Changes for page Remote Access Gateway

Last modified by Kilight Cao on 2022/07/25 10:47
<
From version < 19.4 >
edited by Xiaoling
on 2022/05/31 15:54
To version < 8.2 >
edited by Xiaoling
on 2022/05/27 10:59
>
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -3,9 +3,8 @@
3 3  {{toc/}}
4 4  
5 5  
6 += 1. Use Remote.it service =
6 6  
7 -= **1. Use Remote.it service** =
8 -
9 9  Remote.it for remote access is available in the latest Dragino firmware for gateway. For security concern, the remote.it only available base on end user demand.
10 10  
11 11  (% style="color:red" %)**Important Notice:**
... ... @@ -16,7 +16,7 @@
16 16  For how to use remoteit, please see : [[Remoteit user instruction for Dragino Gateway>>url:https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/&file=Dragino-Remoteit_User_Manual.pdf]].
17 17  
18 18  
19 -= **2. RSSH Introduction** =
18 += 2. RSSH Introduction =
20 20  
21 21  Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand.
22 22  
... ... @@ -35,11 +35,10 @@
35 35  * LIG16
36 36  * MS14 series if installed with the same firmware.
37 37  
37 +== 2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355 ==
38 38  
39 -== **2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355** ==
39 +=== 2.1.1 End User Guide to use SSH access ===
40 40  
41 -=== **2.1.1 End User Guide to use SSH access** ===
42 -
43 43  Go to this the Reverse SSH page as below:
44 44  
45 45  [[image:image-20220527102348-1.png]]
... ... @@ -62,7 +62,7 @@
62 62  )))
63 63  
64 64  
65 -=== **2.1.2 How to Ser up a Reverse SSH access** ===
63 +=== 2.1.2 How to Ser up a Reverse SSH access ===
66 66  
67 67  Advance administrator can config a SSH server to provide support their end user themselves. Instruction is as below:
68 68  
... ... @@ -82,7 +82,7 @@
82 82  )))
83 83  
84 84  
85 -==== **2.1.2.1 Note for set up RSSH server** ====
83 +==== 2.1.2.1 Note for set up RSSH server ====
86 86  
87 87  If gateway reboot or the connection is incidentely close by end node. The port in SSH server will still be occupy for a long time. Administrator can use below commands to release the port.
88 88  
... ... @@ -97,7 +97,7 @@
97 97  )))
98 98  
99 99  
100 -== **2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111** ==
98 +== 2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111 ==
101 101  
102 102  Below gateway support reverse SSH access:
103 103  
... ... @@ -112,11 +112,11 @@
112 112  )))
113 113  
114 114  
115 -=== **2.2.1 End User Guide to use SSH access** ===
113 +=== 2.2.1 End User Guide to use SSH access ===
116 116  
117 -==== **2.2.1.1 Install the SSH service for server** ====
115 +==== 2.2.1.1 Install the SSH service for server ====
118 118  
119 -===== **2.2.1.1.1 Step 1 : Download the SSH service code** =====
117 +===== 2.2.1.1.1 Step 1:Download the SSH service code =====
120 120  
121 121  1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server
122 122  
... ... @@ -185,9 +185,9 @@
185 185  )))
186 186  
187 187  
188 -===== **2.2.1.1.2 Step 2 : Install and run the RSS service** =====
186 +===== 2.2.1.1.2 Step 2 :Install and run the RSS service =====
189 189  
190 -1): intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)
188 +1):intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)
191 191  
192 192  user must enter the root account and run the following commands
193 193  
... ... @@ -198,7 +198,7 @@
198 198   $ ps -ef | grep rssh_serv check 3721 port
199 199  )))
200 200  
201 -[[image:image-20220527110436-6.png]]
199 +[[image:https://wiki.dragino.com/images/thumb/c/cb/Intall_database_and_server_development_port.png/500px-Intall_database_and_server_development_port.png||height="70" width="500"]]
202 202  
203 203  intall database and server development port
204 204  
... ... @@ -206,78 +206,78 @@
206 206  
207 207  (% class="box" %)
208 208  (((
209 -Check /var/rsshdb.sqlite3 ~-~->(% style="color:#4f81bd" %)** ls /var/rsshdb.sqlite3**(%%)
