Forum Discussion
f5beginner
Cirrostratus
CirrostratusSSH proxy not working
Hi All, I used this instructions: https://techdocs.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-12-1-0/13.html to configure ssh proxy, but with...
Your public key have to look like:
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCziS6yavPpFuRjLP9hzRiEBcVgLDynoWqNMuwCrOREkSiDqWqFRrydFCGy6Z1WwwJuDMIw5h3sIuqtOo78zd6pBabXpj0QLUyLtGx80Oe3vInpwxvG2/YX9KaGjofkasZJ+tOqoOe5QscnUYr7Iw6CEuo2dBVIZyL/o1IyTvDfL8+yXO4vPzadmL0gvV1F56feRVsCF0HUrhWwdrQ6CpIpX6acsY0HayrhOGPmVF4qRz7fLySHJ5XQz5IKXJRNHJEbXx2tiV1TuQlhz8gOMqMp2IiSqyKDcUTk2Oy0fPYkNAWPlifq7GplYkit85EL5UCgtHf595rqibOQJWFAAzHF
It have to be one long string, without any newlines. And without "email" at the end of the string.
If all correct you can try to find HostKey directives on your backend ssh server config and comment out all except the rsa, like this:
HostKey /etc/ssh/ssh_host_rsa_key
#HostKey /etc/ssh/ssh_host_ed25519_key
f5beginnerCirrostratus
CirrostratusHi boneyard,
I guess yes.
I started with this:
Proxying SSH traffic with an SSH Proxy profile - finished with 11 step.
Creating an SSH virtual server with SSH proxy security- finished with 8. step
Attaching an SSH proxy security profile to an existing virtual server- finsihed with 4. step.
Defining SSH proxy password or keyboard interactive authentication - finished with 9. step.
From backend server I use public key from root/.ssh/id_rsa.pub and copy it without email addres, which was on the end of text, to F5 Real Server Auth Public key.
Thank you