Differences

This shows you the differences between two versions of the page.

--- сервис_ssh [2022/10/26 13:31]
val [Windows]
+++ сервис_ssh [2025/01/20 14:47] (current)
val [SSH вместо VPN (привязка к порту сервера)]
@@ Line 2: / Line 2: @@
   * [[http://ru.wikipedia.org/wiki/SSH|SSH (wikipedia)]]
+  * [[https://habr.com/ru/articles/747080/|SSH с высоты птичьего полёта, или разгребаем кучи ключей]]
   * [[https://www.serfish.com/console/|Web-based access to any SSH server]]
   * [[http://linux.bolden.ru/ssh-tunnels/|Подробный анализ теории и практики использования SSH-туннелей]]
@@ Line 19: / Line 20: @@
 HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\SshHostKeys
+</code>
+=== MobaXterm ===
+  * [[https://mobaxterm.mobatek.net/|MobaXterm]]
+  * [[https://bbs.archlinux.org/viewtopic.php?id=174595|Weird characters while pasting in terminal]]
+<code>
+printf "\e[?2004l"
 </code>
@@ Line 32: / Line 41: @@
 ===== Настройка ssh сервера =====
 <code>
-gate# cat /etc/ssh/sshd_config
+gate# cat /etc/ssh/sshd_config.d/my.conf
 </code><code>
-...
 Port 2222
-...
 DenyUsers "user*"
-...
 PermitRootLogin yes
-...
+#KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1
+#HostkeyAlgorithms +ssh-dss,ssh-rsa
+#PubkeyAcceptedKeyTypes +ssh-dss,ssh-rsa
 </code>
@@ Line 51: / Line 62: @@
 <code>
 gate# ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key.pub
+</code>
+<code>
+ubuntu24# systemctl edit ssh.socket
+...
+[Socket]
+ListenStream=
+ListenStream=2222
+...
+ubuntu24# systemctl restart ssh.socket
 </code>
@@ Line 62: / Line 82: @@
 $ mkdir .ssh/
-$ cat .ssh/config
+$ cat ~/.ssh/config
 </code><code>
 Host *
   ServerAliveInterval 10
-#Host server2*
+#Host gitlab*
 #        Port 2222
-#        User backup
+##        User root
-#Host switch* 192.168.X.3 192.168.X.4 192.168.X.5*
+#Host switch* 192.168.X.5*
 #        KexAlgorithms +diffie-hellman-group1-sha1
 #        Ciphers +aes128-cbc
@@ Line 77: / Line 97: @@
 #        StrictHostKeyChecking=no
 #        LogLevel ERROR
+#        HostKeyAlgorithms +ssh-rsa
+#        PubkeyAcceptedKeyTypes +ssh-rsa
 </code>
@@ Line 96: / Line 118: @@
 student@hostX$ cd /; sudo tar -cf - etc/ | ssh -l user1 gate "cat > etc.tar"
-server# ssh switch "show cdp neighbors"
+server# ssh switch1 "show cdp neighbors"
 </code>
 ==== SSH вместо RCP (SCP) ====
+==== SCP ====
 <code>
 $ scp -P 2222 val@radio.specialist.ru:/usr/local/www/apache22/data/unix/virus.zip .
 server# scp switchN:running-config /srv/tftp/switchN-running-config
+deb12_ub24# scp -O switchN:running-config /srv/tftp/switchN-running-config
 server# sshpass -p cisco scp switchN:running-config /srv/tftp/switchN-running-config
+server# scp -3 192.168.X.101:/etc/docker/daemon.json gate:/etc/docker/daemon.json
 </code>
@@ Line 113: / Line 139: @@
 <code>
-www# cat /etc/ssh/sshd_config
+# cat /etc/ssh/sshd_config
 </code><code>
 ...
@@ Line 120: / Line 146: @@
 ...
 Match group user1
+#Match group group1
        ChrootDirectory %h
        ForceCommand internal-sftp
 </code><code>
-www# chown root ~user1/
+# chown root ~user1/
-www# mkdir ~user1/public_html
+# mkdir ~user1/public_html && chown user1:user1 ~user1/public_html/
-www# chown -R user1:user1 ~user1/public_html/
+# mkdir ~user1/mail && chown user1:user1 ~user1/mail/
 </code>
@@ Line 170: / Line 197: @@
 ...
 </code><code>
-lan# ssh -N -R 2222:localhost:22 user1@server.corpX.un
+# cat /proc/sys/net/ipv4/ip_local_port_range
+  или
+# sysctl net.ipv4.ip_local_port_range
-lan# ssh -N -R 3101:192.168.100+X.101:3389 user1@server.corpX.un
+lan# ssh -N -R 61022:localhost:22 -o ServerAliveInterval=5 -o ServerAliveCountMax=1 -o ExitOnForwardFailure=yes student@server.corpX.un
+lan# ssh -N -R 61389:192.168.100+X.1NN:3389 student@server.corpX.un
+mobaxterm> ssh -N -R 61389:localhost:3389 student@server.corpX.un
+mobaxterm> ssh -N -R 0:localhost:5500 student@server.corpX.un
 </code>
@@ Line 182: / Line 217: @@
 </code><code>
 ...
-Match Address 192.168.X.1
+#AllowUsers root user*@10.5.*.*
+...
+Match Address 192.168.*.*,172.16.*.*
        PermitRootLogin yes
 </code>
@@ Line 212: / Line 249: @@
 <code>
-node1:~# cat .ssh/config
+node1:~# cat ~/.ssh/config
 </code><code>
 Host *
@@ Line 233: / Line 270: @@
 ==== Парольная аутентификация ====
 <code>
-# apt install sshpass
+server# apt install sshpass
-[gate.isp.un:~] # sshpass -p '123' ssh 172.16.1.13
+server# sshpass -p 'strongpassword' ssh vagrant@node1
 server# sshpass -p cisco ssh switchN

Методические материалы Лохтурова Вячеслава

User Tools

Site Tools

Differences

Page Tools