Changes for page Remote Access Gateway

Last modified by Kilight Cao on 2022/07/25 10:47
<
From version < 7.1 >
edited by Xiaoling
on 2022/05/27 10:58
To version < 19.4 >
edited by Xiaoling
on 2022/05/31 15:54
>
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -3,8 +3,9 @@
3 3  {{toc/}}
4 4  
5 5  
6 -= 1. Use Remote.it service =
7 7  
7 += **1. Use Remote.it service** =
8 +
8 8  Remote.it for remote access is available in the latest Dragino firmware for gateway. For security concern, the remote.it only available base on end user demand.
9 9  
10 10  (% style="color:red" %)**Important Notice:**
... ... @@ -15,7 +15,7 @@
15 15  For how to use remoteit, please see : [[Remoteit user instruction for Dragino Gateway>>url:https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/&file=Dragino-Remoteit_User_Manual.pdf]].
16 16  
17 17  
18 -= 2. RSSH Introduction =
19 += **2. RSSH Introduction** =
19 19  
20 20  Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand.
21 21  
... ... @@ -34,10 +34,11 @@
34 34  * LIG16
35 35  * MS14 series if installed with the same firmware.
36 36  
37 -== 2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355 ==
38 38  
39 -=== 2.1.1 End User Guide to use SSH access ===
39 +== **2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355** ==
40 40  
41 +=== **2.1.1 End User Guide to use SSH access** ===
42 +
41 41  Go to this the Reverse SSH page as below:
42 42  
43 43  [[image:image-20220527102348-1.png]]
... ... @@ -60,7 +60,7 @@
60 60  )))
61 61  
62 62  
63 -=== 2.1.2 How to Ser up a Reverse SSH access ===
65 +=== **2.1.2 How to Ser up a Reverse SSH access** ===
64 64  
65 65  Advance administrator can config a SSH server to provide support their end user themselves. Instruction is as below:
66 66  
... ... @@ -80,7 +80,7 @@
80 80  )))
81 81  
82 82  
83 -==== 2.1.2.1 Note for set up RSSH server ====
85 +==== **2.1.2.1 Note for set up RSSH server** ====
84 84  
85 85  If gateway reboot or the connection is incidentely close by end node. The port in SSH server will still be occupy for a long time. Administrator can use below commands to release the port.
86 86  
... ... @@ -95,7 +95,7 @@
95 95  )))
96 96  
97 97  
98 -== 2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111 ==
100 +== **2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111** ==
99 99  
100 100  Below gateway support reverse SSH access:
101 101  
... ... @@ -110,11 +110,11 @@
110 110  )))
111 111  
112 112  
113 -=== 2.2.1 End User Guide to use SSH access ===
115 +=== **2.2.1 End User Guide to use SSH access** ===
114 114  
115 -==== 2.2.1.1 Install the SSH service for server ====
117 +==== **2.2.1.1 Install the SSH service for server** ====
116 116  
117 -===== 2.2.1.1.1 Step 1:Download the SSH service code =====
119 +===== **2.2.1.1.1 Step 1 : Download the SSH service code** =====
118 118  
119 119  1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server
120 120  
... ... @@ -144,7 +144,7 @@
144 144  please install gcc.    ~-~->(% style="color:#4f81bd" %)**yum install gcc.**
145 145  )))
146 146  
147 -[[image:https://wiki.dragino.com/images/d/d7/Lack_of_gcc.png||height="174" width="434"]]
149 +[[image:image-20220527105856-3.png]]
148 148  
149 149  lack of gcc
150 150  
... ... @@ -154,10 +154,11 @@
154 154  please insatell (% style="color:#4f81bd" %)**sqlite3**.
