Access to HZB internal computers via SSH tunnel with PuTTY (Screenshots Windows 7)

Transcription

1 Access to HZB internal computers via SSH tunnel with PuTTY (Screenshots Windows 7) Many computers are not available to access from the outside. With a valid HZB account you may establish a tunnel to access these computers from outside the HZB through an encrypted connection via the HZB gateway computer display. Then you make a connection to a port on your local PC and thereby access the port of a remote computer via the tunnel. All you need is your HZB account on the gateway computer display.hmi.de. The account is the same as your internal HZB account, but has a separate password (see the name of the computer and the port number you want to access.... a suitable program to create the tunnel. For Windows we recommend the freely available PuTTY ( described below. PuTTY can be downloaded, stored anywhere and run from there without administrator privileges. How to connect to the HZB gateway computer Enter display.hmi.de as hostname. The SSH port 22 and SSH protocol are preset. Save the settings under any session name to be able to use the settings in the future without reentering each time. Use saved settings by highlighting and clicking load. Any changes, including any new tunnel you set up, you should always save here for use in future sessions. Connections can be made faster if you check Connection-> SSH "Enable Compression. Click Open (or Apply if you already have an open session).

2 The first time you connect, you must accept the key of the remote host (display). The computer display should show the fingerprint value a6:b8:86:29:28:29:d2:04:d4:f0:8e:f3:29:4b:1b:26. In the new black window, enter your HZB account and the external password. Different expamples of using connections through a tunnel Right click in the title bar of the new black window and select the menu item Change Settings to get back to the settings. Open Connections -> SSH -> Tunnels Create a connection via a tunnel, where you access a remote port of a HZB-internal computer by connecting to a local port. Always choose a local port number greater than 1024 and less than or equal You may establish different connections via a single tunnel. Example 1: Accessing an internal computer via Remotedesktop Choose a local source port >1024, in the example 10,000. Enter the name of the remote computer and the RDP port 3389 as destination. Click Add to add the tunnel to your settings, and Apply to apply the settings for the current session, if you already have one open.

3 Start your Remotedesktop Connection to port on your local PC - the connection will be tunneled to the RDP port on the destination host. The first time you connect, you must accept the certificate once. Example 2: Accessing a web page of an internal computer, i.e. TYPO3 For example, if you want to edit HZB web pages in the content management system TYPO3, this is usually not possible externally. But by establishing a tunneled connection you can access TYPO3 from outside HZB. Select a source port on the local host, in this example Specify the destination computer (the CMS) and the web port 80. Click Add to add and Apply to apply the settings for the existing session. For editing Web pages in CMS with TYPO3 you now type the following URL in your browser. Example 3: Copying files from your home directory at HZB Usually the home directories are not externally accessible. For example if you want to transfer files from your home directory to your pc at home, you can use a tunnel and exchange files with a program such as "WinSCP". Select a source port on the local host, in this example the As destination enter the name of a suitable Linux host, in the example dinux5, and the SSH port 22. Click Add to add and Apply to apply the settings for the existing session.

4 Now you may use a program like WinSCP to copy files via SSH. Connect to the local port 2222 enter your internal HZB account and click Login. You are now connecting directly to the SSH port at the HZB internal Computer dinux5 via the previously established tunnel and you may access your files in your home directory. On the left side of the window you can see your local directory, on the right you can see your home directory. You can now copy files by drawing with the mouse.

5