Does NETLABAE use the (insecure) TFTP protocol?
NETLABAE provides a read-only TFTP server listening on the inside (private) interface. TFTP is disabled on the outside (public) interface. When NETLABAE needs to recover a system image on a lab device, control switch port is moved into VLAN 1. After the image is TFTP’d to the device, the port is removed from VLAN 1.