Changes for page Remote Access Gateway
Last modified by Kilight Cao on 2022/07/25 10:47
Summary
-
Page properties (1 modified, 0 added, 0 removed)
-
Attachments (0 modified, 0 added, 9 removed)
Details
- Page properties
-
- Content
-
... ... @@ -1,12 +1,10 @@ 1 - ** Table ofContents:**1 + **Contents:** 2 2 3 3 {{toc/}} 4 4 5 5 6 += 1. Use Remote.it service = 6 6 7 -= **1. Use Remote.it service** = 8 - 9 - 10 10 Remote.it for remote access is available in the latest Dragino firmware for gateway. For security concern, the remote.it only available base on end user demand. 11 11 12 12 (% style="color:red" %)**Important Notice:** ... ... @@ -17,9 +17,8 @@ 17 17 For how to use remoteit, please see : [[Remoteit user instruction for Dragino Gateway>>url:https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/&file=Dragino-Remoteit_User_Manual.pdf]]. 18 18 19 19 20 -= **2. RSSH Introduction**=18 += 2. RSSH Introduction = 21 21 22 - 23 23 Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand. 24 24 25 25 (% style="color:red" %)**Important Notice:** ... ... @@ -37,13 +37,10 @@ 37 37 * LIG16 38 38 * MS14 series if installed with the same firmware. 39 39 37 +== 2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355 == 40 40 39 +=== 2.1.1 End User Guide to use SSH access === 41 41 42 - 43 -== **2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355** == 44 - 45 -=== **2.1.1 End User Guide to use SSH access** === 46 - 47 47 Go to this the Reverse SSH page as below: 48 48 49 49 [[image:image-20220527102348-1.png]] ... ... @@ -66,7 +66,7 @@ 66 66 ))) 67 67 68 68 69 -=== **2.1.2 How to Ser up a Reverse SSH access**===63 +=== 2.1.2 How to Ser up a Reverse SSH access === 70 70 71 71 Advance administrator can config a SSH server to provide support their end user themselves. Instruction is as below: 72 72 ... ... @@ -86,7 +86,7 @@ 86 86 ))) 87 87 88 88 89 -==== **2.1.2.1 Note for set up RSSH server**====83 +==== 2.1.2.1 Note for set up RSSH server ==== 90 90 91 91 If gateway reboot or the connection is incidentely close by end node. The port in SSH server will still be occupy for a long time. Administrator can use below commands to release the port. 92 92 ... ... @@ -101,7 +101,7 @@ 101 101 ))) 102 102 103 103 104 -== **2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111**==98 +== 2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111 == 105 105 106 106 Below gateway support reverse SSH access: 107 107 ... ... @@ -116,11 +116,11 @@ 116 116 ))) 117 117 118 118 119 -=== **2.2.1 End User Guide to use SSH access**===113 +=== 2.2.1 End User Guide to use SSH access === 120 120 121 -==== **2.2.1.1 Install the SSH service for server**====115 +==== 2.2.1.1 Install the SSH service for server ==== 122 122 123 -===== **2.2.1.1.1 Step 1**=====117 +===== 2.2.1.1.1 Step 1:Download the SSH service code ===== 124 124 125 125 1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server 126 126 ... ... @@ -189,9 +189,9 @@ 189 189 ))) 190 190 191 191 192 -===== **2.2.1.1.2 Step 2 :**=====186 +===== 2.2.1.1.2 Step 2 :Install and run the RSS service ===== 193 193 194 -1): 188 +1):intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721) 195 195 196 196 user must enter the root account and run the following commands 197 197 ... ... @@ -202,7 +202,7 @@ 202 202 $ ps -ef | grep rssh_serv check 3721 port 203 203 ))) 204 204 205 -[[image:image-20220527110 436-6.png]]199 +[[image:image-20220527110011-5.png]] 206 206 207 207 intall database and server development port 208 208 ... ... @@ -221,7 +221,7 @@ 221 221 ))) 222 222 223 223 224 -===== **2.2.1.1.3 Step 3 :**=====218 +===== 2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway) ===== 225 225 226 226 **1): (% style="color:#4f81bd" %)sudo useradd XXXXX(%%)** (custom user name) 227 227 ... ... @@ -238,50 +238,50 @@ 238 238 **Now user "XXXXX" is the user with limited permissions of the current system** 239 239 240 240 241 -=== **2.2.2 How does user get the gateway to connect to a user's private server**===235 +=== 2.2.2 How does user get the gateway to connect to a user's private server === 242 242 243 -===== **2.2.2.1 Step**=====237 +===== 2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key ===== 244 244 245 -1) 239 +1)in the system ~-~-> (% style="color:#4f81bd" %)**Remote Mgmt/span>** 246 246 247 -[[image:image -20220527110531-7.png]]241 +[[image:https://wiki.dragino.com/images/thumb/8/8f/Remote_Mgmt.png/500px-Remote_Mgmt.png||height="367" width="500"]] 248 248 249 249 Remote Mgmt 250 250 251 251 252 -===== **2.2.2.2 Step**=====246 +===== 2.2.2.2 Step2: Authorization server ===== 253 253 254 254 copy the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file. 