26 Jan
2017
26 Jan
'17
4:38 p.m.
hello meshlings
this is more of a networking question than libremesh, but maybe someone can
help.
i want to access a router through ssh. this would be no problem if it were
connected directly to the internet on a wan port - dropbear is listening
for right ports.
the problem is that the router is behind another router - so instead of a
public ip address, it has a subnet address, like this:
internet
<->
isp router (which i don't have access to)
<->
lime router (wan port gets a subnet ip like 192.168.1.7)
if I have the public ip address of the isp router, and the local address
that the lime router got assigned, is there any way I can make some ssh
tunneling to reach the lime router? any ideas?
thanks
--
bruno(a)pobox.com ▀─█▄██▄▀▄
http://brunovianna.net ─█▄██▄▀█▀█▄
skype: randomico▀─█▄██▄▀█▀█▄▌██─█▌█▌
26 Jan
26 Jan
4:52 p.m.
2017-01-26 17:38 GMT+01:00 bruno vianna <bruno(a)pobox.com>om>:
hello meshlings
LOL, hi!!!
i want to access a router through ssh. this would be
no problem if it were
connected directly to the internet on a wan port - dropbear is listening for
right ports.
the problem is that the router is behind another router - so instead of a
public ip address, it has a subnet address, like this:
internet
<->
isp router (which i don't have access to)
<->
lime router (wan port gets a subnet ip like 192.168.1.7)
if I have the public ip address of the isp router, and the local address
that the lime router got assigned, is there any way I can make some ssh
tunneling to reach the lime router? any ideas?
Does the "ISP router" have SSH?
In this case I would do like this:
ssh -L 7777:192.168.1.7:22 -p 333 admin(a)dyndns.of.your.isp.router.com
and then
ssh -p 7777 root@localhost
where:
192.168.1.7 is the IP of the LiMe router,
22 is the SSH/Dropbear port on LiMe router,
333 is the SSH port on the ISP router (if it's 22, you can omit the option),
admin is the account you have on the ISP router,
dyndns.of.your.isp.router.com is how to connect to ISP router, e.g. a
dynamic DNS,
7777 is a temporary port to be opened on your pc,
root is the account you want to open on LiMe router,
localhost is your pc.
If the ISP router doesn't have SSH you will have to ask to the LiMe
router owner to give you a way in...
For example a reverse SSH (with -R option) executed on LiMe router
pointing to a reachable SSH server.
Or including the LiMe router in a VPN (for this the GSoC idea about
integrating LibreNet6 with LiMe would be perfect to have).
Hope this helps!
Ciao,
Ilario
5:31 p.m.
Does the "ISP router" have SSH?
In this case I would do like this:
that is a solution, but no, no ssh on the ISP router :/
If the ISP router doesn't have SSH you will have to ask to the LiMe
router owner to give you a way in...
For example a reverse SSH (with -R option) executed on LiMe router
pointing to a reachable SSH server.
That is a good temporary solution!
I tested from my test router here:
ssh -R 9000:localhost:22 nuvem(a)nuvem.tk
(nuvem.tk is a host i have ssh access)
then i ssh into nuvem and from there did
ssh -p 9000 root@localhost
and i was at the router prompt!
using keys, i probably can put it as a startup script and have a permanent
tunnel---
Or including the LiMe router in a VPN (for this the GSoC idea about
integrating LibreNet6 with LiMe would be perfect to
have).
Well, that what we used to have, just ssh directly using librenet6 tunnel.
Much simpler.
Then I lost the private key, and uploaded a new one to the github.
But for some reason it is not working, I don't know if something has to be
done on their side :/
Hope this helps!
It helped a lot, thanks!
bruno(a)pobox.com ▀─█▄██▄▀▄
http://brunovianna.net ─█▄██▄▀█▀█▄
skype: randomico▀─█▄██▄▀█▀█▄▌██─█▌█▌
2886
days inactive
2886
days old
lime-users@lists.libremesh.org
2 comments
2 participants
participants (2)
-
bruno vianna -
Ilario