- 3SSH
- 4SSH-exec
Overview
Jan 05, 2021 To generate an SSH key with PuTTYgen, follow these steps: Open the PuTTYgen program. For Type of key to generate, select SSH-2 RSA. Click the Generate button. MANUAL AND ON PUMP. THIS MANUAL IS INTENDED TO ASSIST IN THE. INSTALLATION AND OPERATION OF THIS UNIT AND MUST BE KEPT WITH THE PUMP. SAFETY ALERT SYMBOL. When you see this symbol on the pump or in the manual, look for one of the fol-lowing signal words and be alert to the potential for personal injury or property damage.
- Manuals and guides for SSH.COM software - PrivX, UKM, Tectia, NQX.
- HP NonStop SSH Reference Manual. HP Part Number: 544701-016. Published: February 2014. Edition: HP NonStop SSH 4.4. G06.21 and subsequent G-series RVUs.
RouterOS provides SSH client that supports SSHv2 logins to SSH servers reachable from the router.
Requirements
For this command to be available router has to have system and security packages installed.
SSH
Sub-menu:/system ssh
Simple log-in to remote host
It is able to connect to remote host and initiate ssh session. IP address supports both IPv4 and IPv6.
In this case user name provided to remote host is one that has logged into the router. If other value is required, then user=<username> has to be used.
Log-in from certain IP address of the router
For testing or security reasons it may be required to log-in to other host using certain source address of the connection. In this case src-address=<ip address> argument has to be used. Note that IP address in this case supports both, IPv4 and IPv6.
in this case, ssh client will try to bind to address specified and then initiate ssh connection to remote host.
Log-in using public/private key
For this to work user has to set up a public key on the remote end where ssh will connect to. How to do that on RouterOS you can read here. On local end router, public and private keys have to be uploaded to be used in /user ssh-keys private when adding private key and a user name that will be able to use this key.
Example of importing private key for user lala
Warning: Only user with full rights on the router can change 'user' attribute value under /user ssh-keys private
Executing remote commands
To execute remote command it has to be supplied at the end of log-in line
Warning: If the server does not support pseudo-tty (ssh -T or ssh host command), like mikrotik ssh server, then it is not possible to send multiline commands via SSH
For example, sending command '/ip address n add address=1.1.1.1/24' to MikroTik router will fail.
Note: If you wish to execute remote commands via scripts or scheduler, use command ssh-exec.
SSH-exec
Sub-menu:/system ssh-exec
Command ssh-exec is a non-interactive ssh command, thus allowing to execute commands remotely on a device via scripts and scheduler.
Retrieve information
The command will return two values:
- ) exit-code: returns 0 if the command execution succeeded
- ) output: returns the output of remotely executed command
Example:Code below will retrieve interface status of ether1 from device 10.10.10.1 and output the result to 'Log'
Note: For security reasons, plain text password input is not allowed. To ensure safe execution of the command remotely, use SSH key authentication for users on both sides.
An example of how to configure RSA key pair authentication can be found in: https://wiki.mikrotik.com/wiki/Use_SSH_to_execute_commands_(public/private_key_login)
Ssh Manually Copy Public Key
Warning: the user group and script policy executing the command requires test permission
Openssh Man
Ssh Options Command Line
[Top | Back to Content]
Manually Copy Ssh Key