Changes for page Monitor & Remote Access Gateway
Last modified by Xiaoye on 2023/11/07 20:12
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -69,7 +69,6 @@ 69 69 70 70 71 71 72 - 73 73 == **1.3 Monitor Public IP** == 74 74 75 75 ... ... @@ -101,7 +101,6 @@ 101 101 102 102 == **2.2 RSSH Introduction** == 103 103 104 - 105 105 Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand. 106 106 107 107 Important Notice: ... ... @@ -125,9 +125,8 @@ 125 125 126 126 127 127 128 -=== **2.2.1 126 +=== **2.2.1 End User Guide to use SSH access** === 129 129 130 - 131 131 Go to this the Reverse SSH page as below: 132 132 133 133 [[image:image-20220531150151-3.png]] ... ... @@ -141,32 +141,28 @@ 141 141 Connection OK. 142 142 143 143 144 -* (% style="color:#037691" %)**Login ID**(%%): 145 -* (% style="color:#037691" %)**Host Address**(%%): 146 -* (% style="color:#037691" %)**Host Port** (%%): 141 +* (% style="color:#037691" %)**Login ID**(%%): Input sshuser 142 +* (% style="color:#037691" %)**Host Address**(%%): Input support.dragino.com 143 +* (% style="color:#037691" %)**Host Port** (%%): Please email to support @ dragino.com to get a valid host port. 147 147 * (% style="color:#037691" %)**Connect at Startup**(%%) : Choose to enable connect once the device is powered. 148 -* (% style="color:#037691" %)**Network Keys**(%%): 145 +* (% style="color:#037691" %)**Network Keys**(%%): Click the Generate keys to generate the keys and download / mail it to Dragino support so Dragino can prepare the remote access to 149 149 150 150 After doing above, please download and mail the public keys to Dragino support and wait for our mail for the valid host port. Input the valid host port got from our support and click connect so we can remote access to your gateway. 151 151 152 152 150 +=== **2.2.2 Set Up RSSH Server** === 153 153 154 -=== **2.2.2 Set Up RSSH Server** === 155 - 156 156 Advance administrator can config a SSH server to provide support their end user themselves., Steps as below 157 157 158 158 155 +==== **2.2.2.1 Step 1 : Download the SSH service code** ==== 159 159 160 - ==== **2.2.2.1Step1:Download the SSHservice code**====157 +1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server 161 161 162 - 163 -**1).** git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server 164 - 165 165 [[image:image-20220531150750-5.png]] 166 166 161 +2).cd rssh-server; sudo make ~-~--> to Generate the execute file:rssh_serv 167 167 168 -**2).** cd rssh-server; sudo make ~-~--> to Generate the execute file:rssh_serv 169 - 170 170 [[image:image-20220531150811-6.png]] 171 171 172 172 ... ... @@ -196,31 +196,25 @@ 196 196 [[image:image-20220531151628-8.png]] 197 197 198 198 199 - (% style="color:blue" %)**How to install Sqlit3**192 +**How to install Sqlit3** 200 200 201 201 (% class="box infomessage" %) 202 202 ((( 203 - **~Step1:**Download the SQLit3 installation package204 - 196 + Step1:Download the SQLit3 installation package 197 + sudo wget **[[https:~~/~~/www.sqlite.org/2021/sqlite-autoconf-3350400.tar.gz>>url:https://www.sqlite.org/2021/sqlite-autoconf-3350400.tar.gz]]** 205 205 206 - 207 -**Step2: **tar the SQLit3 installation package 199 +Step2:tar the SQLit3 installation package 208 208 sudo tar -zxvf sqlite-autoconf-3350300.tar.gz 209 - 210 -**Step3:** Generate the makefile 201 +Step3:Generate the makefile 211 211 cd sqlite-autoconf-3350300/;./configure 212 - 213 -**Step4:** Compile makefile 203 +Step4:Compile makefile 214 214 sudo make 215 - 216 -**Step5:** Install makefile 205 +Step5:Install makefile 217 217 sudo make install 218 - 219 -**Check:** 207 +Check: 220 220 cd /usr/local/bin;ls -al ~-~-> Check to see if there is a file for sqlite3 221 221 cd sqlite-autoconf-3350300/;./sqlite3 test.db ~-~-> Test whether the sqlite3 was installed successfully 222 - 223 -**debug:** 210 +debug: 224 224 If you get the imformation that is SQLite header and source version mismatch, when you execute./sqlite3 test.db. 225 225 Please execute the command /sbin/ldconfig. 