Mikrotik SSH (Secure Shell) Server and Client
Quoting one of e-books
Table of Contents
Summary
Specifications
Related Documents
Additional Documents
SSH Server
Description
Property Description
Example
SSH Client
Property Description
Example
General Information
Summary
SSH Client authenticates server and encrypts traffic between the client and server. You can use
SSH just the same way as telnet - you run the client, tell it where you want to connect to, give your
username and password, and everything is the same after that. After that you won't be able to tell
that you're using SSH. The SSH feature can be used with various SSH Telnet clients to securely
connect to and administrate the router.
The MikroTik RouterOS supports:
• SSH 1.3, 1.5, and 2.0 protocol standards
• server functions for secure administration of the router
• telnet session termination with 40 bit RSA SSH encryption is supported
• secure ftp is supported
• preshared key authentication is not supported
The MikroTik RouterOS has been tested with the following SSH telnet terminals:
• PuTTY
• Secure CRT
• OpenSSH GNU/Linux client
Specifications
Packages required: security
License required: level1
Home menu level: /system ssh
Standards and Technologies: SSH
Hardware usage: Not significant
Related Documents
• Package Management
Additional Documents
• http://www.freessh.org/
SSH Server
Home menu level: /ip service
Description
SSH Server is already up and running after MikroTik router installation. The default port of the
service is 22. You can set a different port number.
Property Description
name (name) - service name
port (integer: 1..65535) - port the service listens to
address (IP address | netmask; default: 0.0.0.0/0) - IP address from which the service is accessible
Example
Let's change the default SSH port (22) to 65 on which the SSH server listens for requests:
[admin@MikroTik] ip service> set ssh port=65
[admin@MikroTik] ip service> print
Flags: X - disabled, I - invalid
# NAME PORT ADDRESS CERTIFICATE
0 telnet 23 0.0.0.0/0
1 ftp 21 0.0.0.0/0
2 www 80 0.0.0.0/0
3 ssh 65 0.0.0.0/0
4 X www-ssl 443 0.0.0.0/0
[admin@MikroTik] ip service>
SSH Client
Command name: /system ssh
Property Description
port (integer; default: 22) - which TCP port to use for SSH connection to a remote host
user (text; default: admin) - username for the SSH login
Example
[admin@MikroTik] > /system ssh 192.168.0.1 user=pakalns port=22
admin@192.168.0.1's password:
MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
MikroTik RouterOS 2.9rc7 (c) 1999-2005 http://www.mikrotik.com/
Terminal unknown detected, using single line input mode
[admin@MikroTik] >
See you in the next lesson
Mr.Mohamed samir™
