Changes for page Remote Access Gateway
Last modified by Kilight Cao on 2022/07/25 10:47
Summary
-
Page properties (1 modified, 0 added, 0 removed)
-
Attachments (0 modified, 9 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -45,15 +45,15 @@ 45 45 Get the RSSH configure page 46 46 47 47 48 -[[image: https://wiki.dragino.com/images/thumb/7/78/RSSH_Menu3.png/500px-RSSH_Menu3.png||height="313" width="500"]]48 +[[image:image-20220527103251-2.png]] 49 49 50 50 Connection OK. 51 51 52 -* (% class="mark" %)**Login ID**(%%): Input (%class="mark" %)**sshuser**53 -* (% class="mark" %)**Host Address**(%%): Input(%class="mark" %)**support.dragino.com**54 -* (% class="mark" %)**Host Port**(%%): Please email to support @ dragino.com to get a valid host port.55 -* (% class="mark" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.56 -* (% class="mark" %)**Network Keys:**(%%)Click the Generate keys to generate the keys and download / mail it to Dragino support so Dragino can prepare the remote access to52 +* (% style="color:#4f81bd" %)**Login ID**(%%): Input (% style="color:#4f81bd" %)**sshuser** 53 +* (% style="color:#4f81bd" %)**Host Address**(%%): Input** (% style="color:#4f81bd" %)support.dragino.com(%%)** 54 +* (% style="color:#4f81bd" %)**Host Port**(%%): Please email to support @ dragino.com to get a valid host port. 55 +* (% style="color:#4f81bd" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered. 56 +* (% style="color:#4f81bd" %)**Network Keys:**(%%)Click the Generate keys to generate the keys and download / mail it to Dragino support so Dragino can prepare the remote access to 57 57 58 58 ((( 59 59 After doing above, please download and mail the public keys to Dragino support and wait for our mail for the valid host port. Input the valid host port got from our support and click connect so we can remote access to your gateway. ... ... @@ -65,7 +65,7 @@ 65 65 Advance administrator can config a SSH server to provide support their end user themselves. Instruction is as below: 66 66 67 67 1. Prepare a Linux server with public IP. The gateways need to be able to create SSH connection to this server. We recommend to use a server that performs no other function than to support the RSSH access, and to have no additional accounts active, and no access from the Internet that uses ID/password authentication. 68 -1. In the gateway settings, The (% class="mark" %)**Login ID**(%%) will be the SSH user for this server and the (%class="mark" %)**Host Address**(%%) is the server address.68 +1. In the gateway settings, The (% style="color:#4f81bd" %)**Login ID**(%%) will be the SSH user for this server and the (% style="color:#4f81bd" %)**Host Address**(%%) is the server address. 69 69 1. Ask your end user to send you the key generate in the gateway and put them in /home/<Login ID>/.ssh/authorized_key file. 70 70 1. Give a free port to the user and ask them to configure RSSH page in the gateway. 71 71 1. In your server or other machine, you will able to access to the end user device by below command: ... ... @@ -76,7 +76,7 @@ 76 76 ))) 77 77 78 78 ((( 79 -(% class="mark" %)**Remote RSSH Access allow the gateway to connect to SSH server as well. This will create risk to the RSSH server. Please make sure the account use for Gateway Access has the lowest access right.**79 +(% style="color:red" %)**Remote RSSH Access allow the gateway to connect to SSH server as well. This will create risk to the RSSH server. Please make sure the account use for Gateway Access has the lowest access right.