Changes for page Remote Access Gateway
Last modified by Kilight Cao on 2022/07/25 10:47
Summary
-
Page properties (1 modified, 0 added, 0 removed)
-
Attachments (0 modified, 0 added, 14 removed)
- image-20220527105447-1.png
- image-20220527105511-2.png
- image-20220527105856-3.png
- image-20220527105918-4.png
- image-20220527110011-5.png
- image-20220527110436-6.png
- image-20220527110531-7.png
- image-20220527110625-8.png
- image-20220527110700-9.png
- image-20220527111009-10.png
- image-20220527111041-11.png
- image-20220527111145-12.png
- image-20220527111219-13.png
- image-20220527111300-14.png
Details
- Page properties
-
- Content
-
... ... @@ -3,9 +3,8 @@ 3 3 {{toc/}} 4 4 5 5 6 += 1. Use Remote.it service = 6 6 7 -= **1. Use Remote.it service** = 8 - 9 9 Remote.it for remote access is available in the latest Dragino firmware for gateway. For security concern, the remote.it only available base on end user demand. 10 10 11 11 (% style="color:red" %)**Important Notice:** ... ... @@ -16,7 +16,7 @@ 16 16 For how to use remoteit, please see : [[Remoteit user instruction for Dragino Gateway>>url:https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/&file=Dragino-Remoteit_User_Manual.pdf]]. 17 17 18 18 19 -= **2. RSSH Introduction**=18 += 2. RSSH Introduction = 20 20 21 21 Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand. 22 22 ... ... @@ -35,12 +35,10 @@ 35 35 * LIG16 36 36 * MS14 series if installed with the same firmware. 37 37 37 +== 2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355 == 38 38 39 +=== 2.1.1 End User Guide to use SSH access === 39 39 40 -== **2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355** == 41 - 42 -=== **2.1.1 End User Guide to use SSH access** === 43 - 44 44 Go to this the Reverse SSH page as below: 45 45 46 46 [[image:image-20220527102348-1.png]] ... ... @@ -63,7 +63,7 @@ 63 63 ))) 64 64 65 65 66 -=== **2.1.2 How to Ser up a Reverse SSH access**===63 +=== 2.1.2 How to Ser up a Reverse SSH access === 67 67 68 68 Advance administrator can config a SSH server to provide support their end user themselves. Instruction is as below: 69 69 ... ... @@ -83,7 +83,7 @@ 83 83 ))) 84 84 85 85 86 -==== **2.1.2.1 Note for set up RSSH server**====83 +==== 2.1.2.1 Note for set up RSSH server ==== 87 87 88 88 If gateway reboot or the connection is incidentely close by end node. The port in SSH server will still be occupy for a long time. Administrator can use below commands to release the port. 89 89 ... ... @@ -98,7 +98,7 @@ 98 98 ))) 99 99 100 100 101 -== **2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111**==98 +== 2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111 == 102 102 103 103 Below gateway support reverse SSH access: 104 104 ... ... @@ -113,15 +113,15 @@ 113 113 ))) 114 114 115 115 116 -=== **2.2.1 End User Guide to use SSH access**===113 +=== 2.2.1 End User Guide to use SSH access === 117 117 118 -==== **2.2.1.1 Install the SSH service for server**====115 +==== 2.2.1.1 Install the SSH service for server ==== 119 119 120 -===== **2.2.1.1.1 Step 1**=====117 +===== 2.2.1.1.1 Step 1:Download the SSH service code ===== 121 121 122 122 1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server 123 123 124 -[[image:image -20220527105447-1.png]]121 +[[image:https://wiki.dragino.com/images/thumb/d/d0/Git_clone.png/500px-Git_clone.png||height="80" width="500"]] 125 125 126 126 git clone rssh-server 127 127 ... ... @@ -128,40 +128,38 @@ 128 128 129 129 2).cd rssh-server; sudo make ~-~--> to Generate the execute file:rssh_serv 130 130 131 -[[image:image -20220527105511-2.png]]128 +[[image:https://wiki.dragino.com/images/thumb/e/e3/Generate_the_execute_file.png/500px-Generate_the_execute_file.png||height="103" width="500"]] 132 132 133 133 Generate the execute file 134 134 135 - 136 136 **Debug** : 137 137 138 138 (% class="box" %) 139 139 ((( 140 -if you git fail. ~-~-> (% style="color:#4f81bd" %)**sudo: git: command not found.**(%%)141 -please install git. ~-~-> style="color:#4f81bd" %)**yum install git -y or apt-get install git -y.**136 +if you git fail. ~-~-> (% class="mark" %)**sudo: git: command not found.**(%%) 137 +please install git. ~-~-> (% class="mark" %)**yum install git -y or apt-get install git -y. ** 142 142 ))) 143 143 144 144 (% class="box" %) 145 145 ((( 146 -if you make error 127,it** (% style="color:#4f81bd" %)lack of gcc.(%%)**147 -please install gcc. ~-~->(% style="color:#4f81bd" %)**yum install gcc.**142 +if you make error 127,it** (% class="mark" %)lack of gcc.(%%)** 143 +please install gcc. ~-~->(% class="mark" %)**yum install gcc.