Digi WAN 3G User Manual page 139

Upload an SSH public key
SSH can be configured to log into to servers without having to provide a password. This is called
"public key authentication" and is more secure than using a normal password.
You generate a public/private key using a program called ssh-keygen, and store a copy of the
public key on the server(s) that you wish to use for authentication. When you attempt to log in, the
server sends you a message encrypted with your public key. Your machine decrypts it and sends
back the original message, proving your identity.
To upload an SSH public key:
On the Main menu, click Security.
1
On the Security Configuration page, check the
2
check box.
Type or paste the SSH public key in the edit box.
3
Click Apply.
4
Depending on your mobile service provider, other users can access your Digi device device over
the Internet, through various network services enabled on your Digi device. To further secure the
Digi device, network services not necessary to the device, particularly non-secure or un-encrypted
network services such as Telnet, can be disabled. See "Network services settings" on page 64.
Use IP filtering
You can better restrict your device on the network by only allowing certain devices or networks to
connect. This is known as IP filtering or Access Control Lists (ACL). IP filtering configures a Digi
device to accept connections from specific and known IP addresses or networks only, and silently
drop other connections. Digi devices can be filtered on a single IP address or restricted as a group
of devices using a subnet mask that only allows specific networks to access to the device. IP
Filtering settings are a part of the Network configuration settings. See "IP filtering settings" on
page 70.
Important: Plan and review your IP filtering settings before applying them. Incorrect settings can
make the Digi device inaccessible from the network.
C o n f i g u r e D i g i d e v i c e s
Enable SSH public key authentication
1 3 9