Summary

• Page properties (1 modified, 0 added, 0 removed)
• Attachments (0 modified, 10 added, 0 removed)
  • image-20220527110011-5.png
  • image-20220527110436-6.png
  • image-20220527110531-7.png
  • image-20220527110625-8.png
  • image-20220527110700-9.png
  • image-20220527111009-10.png
  • image-20220527111041-11.png
  • image-20220527111145-12.png
  • image-20220527111219-13.png
  • image-20220527111300-14.png

Details

Page properties

Content

...	...	@@ -1,10 +1,12 @@
1		- **Contents:**
	1	+ **Table of Contents:**
2	2
3	3	{{toc/}}
4	4
5	5
6		-= 1. Use Remote.it service =
7	7
	7	+= **1. Use Remote.it service** =
	8	+
	9	+
8	8	Remote.it for remote access is available in the latest Dragino firmware for gateway. For security concern, the remote.it only available base on end user demand.
9	9
10	10	(% style="color:red" %)**Important Notice:**
...	...	@@ -15,8 +15,9 @@
15	15	For how to use remoteit, please see : [[Remoteit user instruction for Dragino Gateway>>url:https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/&file=Dragino-Remoteit_User_Manual.pdf]].
16	16
17	17
18		-= 2. RSSH Introduction =
	20	+= **2. RSSH Introduction** =
19	19
	22	+
20	20	Reverse SSH for remote access is available in the latest Dragino firmware for gateway. For security concern, the RSSH only available base on end user demand.
21	21
22	22	(% style="color:red" %)**Important Notice:**
...	...	@@ -34,10 +34,15 @@
34	34	* LIG16
35	35	* MS14 series if installed with the same firmware.
36	36
37		-== 2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355 ==
38	38
39		-=== 2.1.1 End User Guide to use SSH access ===
40	40
	42	+
	43	+== **2.1 For Firmware Version lower than lgw~-~-build-v5.4.1616478814-20210323-1355** ==
	44	+
	45	+
	46	+=== **2.1.1 End User Guide to use SSH access** ===
	47	+
	48	+
41	41	Go to this the Reverse SSH page as below:
42	42
43	43	[[image:image-20220527102348-1.png]]
...	...	@@ -49,11 +49,11 @@
49	49
50	50	Connection OK.
51	51
52		-* (% style="color:#4f81bd" %)**Login ID**(%%): Input (% style="color:#4f81bd" %)**sshuser**
53		-* (% style="color:#4f81bd" %)**Host Address**(%%): Input** (% style="color:#4f81bd" %)support.dragino.com(%%)**
54		-* (% style="color:#4f81bd" %)**Host Port**(%%): Please email to support @ dragino.com to get a valid host port.
	60	+* (% style="color:#4f81bd" %)**Login ID**(%%):  Input (% style="color:#4f81bd" %)**sshuser**
	61	+* (% style="color:#4f81bd" %)**Host Address**(%%):  Input** (% style="color:#4f81bd" %)support.dragino.com(%%)**
	62	+* (% style="color:#4f81bd" %)**Host Port**(%%):  Please email to support @ dragino.com to get a valid host port.
55	55	* (% style="color:#4f81bd" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.
56		-* (% style="color:#4f81bd" %)**Network Keys:**(%%)Click the Generate keys to generate the keys and download / mail it to Dragino support so Dragino can prepare the remote access to
	64	+* (% style="color:#4f81bd" %)**Network Keys:  **(%%)Click the Generate keys to generate the keys and download / mail it to Dragino support so Dragino can prepare the remote access to
57	57
58	58	(((
59	59	After doing above, please download and mail the public keys to Dragino support and wait for our mail for the valid host port. Input the valid host port got from our support and click connect so we can remote access to your gateway.
...	...	@@ -60,7 +60,7 @@
60	60	)))
61	61
62	62
63		-=== 2.1.2 How to Ser up a Reverse SSH access ===
	71	+=== **2.1.2 How to Ser up a Reverse SSH access** ===
64	64
65	65	Advance administrator can config a SSH server to provide support their end user themselves. Instruction is as below:
66	66
...	...	@@ -80,7 +80,7 @@
80	80	)))
81	81
82	82
83		-==== 2.1.2.1 Note for set up RSSH server ====
	91	+==== **2.1.2.1 Note for set up RSSH server** ====
84	84
85	85	If gateway reboot or the connection is incidentely close by end node. The port in SSH server will still be occupy for a long time. Administrator can use below commands to release the port.
86	86
...	...	@@ -95,7 +95,7 @@
95	95	)))
96	96
97	97
98		-== 2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111 ==
	106	+== **2.2 For Firmware Version higher than lgw~-~-build-v5.4.1618196981-20210412-1111** ==
99	99
100	100	Below gateway support reverse SSH access:
101	101
...	...	@@ -110,11 +110,11 @@
110	110	)))
111	111
112	112
113		-=== 2.2.1 End User Guide to use SSH access ===
	121	+=== **2.2.1 End User Guide to use SSH access** ===
114	114
115		-==== 2.2.1.1 Install the SSH service for server ====
