External SSH

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 16:25, 24 September 2005 (edit)
213.139.154.67 (Talk)
(default is 192.168.1.1 so its a better example)
← Previous diff
Revision as of 17:47, 16 November 2005 (edit) (undo)
84.171.190.134 (Talk)
(How to set up SSH access from internet - + dynamic port)
Next diff →
Line 11: Line 11:
''(for 192.168.1.1 set your router's local ip)'' ''(for 192.168.1.1 set your router's local ip)''
* To allow access to the SSH port from WAN add the following rule as command on the [[Web_Interface]] (''Administration'' -> ''Diagnostics'') and save with ''Save Firewall'': * To allow access to the SSH port from WAN add the following rule as command on the [[Web_Interface]] (''Administration'' -> ''Diagnostics'') and save with ''Save Firewall'':
- /usr/sbin/iptables -I INPUT 1 -p tcp --dport 22 -j logaccept+ /usr/sbin/iptables -I INPUT 1 -p tcp --dport $(nvram get sshd_port) -j logaccept
* To log into your router from a windows machine you could use [http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html Putty]. You will have to enter the external ip of your router or the DynDNS name to login from Internet. * To log into your router from a windows machine you could use [http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html Putty]. You will have to enter the external ip of your router or the DynDNS name to login from Internet.

Revision as of 17:47, 16 November 2005

You are here: Main Page/DD-WRT Docu (EN)/SSH access from internet

How to set up SSH access from internet

To make it possible to access your router from internet by SSH follow these steps:

  • Enable SSHD on the Web_Interface (Administration -> Management or Services) and don't forget to Save Settings.
  • Create a port forward rule on the web interface (Applications & Gaming -> Port Range Forward) to your router's local ip:
ssh  |  22  |  22  |  tcp  |  192.168.1.1  |  x

(for 192.168.1.1 set your router's local ip)
  • To allow access to the SSH port from WAN add the following rule as command on the Web_Interface (Administration -> Diagnostics) and save with Save Firewall:
/usr/sbin/iptables -I INPUT 1 -p tcp --dport $(nvram get sshd_port) -j logaccept
  • To log into your router from a windows machine you could use Putty. You will have to enter the external ip of your router or the DynDNS name to login from Internet.

Warning!

It's not too secure to set up SSH access like that. Be sure to choose a long and secure password or even better use Public Key Method. Otherwise someone could succeed to hack your router by a Brute Force Attack.


You are here: Main Page/DD-WRT Docu (EN)/SSH access from internet