226 226 After that execute the command ./sqlite3 test.db again. ... ... @@ -227,12 +227,10 @@ 227 227 ))) 228 228 229 229 217 +==== **2.2.2.2 Step 2 : Install and run the RSS service** ==== 230 230 231 - ==== **2.2.2.2 Step 2:Install and run theRSS service**====219 +1):install database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721) 232 232 233 - 234 -**1). ** install database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721) 235 - 236 236 user must enter the root account and run the following commands 237 237 238 238 (% class="box infomessage" %) ... ... @@ -257,28 +257,26 @@ 257 257 258 258 259 259 260 -==== **2.2.2.3 245 +==== **2.2.2.3 Step 3 : Create a minimal SSH user (reverse SSH proxy for the gateway)** ==== 261 261 262 - 263 263 (% class="box infomessage" %) 264 264 ((( 265 - **1):**sudo useradd XXXXX (custom user name)266 - **2):**sudo passwd xxxxxx267 - **3):**cp /bin/bash /bin/rbash268 - **4):**sudo nano /etc/passwd ~-~-> Change /bin/bash to /bin/rbash269 - **5):**sudo nano /home/xxxxx/.bashrc **empty it,and input export PATH=$HOME/bin**270 - **6):**sudo nano /home/xxxxx/.bash_profile **empty it,and input export PATH=$HOME/bin**249 +1):sudo useradd XXXXX (custom user name) 250 +2):sudo passwd xxxxxx 251 +3):cp /bin/bash /bin/rbash 252 +4):sudo nano /etc/passwd ~-~-> Change /bin/bash to /bin/rbash 253 +5):sudo nano /home/xxxxx/.bashrc **empty it,and input export PATH=$HOME/bin** 254 +6):sudo nano /home/xxxxx/.bash_profile **empty it,and input export PATH=$HOME/bin** 271 271 ))) 272 272 273 - (% style="color:red" %)**Now user "XXXXX" is the user with limited permissions of the current system**257 +**Now user "XXXXX" is the user with limited permissions of the current system** 274 274 275 275 276 276 277 -==== **2.2.2.4 261 +==== **2.2.2.4 Step 4 : Create an authorization key file** ==== 278 278 263 +1):sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey 279 279 280 -**1):** sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey 281 - 282 282 **Debug:** 283 283 284 284 {{{ check: sudo ls /home/xxxxx/.ssh/authorizedkey}}} ... ... @@ -285,30 +285,25 @@ 285 285 286 286 287 287 288 -=== **2.2.3 271 +=== **2.2.3 How does user get the gateway to connect to a user's private server** === 289 289 290 290 291 -==== **2.2.3.1 274 +==== **2.2.3.1 Step 1 : Come back the gateway web UI to get the gateway Public key** ==== 292 292 276 +1)in the system ~-~-> (% style="color:#037691" %)**Remote Mgmt/span** 293 293 294 -**1)** in the system ~-~-> (% style="color:#037691" %)**Remote Mgmt/span** 295 - 296 296 [[image:image-20220531152419-11.png]] 297 297 298 298 281 +==== **2.2.3.2 Step 2 : Authorization server** ==== 299 299 300 -==== **2.2.3.2 Step 2 : Authorization server** ==== 301 - 302 - 303 303 Input the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file. 304 304 305 305 [[image:image-20220531152549-12.png]] 306 306 307 307 288 +==== **2.2.3.3 Step 3 : Connect private server** ==== 308 308 309 -==== **2.2.3.3 Step 3 : Connect private server** ==== 310 - 311 - 312 312 This is same as connect Dragino Support Server but just change the server address to customize server address. 313 313 314 314 [[image:image-20220531152633-13.png]] ... ... @@ -315,9 +315,8 @@ 315 315 316 316 317 317 318 -==== **2.2.3.4 296 +==== **2.2.3.4 Step 4 : Check Connection** ==== 319 319 320 - 321 321 Rssh Host connection Ok 322 322 323 323 [[image:image-20220531152815-14.png]] ... ... @@ -328,10 +328,8 @@ 328 328 [[image:image-20220531152840-15.png]] 329 329 330 330 308 +==== **2.2.3.5 Step 5 : Access the gateway from customized server** ==== 331 331 332 -==== **2.2.3.5 Step 5 : Access the gateway from customized server** ==== 333 - 334 - 335 335 Check what gateways link to server. 336 336 337 337 (% class="box infomessage" %) ... ... @@ -351,5 +351,3 @@ 351 351 ))) 352 352 353 353 [[image:image-20220531153219-17.png]] 354 - 355 -