210 -Check ls /var/rsshdb.sqlite3 ~-~-> (% style="color:#4f81bd" %)**sudo chmod 777 rssh_serv**
207 +Check /var/rsshdb.sqlite3 ~-~->(% class="mark" %)** ls /var/rsshdb.sqlite3**(%%)
208 +Check ls /var/rsshdb.sqlite3 ~-~-> (% class="mark" %)**sudo chmod 777 rssh_serv**
211 211  )))
212 212  
213 213  (% class="box" %)
214 214  (((
215 215  if** fail to open dpvlry or to bind to it**
216 -please kill rssh_serv,and run (% style="color:#4f81bd" %)** ./rssh_serv -p  3721 2>&1 &** (%%) again
214 +please kill rssh_serv,and run (% class="mark" %)** ./rssh_serv -p  3721 2>&1 &** (%%) again
217 217  )))
218 218  
219 219  
220 -===== **2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway)** =====
218 +===== 2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway) =====
221 221  
222 -**1): (% style="color:#4f81bd" %)sudo useradd XXXXX(%%)** (custom user name)
220 +1):(% class="mark" %)**sudo useradd XXXXX**(%%) (custom user name)
223 223  
224 -**2):** (% style="color:#4f81bd" %)**sudo passwd xxxxxx**
222 +2):(% class="mark" %)**sudo passwd xxxxxx**
225 225  
226 -**3):** (% style="color:#4f81bd" %)**cp /bin/bash /bin/rbash**
224 +3):(% class="mark" %)**cp /bin/bash /bin/rbash**
227 227  
228 -**4):** (% style="color:#4f81bd" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash
226 +4):(% class="mark" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash
229 229  
230 -**5):** (% style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**
228 +5):(% class="mark" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**
231 231  
232 -**6):** (% style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**
230 +6):(% class="mark" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**
233 233  
234 234  **Now user "XXXXX" is the user with limited permissions of the current system**
235 235  
236 236  
237 -=== **2.2.2 How does user get the gateway to connect to a user's private server** ===
235 +=== 2.2.2 How does user get the gateway to connect to a user's private server ===
238 238  
239 -===== **2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key** =====
237 +===== 2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key =====
240 240  
241 -1) in the system ~-~-> (% style="color:#4f81bd" %)**Remote Mgmt/span>**
239 +1)in the system ~-~-> (% class="mark" %)**Remote Mgmt/span>**
242 242  
243 -[[image:image-20220527110531-7.png]]
241 +[[image:https://wiki.dragino.com/images/thumb/8/8f/Remote_Mgmt.png/500px-Remote_Mgmt.png||height="367" width="500"]]
244 244  
245 245  Remote Mgmt
246 246  
247 247  
248 -===== **2.2.2.2 Step2: Authorization server** =====
246 +===== 2.2.2.2 Step2: Authorization server =====
249 249  
250 250  copy the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file.
251 251  
252 -[[image:image-20220527110625-8.png]]
250 +[[image:https://wiki.dragino.com/images/thumb/4/49/Publickey.png/500px-Publickey.png||height="81" width="500"]]
253 253  
254 254  Publickey
255 255  
256 256  
257 -===== **2.2.2.3 Step3: connecte private server** =====
255 +===== 2.2.2.3 Step3: connecte private server =====
258 258  
259 259  in the gateway web UI
260 260  
261 -[[image:image-20220527110700-9.png]]
259 +[[image:https://wiki.dragino.com/images/thumb/0/04/Gateway_web_UI.png/500px-Gateway_web_UI.png||height="389" width="500"]]
262 262  
263 263  gateway web UI
264 264  
265 265  (% class="box" %)
266 266  (((
267 -(% style="color:#4f81bd" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (% style="color:#4f81bd" %)**Public Key**(%%)
265 +(% class="mark" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (% class="mark" %)**Public Key**(%%)
268 268  **Note:if user's least privileged user no uses a password,choose from both is fine**
269 -(% style="color:#4f81bd" %)**Login ID**(%%)             : Input user name "eg : "XXXXX"
270 -(% style="color:#4f81bd" %)**Host Address**(%%)         : Input user's private server address
271 -(% style="color:#4f81bd" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.
