NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Can't SSH from outside home network
Hey hi hello,
I'm having some annoying issues with my Readynas NV+ V2. Connecting to it with Putty or Filezilla for some SSH and file sharing works fine from any computer connected to the same home network (i.e the same private IP address range).
But connecting to it from outside, like from the school network that gives you a public IP address, does not work. I have set up port forwarding in my router so that it forwards all connections on port xxxxx to the NAS private address and port 22. When reaching the NAS however, it gives me "connection refused".
Is there an SSH configuration file I need to edit to allow external networks to access it, or could there be something else messing stuff up?
4 Replies
Replies have been turned off for this discussion
The NAS has no idea the port is being forwarded in your router. Did you try http://www.canyouseeme.org/ to see if port 22 is actually open? Your ISP (or school network) might block it.
FWIW, it is a verybad practice to forward all ports to your NAS, and port 22 isn't a good one to forward. NAS can/do get hacked.
Another option is to get a router that supports OpenVPN. That givs you secure access to your full home network.
Or install a secure variant of VNC on a home PC, and set up a router to forward a port to that. Then you can use the remote PC to access your other equipment.
The port should be open as it could not be found before doing the port forwarding. The problem now seems to be that the NAS receives the request but does not accept it.
I'm not forwarding all ports, I'm forwarding one specific (randomly chosen) port to be redirected to the private address of the NAS and its port 22.
Buying new equipment is not happening at the moment, is this something that can be done with a Netgear WNDR3700 v2?
Installing something on the PC seems like a poor solution, since it won't be powered on whenever I would actually need the SSH connection.
So, is there no SSH configuration I could do? Doesn't the SSH add-on have settings or something somewhere?
Newklear wrote:
I'm not forwarding all ports, I'm forwarding one specific (randomly chosen) port to be redirected to the private address of the NAS and its port 22.
I think I must have misunderstood your initial post (forwarding all connections...)
Your configuration works perfectly with my pro-6. For instance, if I forward 54321 to port 22 of my NAS IP, then putty will connect to my external NAS when I enter port 54321 into putty, and use my ddns name as host. Connection type is of course set to ssh.
The NAS can't detect that the original port is 54321. Though it can in principle detect that the connection is external, it is not doing that with my NAS.
Newklear wrote:
Buying new equipment is not happening at the moment, is this something that can be done with a Netgear WNDR3700 v2?
I think so, but I don't use that router.
What I think you'd need to do is install dd-wrt firmware on the router, and then configure openvpn.
http://www.dd-wrt.com/wiki/index.php/Netgear_WNDR3700
http://www.dd-wrt.com/wiki/index.php/OpenVPN
Newklear wrote:
Installing something on the PC seems like a poor solution, since it won't be powered on whenever I would actually need the SSH connection.
That is a disadvantage. Though if you have a method of waking up the PC remotely it is possible.
There is an add-on for the RND2000 v1 NAS (4.1.x firmware) that can do this. But I'm not sure about the v2 (5.3.x firmware).
I think dd-wrt also has support for remote wake-on-lan.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
