SC-Wiki24

The SSH server is not installed by default on Ubuntu desktop systems but it can be easily installed from the standard Ubuntu repositories.

To install and enable SSH on your Ubuntu system complete the following steps:

1 Open your terminal either by using the Ctrl+Alt+T keyboard shortcut or by clicking on the terminal icon and install the openssh-server package by typing:

   sudo apt update
   sudo apt install openssh-server

Enter the password when prompted and enter Y to continue with the installation.



2 Once the installation is completed, the SSH service will start automatically. To verify that the installation was successful and SSH service is running type the following command which will print the SSH server status:

   sudo systemctl status ssh

You should see something like

   Active: active (running) :

Press q to get back to the command line prompt.

3 Ubuntu comes with a firewall configuration tool called UFW. If the firewall is enabled on your system, make sure to open the SSH port:

   sudo ufw allow ssh

Now that SSH is installed and running on your Ubuntu system you can connect to it via SSH from any remote machine. Linux and macOS systems have SSH clients installed by default. If you want to connect from a Windows machine then you can use an SSH client such as PuTTY.

To connect to your Ubuntu machine over the Internet you will need to know your public IP Address and to configure your router to accept data on port 22 and send it to the Ubuntu machine where the SSH is running.

To connect to your Ubuntu machine over LAN you only need to enter the following command:

   ssh username@ip_address

   Change the **username** with the actual user name and **ip_address** with the IP Address of the Ubuntu machine where you installed SSH.

If you don’t know your IP address you can easily find it using the ip command:

   ip a

As you can see from the output, the system IP address is 192.168.121.111
Once you’ve found the IP address, login to remote machine by running the following ssh command:

   ssh linuxize@192.168.121.111

When you connect through SSH for the first time, you will see a message looking something like this:

   The authenticity of host '192.168.121.111 (192.168.121.111)' can't be established.
   ECDSA key fingerprint is SHA256:Vybt22mVXuNuB5unE++yowF7lgA/9/2bLSiO3qmYWBY.
   Are you sure you want to continue connecting (yes/no)?

Type yes and you’ll be prompted to enter your password.

   Warning: Permanently added '192.168.121.111' (ECDSA) to the list of known hosts.
   linuxize@192.168.121.111's password:

Once you enter the password you will be greeted with a message similar to the one below.

To connect to your Ubuntu machine over the Internet you will need to know your public IP Address and to configure your router to accept data on port 22 and send it to the Ubuntu machine where the SSH is running.
To determine the public IP address of the machine you’re trying to SSH to, simply visit the following URL:

   [[https://ifconfig.co/ip|https://ifconfig.co/ip]]

When it comes to setting up port forwarding each router has a different way to setup port forwarding. You should consult your router documentation about how to set up port forwarding. In short, you need to enter the port number where requests will be made (Default SSH port is 22) and the private IP address you found earlier (using the ip a command) of the machine where the SSH is running.

Once you’ve found the IP address, and configured your router you can log in by typing:

   ssh username@public_ip_address

If you are exposing your machine to the Internet it is a good idea to implement some security measures. The most basic one is to configure your router to accept SSH traffic on a non-standard port and to forward it to port 22 on the machine running the SSH service.

You can also set up an SSH key-based authentication and connect to your Ubuntu machine without entering a password

If for some reason you want to disable SSH on your Ubuntu machine you can simply stop the SSH service by running:

   sudo systemctl stop ssh

To start it again run:

   sudo systemctl start ssh

To disable the SSH service to start during system boot run:

   sudo systemctl disable ssh

To enable it again type:

   sudo systemctl enable ssh