	123	+==== **2.2.1.1 Install the SSH service for server** ====
116	116
117		-===== 2.2.1.1.1 Step 1:Download the SSH service code =====
	125	+===== **2.2.1.1.1 Step 1 : Download the SSH service code** =====
118	118
119	119	1).git clone [[https:~~/~~/github.com/dragino/rssh-server.git>>url:https://github.com/dragino/rssh-server.git]] rssh-server
120	120
...	...	@@ -144,7 +144,7 @@
144	144	please install gcc.    ~-~->(% style="color:#4f81bd" %)**yum install gcc.**
145	145	)))
146	146
147		-[[image:https://wiki.dragino.com/images/d/d7/Lack_of_gcc.png||height="174" width="434"]]
	155	+[[image:image-20220527105856-3.png]]
148	148
149	149	lack of gcc
150	150
...	...	@@ -154,10 +154,11 @@
154	154	please insatell (% style="color:#4f81bd" %)**sqlite3**.
155	155	)))
156	156
157		-[[image:https://wiki.dragino.com/images/thumb/9/93/Lack_of_sqlite3.png/500px-Lack_of_sqlite3.png||height="137" width="500"]]
	165	+[[image:image-20220527105918-4.png]]
158	158
159	159	lack of sqlite3
160	160
	169	+
161	161	How to install Sqlit3
162	162
163	163	(% class="box" %)
...	...	@@ -182,9 +182,9 @@
182	182	)))
183	183
184	184
185		-===== 2.2.1.1.2 Step 2 :Install and run the RSS service =====
	194	+===== **2.2.1.1.2 Step 2 : Install and run the RSS service** =====
186	186
187		-1):intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)
	196	+1): intall database for /var/rsshdb.sqlite3 and Server development port for 3721(The default is 3721)
188	188
189	189	user must enter the root account and run the following commands
190	190
...	...	@@ -195,7 +195,7 @@
195	195	$ ps -ef | grep rssh_serv check 3721 port
196	196	)))
197	197
198		-[[image:https://wiki.dragino.com/images/thumb/c/cb/Intall_database_and_server_development_port.png/500px-Intall_database_and_server_development_port.png||height="70" width="500"]]
	207	+[[image:image-20220527110436-6.png]]
199	199
200	200	intall database and server development port
201	201
...	...	@@ -203,78 +203,78 @@
203	203
204	204	(% class="box" %)
205	205	(((
206		-Check /var/rsshdb.sqlite3 ~-~->(% class="mark" %)** ls /var/rsshdb.sqlite3**(%%)
207		-Check ls /var/rsshdb.sqlite3 ~-~-> (% class="mark" %)**sudo chmod 777 rssh_serv**
	215	+Check /var/rsshdb.sqlite3 ~-~->(% style="color:#4f81bd" %)** ls /var/rsshdb.sqlite3**(%%)
	216	+Check ls /var/rsshdb.sqlite3 ~-~-> (% style="color:#4f81bd" %)**sudo chmod 777 rssh_serv**
208	208	)))
209	209
210	210	(% class="box" %)
211	211	(((
212	212	if** fail to open dpvlry or to bind to it**
213		-please kill rssh_serv,and run (% class="mark" %)** ./rssh_serv -p  3721 2>&1 &** (%%) again
	222	+please kill rssh_serv,and run (% style="color:#4f81bd" %)** ./rssh_serv -p  3721 2>&1 &** (%%) again
214	214	)))
215	215
216	216
217		-===== 2.2.1.1.3 Step 3 :Create a minimal SSH user (reverse SSH proxy for the gateway) =====
	226	+===== **2.2.1.1.3 Step 3 : Create a minimal SSH user (reverse SSH proxy for the gateway)** =====
218	218
219		-1):(% class="mark" %)**sudo useradd XXXXX**(%%) (custom user name)
	228	+**1): (% style="color:#4f81bd" %)sudo useradd XXXXX(%%)** (custom user name)
220	220
221		-2):(% class="mark" %)**sudo passwd xxxxxx**
	230	+**2):** (% style="color:#4f81bd" %)**sudo passwd xxxxxx**
222	222
223		-3):(% class="mark" %)**cp /bin/bash /bin/rbash**
	232	+**3):** (% style="color:#4f81bd" %)**cp /bin/bash /bin/rbash**
224	224
225		-4):(% class="mark" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash
	234	+**4):** (% style="color:#4f81bd" %)**sudo nano /etc/passwd**(%%) ~-~-> Change /bin/bash to /bin/rbash
226	226
227		-5):(% class="mark" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**
	236	+**5):** (% style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bashrc**(%%) **empty it,and input export PATH=$HOME/bin**
228	228
229		-6):(% class="mark" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**
	238	+**6):** (% style="color:#4f81bd" %)**sudo nano /home/xxxxx/.bash_profile**(%%) **empty it,and input export PATH=$HOME/bin**
230	230
231	231	**Now user "XXXXX" is the user with limited permissions of the current system**
232	232
233	233
234		-=== 2.2.2 How does user get the gateway to connect to a user's private server ===
	243	+=== **2.2.2 How does user get the gateway to connect to a user's private server** ===
235	235
236		-===== 2.2.2.1 Step1: Come bace the gateway web UI for get the gateway Public key =====
	245	+===== **2.2.2.1 Step 1 : Come bace the gateway web UI for get the gateway Public key** =====
237	237
238		-1)in the system ~-~-> (% class="mark" %)**Remote Mgmt/span>**
