UsingSSH - Revision history

GethinWilliams: /* Transparent Multi-hop SSH */

2013-11-15T11:35:13Z

Transparent Multi-hop SSH

GethinWilliams: /* SSH Port Forwarding */

2013-11-15T11:32:30Z

SSH Port Forwarding

GethinWilliams: /* Using SSH Config Files */

2013-11-15T11:19:28Z

Using SSH Config Files

GethinWilliams at 11:19, 15 November 2013

2013-11-15T11:19:07Z

GethinWilliams: /* Introduction */

2013-11-15T11:12:31Z

Introduction

GethinWilliams at 11:12, 15 November 2013

2013-11-15T11:12:06Z

GethinWilliams at 11:48, 25 September 2009

2009-09-25T11:48:58Z

GethinWilliams at 11:48, 25 September 2009

2009-09-25T11:48:40Z

GethinWilliams: /* Two Connections Required */

2009-09-25T11:46:27Z

Two Connections Required

GethinWilliams: /* Two Connections Required */

2009-09-25T11:45:52Z

Two Connections Required

← Older revision		Revision as of 11:35, 15 November 2013
Line 273:		Line 273:
	scp blanc:path/to/remote/file path/to/local/file		scp blanc:path/to/remote/file path/to/local/file
	</pre>		</pre>
		+
		+	see also: http://sshmenu.sourceforge.net/articles/transparent-mulithop.html

@@ Line 255: / Line 255: @@
 in your SSH config file.  This will allow you to type '''ssh newblue''' to connect as: '''gethin@bluecrystalp3.acrc.bris.ac.uk'''.  The use of such nicknames can save you considerable typing.
-=SSH Port Forwarding=
+=Transparent Multi-hop SSH=
 [[Image:Port-forwarding.jpg|700px|thumbnail|center|Port forwarding with SSH]]
-We would like to connect to blanc, but it is behind a firewall.  One approach is to connect to each in turn, using '''nile''' as a '''stepping stone'''.  Another approach is to setup port-forwarding on '''nile''', so that you can connect, seemingly directly, to '''blanc'''.  Here's how:
+We would like to connect to blanc, but it is behind a firewall.  One approach is to connect to each in turn, using '''nile''' as a '''stepping stone'''.  Another approach is to setup a transparent multi-hop connection in your SSH config file so that you can seemingly connect directly, to '''blanc'''.  Here's how:
 <pre>
-ssh -p 2222 blanc-username@localhost
+Host blanc
 </pre>
-where we are using port 2222 on the local machine to talk to blanc.  You must authenticate yourself to blanc, of course, and the command uses 'blanc-username' accordingly.
+Now we can simply copy a file directly from blanc onto our local machine using scp:
 <pre>
-scp -P 2222 blanc-username@localhost:/path/to/file .
+scp blanc:path/to/remote/file path/to/local/file
 </pre>

@@ Line 253: / Line 253: @@
 </pre>
-in your SSH config file.  This will allow you to type '''ssh newblue''' to connect as: gethin@bluecrystalp3.acrc.bris.ac.uk.  The use of such nicknames can save you considerable typing.
+in your SSH config file.  This will allow you to type '''ssh newblue''' to connect as: '''gethin@bluecrystalp3.acrc.bris.ac.uk'''.  The use of such nicknames can save you considerable typing.
 =SSH Port Forwarding=

@@ Line 4: / Line 4: @@
 The goal for this page is to provide a 'how-to' guide for several topics related to using the Secure Shell--SSH.
-=Topic 1: Using Key-Pairs=
+=Using SSH Key-Pairs=
 ==Creating the Keys==
@@ Line 243: / Line 243: @@
 # Now you're in a position to create some new keys.
-=Topic 2: Port Forwarding=
+=Using SSH Config Files=
 [[Image:Port-forwarding.jpg|700px|thumbnail|center|Port forwarding with SSH]]

@@ Line 2: / Line 2: @@
 '''Using SSH to connect to machines and to move data'''
 =Introduction=
-The goal for this page is to provide a 'how-to' guide for several topics related to using the Secure Shell--SSH.  The first topic is how to use public-private key pairs within SSH.  The second topic is the use of port-forwarding to connect to a distant remote machine via another server, which acts as a 'stepping stone'.
+The goal for this page is to provide a 'how-to' guide for several topics related to using the Secure Shell--SSH.
 =Topic 1: Using Key-Pairs=

@@ Line 250: / Line 250: @@
 We would like to connect to blanc, but it is behind a firewall.  One approach is to connect to each in turn, using '''nile''' as a '''stepping stone'''.  Another approach is to setup port-forwarding on '''nile''', so that you can connect, seemingly directly, to '''blanc'''.  Here's how:
-==Two Connections Required==
+==Two Connections are Required==
 '''Step 1'''

@@ Line 258: / Line 258: @@
 </pre>
-Here we designate a port (we have chosen 2222) on the local machine, to act as our ssh 'gateway' to the remote machine called blanc.  This is manoeuvre is mediated by the machine in the middle, in this case nile.  In this step we must authenticate ourselves to nile, where 'nile-username', is your username on the machine called nile.
+Here we designate a port (we have chosen 2222) on the local machine, to act as our ssh 'gateway' to the remote machine called blanc.  This is manoeuvre is mediated by the machine in the middle, in this case nile.  In this step we must authenticate ourselves to nile, where 'nile-username', is your username on that machine.
 '''Step 2'''

@@ Line 255: / Line 255: @@
 <pre>
-ssh -L localhost:2222:blanc:22 username@nile.ggy.bris.ac.uk
+ssh -L localhost:2222:blanc:22 nile-username@nile.ggy.bris.ac.uk
 </pre>
-Here we designate a port (we have chosen 2222) on the local machine, to act as our ssh 'gateway' to the remote machine blanc.  This is manoeuvre is mediated by the machine in the middle, in this case nile.  We must authenticate ourselves to nile.
+Here we designate a port (we have chosen 2222) on the local machine, to act as our ssh 'gateway' to the remote machine called blanc.  This is manoeuvre is mediated by the machine in the middle, in this case nile.  In this step we must authenticate ourselves to nile, where 'nile-username', is your username on the machine called nile.
 '''Step 2'''
-To open an ssh session on our local machine pointing directly to blanc:
+Now that we have our stepping stone (connection to nile) in place, to reach out further and open an ssh session on blanc type:
 <pre>
-ssh -p 2222 username@localhost
+ssh -p 2222 blanc-username@localhost
 </pre>
-To copy a file directly from blanc onto our local machine using scp:
+where we are using port 2222 on the local machine to talk to blanc.  You must authenticate yourself to blanc, of course, and the command uses 'blanc-username' accordingly.
 <pre>
-scp -P 2222 username@localhost:/path/to/file .
+scp -P 2222 blanc-username@localhost:/path/to/file .
 </pre>
 '''Note''' a lower case '''p''' in the ssh command, but an uppercase '''P''' for the scp.