255 255 256 -[[image:image -20220527110625-8.png]]250 +[[image:https://wiki.dragino.com/images/thumb/4/49/Publickey.png/500px-Publickey.png||height="81" width="500"]] 257 257 258 258 Publickey 259 259 260 260 261 -===== **2.2.2.3 Step**=====255 +===== 2.2.2.3 Step3: connecte private server ===== 262 262 263 263 in the gateway web UI 264 264 265 -[[image:image -20220527110700-9.png]]259 +[[image:https://wiki.dragino.com/images/thumb/0/04/Gateway_web_UI.png/500px-Gateway_web_UI.png||height="389" width="500"]] 266 266 267 267 gateway web UI 268 268 269 269 (% class="box" %) 270 270 ((( 271 -(% style="color:#4f81bd" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (%style="color:#4f81bd" %)**Public Key**(%%)265 +(% class="mark" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (% class="mark" %)**Public Key**(%%) 272 272 **Note:if user's least privileged user no uses a password,choose from both is fine** 273 -(% style="color:#4f81bd" %)**Login ID**(%%) : Input user name "eg : "XXXXX"274 -(% style="color:#4f81bd" %)**Host Address**(%%) : Input user's private server address275 -(% style="color:#4f81bd" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.267 +(% class="mark" %)**Login ID**(%%) : Input user name "eg : "XXXXX" 268 +(% class="mark" %)**Host Address**(%%) : Input user's private server address 269 +(% class="mark" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered. 276 276 Click Save and then Connect 277 277 ))) 278 278 279 279 280 -===== **2.2.2.4 Step 4 :**=====274 +===== 2.2.2.4 Step 4 :Cheak is fine ===== 281 281 282 282 Rssh Host connection Ok 283 283 284 -[[image:image -20220527111009-10.png]]278 +[[image:https://wiki.dragino.com/images/thumb/6/6f/Rssh_Host_connection_Ok.png/500px-Rssh_Host_connection_Ok.png||height="225" width="500"]] 285 285 286 286 Rssh Host connection Ok 287 287 ... ... @@ -288,12 +288,12 @@ 288 288 289 289 user can use common ps | grep ssh to check it in the gateway. 290 290 291 -[[image:image -20220527111041-11.png]]285 +[[image:https://wiki.dragino.com/images/thumb/a/ad/Check_the_gateway.png/500px-Check_the_gateway.png]] 292 292 293 293 Check the gateway 294 294 295 295 296 -===== **2.2.2.5 Step**=====290 +===== 2.2.2.5 Step5:Create an authorization key file ===== 297 297 298 298 1):sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey 299 299 ... ... @@ -304,26 +304,22 @@ 304 304 check: sudo ls /home/xxxxx/.ssh/authorizedkey 305 305 ))) 306 306 301 +=== 2.2.3 How to Ser up a Reverse SSH access === 307 307 308 -=== **2.2.3HowtoSerup a ReverseSSH access**===303 +==== 2.2.3.1 Step1: Log into the server system ==== 309 309 310 - ==== **2.2.3.1 Step1:Logtoeserverystem**====305 +[[image:https://wiki.dragino.com/images/thumb/2/26/Loging_server.png/500px-Loging_server.png||height="69" width="500"]] 311 311 312 -[[image:image-20220527111145-12.png]] 313 - 314 314 Loging server 315 315 316 316 317 -==== **2.2.3.2 Step**====310 +==== 2.2.3.2 Step2:access the gateway ==== 318 318 319 -(% class="box" %) 320 -((( 321 321 $ cd rssh-server/ 322 -))) 323 323 324 324 Check the gateway linking to the server $ ./connect-gw.sh -l 325 325 326 -[[image:image -20220527111219-13.png]]316 +[[image:https://wiki.dragino.com/images/thumb/e/ee/Check_gateway_link_server.png/500px-Check_gateway_link_server.png||height="157" width="500"]] 327 327 328 328 Check the gateway linking to the server 329 329 ... ... @@ -330,6 +330,6 @@ 330 330 331 331 access the gateway $ ./connect-gw.sh <GWID> 332 332 333 -[[image:image -20220527111300-14.png]]323 +[[image:https://wiki.dragino.com/images/thumb/b/b7/Reverse_ssh_access_the_gateway1.png/500px-Reverse_ssh_access_the_gateway1.png||height="230" width="500"]] 334 334 335 335 reverse ssh access the gateway
- image-20220527110436-6.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -10.5 KB - Content
- image-20220527110531-7.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -79.9 KB - Content
- image-20220527110625-8.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -30.7 KB - Content
- image-20220527110700-9.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -66.6 KB - Content
- image-20220527111009-10.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -22.5 KB - Content
- image-20220527111041-11.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -13.4 KB - Content
- image-20220527111145-12.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -6.3 KB - Content
- image-20220527111219-13.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -9.1 KB - Content
- image-20220527111300-14.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Xiaoling - Size
-
... ... @@ -1,1 +1,0 @@ 1 -28.6 KB - Content