E2E TS: SSH Tunnel


Prerequisities

  • Dwarfguard 2.0.0+ installed (BETA 1.3.0+)
  • Python extensions installed (via dwarfg_inst_pyext or using --nondeb option during deployment)
  • One Advantech router device type (registered)


Steps

  1. Navigate to Tunnels in Dwarfguard Web UI
  2. Locate a free entry in the table with the SSH type
  3. Click on Setup, select
  4. Confirm that the "Status" of the tunnel updates to "Waiting for device" and the "Waiting time" column is populated by the counting-down time after a while - the server may take up to 30 seconds to process the tunnel setup request.
  5. Confirm the device "Sync status" changes to "Pending"
  6. Wait 5 minutes
    1. You may expedite the tunnel creation by using the "Sync to server now" button in the router Web UI of the Adwarfg user module/router app.
  7. Confirm the tunnel status is updated to "Ready" in the tunnels table and the available buttons are;
    1. "Connect"
    2. "Shutdown"
  8. Click on "Connect" button
  9. Depending on certificate used, you may need to confirm a security exception in the browser (SSL certificate security risk)
  10. Confirm the SSH Wifty page is shown
  11. Click on the + button on the top banner
  12. Select Dwarfguard SSH Tunnel 1
  13. Select the "Password" authentication method if not pre-selected
  14. Click on Conect
  15. Confirm the router device ssh fingerprint by clicking on Yes I do
  16. Provide the ssh password for the root account on the router device
  17. Check that you have connected to the device
    1. e.g. by running ip a command or whatever other means
  18. Terminate the connection and return to the Dwarfguard web UI
  19. Click on Shutdown button in the "Actions" column for the appropriate tunel line in the "List of Tunnels" table
  20. Verify that the tunnel is closed in under 5 minutes from your action.