267 +(% class="mark" %)**Login ID**(%%)             : Input user name "eg : "XXXXX"
268 +(% class="mark" %)**Host Address**(%%)         : Input user's private server address
269 +(% class="mark" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.
272 272  Click Save and then Connect
273 273  )))
274 274  
275 275  
276 -===== **2.2.2.4 Step 4 :Cheak is fine** =====
274 +===== 2.2.2.4 Step 4 :Cheak is fine =====
277 277  
278 278  Rssh Host connection Ok
279 279  
280 -[[image:image-20220527111009-10.png]]
278 +[[image:https://wiki.dragino.com/images/thumb/6/6f/Rssh_Host_connection_Ok.png/500px-Rssh_Host_connection_Ok.png||height="225" width="500"]]
281 281  
282 282  Rssh Host connection Ok
283 283  
... ... @@ -284,12 +284,12 @@
284 284  
285 285  user can use common ps | grep ssh to check it in the gateway.
286 286  
287 -[[image:image-20220527111041-11.png]]
285 +[[image:https://wiki.dragino.com/images/thumb/a/ad/Check_the_gateway.png/500px-Check_the_gateway.png]]
288 288  
289 289  Check the gateway
290 290  
291 291  
292 -===== **2.2.2.5 Step5:Create an authorization key file** =====
290 +===== 2.2.2.5 Step5:Create an authorization key file =====
293 293  
294 294  1):sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey
295 295  
... ... @@ -300,26 +300,22 @@
300 300   check: sudo ls /home/xxxxx/.ssh/authorizedkey
301 301  )))
302 302  
301 +=== 2.2.3 How to Ser up a Reverse SSH access ===
303 303  
304 -=== **2.2.3 How to Ser up a Reverse SSH access** ===
303 +==== 2.2.3.1 Step1: Log into the server system ====
305 305  
306 -==== **2.2.3.1 Step1: Log into the server system** ====
305 +[[image:https://wiki.dragino.com/images/thumb/2/26/Loging_server.png/500px-Loging_server.png||height="69" width="500"]]
307 307  
308 -[[image:image-20220527111145-12.png]]
309 -
310 310  Loging server
311 311  
312 312  
313 -==== **2.2.3.2 Step2:access the gateway** ====
310 +==== 2.2.3.2 Step2:access the gateway ====
314 314  
315 -(% class="box" %)
316 -(((
317 317  $ cd rssh-server/
318 -)))
319 319  
320 320  Check the gateway linking to the server $ ./connect-gw.sh -l
321 321  
322 -[[image:image-20220527111219-13.png]]
316 +[[image:https://wiki.dragino.com/images/thumb/e/ee/Check_gateway_link_server.png/500px-Check_gateway_link_server.png||height="157" width="500"]]
323 323  
324 324  Check the gateway linking to the server
325 325  
... ... @@ -326,6 +326,6 @@
326 326  
327 327  access the gateway $ ./connect-gw.sh <GWID>
328 328  
329 -[[image:image-20220527111300-14.png]]
323 +[[image:https://wiki.dragino.com/images/thumb/b/b7/Reverse_ssh_access_the_gateway1.png/500px-Reverse_ssh_access_the_gateway1.png||height="230" width="500"]]
330 330  
331 331  reverse ssh access the gateway
image-20220527110011-5.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -11.2 KB
Content
image-20220527110436-6.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -10.5 KB
Content
image-20220527110531-7.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -79.9 KB
Content
image-20220527110625-8.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -30.7 KB
Content
image-20220527110700-9.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -66.6 KB
Content
image-20220527111009-10.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -22.5 KB
Content
image-20220527111041-11.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -13.4 KB
Content
image-20220527111145-12.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -6.3 KB
Content
image-20220527111219-13.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -9.1 KB
Content
image-20220527111300-14.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Xiaoling
Size
... ... @@ -1,1 +1,0 @@
1 -28.6 KB
Content

Applications

Navigation

Copyright ©2010-2022 Dragino Technology Co., LTD. All rights reserved
Dragino Wiki v2.0