Using SSH Proxy in GL.iNet 6416

Saturday, Nov 7, 2015 by alzhao

Using SSH Proxy in GL.iNet 6416

In GL.iNet 6416, you can use ssh proxy. (these features are removed from AR150 firmware) Here are simple instructions.

ssh_proxy

  1. Navigate to “SSH Proxy” page.
  2. Check “Enable SSH Proxy” and “Enable transparency”
  3. Input your SSH server, .e.g using IP address or domain name
  4. Input your SSH username.
  5. Choose RSA for Authentication method. There is a bug for using password what cannot be solved by now.
  6. Copy the whole content of your RSA file, including the first and last line.
  7. Click Apply.
  8. Flash the page several time until you see the “SSH proxy” and “Transparent routing” are all in status “Yes”. Otherwise you may not connect to the Internet anymore.

Where to get RSA file?

If you have an SSH server, you are likely to have an username and password. Some servers requires RSA to ensure security. When using RSA, you don’t need type your password anytime. For example, I am using Amazon EC2. When I built the instance, it forced me to download a xxxx.pem file. This is the file that we should use as RSA.

If you only have a password without RSA file, you can try to generate one. Here is some guidance:

https://help.github.com/articles/generating-ssh-keys/

https://www.cyberciti.biz/faq/linux-generating-rsa-keys/

In your Linux,

ssh-keygen -t rsa

Follow the guidance to to generate two files, id_rsa and id_rsa.pub

Then upload the key to your server. If you are not to upload to the server, you cannot continue.

ssh-copy-id yourusername@your-server

Then you can login using the RSA content.

About GL.iNet

GL.iNet builds network hardware and software solutions that bring affordable and secure network connectivity to families and businesses all over the world. We work with a wide range of industries, solving everyday internet problems in offices, and providing complex networking solutions such as smart buildings and IoT Networks. At GL.iNet, We believe all successful businesses build upon a strong and secure foundation, which is why our highest priority is perfecting network security and reliability for our partners.