 '13 at 02:40
That might explain why I said "Don't know if that works on ASA"... – Dave Noonan Aug 06 '13 at 18:47

score 0 · Accepted Answer · answered Jul 31 '13 at 02:41

0

It does not seem like it is supported, so the work around is to just change the password that does not have the @ special character if you need to automate the process.

answered Jul 31 '13 at 02:41

Blake

922
2
10
20

score 0 · Answer 4 · answered Aug 04 '17 at 07:19

0

This works for ios not sure if it will work for the ASA

https://supportforums.cisco.com/discussion/9945506/entering-question-mark-ios-command

answered Aug 04 '17 at 07:19

Ahmed Emad

1

1

Please consider adding more details to this answer so it remains useful even if the linked document is removed or changes. – Teun Vink Aug 04 '17 at 11:50

ASA FTP Special Character in password issue

4 Answers4