- Lab
- A Cloud Guru
Managing SSH Settings
In this lab, we will look at how to manage SSH settings on a Linux host. We will change the default listening port of SSH on a Linux host. Then, we'll configure SSH restrictions on the host to only permit SSH from a specific subnet.
Path Info
Table of Contents
-
Challenge
Change the default SSH port 22 to port 22000.
- To change the default port of 22 to 22000 for SSH, we'll need to edit the
sshd_config
file with the following command:
sudo nano /etc/ssh/sshd_config
- Then, we'll need to edit one of the lines:
Uncomment "#Port 22" and replace 22 with 22000
- Now, we'll need to restart the SSH service:
sudo service sshd restart
- To change the default port of 22 to 22000 for SSH, we'll need to edit the
-
Challenge
Restrict SSH by Source IP using TCP Wrappers.
-
We will need to edit the
hosts.allow
andhosts.deny
files used by TCP Wrappers. Let's start with thehosts.deny
file:sudo nano /etc/hosts.deny
Add the line:
sshd : ALL
Then, save and exit the file.
-
Now we need to edit the
hosts.allow
file:sudo nano /etc/hosts.allow
Add the following line:
sshd : 10.0.0.0/24
Save and close the file.
-
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.