File transfer via SCP

SCP (Secure Copy) is a protocol for the secure transfer of data between two computers in a network. Administrators often use SCP to exchange data between servers or between servers and workstations. With a suitable tool (e. g. the Putty add-on pscp.exe on Windows operating systems) you can also exchange data between your PC/notebook and a LANCOM device.

Download pscp.exe from the Putty download page to perform file transfer from a Windows operating system.

Then open a command line window using the command cmd.

Change to the directory where you have saved the file pscp.exe and run the following command to transfer a file from your Windows computer to the device. Enter the options -scp and -pw followed by your password:
C:\PortableApps\PuTTYPortable>pscp.exe -scp -pw ******* c:\path\myfile.ext <User>@<IP-address>:target
Change the order of the source and destination, to transfer the file from the device to your computer:
C:\PortableApps\PuTTYPortable>pscp.exe -scp -pw ******* <User>@<IP-address>:target c:\path\myfile.ext
Enter  the following command to save the configuration from the device to a file named config.lcs on your computer:
C:\PortableApps\PuTTYPortable>pscp.exe -scp -pw ******* root@123.123.123.123:config c:\config.lcs
To  upload a new firmware file from your computer to the device, enter the following command:
C:\PortableApps\PuTTYPortable>pscp.exe -scp -pw *******  c:\firmware.upx root@123.123.123.123:firmware
The following table specifically shows which files you can read via SCP from the device and which ones you can write to it:
Table 1. Files for the SCP file transfer
Target Read Write Description
ssl_cert Yes Yes SSL – certificate (*.pem, *.crt. *.cer [BASE64])
ssl_privkey   Yes SSL – private key (*.key [BASE64 unencrypted])
ssl_rootcert Yes Yes SSL – root CA certificate (*.pem, *.crt. *.cer [BASE64])
ssl_pkcs12   Yes SSL – container as PKCS#12 file (*.pfx, *.p12)
ssh_rsakey   Yes SSL – RSA key (*.key [BASE64 unencrypted])
ssh_dsakey   Yes SSL – DSA key (*.key [BASE64 unencrypted])
ssh_authkeys   Yes SSH – accepted public key
vpn_rootcert Yes Yes VPN – root CA certificate (*.pem, *.crt. *.cer [BASE64])
vpn_devcert Yes Yes VPN – device certificate (*.pem, *.crt. *.cer [BASE64])
vpn_devprivkey   Yes SSL – private device key (*.key [BASE64 unencrypted])
vpn_pkcs12   Yes VPN – container (VPN1) as PKCS#12 file (*.pfx, *.p12)
vpn_pkcs12_2   Yes VPN – container (VPN2) as PKCS#12 file (*.pfx, *.p12)
vpn_pkcs12_3   Yes VPN – container (VPN3) as PKCS#12 file (*.pfx, *.p12)
vpn_pkcs12_4   Yes VPN – container (VPN4) as PKCS#12 file (*.pfx, *.p12)
vpn_pkcs12_5   Yes VPN – container (VPN5) as PKCS#12 file (*.pfx, *.p12)
vpn_pkcs12_6   Yes VPN – container (VPN6) as PKCS#12 file (*.pfx, *.p12)
vpn_pkcs12_7   Yes VPN – container (VPN7) as PKCS#12 file (*.pfx, *.p12)
vpn_pkcs12_8   Yes VPN – container (VPN8) as PKCS#12 file (*.pfx, *.p12)
vpn_pkcs12_9   Yes VPN – container (VPN9) as PKCS#12 file (*.pfx, *.p12)
vpn_add_cas   Yes VPN - add additional CA certificates (*.pfx, *.p12, *.pem, *.crt. *.cer [BASE64])
eaptls_rootcert Yes Yes EAP/TLS – root CA certificate (*.pem, *.crt. *.cer [BASE64])
eaptls_devcert Yes Yes EAP/TLS – device certificate (*.pem, *.crt. *.cer [BASE64])
eaptls_privkey   Yes EAP/TLS – private device key (*.key [BASE64 unencrypted])
eaptls_pkcs12   Yes EAP/TLS – container as PKCS#12 file (*.pfx, *.p12)
radsec_rootcert Yes Yes RADSEC – root CA certificate (*.pem, *.crt. *.cer [BASE64])
radsec_devcert Yes Yes RADSEC – device certificate (*.pem, *.crt. *.cer [BASE64])
radsec_privkey   Yes RADSEC – private device key (*.key [BASE64 unencrypted])
radsec_pkcs12   Yes RADSEC – container as PKCS#12 file (*.pfx, *.p12)
radiuss_accnt_total Yes Yes RADIUS server – summary accounting (*.csv)
scep_cert_list Yes Yes SCEP-CA – certificate list
scep_cert_serial Yes Yes SCEP-CA – serial number
scep_ca_backup Yes   Backup for SCEP-CA – PKCS12 container
scep_ra_backup Yes   Backup for SCEP-CA – PKCS12 container
scep_ca_pkcs12   Yes SCEP-CA – PKCS12 container
scep_ra_pkcs12   Yes SCEP-CA – PKCS12 container
pbspot_template_welcome Yes Yes Public Spot – welcome page (*.html, *.htm)
pbspot_template_login Yes Yes Public Spot – login page (*.html, *.htm)
pbspot_template_error Yes Yes Public Spot – error page (*.html, *.htm)
pbspot_template_start Yes Yes Public Spot – home page (*.html, *.htm)
pbspot_template_status Yes Yes Public Spot – status page (*.html, *.htm)
pbspot_template_logoff Yes Yes Public Spot – logoff page (*.html, *.htm)
pbspot_template_help Yes Yes Public Spot – help page (*.html, *.htm)
pbspot_template_noproxy Yes Yes Public Spot – no proxy page (*.html, *.htm)
pbspot_template_voucher Yes Yes Public Spot – voucher page (*.html, *.htm)
pbspot_template_agb Yes Yes Public Spot – GTC page (*.html, *.htm)
pbspot_formhdrimg Yes Yes Public Spot – header image pages (*.gif, *.png, *.jpeg)
WLC_Script_1.lcs Yes Yes CAPWAP – WLC_Script_1.lcs
WLC_Script_2.lcs Yes Yes CAPWAP – WLC_Script_2.lcs
WLC_Script_3.lcs Yes Yes CAPWAP – WLC_Script_3.lcs
default_pkcs12   Yes  
rollout_wizard   Yes  
rollout_template   Yes  
rollout_logo   Yes  
hip_cert_0   Yes  
issue Yes Yes Text for display after command-line login (e.g. ASCII logos)
config Yes Yes Device configuration
firmware   Yes Firmware update