Changes for page Remote Access Gateway

Last modified by Kilight Cao on 2022/07/25 10:47
<
From version < 19.4 >
edited by Xiaoling
on 2022/05/31 15:54
To version < 6.1 >
edited by Xiaoling
on 2022/05/27 10:55
>
Change comment: Uploaded new attachment "image-20220527105511-2.png", version {1}

Summary

Details

Page properties
Content
... ... @@ -3,9 +3,8 @@
3 3  {{toc/}}
4 4  
5 5  
6 += 1. Use Remote.it service =
6 6  
7 -= **1. Use Remote.it service** =
8 -
9 9  Remote.it for remote access is available in the latest Dragino firmware for gateway. For security concern, the remote.it only available base on end user demand.
10 10  
11 11  (% style="color:red" %)**Important Notice:**
... ... @@ -16,7 +16,7 @@
16 16  For how to use remoteit, please see : [[Remoteit user instruction for Dragino Gateway>>url:https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/&file=Dragino-Remoteit_User_Manual.pdf]].
17 17  
18 18  
19 -= **2. RSSH Introduction** =
18 += 2. RSSH Introduction =
20 20  
21 21  Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand.
22 22  
... ... @@ -35,11 +35,10 @@
35 35  * LIG16
36 36  * MS14 series if installed with the same firmware.
37 37  
37 +== 2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355 ==
38 38  
39 -== **2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355** ==
39 +=== 2.1.1 End User Guide to use SSH access ===
40 40  
41 -=== **2.1.1 End User Guide to use SSH access** ===
42 -
43 43  Go to this the Reverse SSH page as below:
44 44  
45 45  [[image:image-20220527102348-1.png]]
... ... @@ -62,7 +62,7 @@
62 62  )))
63 63  
64 64  
65 -=== **2.1.2 How to Ser up a Reverse SSH access** ===
63 +=== 2.1.2 How to Ser up a Reverse SSH access ===
66 66  
67 67  Advance administrator can config a SSH server to provide support their end user themselves. Instruction is as below:
68 68  
... ... @@ -82,7 +82,7 @@
82 82  )))
83 83  
84 84  
85 -==== **2.1.2.1 Note for set up RSSH server** ====
83 +==== 2.1.2.1 Note for set up RSSH server ====
86 86  
87 87  If gateway reboot or the connection is incidentely close by end node. The port in SSH server will still be occupy for a long time. Administrator can use below commands to release the port.
88 88  
... ... @@ -97,7 +97,7 @@
97 97  )))
98 98  
99 99  
100 -== **2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111** ==
98 +== 2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111 ==
101 101  
102 102  Below gateway support reverse SSH access:
103 103  
... ... @@ -112,15 +112,15 @@
112 112  )))
113 113  
114 114  
115 -=== **2.2.1 End User Guide to use SSH access** ===
113 +=== 2.2.1 End User Guide to use SSH access ===
116 116  
117 -==== **2.2.1.1 Install the SSH service for server** ====
115 +==== 2.2.1.1 Install the SSH service for server ====
118 118  
119 -===== **2.2.1.1.1 Step 1 : Download the SSH service code** =====
117 +===== 2.2.1.1.1 Step 1:Download the SSH service code =====
120 120  
121 121  1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server
122 122  
123 -[[image:image-20220527105447-1.png]]
121 +[[image:https://wiki.dragino.com/images/thumb/d/d0/Git_clone.png/500px-Git_clone.png||height="80" width="500"]]
124 124  
125 125  git clone rssh-server
126 126  
... ... @@ -127,40 +127,38 @@
127 127  
128 128  2).cd rssh-server; sudo make ~-~--> to Generate the execute file：rssh_serv
129 129  
130 -[[image:image-20220527105511-2.png]]
128 +[[image:https://wiki.dragino.com/images/thumb/e/e3/Generate_the_execute_file.png/500px-Generate_the_execute_file.png||height="103" width="500"]]
131 131  
132 132  Generate the execute file
133 133  
134 -
135 135  **Debug** :
136 136  
137 137  (% class="box" %)
138 138  (((
139 -if you git fail.  ~-~->    (% style="color:#4f81bd" %)**sudo: git: command not found.**(%%)
140 -please install git.  ~-~->  (% style="color:#4f81bd" %)**yum install git -y  or  apt-get install git -y.**
136 +if you git fail.  ~-~->    (% class="mark" %)**sudo: git: command not found.**(%%)
137 +please install git.  ~-~->    (% class="mark" %)**yum install git -y  or  apt-get install git -y. **
141 141  )))
142 142  
143 143  (% class="box" %)
144 144  (((
145 -if you make error 127,it** (% style="color:#4f81bd" %)lack of gcc.(%%)**
146 -please install gcc.    ~-~->(% style="color:#4f81bd" %)**yum install gcc.**
142 +if you make error 127,it** (% class="mark" %)lack of gcc.(%%)**
143 +please install gcc.    ~-~->(% class="mark" %)**yum install gcc.**
147 147  )))
148 148  
149 -[[image:image-20220527105856-3.png]]
146 +[[image:https://wiki.dragino.com/images/d/d7/Lack_of_gcc.png||height="174" width="434"]]
150 150  
151 151  lack of gcc
152 152  
153 153  (% class="box" %)
154 154  (((
155 -if you make a fatal error : sqlite3.h,it (% style="color:#4f81bd" %)**lack of sqlite3.**(%%)