	247	+1) in the system ~-~-> (% style="color:#4f81bd" %)**Remote Mgmt**
239	239
240		-[[image:https://wiki.dragino.com/images/thumb/8/8f/Remote_Mgmt.png/500px-Remote_Mgmt.png||height="367" width="500"]]
	249	+[[image:image-20220527110531-7.png]]
241	241
242	242	Remote Mgmt
243	243
244	244
245		-===== 2.2.2.2 Step2: Authorization server =====
	254	+===== **2.2.2.2 Step 2 : Authorization server** =====
246	246
247	247	copy the Gateway Publickey into user's private server "/home/XXXXX/.ssh/authorized_keys" file.
248	248
249		-[[image:https://wiki.dragino.com/images/thumb/4/49/Publickey.png/500px-Publickey.png||height="81" width="500"]]
	258	+[[image:image-20220527110625-8.png]]
250	250
251	251	Publickey
252	252
253	253
254		-===== 2.2.2.3 Step3: connecte private server =====
	263	+===== **2.2.2.3 Step 3 : connecte private server** =====
255	255
256	256	in the gateway web UI
257	257
258		-[[image:https://wiki.dragino.com/images/thumb/0/04/Gateway_web_UI.png/500px-Gateway_web_UI.png||height="389" width="500"]]
	267	+[[image:image-20220527110700-9.png]]
259	259
260	260	gateway web UI
261	261
262	262	(% class="box" %)
263	263	(((
264		-(% class="mark" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (% class="mark" %)**Public Key**(%%)
	273	+(% style="color:#4f81bd" %)**Connection Type **(%%) : If user's least privileged user with private server uses a password, select (% style="color:#4f81bd" %)**Public Key**(%%)
265	265	**Note:if user's least privileged user no uses a password,choose from both is fine**
266		-(% class="mark" %)**Login ID**(%%)             : Input user name "eg : "XXXXX"
267		-(% class="mark" %)**Host Address**(%%)         : Input user's private server address
268		-(% class="mark" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.
	275	+(% style="color:#4f81bd" %)**Login ID**(%%)             : Input user name "eg : "XXXXX"
	276	+(% style="color:#4f81bd" %)**Host Address**(%%)         : Input user's private server address
	277	+(% style="color:#4f81bd" %)**Connect at Startupt**(%%): Choose to enable connect once device is powered.
269	269	Click Save and then Connect
270	270	)))
271	271
272	272
273		-===== 2.2.2.4 Step 4 :Cheak is fine =====
	282	+===== **2.2.2.4 Step 4 : Cheak is fine** =====
274	274
275	275	Rssh Host connection Ok
276	276
277		-[[image:https://wiki.dragino.com/images/thumb/6/6f/Rssh_Host_connection_Ok.png/500px-Rssh_Host_connection_Ok.png||height="225" width="500"]]
	286	+[[image:image-20220527111009-10.png]]
278	278
279	279	Rssh Host connection Ok
280	280
...	...	@@ -281,12 +281,12 @@
281	281
282	282	user can use common ps | grep ssh to check it in the gateway.
283	283
284		-[[image:https://wiki.dragino.com/images/thumb/a/ad/Check_the_gateway.png/500px-Check_the_gateway.png]]
	293	+[[image:image-20220527111041-11.png]]
285	285
286	286	Check the gateway
287	287
288	288
289		-===== 2.2.2.5 Step5:Create an authorization key file =====
	298	+===== **2.2.2.5 Step 5 : Create an authorization key file** =====
290	290
291	291	1):sudo mkdir /home/xxxxx/.ssh; sudo touch /home/xxxxx/.ssh/authorizedkey
292	292
...	...	@@ -297,22 +297,26 @@
297	297	check: sudo ls /home/xxxxx/.ssh/authorizedkey
298	298	)))
299	299
300		-=== 2.2.3 How to Ser up a Reverse SSH access ===
301	301
302		-==== 2.2.3.1 Step1: Log into the server system ====
	310	+=== **2.2.3 How to Ser up a Reverse SSH access** ===
303	303
304		-[[image:https://wiki.dragino.com/images/thumb/2/26/Loging_server.png/500px-Loging_server.png||height="69" width="500"]]
	312	+==== **2.2.3.1 Step 1 : Log into the server system** ====
305	305
	314	+[[image:image-20220527111145-12.png]]
	315	+
306	306	Loging server
307	307
308	308
309		-==== 2.2.3.2 Step2:access the gateway ====
	319	+==== **2.2.3.2 Step 2 : access the gateway** ====
310	310
	321	+(% class="box" %)
	322	+(((
311	311	$ cd rssh-server/
	324	+)))
312	312
313	313	Check the gateway linking to the server $ ./connect-gw.sh -l
314	314
315		-[[image:https://wiki.dragino.com/images/thumb/e/ee/Check_gateway_link_server.png/500px-Check_gateway_link_server.png||height="157" width="500"]]
	328	+[[image:image-20220527111219-13.png]]
316	316
317	317	Check the gateway linking to the server
318	318
...	...	@@ -319,6 +319,6 @@
319	319
320	320	access the gateway $ ./connect-gw.sh <GWID>
321	321
322		-[[image:https://wiki.dragino.com/images/thumb/b/b7/Reverse_ssh_access_the_gateway1.png/500px-Reverse_ssh_access_the_gateway1.png||height="230" width="500"]]
	335	+[[image:image-20220527111300-14.png]]
323	323
324	324	reverse ssh access the gateway

