<?xml version="1.0" encoding="utf-8"?>
<html>
- FAQ: Configure SSH Terminal Root Sessions for 3tera Server Appliances
Author: William Goldberg / Paul McCullough*
This is an alternative to using the shell terminal in the 3tera applogic tool, which is sometimes constrained by bandwidth or CPU utilization issues._toc_
Creating an SSH Key Pair (private/public) using PuTTY
Recommend that you read this page in its entirety
http://unixwiz.net/techtips/putty-openssh.html
a. download & install the putty suite on your desktop using the Windows installer option.
b. use puttygen to generate public and private keys & save both private & public keys.
Configure Gateway or Switch Appliances
There are two ways to approach an SSH telnet session in the 3tera environment.
...
a. Change INSSL gateway appliance Property Values to...
l3_accept_proto = tcp
l3_accept_port = all
b. Change PS8 switch appliance Property Values to...
out*x*_protocol = tcp
out*x*_in_port = 22
out*x*_out_port= 22
where "x" is a specific numbered port among the 8 available ports on the switch appliance.
c. Create an ssl(input) on the appliance that the PS8 appliance is serving as a switch for. (See Creating inputs/outputs on 3tera appliances.)
d. Connect port*x* out on the PS8 appliance to the ssl(in) on the associated appliance server.
Configure the Server Appliance for SSL connections
Each application appliance running on LINUX has an /etc/rc.local file, in which user scripts are run. This script must be edited, adding a line that will copy appropriate SSH public keys to the "./root/.ssh/authorized_keys" file. The following two lines are placed at the end of the rc.local file. Following is a a placement example...
...
ex. user set barf.williams@sfgov.org ssh="AAAAsdfs34fEdsfsfasafsadfgfgdfkjhasdfkjashdfkuioiuhiusadfiouhasidfuh"
Configure & Start your SSH terminal session in PuTTY.
a. Under the Session section, type in the INSSL appliance IP address associated with the particular server appliance you wish to connect to. Select port 22. Connection type is SSH. In the "Saved Sessions" field, type in an arbitrary name for your session and select the "Save" button.
...
- Under Connection - We recommend enabling 180 second "TCP keepalives" to prevent timing out of terminal sessions. We observed timeouts after 5 minutes without it.
- Under Window / Colours - When using standard black terminal background, blue is very faint. We recommend that you change default blue to white. All text will be clearly readable.
- Under Window - We recommend increasing "Lines of scrollback" from 200 to 9999.
ssh to the grid
If you have root access to the grid, you can ssh to that IP.
...
can ssh to any component on the grid.</html>