Koozali.org: home of the SME Server

ssh from different subnet

Offline srushik

  • **
  • 32
  • +0/-0
    • http://www.pcconline.com
ssh from different subnet
« on: November 11, 2005, 10:01:12 PM »
I'm trying to ssh to an SME 6.0.1-01 from a different subnet and the connection is refused.  Is there a way to allow this?

subnet1: 10.10.2.1 | 255.255.0.0
subnet2: 192.168.1.1 | 255.255.255.0
The two subnets are connected via a VPN tunnel from router to router. The SME server is in server only mode behind the router/firewall that manages the VPN.

I can ping the server from the other subnet. Also, I have setup the additional subnet in the server-manager and can access the server-manager from the other subnet using https.

I can also ssh to the server from within the same subnet. But, when I try to connect from the other subnet with putty or using the ssh command, the connection is refused.

My assumption is that the server is not allowing the ssh connection because I'm from a different subnet.

Is there a way to allow ssh to connect from a different subnet?
......

Offline Franco

  • *
  • 1,171
  • +0/-0
    • http://contribs.org
ssh from different subnet
« Reply #1 on: November 11, 2005, 10:37:37 PM »
Diferent subnets, different rules on the firewall. You can create an aliases of the ETH0 interface and set your clients to use that as gateways or add the subnet to list of trusted servers on the Remote Access Panel

Offline srushik

  • **
  • 32
  • +0/-0
    • http://www.pcconline.com
ssh from different subnet
« Reply #2 on: November 11, 2005, 10:46:24 PM »
Thanks for the reply.

I'm not sure what you meant by
Quote
add the subnet to list of trusted servers


But it inspired me to think differently.

I added the other subnet to the "Local Networks" in the server-manager and that did it. (That may be exactly what you were refering to.)

Anyway, that solved the problem.  Now, I can ssh with no trouble to the server in the other subnet.
......