156 -please insatell (% style="color:#4f81bd" %)**sqlite3**.
152 +if you make a fatal error : sqlite3.h,it (% class="mark" %)**lack of sqlite3.**(%%)
153 +please insatell **sqlite3**.
157 157  )))
158 158  
159 -[[image:image-20220527105918-4.png]]
156 +[[image:https://wiki.dragino.com/images/thumb/9/93/Lack_of_sqlite3.png/500px-Lack_of_sqlite3.png||height="137" width="500"]]
160 160  
161 161  lack of sqlite3
162 162  
163 -
164 164  How to install Sqlit3
165 165  
166 166  (% class="box" %)
... ... @@ -185,9 +185,9 @@
185 185  )))
186 186  
187 187  
188 -===== **2.2.1.1.2 Step 2 : Install and run the RSS service** =====
184 +===== 2.2.1.1.2 Step 2 :Install and run the RSS service =====
189 189  
190 -1): intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)
186 +1):intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)
191 191  
192 192  user must enter the root account and run the following commands
193 193  
... ... @@ -198,7 +198,7 @@
198 198   $ ps -ef | grep rssh_serv check 3721 port
199 199  )))
200 200  
201 -[[image:image-20220527110436-6.png]]
197 +[[image:https://wiki.dragino.com/images/thumb/c/cb/Intall_database_and_server_development_port.png/500px-Intall_database_and_server_development_port.png||height="70" width="500"]]
202 202  
203 203  intall database and server development port
204 204  
... ... @@ -206,78 +206,78 @@
206 206  
207 207  (% class="box" %)
208 208  (((
209 -Check /var/rsshdb.sqlite3 ~-~->(% style="color:#4f81bd" %)** ls /var/rsshdb.sqlite3**(%%)
210 -Check ls /var/rsshdb.sqlite3 ~-~-> (% style="color:#4f81bd" %)**sudo chmod 777 rssh_serv**
205 +Check /var/rsshdb.sqlite3 ~-~->(% class="mark" %)** ls /var/rsshdb.sqlite3**(%%)
206 +Check ls /var/rsshdb.sqlite3 ~-~-> (% class="mark" %)**sudo chmod 777 rssh_serv**
211 211  )))
212 212  
213 213  (% class="box" %)
214 214  (((
215 215  if** fail to open dpvlry or to bind to it**
216 -please kill rssh_serv,and run (% style="color:#4f81bd" %)** ./rssh_serv -p  3721 2>&1 &** (%%) again
212 +please kill rssh_serv,and run (% class="mark" %)** ./rssh_serv -p  3721 2>&1 &** (%%) again
217 217  )))
218 218  
219 219  
220 -===== **2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway)** =====
216 +===== 2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway) =====
221 221  
222 -**1): (% style="color:#4f81bd" %)sudo useradd XXXXX(%%)** (custom user name)
218 +1):(% class="mark" %)**sudo useradd XXXXX**(%%) (custom user name)
223 223  
224 -**2):** (% style="color:#4f81bd" %)**sudo passwd xxxxxx**
220 +2):(% class="mark" %)**sudo passwd xxxxxx**
225 225  
226 -**3):** (% style="color:#4f81bd" %)**cp /bin/bash /bin/rbash**
222 +3):(% class="mark" %)**cp /bin/bash /bin/rbash**
227 227  
228 -**4):** (% style="color:#4f81bd" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash
224 +4):(% class="mark" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash
229 229  
230 -**5):** (% style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**
226 +5):(% class="mark" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**
231 231  
232 -**6):** (% style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**
228 +6):(% class="mark" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**
233 233  
234 234  **Now user "XXXXX" is the user with limited permissions of the current system**
235 235  
236 236  
237 -=== **2.2.2 How does user get the gateway to connect to a user's private server** ===
233 +=== 2.2.2 How does user get the gateway to connect to a user's private server ===
238 238  
239 -===== **2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key** =====
235 +===== 2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key =====
240 240  
241 -1) in the system ~-~-> (% style="color:#4f81bd" %)**Remote Mgmt/span>**
237 +1)in the system ~-~-> (% class="mark" %)**Remote Mgmt/span>**
242 242  
243 -[[image:image-20220527110531-7.png]]
239 +[[image:https://wiki.dragino.com/images/thumb/8/8f/Remote_Mgmt.png/500px-Remote_Mgmt.png||height="367" width="500"]]
244 244  
245 245  Remote Mgmt
246 246  
247 247  
248 -===== **2.2.2.2 Step2: Authorization server** =====
244 +===== 2.2.2.2 Step2: Authorization server =====
249 249  
250 250  copy the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file.
251 251  
252 -[[image:image-20220527110625-8.png]]
248 +[[image:https://wiki.dragino.com/images/thumb/4/49/Publickey.png/500px-Publickey.png||height="81" width="500"]]
253 253  
254 254  Publickey
255 255  
256 256  
257 -===== **2.2.2.3 Step3: connecte private server** =====
253 +===== 2.2.2.3 Step3: connecte private server =====
258 258  
259 259  in the gateway web UI
260 260  
261 -[[image:image-20220527110700-9.png]]
