Technical Anshu
Tutorials Blog
💾 Switch Config Backup

Backup Switch Configuration to a TFTP Server Before Any Change

Every network engineer has one story that begins 'I only changed one line...' The professional difference is that their story ends with a restore, not a rebuild. This is the classic TFTP job, done properly: back up the running configuration before the change, and know exactly how it comes back.

✍️ Technical Anshu🪟 Windows 10 / 11⏱️ 8 minute read
🎥 Watch the full video — TFTP server setup with the GUI tool, step by step

Of everything TFTP is used for, this is the job it was born to do and the one the video series is built around. A managed switch keeps its entire setup in a text configuration, and its own copy commands speak TFTP natively. The backup takes under two minutes, produces a file you can read with your own eyes, and turns any future disaster — failed change, dead hardware, factory reset — into a restore instead of a reconstruction from memory. The commands below are the documented ones for Cisco IOS-class switches; other brands offer the same copy idea from their own menus, pointed at the same TFTP server.

Switch CLI — Copying the Running Configuration to TFTP
Switch# copy running-config tftp: Address or name of remote host []? 192.168.1.10 Destination filename [switch-confg]? switch-core-config-2026-10-25.cfg !! 4821 bytes copied in 0.84 secs
✔ The !! marks and byte count = the file left the switch
✔ Confirm it also arrived: check the TFTP tool log and the root folder
A real Cisco IOS conversation, with an example PC address and file name. The server side was set up first — see the setup guide in this series.
1

Running Config vs Startup Config — Back Up the Right One

A switch lives with two configurations. The running-config is what it is doing right now, in memory — including the change you made five minutes ago that nobody saved. The startup-config is what it will load after a reboot, stored in NVRAM. Back up the running-config before a change: it is the true current state. And if the running state is good and intended to survive reboots, save it deliberately with copy running-config startup-config — a separate act from backing it up to your PC.

2

Before You Copy — Server Ready, Name Decided

Thirty seconds of preparation prevents the two classic fumbles:

  1. TFTP server running on the PC, root folder open where you can see it
  2. PC's IP address confirmed (the switch will ask for it) — example 192.168.1.10
  3. File name decided in advance: device-purpose-date.cfg, like switch-core-config-2026-10-25.cfg — this name gets typed on the switch and must match what you expect to find
3

The Copy, Step by Step (Cisco IOS Class)

  1. Log in to the switch and enter privileged mode
  2. Run copy running-config tftp:
  3. At Address or name of remote host, type the TFTP server's IP address
  4. At Destination filename, type your prepared name exactly
  5. Watch for the exclamation marks and the final line reporting bytes copied — that is the switch's side of the proof
  6. Now prove the server's side: the tool's log shows the completed transfer, and the file sits in the root folder at a sensible size (a real config is a few KB of readable text, never 0 bytes)
4

Read the File You Just Made

Open the backup in a text editor before you touch the switch. You should see the hostname, interface settings, VLANs and the rest of your network in plain text. This ten-second check catches the embarrassing failures — the empty file, the old file from last month with today's name typed wrong, the transfer that actually failed quietly. A backup you have not looked at is a hope, not a backup.

5

Restoring from the Same File

The day this file earns its keep, the route back is the same road in reverse:

  1. Start the TFTP server with the backup file in the root folder
  2. On the switch: copy tftp: running-config, giving the server address and the exact file name
  3. The configuration merges into the running state — check the recovered settings, then, only when satisfied, save with copy running-config startup-config

Honest note: a merge is not a time machine. Settings present now but absent in the backup can survive the merge, so for a full return to a known state, experienced engineers reload the device with the restored file as its startup config. Either way, you are recovering from a file — not from memory.

6

Make It a Ritual, Not an Event

The backup that saves you is the one taken before the change, as a reflex: before firmware upgrades, before 'small' VLAN edits, before anything typed after the words "quick fix". Date-named files cost nothing and stack up into a history you can diff when a mystery problem appears — 'what changed?' is answered by comparing two text files instead of by guessing. Move the files out of the TFTP root into your real backup location the same day, as covered in the root-folder guide.

🔴 The two-minute rule: if a change is worth making, it is worth a config backup first. copy running-config tftp: before the change and a restore route after it — that gap is the entire difference between an incident and an anecdote.

🎥 Watch the Complete Video Guide

The full TFTP server setup — installation, root folder, firewall and a live transfer — is shown step by step in the video.

▶️ Watch Full Video
❓ Common Questions (FAQ)

What is the exact command to back up a Cisco switch configuration to TFTP?

From privileged mode: copy running-config tftp: — then answer the two prompts with the TFTP server's IP address and your chosen destination file name. The switch shows exclamation marks as blocks transfer and reports the byte count when done. Confirm on the PC side that the file arrived in the server's root folder.

Should I back up running-config or startup-config?

Back up the running-config — it is the live state of the switch, including recent changes. The startup-config can be older than reality if changes were never saved. For a complete safety net, some engineers take both, but if you take only one, the running configuration is the truth of what the network is doing now.

The copy finished on the switch but no file is on the PC. What went wrong?

Check in this order: the TFTP tool's log (did the request arrive and complete, or error?), the root folder the tool is actually using (not the folder you think it is using), and whether you are looking for the exact file name you typed at the switch prompt. A 0-byte or missing file with a 'successful' switch message usually means the write side on the PC failed — folder permission is the prime suspect.

This guide is based on the TFTP Server Setup video by Technical Anshu • Stuck on a step? Ask in the video comments — answers happen there 🙏