** 148 148 ))) 149 149 150 -[[image:image -20220527105856-3.png]]146 +[[image:https://wiki.dragino.com/images/d/d7/Lack_of_gcc.png||height="174" width="434"]] 151 151 152 152 lack of gcc 153 153 154 154 (% class="box" %) 155 155 ((( 156 -if you make a fatal error : sqlite3.h,it (% style="color:#4f81bd" %)**lack of sqlite3.**(%%)157 -please insatell (% style="color:#4f81bd" %)**sqlite3**.152 +if you make a fatal error : sqlite3.h,it (% class="mark" %)**lack of sqlite3.**(%%) 153 +please insatell **sqlite3**. 158 158 ))) 159 159 160 -[[image:image -20220527105918-4.png]]156 +[[image:https://wiki.dragino.com/images/thumb/9/93/Lack_of_sqlite3.png/500px-Lack_of_sqlite3.png||height="137" width="500"]] 161 161 162 162 lack of sqlite3 163 163 164 - 165 165 How to install Sqlit3 166 166 167 167 (% class="box" %) ... ... @@ -186,9 +186,9 @@ 186 186 ))) 187 187 188 188 189 -===== **2.2.1.1.2 Step 2 :**=====184 +===== 2.2.1.1.2 Step 2 :Install and run the RSS service ===== 190 190 191 -1): 186 +1):intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721) 192 192 193 193 user must enter the root account and run the following commands 194 194 ... ... @@ -199,7 +199,7 @@ 199 199 $ ps -ef | grep rssh_serv check 3721 port 200 200 ))) 201 201 202 -[[image:image -20220527110436-6.png]]197 +[[image:https://wiki.dragino.com/images/thumb/c/cb/Intall_database_and_server_development_port.png/500px-Intall_database_and_server_development_port.png||height="70" width="500"]] 203 203 204 204 intall database and server development port 205 205 ... ... @@ -207,78 +207,78 @@ 207 207 208 208 (% class="box" %) 209 209 ((( 210 -Check /var/rsshdb.sqlite3 ~-~->(% style="color:#4f81bd" %)** ls /var/rsshdb.sqlite3**(%%)211 -Check ls /var/rsshdb.sqlite3 ~-~-> (% style="color:#4f81bd" %)**sudo chmod 777 rssh_serv**205 +Check /var/rsshdb.sqlite3 ~-~->(% class="mark" %)** ls /var/rsshdb.sqlite3**(%%) 206 +Check ls /var/rsshdb.sqlite3 ~-~-> (% class="mark" %)**sudo chmod 777 rssh_serv** 212 212 ))) 213 213 214 214 (% class="box" %) 215 215 ((( 216 216 if** fail to open dpvlry or to bind to it** 217 -please kill rssh_serv,and run (% style="color:#4f81bd" %)** ./rssh_serv -p 3721 2>&1 &** (%%) again212 +please kill rssh_serv,and run (% class="mark" %)** ./rssh_serv -p 3721 2>&1 &** (%%) again 218 218 ))) 219 219 220 220 221 -===== **2.2.1.1.3 Step 3 :**=====216 +===== 2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway) ===== 222 222 223 - **1):style="color:#4f81bd" %)sudo useradd XXXXX(%%)**(custom user name)218 +1):(% class="mark" %)**sudo useradd XXXXX**(%%) (custom user name) 224 224 225 - **2):**(%style="color:#4f81bd" %)**sudo passwd xxxxxx**220 +2):(% class="mark" %)**sudo passwd xxxxxx** 226 226 227 - **3):**(%style="color:#4f81bd" %)**cp /bin/bash /bin/rbash**222 +3):(% class="mark" %)**cp /bin/bash /bin/rbash** 228 228 229 - **4):**(%style="color:#4f81bd" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash224 +4):(% class="mark" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash 230 230 231 - **5):**(%style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**226 +5):(% class="mark" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin** 232 232 233 - **6):**(%style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**228 +6):(% class="mark" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin** 234 234 235 235 **Now user "XXXXX" is the user with limited permissions of the current system** 236 236 237 237 238 -=== **2.2.2 How does user get the gateway to connect to a user's private server**===233 +=== 2.2.2 How does user get the gateway to connect to a user's private server === 239 239 240 -===== **2.2.2.1 Step**=====235 +===== 2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key ===== 241 241 242 -1) style="color:#4f81bd" %)**Remote Mgmt**237 +1)in the system ~-~-> (% class="mark" %)**Remote Mgmt/span>** 243 243 244 -[[image:image -20220527110531-7.png]]239 +[[image:https://wiki.dragino.com/images/thumb/8/8f/Remote_Mgmt.png/500px-Remote_Mgmt.png||height="367" width="500"]] 245 245 246 246 Remote Mgmt 247 247 248 248 249 -===== **2.2.2.2 Step**=====244 +===== 2.2.2.2 Step2: Authorization server ===== 250 250 251 251 copy the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file. 252 252 253 -[[image:image -20220527110625-8.png]]248 +[[image:https://wiki.dragino.com/images/thumb/4/49/Publickey.png/500px-Publickey.png||height="81" width="500"]] 254 254 255 255 Publickey 256 256 257 257 258 -===== **2.2.2.3 Step**=====253 +===== 2.2.2.3 Step3: connecte private server ===== 259 259 260 260 in the gateway web UI 261 261 262 -[[image:image -20220527110700-9.png]]257 +[[image:https://wiki.dragino.com/images/thumb/0/04/Gateway_web_UI.png/500px-Gateway_web_UI.png||height="389" width="500"]] 263 263 264 264 gateway web UI 265 265 266 266 (% class="box" %) 267 267 ((( 268 -(% style="color:#4f81bd" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (%style="color:#4f81bd" %)**Public Key**(%%)263 +(% class="mark" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (% class="mark" %)**Public Key**(%%) 269 269 **Note:if user's least privileged user no uses a password,choose from both is fine** 270 -(% style="color:#4f81bd" %)**Login ID**(%%) : Input user name "eg : "XXXXX"271 -(% style="color:#4f81bd" %)**Host Address**(%%) : Input user's private server address272 -(% style="color:#4f81bd" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.265 +(% class="mark" %)**Login ID**(%%) : Input user name "eg : "XXXXX" 266 +(% class="mark" %)**Host Address**(%%) : Input user's private server address 267 +(% class="mark" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered. 273 273 Click Save and then Connect 274 274 ))) 275 275 276 276 277 -===== **2.2.2.4 Step 4 :**=====272 +===== 2.2.2.4 Step 4 :Cheak is fine ===== 278 278 279 279 Rssh Host connection Ok 280 280 281 -[[image:image -20220527111009-10.png]]276 +[[image:https://wiki.dragino.com/images/thumb/6/6f/Rssh_Host_connection_Ok.png/500px-Rssh_Host_connection_Ok.png||height="225" width="500"]] 282 282 283 283 Rssh Host connection Ok 284 284 ... ... @@ -285,12 +285,12 @@ 285 285 286 286 user can use common ps | grep ssh to check it in the gateway. 287 287 288 -[[image:image -20220527111041-11.png]]283 +[[image:https://wiki.dragino.com/images/thumb/a/ad/Check_the_gateway.png/500px-Check_the_gateway.png]] 289 289 290 290 Check the gateway 291 291 292 292 293 -===== **2.2.2.5 Step**=====288 +===== 2.2.2.5 Step5:Create an authorization key file ===== 294 294 295 295 1):sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey 296 296 ... ... @@ -301,26 +301,22 @@ 301 301 check: sudo ls /home/xxxxx/.ssh/authorizedkey 302 302 ))) 303 303 299 +=== 2.2.3 How to Ser up a Reverse SSH access === 304 304 305 -=== **2.2.3HowtoSerup a ReverseSSH access**===301 +==== 2.2.3.1 Step1: Log into the server system ==== 306 306 307 - ==== **2.2.3.1 Step1:Logtoeserverystem**====303 +[[image:https://wiki.dragino.com/images/thumb/2/26/Loging_server.png/500px-Loging_server.png||height="69" width="500"]] 308 308 309 -[[image:image-20220527111145-12.png]] 310 - 311 311 Loging server 312 312 313 313 314 -==== **2.2.3.2 Step**====308 +==== 2.2.3.2 Step2:access the gateway ==== 315 315 316 -(% class="box" %) 317 -((( 318 318 $ cd rssh-server/ 319 -))) 320 320 321 321 Check the gateway linking to the server $ ./connect-gw.sh -l 322 322 323 -[[image:image -20220527111219-13.png]]314 +[[image:https://wiki.dragino.com/images/thumb/e/ee/Check_gateway_link_server.png/500px-Check_gateway_link_server.png||height="157" width="500"]] 324 324 325 325 Check the gateway linking to the server 326 326 ... ... @@ -327,6 +327,6 @@ 327 327 328 328 access the gateway $ ./connect-gw.sh <GWID> 329 329 330 -[[image:image -20220527111300-14.png]]321 +[[image:https://wiki.dragino.com/images/thumb/b/b7/Reverse_ssh_access_the_gateway1.png/500px-Reverse_ssh_access_the_gateway1.png||height="230" width="500"]] 331 331 332 332 reverse ssh access the gateway
- image-20220527105447-1.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -13.0 KB - Content
- image-20220527105511-2.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -29.3 KB - Content
- image-20220527105856-3.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -9.9 KB - Content
- image-20220527105918-4.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -11.3 KB - Content
- image-20220527110011-5.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -11.2 KB - Content
- image-20220527110436-6.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -10.5 KB - Content
- image-20220527110531-7.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -79.9 KB - Content
- image-20220527110625-8.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -30.7 KB - Content
- image-20220527110700-9.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -66.6 KB - Content
- image-20220527111009-10.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -22.5 KB - Content
- image-20220527111041-11.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -13.4 KB - Content
- image-20220527111145-12.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -6.3 KB - Content
- image-20220527111219-13.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -9.1 KB - Content
- image-20220527111300-14.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -28.6 KB - Content