Ssh Tunneling Using Other Ssh Clients (E.g. Putty) - Tripp Lite B092-016 Owner's Manual

Chapter 6: Secure SSH Tunneling & SDT Connector

6.11 SSH Tunneling using other SSH clients (e.g. PuTTY)

As covered in the previous sections of this chapter we recommend you use the SDT Connector client software that is supplied
with the Console Server. However there's also a wide selection of commercial and free SSH client programs that can also
provide the secure SSH connections to the Console Servers and secure tunnels to connected devices:
• PuTTY is a complete (though not very user friendly:) freeware implementation of SSH for Win32 and UNIX platforms
• SSHTerm is a useful open source SSH communications package
• SSH Tectia is leading end-to-end commercial communications security solution for the enterprise
• Reflection for Secure IT (formerly F-Secure SSH) is another good commercial SSH-based security solution
By way of example the steps below show the establishment of an SSH tunneled connection to a network connected device
using the PuTTY client software.
• In the Session menu enter the IP address of the Console Server in the Host Name or IP address field
o For dial-in connections, this IP address will be the Local Address that you assigned to the Console Server when
you set it up as the Dial-In PPP Server
o For Internet (or local/VPN connections) connections this will be the public IP address of the Console Server
• Select the SSH Protocol, and the Port will be set as 22
• Go to the SSH: Tunnels menu and in Add new forwarded port enter any high unused port number for the Source port
e.g. 54321
• Set the Destination: IP details
o If your destination device is network connected to the Console Server and you are connecting using RDP , set the
Destination as <Managed Device IP address/DNS Name>:3389 e.g. if when setting up the Managed Device as
Network Host on the Console Server you specified its IP address to be 192.168.253.1 (or its DNS Name was
accounts.myco.intranet.com) then specify the Destination as 192.168.523.1:3389 (or accounts.myco.intranet.
com:3389). Only devices which have been configured as networked Hosts can be accessed using SSH tunneling
(except by the "root" user who can tunnel to any IP address the Console Server can route to.
109