Re: ssh to machines behind firewall?
From: Ian Northeast (ian_at_house-from-hell.demon.co.uk)
Date: 04/30/04
- Next message: Nicolas Alt: "Network traffic monitoring"
- Previous message: svilen: "Re: Ethernet card receiving influenced by CPU speed?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Fri, 30 Apr 2004 21:36:58 +0100
On Thu, 29 Apr 2004 19:41:03 +0000, Grant Edwards wrote:
> I've got multiple machines behind a NAT/firewall. I'd like to ssh into
> those machines, so I map different incoming TCP/IP port numbers to port 22
> on the different hosts. That works fine.
>
> However, the ssh client is mad because n.n.n.n:8022 and n.n.n.n:8023 are
> two different hosts. How do I get ssh to take the port number into
> account in the know-hosts entries?
Another possibility is to copy the key files from one machine to the
others so that they are all the same, then the client isn't aware that
it's connecting to different ones.
I do this when I dual boot the server and keep the IP address the same but
I don't see why it shouldn't work with different ones. As long as they're
all yours in the same LAN I can't see a security issue either.
Personally I just have the one server accessible from outside and ssh on
from that to the others as needed. It means I only have to worry about
security in one place. I've not found this inconvenient. I do the same at
work (there I have two, for redundancy, at different sites) and
there are hundreds of machines there I need to access remotely. Some of
which run OSs so ancient it would be difficult if not impossible to put a
secure SSH server on. Or even any SSH server at all. The SSH servers have
a telnet client (and a tn3270 one for those who remember what that's for:)
Regards, Ian
- Next message: Nicolas Alt: "Network traffic monitoring"
- Previous message: svilen: "Re: Ethernet card receiving influenced by CPU speed?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
