Diff for "SSHTunnel" - Creative Computing Wiki

Differences between revisions 2 and 4 (spanning 2 versions)

Creating a SSH tunnel without a password. This is useful for establishing secure connections on older versions of Linux which don't support OpenVPN.

This guide is based on the [http://robin.crecom.com.au/knowledge/linux/vpn%20setup.htm Linux VPN Setup] guide in the knowledge database.

Generate the ssh key

Assuming a vpn users has been created:

$ ssh-keygen -t dsa
Generating public/private dsa key pair.
Enter file in which to save the key (/home/vpn/.ssh/id_dsa):
Created directory '/home/vpn/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/vpn/.ssh/id_dsa.
Your public key has been saved in /home/vpn/.ssh/id_dsa.pub.
The key fingerprint is:
04:b0:6f:ff:2e:13:73:fb:aa:f1:d0:ee:3f:02:aa:b2 vpn@localhost.localdomain

$ mv .ssh/id_dsa.pub .ssh/authorized_keys

Copy /home/vpn/.ssh/id_dsa locally to a Windows machine and load it through [http://the.earth.li/~sgtatham/putty/latest/x86/puttygen.exe PuTTYgen] (PuTTYgen is available on Linux as well) to save it into PuTTY's own format. Use the format client_key.PPK or similar.

Test the key with [http://the.earth.li/~sgtatham/putty/latest/x86/plink.exe PLink]:

plink.exe -N -C -2 -i brace_key.PPK vpn@60.240.47.233 -L 23:192.168.100.1:23

-  ⇤ ← Revision 2 as of 2006-05-30 05:25:38 → 
  Size: 752
  Editor: rowlf
  Comment:
+   ← Revision 4 as of 2006-05-30 05:43:58 → ⇥
  Size: 1329
  Editor: rowlf
  Comment:
-Deletions are marked like this.
+Additions are marked like this.
 Line 1:
-Creating a SSH tunnel without a password. Based on the [http://robin.crecom.com.au/knowledge/linux/vpn%20setup.htm Link VPN Setup] guide in the knowledge database.
+Creating a SSH tunnel without a password. This is useful for establishing secure connections on older versions of Linux which don't support OpenVPN.

This guide is based on the [http://robin.crecom.com.au/knowledge/linux/vpn%20setup.htm Linux VPN Setup] guide in the knowledge database.
-Line 18:
+Line 20:
-mv .ssh/id_dsa.pub .ssh/authorized_keys
+$ mv .ssh/id_dsa.pub .ssh/authorized_keys
-Line 20:
+Line 22:
+Copy {{{/home/vpn/.ssh/id_dsa}}} locally to a Windows machine and load it through [http://the.earth.li/~sgtatham/putty/latest/x86/puttygen.exe PuTTYgen] (PuTTYgen is available on Linux as well) to save it into PuTTY's own format. Use the format client_key.PPK or similar.

Test the key with [http://the.earth.li/~sgtatham/putty/latest/x86/plink.exe PLink]:
{{{
plink.exe -N -C -2 -i brace_key.PPK vpn@60.240.47.233 -L 23:192.168.100.1:23
}}}