155 155  )))
156 156  
157 -[[image:https://wiki.dragino.com/images/thumb/9/93/Lack_of_sqlite3.png/500px-Lack_of_sqlite3.png||height="137" width="500"]]
159 +[[image:image-20220527105918-4.png]]
158 158  
159 159  lack of sqlite3
160 160  
163 +
161 161  How to install Sqlit3
162 162  
163 163  (% class="box" %)
... ... @@ -182,9 +182,9 @@
182 182  )))
183 183  
184 184  
185 -===== 2.2.1.1.2 Step 2 :Install and run the RSS service =====
188 +===== **2.2.1.1.2 Step 2 : Install and run the RSS service** =====
186 186  
187 -1):intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)
190 +1): intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)
188 188  
189 189  user must enter the root account and run the following commands
190 190  
... ... @@ -195,7 +195,7 @@
195 195   $ ps -ef | grep rssh_serv check 3721 port
196 196  )))
197 197  
198 -[[image:https://wiki.dragino.com/images/thumb/c/cb/Intall_database_and_server_development_port.png/500px-Intall_database_and_server_development_port.png||height="70" width="500"]]
201 +[[image:image-20220527110436-6.png]]
199 199  
200 200  intall database and server development port
201 201  
... ... @@ -203,78 +203,78 @@
203 203  
204 204  (% class="box" %)
205 205  (((
206 -Check /var/rsshdb.sqlite3 ~-~->(% class="mark" %)** ls /var/rsshdb.sqlite3**(%%)
207 -Check ls /var/rsshdb.sqlite3 ~-~-> (% class="mark" %)**sudo chmod 777 rssh_serv**
209 +Check /var/rsshdb.sqlite3 ~-~->(% style="color:#4f81bd" %)** ls /var/rsshdb.sqlite3**(%%)
210 +Check ls /var/rsshdb.sqlite3 ~-~-> (% style="color:#4f81bd" %)**sudo chmod 777 rssh_serv**
208 208  )))
209 209  
210 210  (% class="box" %)
211 211  (((
212 212  if** fail to open dpvlry or to bind to it**
213 -please kill rssh_serv,and run (% class="mark" %)** ./rssh_serv -p  3721 2>&1 &** (%%) again
216 +please kill rssh_serv,and run (% style="color:#4f81bd" %)** ./rssh_serv -p  3721 2>&1 &** (%%) again
214 214  )))
215 215  
216 216  
217 -===== 2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway) =====
220 +===== **2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway)** =====
218 218  
219 -1):(% class="mark" %)**sudo useradd XXXXX**(%%) (custom user name)
222 +**1): (% style="color:#4f81bd" %)sudo useradd XXXXX(%%)** (custom user name)
220 220  
221 -2):(% class="mark" %)**sudo passwd xxxxxx**
224 +**2):** (% style="color:#4f81bd" %)**sudo passwd xxxxxx**
222 222  
223 -3):(% class="mark" %)**cp /bin/bash /bin/rbash**
226 +**3):** (% style="color:#4f81bd" %)**cp /bin/bash /bin/rbash**
224 224  
225 -4):(% class="mark" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash
228 +**4):** (% style="color:#4f81bd" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash
226 226  
227 -5):(% class="mark" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**
230 +**5):** (% style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**
228 228  
229 -6):(% class="mark" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**
232 +**6):** (% style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**
230 230  
231 231  **Now user "XXXXX" is the user with limited permissions of the current system**
232 232  
233 233  
234 -=== 2.2.2 How does user get the gateway to connect to a user's private server ===
237 +=== **2.2.2 How does user get the gateway to connect to a user's private server** ===
235 235  
236 -===== 2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key =====
239 +===== **2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key** =====
237 237  
238 -1)in the system ~-~-> (% class="mark" %)**Remote Mgmt/span>**
241 +1) in the system ~-~-> (% style="color:#4f81bd" %)**Remote Mgmt/span>**
239 239  
240 -[[image:https://wiki.dragino.com/images/thumb/8/8f/Remote_Mgmt.png/500px-Remote_Mgmt.png||height="367" width="500"]]
243 +[[image:image-20220527110531-7.png]]
241 241  
242 242  Remote Mgmt
243 243  
244 244  
245 -===== 2.2.2.2 Step2: Authorization server =====
248 +===== **2.2.2.2 Step2: Authorization server** =====
246 246  
247 247  copy the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file.
248 248  
249 -[[image:https://wiki.dragino.com/images/thumb/4/49/Publickey.png/500px-Publickey.png||height="81" width="500"]]
252 +[[image:image-20220527110625-8.png]]
250 250  
251 251  Publickey
252 252  
253 253  
254 -===== 2.2.2.3 Step3: connecte private server =====
257 +===== **2.2.2.3 Step3: connecte private server** =====
255 255  
256 256  in the gateway web UI
257 257  
258 -[[image:https://wiki.dragino.com/images/thumb/0/04/Gateway_web_UI.png/500px-Gateway_web_UI.png||height="389" width="500"]]
261 +[[image:image-20220527110700-9.png]]
259 259  
260 260  gateway web UI
261 261  
262 262  (% class="box" %)
263 263  (((
264 -(% class="mark" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (% class="mark" %)**Public Key**(%%)
267 +(% style="color:#4f81bd" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (% style="color:#4f81bd" %)**Public Key**(%%)
265 265  **Note:if user's least privileged user no uses a password,choose from both is fine**
266 -(% class="mark" %)**Login ID**(%%)             : Input user name "eg : "XXXXX"
267 -(% class="mark" %)**Host Address**(%%)         : Input user's private server address
268 -(% class="mark" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.
