Table of Contents:

• 1.  Monitor Gateway
  • 1.1  Introduction
  • 1.2  Steps
  • 1.3  Monitor Public IP
• 2.  Remote Access
  • 2.1  Remote Access via Remote.it.
  • 2.2  RSSH Introduction
    • 2.2.1  End User Guide to use SSH access
    • 2.2.2  Set Up RSSH Server
      • 2.2.2.1  Step 1 : Download the SSH service code
      • 2.2.2.2  Step 2 : Install and run the RSS service
      • 2.2.2.3  Step 3 : Create a minimal SSH user (reverse SSH proxy for the gateway)
      • 2.2.2.4  Step 4 : Create an authorization key file
    • 2.2.3  How does user get the gateway to connect to a user's private server
      • 2.2.3.1  Step 1 : Come back the gateway web UI to get the gateway Public key
      • 2.2.3.2  Step 2 : Authorization server
      • 2.2.3.3  Step 3 : Connect private server
      • 2.2.3.4  Step 4 : Check Connection
      • 2.2.3.5  Step 5 : Access the gateway from customized server

1.  Monitor Gateway

1.1  Introduction

This introduction shows how to use a script to monitor the gateway. The video link for this instruction is: https://youtu.be/8PieIwfSF_g

1.2  Steps

• Create account in ThingsSpeak and creat channel.
• Download script from dragino site and move it to properly directory

• change the script monitor_gateway.sh with properly users setting:

• run /usr/bin/monitor_gateway.sh to test if upload is good.

• Add monitor_gateway.sh to cron work /etc/crontabs/root to make this script runs perdiocally, below is an example to update every 20 minutes

• Reboot device.

1.3  Monitor Public IP

The monitor_gateway.sh has been updated to upload the public ip of the device as well.

User can find the public ip in field7, the chart is not able to show the complete public ip, user can check that in the export.

Find Public IP

2.  Remote Access

2.1  Remote Access via Remote.it.

Remote.it for remote access is available in the latest Dragino firmware for gateway. For security concern, the remote.it only available base on end user demand.

Important Notice:

• Remote.it access will give full control of your device to remote support.
• The Remote.it allow Dragino Support to remote access to the device, If user want to access himself, it need to sign up for an remote.it account.

For how to use remoteit, please see :  Remoteit user instruction for Dragino Gateway.

2.2  RSSH Introduction

Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand.

Important Notice:

Below gateway support reverse SSH access:

• Firmware Version > lgw--build-v5.4.1618196981-20210412-1111 Firmware Download
• LG01N, OLG01N (Note: LG01-P LG01-S doesn't support)
• LG02, OLG02
• LG308, DLOS8
• LPS8
• LIG16
• MS14 series if installed with the same firmware.

2.2.1  End User Guide to use SSH access

Go to this the Reverse SSH page as below:

Get the RSSH configure page

Connection OK.

• Login ID:          Input sshuser
• Host Address:  Input support.dragino.com
• Host Port :       Please email to support @ dragino.com to get a valid host port.
• Connect at Startup : Choose to enable connect once the device is powered.
• Network Keys:          Click the Generate keys to generate the keys and download / mail it to Dragino support so Dragino can prepare the remote access to

After doing above, please download and mail the public keys to Dragino support and wait for our mail for the valid host port. Input the valid host port got from our support and click connect so we can remote access to your gateway.

2.2.2  Set Up RSSH Server

Advance administrator can config a SSH server to provide support their end user themselves., Steps as below

2.2.2.1  Step 1 : Download the SSH service code

1).  git clone https://github.com/dragino/rssh-server.git rssh-server

2).  cd rssh-server; sudo make ---> to Generate the execute file：rssh_serv

Debug :

How to install Sqlit3

2.2.2.2  Step 2 : Install and run the RSS service

1).   install database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)

user must enter the root account and run the following commands

Debug:

 Check /var/rsshdb.sqlite3 --> ls /var/rsshdb.sqlite3
 Check ls /var/rsshdb.sqlite3 --> sudo chmod 777 rssh_serv

 if fail to open dpvlry or to bind to it
 please kill rssh_serv,and run  ./rssh_serv -p  3721 2>&1 &  again

2.2.2.3  Step 3 : Create a minimal SSH user (reverse SSH proxy for the gateway)

Now user "XXXXX" is the user with limited permissions of the current system

2.2.2.4  Step 4 : Create an authorization key file

1):  sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey

Debug:

 check: sudo ls /home/xxxxx/.ssh/authorizedkey

2.2.3  How does user get the gateway to connect to a user's private server

2.2.3.1  Step 1 : Come back the gateway web UI to get the gateway Public key

1)  in the system --> Remote Mgmt/span

2.2.3.2  Step 2 : Authorization server

Input the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file.

2.2.3.3  Step 3 : Connect private server

This is same as connect Dragino Support Server but just change the server address to customize server address.

2.2.3.4  Step 4 : Check Connection

Rssh Host connection Ok

User can use common ps | grep ssh to check it in the gateway.

2.2.3.5  Step 5 : Access the gateway from customized server

Check what gateways link to server. 

Access the gateway