Changes for page Remote Access Gateway

Last modified by Kilight Cao on 2022/07/25 10:47
<
From version < 2.5 >
edited by Xiaoling
on 2022/05/12 14:42
To version < 2.3 >
edited by Xiaoling
on 2022/05/12 14:15
>
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -70,14 +70,10 @@
70 70  1. Give a free port to the user and ask them to configure RSSH page in the gateway.
71 71  1. In your server or other machine, you will able to access to the end user device by below command:
72 72  
73 -(% class="box" %)
74 -(((
75 - $ ssh   -p <End User Host Port>   root@<Host Address>
76 -)))
73 +{{{ $ ssh -p <End User Host Port> root@<Host Address>
74 +}}}
77 77  
78 -(((
79 79  (% class="mark" %)**Remote RSSH Access allow the gateway to connect to SSH server as well. This will create risk to the RSSH server. Please make sure the account use for Gateway Access has the lowest access right.**
80 -)))
81 81  
82 82  
83 83  ==== 2.1.2.1 Note for set up RSSH server ====
... ... @@ -84,29 +84,25 @@
84 84  
85 85  * If gateway reboot or the connection is incidentely close by end node. The port in SSH server will still be occupy for a long time. Administrator can use below commands to release the port.
86 86  
87 -(% class="box" %)
88 -(((
89 -[root@iZt4n22vqvm7ajogrfiif6Z ~~]# lsof -i :9102 ~-~-> check the port 9102 process status (change 9102 to the actually port for your gateway.
90 -COMMAND   PID    USER   FD   TYPE   DEVICE SIZE/OFF NODE NAME
91 -sshd    21430 sshuser   15u  IPv4 47567059      0t0  TCP localhost:bacula-fd (LISTEN)
92 -[root@iZt4n22vqvm7ajogrfiif6Z ~~]# kill 21430   ~-~-> Kill PID of this process.
93 -[root@iZt4n22vqvm7ajogrfiif6Z ~~]# lsof -i :9102        
94 -[root@iZt4n22vqvm7ajogrfiif6Z ~~]#
95 -)))
83 +{{{[root@iZt4n22vqvm7ajogrfiif6Z ~]# lsof -i :9102 --> check the port 9102 process status (change 9102 to the actually port for your gateway.
84 +COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
85 +sshd 21430 sshuser 15u IPv4 47567059 0t0 TCP localhost:bacula-fd (LISTEN)
86 +[root@iZt4n22vqvm7ajogrfiif6Z ~]# kill 21430 --> Kill PID of this process.
87 +[root@iZt4n22vqvm7ajogrfiif6Z ~]# lsof -i :9102
88 +[root@iZt4n22vqvm7ajogrfiif6Z ~]#
89 +}}}
96 96  
97 97  == 2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111 ==
98 98  
99 99  Below gateway support reverse SSH access:
100 100  
101 -(% class="box" %)
102 -(((
103 - Firmware Version >lgw~-~-build-v5.4.1618196981-20210412-1111 Firmware Download
95 +{{{ Firmware Version >lgw--build-v5.4.1618196981-20210412-1111 Firmware Download
104 104   LG01N, OLG01N (Note: LG01-P LG01-S doesn't support)
105 105   LG02, OLG02
106 106   LG308, DLOS8
107 107   LPS8
108 108   LIG16
109 -)))
101 +}}}
110 110  
111 111  === 2.2.1 End User Guide to use SSH access ===
112 112  
... ... @@ -120,7 +120,6 @@
120 120  
121 121  git clone rssh-server
122 122  
123 -
124 124  2).cd rssh-server; sudo make ~-~--> to Generate the execute file：rssh_serv
125 125  
126 126  [[image:https://wiki.dragino.com/images/thumb/e/e3/Generate_the_execute_file.png/500px-Generate_the_execute_file.png||height="103" width="500"]]
... ... @@ -129,27 +129,21 @@
129 129  
130 130  **Debug** :
131 131  
132 -(% class="box" %)
133 -(((
134 - if you git fail.  ~-~->    (% class="mark" %)**sudo: git: command not found.**(%%)
135 -please install git.  ~-~->    (% class="mark" %)**yum install git -y  or  apt-get install git -y. **
136 -)))
123 +{{{ if you git fail. --> sudo: git: command not found.
124 + please install git. --> yum install git -y or apt-get install git -y.
125 +}}}
137 137  
138 -(% class="box" %)
139 -(((
140 - if you make error 127,it** (% class="mark" %)lack of gcc.(%%)**
141 -please install gcc.    ~-~->(% class="mark" %)**yum install gcc.**
142 -)))
127 +{{{ if you make error 127,it lack of gcc.
128 + please install gcc. -->yum install gcc.
129 +}}}
143 143  
144 144  [[image:https://wiki.dragino.com/images/d/d7/Lack_of_gcc.png||height="174" width="434"]]
145 145  
146 146  lack of gcc
147 147  
148 -(% class="box" %)
149 -(((
150 - if you make a fatal error : sqlite3.h,it (% class="mark" %)**lack of sqlite3.**(%%)
151 -please insatell **sqlite3**.
152 -)))
135 +{{{ if you make a fatal error : sqlite3.h,it lack of sqlite3.
136 + please insatell sqlite3.
137 +}}}
153 153  
154 154  [[image:https://wiki.dragino.com/images/thumb/9/93/Lack_of_sqlite3.png/500px-Lack_of_sqlite3.png||height="137" width="500"]]
155 155  
... ... @@ -157,28 +157,25 @@
157 157  
158 158  How to install Sqlit3
159 159  
160 -(% class="box" %)
161 -(((
