SSH Tunel with OpenWRT

You need to install OpenSSH client:
root@OpenWrt:~# opkg update
root@OpenWrt:~# opkg install openssh-client
Now OpenSSH client replaced DropBear client:
root@OpenWrt:~# ls -l /usr/bin/ssh
-rwxr-xr-x    1 root     root        590667 May 24 14:54 /usr/bin/ssh
root@OpenWrt:~# ls -l /rom/usr/bin/ssh
lrwxrwxrwx    1 root     root            16 Aug 19  2016 /rom/usr/bin/ssh -> ../sbin/dropbear
root@OpenWrt:~# ls -l /overlay/upper/usr/bin/ssh
-rwxr-xr-x    1 root     root        590667 May 24 14:54 /overlay/upper/usr/bin/ssh

Can you spot a difference:
root@OpenWrt:~# ssh
usage: ssh [-1246AaCfGgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec]
           [-D [bind_address:]port] [-E log_file] [-e escape_char]
           [-F configfile] [-I pkcs11] [-i identity_file]
           [-J [user@]host[:port]] [-L address] [-l login_name] [-m mac_spec]
           [-O ctl_cmd] [-o option] [-p port] [-Q query_option] [-R address]
           [-S ctl_path] [-W host:port] [-w local_tun[:remote_tun]]
           [user@]hostname [command]

root@OpenWrt:~# ssh
Dropbear SSH client v2016.74 https://matt.ucc.asn.au/dropbear/dropbear.html
Usage: ssh [options] [user@]host[/port] [command]
-p <remoteport>
-l <username>
-t    Allocate a pty
-T    Don't allocate a pty
-N    Don't run a remote command
-f    Run in background after auth
-y    Always accept remote host key if unknown
-y -y Don't perform any remote host key checking (caution)
-s    Request a subsystem (use by external sftp)
-o option     Set option in OpenSSH-like format ('-o help' to list options)
-i <identityfile>   (multiple allowed, default .ssh/id_dropbear)
-A    Enable agent auth forwarding
-L <[listenaddress:]listenport:remotehost:remoteport> Local port forwarding
-g    Allow remote hosts to connect to forwarded ports
-R <[listenaddress:]listenport:remotehost:remoteport> Remote port forwarding
-W <receive_window_buffer> (default 24576, larger may be faster, max 1MB)
-K <keepalive>  (0 is never, default 0)
-I <idle_timeout>  (0 is never, default 0)
-J <proxy_program> Use program pipe rather than TCP connection
-c <cipher list> Specify preferred ciphers ('-c help' to list options)
-m <MAC list> Specify preferred MACs for packet verification (or '-m help')
-V    Version

Now install sshtunel
root@OpenWrt:~# opkg install sshtunnel
Installing sshtunnel (4-1) to root...
Downloading http://downloads.openwrt.org/snapshots/trunk/ramips/mt7620/packages/packages/sshtunnel_4-1_ramips.ipk.
Configuring sshtunnel.


Comments

Popular posts from this blog

Hardening OpenWRT - adding non-root user account

Dropbear SSH keys and autossh on OpenWRT