E2E TS: SSH Tunnel
Prerequisities
- Dwarfguard 2.0.0+ installed (BETA 1.3.0+)
- Python extensions installed (via
dwarfg_inst_pyext or using --nondeb option during deployment)
- One Advantech router device type (registered)
Steps
- Navigate to Tunnels in Dwarfguard Web UI
- Locate a free entry in the table with the SSH type
- Click on Setup, select
- Confirm that the "Status" of the tunnel updates to "Waiting for device" and the "Waiting time" column is populated by the counting-down time after a while - the server may take up to 30 seconds to process the tunnel setup request.
- Confirm the device "Sync status" changes to "Pending"
- Wait 5 minutes
- You may expedite the tunnel creation by using the "Sync to server now" button in the router Web UI of the Adwarfg user module/router app.
- Confirm the tunnel status is updated to "Ready" in the tunnels table and the available buttons are;
- "Connect"
- "Shutdown"
- Click on "Connect" button
- Depending on certificate used, you may need to confirm a security exception in the browser (SSL certificate security risk)
- Confirm the SSH Wifty page is shown
- Click on the + button on the top banner
- Select Dwarfguard SSH Tunnel 1
- Select the "Password" authentication method if not pre-selected
- Click on Conect
- Confirm the router device ssh fingerprint by clicking on Yes I do
- Provide the ssh password for the root account on the router device
- Check that you have connected to the device
- e.g. by running
ip a command or whatever other means
- Terminate the connection and return to the Dwarfguard web UI
- Click on Shutdown button in the "Actions" column for the appropriate tunel line in the "List of Tunnels" table
- Verify that the tunnel is closed in under 5 minutes from your action.