** 80 80 ))) 81 81 82 82 ... ... @@ -118,7 +118,7 @@ 118 118 119 119 1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server 120 120 121 -[[image: https://wiki.dragino.com/images/thumb/d/d0/Git_clone.png/500px-Git_clone.png||height="80" width="500"]]121 +[[image:image-20220527105447-1.png]] 122 122 123 123 git clone rssh-server 124 124 ... ... @@ -125,38 +125,40 @@ 125 125 126 126 2).cd rssh-server; sudo make ~-~--> to Generate the execute file:rssh_serv 127 127 128 -[[image: https://wiki.dragino.com/images/thumb/e/e3/Generate_the_execute_file.png/500px-Generate_the_execute_file.png||height="103" width="500"]]128 +[[image:image-20220527105511-2.png]] 129 129 130 130 Generate the execute file 131 131 132 + 132 132 **Debug** : 133 133 134 134 (% class="box" %) 135 135 ((( 136 -if you git fail. ~-~-> (% class="mark" %)**sudo: git: command not found.**(%%)137 -please install git. ~-~-> class="mark" %)**yum install git -y or apt-get install git -y.137 +if you git fail. ~-~-> (% style="color:#4f81bd" %)**sudo: git: command not found.**(%%) 138 +please install git. ~-~-> (% style="color:#4f81bd" %)**yum install git -y or apt-get install git -y.** 138 138 ))) 139 139 140 140 (% class="box" %) 141 141 ((( 142 -if you make error 127,it** (% class="mark" %)lack of gcc.(%%)**143 -please install gcc. ~-~->(% class="mark" %)**yum install gcc.**143 +if you make error 127,it** (% style="color:#4f81bd" %)lack of gcc.(%%)** 144 +please install gcc. ~-~->(% style="color:#4f81bd" %)**yum install gcc.** 144 144 ))) 145 145 146 -[[image: https://wiki.dragino.com/images/d/d7/Lack_of_gcc.png||height="174" width="434"]]147 +[[image:image-20220527105856-3.png]] 147 147 148 148 lack of gcc 149 149 150 150 (% class="box" %) 151 151 ((( 152 -if you make a fatal error : sqlite3.h,it (% class="mark" %)**lack of sqlite3.**(%%)153 -please insatell **sqlite3**. 153 +if you make a fatal error : sqlite3.h,it (% style="color:#4f81bd" %)**lack of sqlite3.**(%%) 154 +please insatell (% style="color:#4f81bd" %)**sqlite3**. 154 154 ))) 155 155 156 -[[image: https://wiki.dragino.com/images/thumb/9/93/Lack_of_sqlite3.png/500px-Lack_of_sqlite3.png||height="137" width="500"]]157 +[[image:image-20220527105918-4.png]] 157 157 158 158 lack of sqlite3 159 159 161 + 160 160 How to install Sqlit3 161 161 162 162 (% class="box" %) ... ... @@ -183,7 +183,7 @@ 183 183 184 184 ===== 2.2.1.1.2 Step 2 :Install and run the RSS service ===== 185 185 186 -1):intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721) 188 +1): intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721) 187 187 188 188 user must enter the root account and run the following commands 189 189 ... ... @@ -194,7 +194,7 @@ 194 194 $ ps -ef | grep rssh_serv check 3721 port 195 195 ))) 196 196 197 -[[image: https://wiki.dragino.com/images/thumb/c/cb/Intall_database_and_server_development_port.png/500px-Intall_database_and_server_development_port.png||height="70" width="500"]]199 +[[image:image-20220527110436-6.png]] 198 198 199 199 intall database and server development port 200 200 ... ... @@ -202,30 +202,30 @@ 202 202 203 203 (% class="box" %) 204 204 ((( 205 -Check /var/rsshdb.sqlite3 ~-~->(% class="mark" %)** ls /var/rsshdb.sqlite3**(%%)206 -Check ls /var/rsshdb.sqlite3 ~-~-> (% class="mark" %)**sudo chmod 777 rssh_serv**207 +Check /var/rsshdb.sqlite3 ~-~->(% style="color:#4f81bd" %)** ls /var/rsshdb.sqlite3**(%%) 208 +Check ls /var/rsshdb.sqlite3 ~-~-> (% style="color:#4f81bd" %)**sudo chmod 777 rssh_serv** 207 207 ))) 208 208 209 209 (% class="box" %) 210 210 ((( 211 211 if** fail to open dpvlry or to bind to it** 212 -please kill rssh_serv,and