image-20220527110011-5.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Xiaoling

Size

...	...	@@ -1,0 +1,1 @@
	1	+11.2 KB

Content

image-20220527110436-6.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Xiaoling

Size

...	...	@@ -1,0 +1,1 @@
	1	+10.5 KB

Content

image-20220527110531-7.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Xiaoling

Size

...	...	@@ -1,0 +1,1 @@
	1	+79.9 KB

Content

image-20220527110625-8.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Xiaoling

Size

...	...	@@ -1,0 +1,1 @@
	1	+30.7 KB

Content

image-20220527110700-9.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Xiaoling

Size

...	...	@@ -1,0 +1,1 @@
	1	+66.6 KB

Content

image-20220527111009-10.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Xiaoling

Size

...	...	@@ -1,0 +1,1 @@
	1	+22.5 KB

Content

image-20220527111041-11.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Xiaoling

Size

...	...	@@ -1,0 +1,1 @@
	1	+13.4 KB

Content

image-20220527111145-12.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Xiaoling

Size

...	...	@@ -1,0 +1,1 @@
	1	+6.3 KB

Content

image-20220527111219-13.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Xiaoling

Size

...	...	@@ -1,0 +1,1 @@
	1	+9.1 KB

Content

image-20220527111300-14.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Xiaoling

Size

...	...	@@ -1,0 +1,1 @@
	1	+28.6 KB

Content