257 +[[image:https://wiki.dragino.com/images/thumb/0/04/Gateway_web_UI.png/500px-Gateway_web_UI.png||height="389" width="500"]]
262 262  
263 263  gateway web UI
264 264  
265 265  (% class="box" %)
266 266  (((
267 -(% style="color:#4f81bd" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (% style="color:#4f81bd" %)**Public Key**(%%)
263 +(% class="mark" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (% class="mark" %)**Public Key**(%%)
268 268  **Note:if user's least privileged user no uses a password,choose from both is fine**
269 -(% style="color:#4f81bd" %)**Login ID**(%%)             : Input user name "eg : "XXXXX"
270 -(% style="color:#4f81bd" %)**Host Address**(%%)         : Input user's private server address
271 -(% style="color:#4f81bd" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.
265 +(% class="mark" %)**Login ID**(%%)             : Input user name "eg : "XXXXX"
266 +(% class="mark" %)**Host Address**(%%)         : Input user's private server address
267 +(% class="mark" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.
272 272  Click Save and then Connect
273 273  )))
274 274  
275 275  
276 -===== **2.2.2.4 Step 4 :Cheak is fine** =====
272 +===== 2.2.2.4 Step 4 :Cheak is fine =====
277 277  
278 278  Rssh Host connection Ok
279 279  
280 -[[image:image-20220527111009-10.png]]
276 +[[image:https://wiki.dragino.com/images/thumb/6/6f/Rssh_Host_connection_Ok.png/500px-Rssh_Host_connection_Ok.png||height="225" width="500"]]
281 281  
282 282  Rssh Host connection Ok
283 283  
... ... @@ -284,12 +284,12 @@
284 284  
285 285  user can use common ps | grep ssh to check it in the gateway.
286 286  
287 -[[image:image-20220527111041-11.png]]
283 +[[image:https://wiki.dragino.com/images/thumb/a/ad/Check_the_gateway.png/500px-Check_the_gateway.png]]
288 288  
289 289  Check the gateway
290 290  
291 291  
292 -===== **2.2.2.5 Step5:Create an authorization key file** =====
288 +===== 2.2.2.5 Step5:Create an authorization key file =====
293 293  
294 294  1):sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey
295 295  
... ... @@ -300,26 +300,22 @@
300 300   check: sudo ls /home/xxxxx/.ssh/authorizedkey
301 301  )))
302 302  
299 +=== 2.2.3 How to Ser up a Reverse SSH access ===
303 303  
304 -=== **2.2.3 How to Ser up a Reverse SSH access** ===
301 +==== 2.2.3.1 Step1: Log into the server system ====
305 305  
306 -==== **2.2.3.1 Step1: Log into the server system** ====
303 +[[image:https://wiki.dragino.com/images/thumb/2/26/Loging_server.png/500px-Loging_server.png||height="69" width="500"]]
307 307  
308 -[[image:image-20220527111145-12.png]]
309 -
310 310  Loging server
311 311  
312 312  
313 -==== **2.2.3.2 Step2:access the gateway** ====
308 +==== 2.2.3.2 Step2:access the gateway ====
314 314  
315 -(% class="box" %)
316 -(((
317 317  $ cd rssh-server/
318 -)))
319 319  
320 320  Check the gateway linking to the server $ ./connect-gw.sh -l
321 321  
322 -[[image:image-20220527111219-13.png]]
314 +[[image:https://wiki.dragino.com/images/thumb/e/ee/Check_gateway_link_server.png/500px-Check_gateway_link_server.png||height="157" width="500"]]
323 323  
324 324  Check the gateway linking to the server
325 325  
... ... @@ -326,6 +326,6 @@
326 326  
327 327  access the gateway $ ./connect-gw.sh <GWID>
328 328  
329 -[[image:image-20220527111300-14.png]]
321 +[[image:https://wiki.dragino.com/images/thumb/b/b7/Reverse_ssh_access_the_gateway1.png/500px-Reverse_ssh_access_the_gateway1.png||height="230" width="500"]]
330 330  
331 331  reverse ssh access the gateway
image-20220527105856-3.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -9.9 KB
Content
image-20220527105918-4.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -11.3 KB
Content
image-20220527110011-5.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -11.2 KB
Content
image-20220527110436-6.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -10.5 KB
Content
image-20220527110531-7.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -79.9 KB
Content
image-20220527110625-8.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -30.7 KB
Content
image-20220527110700-9.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -66.6 KB
Content
image-20220527111009-10.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -22.5 KB
Content
image-20220527111041-11.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -13.4 KB
Content
image-20220527111145-12.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -6.3 KB
Content
image-20220527111219-13.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -9.1 KB
Content
image-20220527111300-14.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -28.6 KB
Content

Applications

Navigation

Copyright ©2010-2022 Dragino Technology Co., LTD. All rights reserved
Dragino Wiki v2.0