run (% class="mark" %)** ./rssh_serv -p 3721 2>&1 &** (%%) again214 +please kill rssh_serv,and run (% style="color:#4f81bd" %)** ./rssh_serv -p 3721 2>&1 &** (%%) again 213 213 ))) 214 214 215 215 216 216 ===== 2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway) ===== 217 217 218 -1):(% class="mark" %)**sudo useradd XXXXX**(%%) (custom user name)220 +**1): (% style="color:#4f81bd" %)sudo useradd XXXXX(%%)** (custom user name) 219 219 220 -2):(% class="mark" %)**sudo passwd xxxxxx**222 +**2):** (% style="color:#4f81bd" %)**sudo passwd xxxxxx** 221 221 222 -3):(% class="mark" %)**cp /bin/bash /bin/rbash**224 +**3):** (% style="color:#4f81bd" %)**cp /bin/bash /bin/rbash** 223 223 224 -4):(% class="mark" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash226 +**4):** (% style="color:#4f81bd" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash 225 225 226 -5):(% class="mark" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**228 +**5):** (% style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin** 227 227 228 -6):(% class="mark" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**230 +**6):** (% style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin** 229 229 230 230 **Now user "XXXXX" is the user with limited permissions of the current system** 231 231 ... ... @@ -234,23 +234,23 @@ 234 234 235 235 ===== 2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key ===== 236 236 237 -1)in the system ~-~-> (% class="mark" %)**Remote Mgmt/span>**239 +1) in the system ~-~-> (% style="color:#4f81bd" %)**Remote Mgmt/span>** 238 238 239 -[[image: https://wiki.dragino.com/images/thumb/8/8f/Remote_Mgmt.png/500px-Remote_Mgmt.png||height="367" width="500"]]241 +[[image:image-20220527110531-7.png]] 240 240 241 241 Remote Mgmt 242 242 243 243 244 -===== 2.2.2.2 Step2: Authorization server ===== 246 +===== **2.2.2.2 Step2: Authorization server** ===== 245 245 246 246 copy the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file. 247 247 248 -[[image: https://wiki.dragino.com/images/thumb/4/49/Publickey.png/500px-Publickey.png||height="81" width="500"]]250 +[[image:image-20220527110625-8.png]] 249 249 250 250 Publickey 251 251 252 252 253 -===== 2.2.2.3 Step3: connecte private server ===== 255 +===== **2.2.2.3 Step3: connecte private server** ===== 254 254 255 255 in the gateway web UI 256 256
- image-20220527103251-2.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoling - Size
-
... ... @@ -1,0 +1,1 @@ 1 +40.4 KB - Content
- image-20220527105447-1.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoling - Size
-
... ... @@ -1,0 +1,1 @@ 1 +13.0 KB - Content
- image-20220527105511-2.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoling - Size
-
... ... @@ -1,0 +1,1 @@ 1 +29.3 KB - Content
- image-20220527105856-3.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoling - Size
-
... ... @@ -1,0 +1,1 @@ 1 +9.9 KB - Content
- image-20220527105918-4.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoling - Size
-
... ... @@ -1,0 +1,1 @@ 1 +11.3 KB - Content
- image-20220527110011-5.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoling - Size
-
... ... @@ -1,0 +1,1 @@ 1 +11.2 KB - Content
- image-20220527110436-6.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoling - Size
-
... ... @@ -1,0 +1,1 @@ 1 +10.5 KB - Content
- image-20220527110531-7.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoling - Size
-
... ... @@ -1,0 +1,1 @@ 1 +79.9 KB - Content
- image-20220527110625-8.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoling - Size
-
... ... @@ -1,0 +1,1 @@ 1 +30.7 KB - Content