269 +(% style="color:#4f81bd" %)**Login ID**(%%)             : Input user name "eg : "XXXXX"
270 +(% style="color:#4f81bd" %)**Host Address**(%%)         : Input user's private server address
271 +(% style="color:#4f81bd" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.
269 269  Click Save and then Connect
270 270  )))
271 271  
272 272  
273 -===== 2.2.2.4 Step 4 :Cheak is fine =====
276 +===== **2.2.2.4 Step 4 :Cheak is fine** =====
274 274  
275 275  Rssh Host connection Ok
276 276  
277 -[[image:https://wiki.dragino.com/images/thumb/6/6f/Rssh_Host_connection_Ok.png/500px-Rssh_Host_connection_Ok.png||height="225" width="500"]]
280 +[[image:image-20220527111009-10.png]]
278 278  
279 279  Rssh Host connection Ok
280 280  
... ... @@ -281,12 +281,12 @@
281 281  
282 282  user can use common ps | grep ssh to check it in the gateway.
283 283  
284 -[[image:https://wiki.dragino.com/images/thumb/a/ad/Check_the_gateway.png/500px-Check_the_gateway.png]]
287 +[[image:image-20220527111041-11.png]]
285 285  
286 286  Check the gateway
287 287  
288 288  
289 -===== 2.2.2.5 Step5:Create an authorization key file =====
292 +===== **2.2.2.5 Step5:Create an authorization key file** =====
290 290  
291 291  1):sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey
292 292  
... ... @@ -297,22 +297,26 @@
297 297   check: sudo ls /home/xxxxx/.ssh/authorizedkey
298 298  )))
299 299  
300 -=== 2.2.3 How to Ser up a Reverse SSH access ===
301 301  
302 -==== 2.2.3.1 Step1: Log into the server system ====
304 +=== **2.2.3 How to Ser up a Reverse SSH access** ===
303 303  
304 -[[image:https://wiki.dragino.com/images/thumb/2/26/Loging_server.png/500px-Loging_server.png||height="69" width="500"]]
306 +==== **2.2.3.1 Step1: Log into the server system** ====
305 305  
308 +[[image:image-20220527111145-12.png]]
309 +
306 306  Loging server
307 307  
308 308  
309 -==== 2.2.3.2 Step2:access the gateway ====
313 +==== **2.2.3.2 Step2:access the gateway** ====
310 310  
315 +(% class="box" %)
316 +(((
311 311  $ cd rssh-server/
318 +)))
312 312  
313 313  Check the gateway linking to the server $ ./connect-gw.sh -l
314 314  
315 -[[image:https://wiki.dragino.com/images/thumb/e/ee/Check_gateway_link_server.png/500px-Check_gateway_link_server.png||height="157" width="500"]]
322 +[[image:image-20220527111219-13.png]]
316 316  
317 317  Check the gateway linking to the server
318 318  
... ... @@ -319,6 +319,6 @@
319 319  
320 320  access the gateway $ ./connect-gw.sh <GWID>
321 321  
322 -[[image:https://wiki.dragino.com/images/thumb/b/b7/Reverse_ssh_access_the_gateway1.png/500px-Reverse_ssh_access_the_gateway1.png||height="230" width="500"]]
329 +[[image:image-20220527111300-14.png]]
323 323  
324 324  reverse ssh access the gateway
image-20220527105918-4.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +11.3 KB
Content
image-20220527110011-5.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +11.2 KB
Content
image-20220527110436-6.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +10.5 KB
Content
image-20220527110531-7.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +79.9 KB
Content
image-20220527110625-8.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +30.7 KB
Content
image-20220527110700-9.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +66.6 KB
Content
image-20220527111009-10.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +22.5 KB
Content
image-20220527111041-11.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +13.4 KB
Content
image-20220527111145-12.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +6.3 KB
Content
image-20220527111219-13.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +9.1 KB
Content
image-20220527111300-14.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.Xiaoling
Size
... ... @@ -1,0 +1,1 @@
1 +28.6 KB
Content

Applications

Navigation

Copyright ©2010-2024 Dragino Technology Co., LTD. All rights reserved
Dragino Wiki v2.0