SSH Installation and Usage

Document revision 27-Feb-2001
This document applies to MikroTik RouterOS V2.3

Overview

The SSH feature can be used with various SSH Telnet clients to securely connect to and administrate the router.

The MikroTik RouterOS v2.3 supports:

SSH 1.3, 1.5, and 2.0 protocol standards
server functions for secure administration of the router
telnet session termination with 40 bit RSA SSH encryption is supported
secure ftp is not supported

The MikroTik RouterOS v2.3 has been tested with the following SSH telnet terminals:

PuTTY
Secure CRT
Most SSH compatible telnet clients

SSH Installation on the MikroTik RouterOS v2.3

The “ssh-2.3.0.npk”(less than 1MB) package for v2.3 is required. The package can be downloaded from MikroTik’s web page www.mikrotik.com . To install the package, please upload it to the router with ftp and reboot. No additional settings are required. You may check to see if the SSH package is installed with the command:

[mikrotik]> system package print

  # NAME                                             VERSION    BUILD UNINSTALL
  0 routing                                          2.2.3      5     no
  1 aironet                                          2.2.3      6     no
  2 wavelan                                          2.2.4      8     no
  3 system                                           2.2.4      15    no
  4 snmp                                             2.2.3      5     no
  5 option                                           2.2.4      7     no
  6 ppp                                              2.2.4      7     no
  7 pptp                                             2.2.3      5     no
  8 pppoe                                            2.2.3      5     no
  9 radiolan                                         2.2.4      6     no
 10 ssh                                              2.2.4      7     no
[mikrotik]>

Line 10 shows that the SSH package is installed.

Hardware resource usage

The uncompressed package will use approximately 1MB of additional Flash/HD IDE memory. A minimum amount of additional RAM is used. No hardware upgrades are suggested.

Suggested Windows Client Setup

PuTTY is a free Windows (all Windows) SSH client which needs no complex installation. It is one exe file which can be downloaded and run.

Download this program from the MikroTik utilities download page or http://www.chiark.greenend.org.uk/~sgtatham/putty.html (suggested for most recent program version).

Simple instructions:

·       After downloading, run the program,
·       set the connection type to SSH,
·       On the first connection to the router a Security Alert will notify that the server’s host is no in the registry. Answer “YES” to trust this server.
·       The normal router login will not be display. Instead, “login as:” and “name@xxx.xxx.xxx.xxx’s password:” will appear.

Suggested Unix/Linux Client Setup

No client installation is needed on all standard Linux distributions. The command: ssh –l [username] [router address] will initiate a connection

Additional Resources

Links for Windows client:

http://www.zip.com.au/~roca/ttssh.html
http://www.chiark.greenend.org.uk/~sgtatham/putty.html
http://www.massconfusion.com/ssh/
http://telneat.lipetsk.ru/
http://support.jgaa.com/?cmd=ShowArticle&ID=11
http://akson.sgh.waw.pl/~chopin/ssh/index_en.html
http://cs.mscd.edu/MSSH/index.html
http://www.networksimplicity.com/openssh/