freesshd SFTP Server on Windows

Transcription

1 freesshd SFTP Server on Windows Configuration Steps: Setting up the Bridgestone User ID... 2 Setup the freesshd Server... 3 Login as the Bridgestone User ID using WinSCP... 5 Create Default Bridgestone Transfer Directories... 6 Port Forwarding... 7 Using a Local Windows Firewall?... 8 Bridgestone Specific Information... 9 Software: freesshd Server for Windows WinSCP SFTP client for Windows

2 Setting up the Bridgestone User ID 1. Create a Windows User ID for Bridgestone with a secure password that does not expire. The bsfsftp ID does not have to be a member of any special groups. Check the boxes below so the user cannot change the password and it will never expire. 2. Logout of Windows and login as the bsfsftp ID so the home directory will be created. This will be location that Bridgestone will be limited to: NOTE: A faster/easier way is to right-click an application like Internet Explorer and choose Run As to run as user bsfsftp which will create the home directory from the Windows default profile. Windows XP = C:\Documents and Settings\bsfsftp Windows Vista and Windows 7 = C:\Users\bsfsftp 3. You may logout as bsfsftp and login as the primary user if you didn t choose the Run As method above.

3 Setup the freesshd Server 1. Download the latest stable version of freesshd from and run the install program. 2. Complete the installation by taking all of the defaults with the Next button all the way through. If prompted to create keys, answer Yes. Answer Yes to the run FreeSSHd as a system service question. 3. Run the freesshd program from the Desktop icon or under the Start >> All Programs >> freesshd. 4. Right-click on the freesshd icon in the System Tray next to the clock and select Settings 5. On the SSH tab, change the SSH listen port to 9022.

4 6. On the Users tab, enable the bsfsftp ID to use SFTP for file transfers: 7. Click the OK button to complete the configuration. 8. Start the Windows Service FreeSSHDService from the Computer Management Console either through the Administrative Tools or right-clicking on My Computer and selecting Manage. 9. Open a Command Prompt and use netstat to make sure the freesshd server is running and listening on port 9022: C:\Users\jonesdavida>netstat -an find "9022" TCP : :0 LISTENING

5 Login as the Bridgestone User ID using WinSCP 1. Use WinSCP or your favorite SFTP client to connect to the server and see the default directories. This will test to make sure freesshd server is running properly. WinSCP can be downloaded from 2. Start WinSCP and setup a new session to the freesshd server on localhost port 9022: 3. The first time you connect, you will be prompted to store the SSH host key. Answer Yes. 4. Optionally, you may test this from another Windows PC on your network using WinSCP. In this case, change the localhost host name to the IP address of the PC running freesshd. Testing from a second PC will insure that a local Windows Firewall is not blocking the incoming connection on TCP If you are using a local Windows firewall, then see the Windows Firewall section below to enable TCP port 9022 in the firewall rules.

6 Create Default Bridgestone Transfer Directories 1. After a successful connection, press the F7 key or click the Create Directory button at the bottom of the WinSCP window. 2. Create the inbound, the outbound, and the processed folders inside WinSCP. These will be located under the home directory for bsfsftp. Bridgestone will pull files from the outbound folder then move the pulled files into the processed folder. Bridgestone will push files into the inbound folder based on the agreed schedule.

7 Port Forwarding Typically in this configuration, Bridgestone will be initiating communications to push and pull files from the trading partner s freesshd SFTP server based on an agreed upon schedule. This requires a TCP port to be forwarded from the trading partner s edge firewall or router into the internal IP address of the freesshd SFTP Server. See for a port forward guide on your specific device.

8 Using a Local Windows Firewall? If a local firewall is enabled, open up the proper TCP port 9022 that is being forwarded by the Internet firewall/router to the internal IP address of the freesshd server. If the local firewall in use is the Windows XP Firewall, set the scope to Any computer (including those on the Internet).

9 Bridgestone Specific Information 1. The Bridgestone SFTP server listens on DNS host transfers.bfentirnet.com port This only applies if the external trading partner will be pushing files to Bridgestone using another product with a scheduler, not freesshd. 2. The Bridgestone SFTP server has redundant Internet Service Providers therefore transfers.bfentirenet.com resolves to 2 IP addresses. If you lock down SFTP traffic from our source IP addresses in your firewall rules, make sure that both IP addresses are allowed inbound The Bridgestone SFTP server can connect to external SFTP servers on either TCP 22, the default port for SSH, or on TCP In order to use another destination port, firewall rules must be changed on the Bridgestone side which could delay implementation schedules.