OPNsense Forum

Archive => 20.7 Legacy Series => Topic started by: forgotmytowel on September 11, 2020, 05:45:51 PM

Title: Enabled ssh / can't ssh
Post by: forgotmytowel on September 11, 2020, 05:45:51 PM
Hi all,

I'm newer to OPNSense and pulling my hair out on something.

I enabled ssh yesterday to login from my local LAN to do a speed test directly from the CLI.  I'm having speed issues and am trying to gather data to utilize in my negotiations with my ISP. 

When I pull up putty and try to connect, it just times out.  This morning, I occasionally (probably 1 out of 5 attempts) get a "connection was closed by 192.168.1.1" message instead. 

How do I start looking at this?  To my knowledge, I have enabled ssh as specified (checked password auth and listen on all interfaces -- this is to be temporary). There are no firewall rules I can see out of the norm that might be blocking such action.  When I look at the logs, I see a pass from the anti-lockout rule, but no blocks.

I reinstalled ssh on opnsense, still same issues.

I would be very grateful for any assistance anyone could provide on this one!
Title: Re: Enabled ssh / can't ssh
Post by: Fright on September 11, 2020, 07:05:47 PM
shoud work
is openssh running?
is port probe (interfaces-diagnostics) shows remote text on "lanip":22?
Title: Re: Enabled ssh / can't ssh
Post by: forgotmytowel on September 12, 2020, 01:59:39 AM
I thought so too.

And yes to both your questions.

The PC I am trying to access from is in the VPN alias group to have its traffic go out to VPN, but I have connected to my wifi network as well (not in VPN group) and the same happens.

I'm assuming it's a rule somewhere, but I'm not sure how to troubleshoot it.
Title: Re: Enabled ssh / can't ssh
Post by: chemlud on September 12, 2020, 08:15:54 AM
Don't do speed tests FROM the opnsense. Do it THROUGH the opnsense, i.e. from a client in your LAN... ;-)
Title: Re: Enabled ssh / can't ssh
Post by: Fright on September 12, 2020, 10:19:10 AM
hard to tell without knowing the network configuration and rules. can you open the web-GUI from the same computer?