Ssh Setup a SSH Tunnel: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 9: Line 9:
=Setting a Tunnel from a Local Port to a Port on a Remote Host=
=Setting a Tunnel from a Local Port to a Port on a Remote Host=


  ssh -f -N &#91;-p <''[[#remote-host-ssh-port|remote-host-ssh-port]]''> -i <''identity-file''>] \
  ssh -f -N &#91;-p <''[[#remote-host-ssh-port|remote-host-ssh-port]]''> -i <''[[#identity-file|identity-file]]''>] \
   <''remote-host-ssh-user''>@<''remote-host-address-on-which-ssh-is-exposed''> -L <''local-port''>:<''remote-host-interface-to-forward-to''>:<''port-on-remote-host''>  
   <''remote-host-ssh-user''>@<''remote-host-address-on-which-ssh-is-exposed''> -L <''local-port''>:<''remote-host-interface-to-forward-to''>:<''port-on-remote-host''>  


Line 19: Line 19:


* <span id='remote-host-ssh-port'></span>-p <''remote-host-ssh-port''> may be used to specify a non-standard SSH port, if the SSH daemon on the remote host was configured to listen on a port other than 22.
* <span id='remote-host-ssh-port'></span>-p <''remote-host-ssh-port''> may be used to specify a non-standard SSH port, if the SSH daemon on the remote host was configured to listen on a port other than 22.
* <span id='identity-file'></span>-i <''identity-file''> may be used to specify a non-standard identity file, or the identity file for the remote user the connection is made for, if different from the local UNIX user that executes the command.

Revision as of 02:59, 27 December 2018

Internal

Overview

OpenSSH can be used to tunnel traffic from the local host to a remote host you have an account on.

Setting a Tunnel from a Local Port to a Port on a Remote Host

ssh -f -N [-p <remote-host-ssh-port> -i <identity-file>] \
  <remote-host-ssh-user>@<remote-host-address-on-which-ssh-is-exposed> -L <local-port>:<remote-host-interface-to-forward-to>:<port-on-remote-host> 

The "-f" option tells ssh to go to background.

The "-N" option tells ssh to NOT execute any command on the remote system. If "-N" is omitted, the ssh tunnel will establish AND login.

The meaning of other arguments is the following:

  • -p <remote-host-ssh-port> may be used to specify a non-standard SSH port, if the SSH daemon on the remote host was configured to listen on a port other than 22.
  • -i <identity-file> may be used to specify a non-standard identity file, or the identity file for the remote user the connection is made for, if different from the local UNIX user that executes the command.