Changes for page Remote Access Gateway
Last modified by Kilight Cao on 2022/07/25 10:47
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -1,10 +1,12 @@ 1 - **Contents:** 1 + **Table of Contents:** 2 2 3 3 {{toc/}} 4 4 5 5 6 -= 1. Use Remote.it service = 7 7 7 += **1. Use Remote.it service** = 8 + 9 + 8 8 Remote.it for remote access is available in the latest Dragino firmware for gateway. For security concern, the remote.it only available base on end user demand. 9 9 10 10 (% style="color:red" %)**Important Notice:** ... ... @@ -15,8 +15,9 @@ 15 15 For how to use remoteit, please see : [[Remoteit user instruction for Dragino Gateway>>url:https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/&file=Dragino-Remoteit_User_Manual.pdf]]. 16 16 17 17 18 -= 2. RSSH Introduction = 20 += **2. RSSH Introduction** = 19 19 22 + 20 20 Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand. 21 21 22 22 (% style="color:red" %)**Important Notice:** ... ... @@ -34,10 +34,15 @@ 34 34 * LIG16 35 35 * MS14 series if installed with the same firmware. 36 36 37 -== 2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355 == 38 38 39 -=== 2.1.1 End User Guide to use SSH access === 40 40 42 + 43 +== **2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355** == 44 + 45 + 46 +=== **2.1.1 End User Guide to use SSH access** === 47 + 48 + 41 41 Go to this the Reverse SSH page as below: 42 42 43 43 [[image:image-20220527102348-1.png]] ... ... @@ -49,11 +49,11 @@ 49 49 50 50 Connection OK. 51 51 52 -* (% style="color:#4f81bd" %)**Login ID**(%%): Input (% style="color:#4f81bd" %)**sshuser** 53 -* (% style="color:#4f81bd" %)**Host Address**(%%): Input** (% style="color:#4f81bd" %)support.dragino.com(%%)** 54 -* (% style="color:#4f81bd" %)**Host Port**(%%): Please email to support @ dragino.com to get a valid host port. 60 +* (% style="color:#4f81bd" %)**Login ID**(%%): Input (% style="color:#4f81bd" %)**sshuser** 61 +* (% style="color:#4f81bd" %)**Host Address**(%%): Input** (% style="color:#4f81bd" %)support.dragino.com(%%)** 62 +* (% style="color:#4f81bd" %)**Host Port**(%%): Please email to support @ dragino.com to get a valid host port. 55 55 * (% style="color:#4f81bd" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered. 56 -* (% style="color:#4f81bd" %)**Network Keys:**(%%)Click the Generate keys to generate the keys and download / mail it to Dragino support so Dragino can prepare the remote access to 64 +* (% style="color:#4f81bd" %)**Network Keys: **(%%)Click the Generate keys to generate the keys and download / mail it to Dragino support so Dragino can prepare the remote access to 57 57 58 58 ((( 59 59 After doing above, please download and mail the public keys to Dragino support and wait for our mail for the valid host port. Input the valid host port got from our support and click connect so we can remote access to your gateway. ... ... @@ -60,7 +60,7 @@ 60 60 ))) 61 61 62 62 63 -=== 2.1.2 How to Ser up a Reverse SSH access === 71 +=== **2.1.2 How to Ser up a Reverse SSH access** === 64 64 65 65 Advance administrator can config a SSH server to provide support their end user themselves. Instruction is as below: 66 66 ... ... @@ -80,7 +80,7 @@ 80 80 ))) 81 81 82 82 83 -==== 2.1.2.1 Note for set up RSSH server ==== 91 +==== **2.1.2.1 Note for set up RSSH server** ==== 84 84 85 85 If gateway reboot or the connection is incidentely close by end node. The port in SSH server will still be occupy for a long time. Administrator can use below commands to release the port. 86 86 ... ... @@ -95,7 +95,7 @@ 95 95 ))) 96 96 97 97 98 -== 2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111 == 106 +== **2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111** == 99 99 100 100 Below gateway support reverse SSH access: 101 101 ... ... @@ -110,11 +110,11 @@ 110 110 ))) 111 111 112 112 113 -=== 2.2.1 End User Guide to use SSH access === 121 +=== **2.2.1 End User Guide to use SSH access** === 114 114 115 -==== 2.2.1.1 Install the SSH service for server ==== 123 +==== **2.2.1.1 Install the SSH service for server** ==== 116 116 117 -===== 2.2.1.1.1 Step 1:Download the SSH service code ===== 125 +===== **2.2.1.1.1 Step 1 : Download the SSH service code** ===== 118 118 119 119 1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server 120 120 ... ... @@ -183,7 +183,7 @@ 183 183 ))) 184 184 185 185 186 -===== 2.2.1.1.2 Step 2 :Install and run the RSS service ===== 194 +===== **2.2.1.1.2 Step 2 : Install and run the RSS service** ===== 187 187 188 188 1): intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721) 189 189 ... ... @@ -215,7 +215,7 @@ 215 215 ))) 216 216 217 217 218 -===== 2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway) ===== 226 +===== **2.2.1.1.3 Step 3 : Create a minimal SSH user (reverse SSH proxy for the gateway)** ===== 219 219 220 220 **1): (% style="color:#4f81bd" %)sudo useradd XXXXX(%%)** (custom user name) 221 221 ... ... @@ -232,11 +232,11 @@ 232 232 **Now user "XXXXX" is the user with limited permissions of the current system** 233 233 234 234 235 -=== 2.2.2 How does user get the gateway to connect to a user's private server === 243 +=== **2.2.2 How does user get the gateway to connect to a user's private server** === 236 236 237 -===== 2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key ===== 245 +===== **2.2.2.1 Step 1 : Come bace the gateway web UI for get the gateway Public key** ===== 238 238 239 -1) in the system ~-~-> (% style="color:#4f81bd" %)**Remote Mgmt /span>**247 +1) in the system ~-~-> (% style="color:#4f81bd" %)**Remote Mgmt** 240 240 241 241 [[image:image-20220527110531-7.png]] 242 242 ... ... @@ -243,7 +243,7 @@ 243 243 Remote Mgmt 244 244 245 245 246 -===== **2.2.2.2 Step2: Authorization server** ===== 254 +===== **2.2.2.2 Step 2 : Authorization server** ===== 247 247 248 248 copy the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file. 249 249 ... ... @@ -252,7 +252,7 @@ 252 252 Publickey 253 253 254 254 255 -===== **2.2.2.3 Step3: connecte private server** ===== 263 +===== **2.2.2.3 Step 3 : connecte private server** ===== 256 256 257 257 in the gateway web UI 258 258 ... ... @@ -271,7 +271,7 @@ 271 271 ))) 272 272 273 273 274 -===== **2.2.2.4 Step 4 :Cheak is fine** ===== 282 +===== **2.2.2.4 Step 4 : Cheak is fine** ===== 275 275 276 276 Rssh Host connection Ok 277 277 ... ... @@ -287,7 +287,7 @@ 287 287 Check the gateway 288 288 289 289 290 -===== **2.2.2.5 Step5:Create an authorization key file** ===== 298 +===== **2.2.2.5 Step 5 : Create an authorization key file** ===== 291 291 292 292 1):sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey 293 293 ... ... @@ -301,7 +301,7 @@ 301 301 302 302 === **2.2.3 How to Ser up a Reverse SSH access** === 303 303 304 -==== **2.2.3.1 Step1: Log into the server system** ==== 312 +==== **2.2.3.1 Step 1 : Log into the server system** ==== 305 305 306 306 [[image:image-20220527111145-12.png]] 307 307 ... ... @@ -308,9 +308,12 @@ 308 308 Loging server 309 309 310 310 311 -==== **2.2.3.2 Step2:access the gateway** ==== 319 +==== **2.2.3.2 Step 2 : access the gateway** ==== 312 312 321 +(% class="box" %) 322 +((( 313 313 $ cd rssh-server/ 324 +))) 314 314 315 315 Check the gateway linking to the server $ ./connect-gw.sh -l 316 316 ... ... @@ -321,6 +321,6 @@ 321 321 322 322 access the gateway $ ./connect-gw.sh <GWID> 323 323 324 -[[image: https://wiki.dragino.com/images/thumb/b/b7/Reverse_ssh_access_the_gateway1.png/500px-Reverse_ssh_access_the_gateway1.png||height="230" width="500"]]335 +[[image:image-20220527111300-14.png]] 325 325 326 326 reverse ssh access the gateway