162 -Step1:Download the SQLit3 installation package
163 - sudo wget [[https:~~/~~/www.sqlite.org/2021/sqlite-autoconf-3350400.tar.gz>>url:https://www.sqlite.org/2021/sqlite-autoconf-3350400.tar.gz]]
164 -Step2:tar the SQLit3 installation package
145 +{{{ Step1:Download the SQLit3 installation package
146 + sudo wget
147 + Step2:tar the SQLit3 installation package
165 165   sudo tar -zxvf sqlite-autoconf-3350300.tar.gz
166 -Step3:Generate the makefile
149 + Step3:Generate the makefile
167 167   cd sqlite-autoconf-3350300/;./configure
168 -Step4:Compile makefile
151 + Step4:Compile makefile
169 169   sudo make
170 -Step5:Install makefile
153 + Step5:Install makefile
171 171   sudo make install
172 -Check:
173 - cd /usr/local/bin;ls -al                             ~-~->    Check to see if there is a file for sqlite3
174 - cd sqlite-autoconf-3350300/;./sqlite3 test.db        ~-~->    Test whether the sqlite3 was installed successfully
175 -debug:
155 + Check:
156 + cd /usr/local/bin;ls -al --> Check to see if there is a file for sqlite3
157 + cd sqlite-autoconf-3350300/;./sqlite3 test.db --> Test whether the sqlite3 was installed successfully
158 + debug:
176 176   If you get the imformation that is SQLite header and source version mismatch, when you execute./sqlite3 test.db.
177 177   Please execute the command /sbin/ldconfig.
178 178   After that execute the command ./sqlite3 test.db again.
179 -)))
162 +}}}
180 180  
181 -
182 182  ===== 2.2.1.1.2 Step 2 :Install and run the RSS service =====
183 183  
184 184  1):intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)
... ... @@ -185,12 +185,10 @@
185 185  
186 186  user must enter the root account and run the following commands
187 187  
188 -(% class="box" %)
189 -(((
190 -$ ./create_sqlite3_db.sh
191 -$ ./rssh_serv -p  3721 2>&1 &
192 -$ ps -ef | grep rssh_serv check 3721 port
193 -)))
170 +{{{ $ ./create_sqlite3_db.sh
171 + $ ./rssh_serv -p 3721 2>&1 &
172 + $ ps -ef | grep rssh_serv check 3721 port
173 +}}}
194 194  
195 195  [[image:https://wiki.dragino.com/images/thumb/c/cb/Intall_database_and_server_development_port.png/500px-Intall_database_and_server_development_port.png||height="70" width="500"]]
196 196  
... ... @@ -198,41 +198,35 @@
198 198  
199 199  **Debug:**
200 200  
201 -(% class="box" %)
202 -(((
203 -Check /var/rsshdb.sqlite3 ~-~->(% class="mark" %)** ls /var/rsshdb.sqlite3**(%%)
204 -Check ls /var/rsshdb.sqlite3 ~-~-> (% class="mark" %)**sudo chmod 777 rssh_serv**
205 -)))
181 +{{{ Check /var/rsshdb.sqlite3 --> ls /var/rsshdb.sqlite3
182 + Check ls /var/rsshdb.sqlite3 --> sudo chmod 777 rssh_serv
183 +}}}
206 206  
207 -(% class="box" %)
208 -(((
209 -if** fail to open dpvlry or to bind to it**
210 -please kill rssh_serv,and run (% class="mark" %)** ./rssh_serv -p  3721 2>&1 &** (%%) again
211 -)))
185 +{{{ if fail to open dpvlry or to bind to it
186 + please kill rssh_serv,and run ./rssh_serv -p 3721 2>&1 & again
187 +}}}
212 212  
213 -
214 214  ===== 2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway) =====
215 215  
216 -1):(% class="mark" %)**sudo useradd XXXXX**(%%) (custom user name)
191 +1):sudo useradd XXXXX (custom user name)
217 217  
218 -2):(% class="mark" %)**sudo passwd xxxxxx**
193 +2):sudo passwd xxxxxx
219 219  
220 -3):(% class="mark" %)**cp /bin/bash /bin/rbash**
195 +3):cp /bin/bash /bin/rbash
221 221  
222 -4):(% class="mark" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash
197 +4):sudo nano /etc/passwd ~-~-> Change /bin/bash to /bin/rbash
223 223  
224 -5):(% class="mark" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**
199 +5):sudo nano /home/xxxxx/.bashrc **empty it,and input export PATH=$HOME/bin**
225 225  
226 -6):(% class="mark" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**
201 +6):sudo nano /home/xxxxx/.bash_profile **empty it,and input export PATH=$HOME/bin**
227 227  
228 228  **Now user "XXXXX" is the user with limited permissions of the current system**
229 229  
230 -
231 231  === 2.2.2 How does user get the gateway to connect to a user's private server ===
232 232  
233 233  ===== 2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key =====
234 234  
235 -1)in the system ~-~-> (% class="mark" %)**Remote Mgmt/span>**
209 +1)in the system ~-~-> Remote Mgmt/span>
236 236  
237 237  [[image:https://wiki.dragino.com/images/thumb/8/8f/Remote_Mgmt.png/500px-Remote_Mgmt.png||height="367" width="500"]]
238 238  

Applications

Navigation

Copyright ©2010-2022 Dragino Technology Co., LTD. All rights reserved
Dragino Wiki v2.0