Setting up ssh restricted access to Edgerouter
Introduction to Edgerouter's EdgeOS commands
Running '?' shows commands available on EdgeOS in operational (upon logging in) and configuration mode ('configure' command)
Running 'configure' allows us to go into configure mode
Running 'commit' allows us to commit changes
Running 'commit-confirm' allows the change to take effect before reboot (important if you are unsure of the changes made and the impact to the system)
Running 'save' allows us to save the change to persistent boot configuration
Creating ssh key
ssh-keygen
Setting permission on .ssh and its subfolders
Setting permission on .ssh and its subfolders
chown -R username:usergroup .ssh/
Upload ssh key
ssh-copy-id -i ~/.ssh/clienthost.pub username@routerhostname
Loadkey
configure
loadkey
commit
save
Limit ssh to listen to one address
set service ssh listen-address 192.168.0.1
No comments:
Post a Comment