Up and Running SSH Service - Part 1
0 likes139 views
The document outlines a webinar held by GLC Networks on SSH, discussing topics such as SSH application, implementation, and security protocols. It introduces the trainer, Achmad Mardiansyah, and highlights the company's expertise in networking and IT consulting. The agenda covers prerequisite knowledge, live practice, and invites participants to engage in a Q&A session.
Up and Running SSH Service - Part 1
- 1. www.glcnetworks.com UP and RUNNING SSH service GLC collaboration webinar, 9 nov 2021 Achmad Mardiansyah M. Taufik nurhuda 1 Source: wikipedia.com
- 2. www.glcnetworks.com Agenda ● Introduction ● Review prerequisite knowledge ● SSH application ● SSH implementation ● Q & A 2
- 4. www.glcnetworks.com What is GLC? ● Garda Lintas Cakrawala (www.glcnetworks.com) ● Based in Bandung, Indonesia ● Areas: Training, IT Consulting ● Certified partner for: Mikrotik, Ubiquity, Linux foundation ● Product: GLC radius manager ● Regular event 4
- 5. www.glcnetworks.com Trainer Introduction ● Name: Achmad Mardiansyah ● Base: bandung, Indonesia ● Linux user since 1999, mikrotik user since 2007, UBNT 2011 ● Mikrotik Certified Trainer (MTCNA/RE/WE/UME/INE/TCE/IPv6) ● Mikrotik/Linux Certified Consultant ● Website contributor: achmadjournal.com, mikrotik.tips, asysadmin.tips ● More info: http://au.linkedin.com/in/achmadmardiansyah 5
- 6. www.glcnetworks.com Past experience 6 ● 2021 (Congo DRC, Malaysia): network support, radius/billing integration ● 2020 (Congo DRC, Malaysia): IOT integration, network automation ● 2019, Congo (DRC): build a wireless ISP from ground-up ● 2018, Malaysia: network revamp, develop billing solution and integration, setup dynamic routing ● 2017, Libya (north africa): remote wireless migration for a new Wireless ISP ● 2016, United Kingdom: workshop for wireless ISP, migrating a bridged to routed network
- 7. www.glcnetworks.com About GLC webinar? ● First webinar: january 1, 2010 (title: tahun baru bersama solaris - new year with solaris OS) ● As a sharing event with various topics: linux, networking, wireless, database, programming, etc ● Regular schedule ● Irregular schedule: as needed ● Checking schedule: http://www.glcnetworks.com/schedule ● You are invited to be a presenter ○ No need to be an expert ○ This is a forum for sharing: knowledge, experiences, information 7
- 8. www.glcnetworks.com Please introduce yourself ● Your name ● Your company/university? ● Your networking experience? ● Your general experience? ● Your expectation from this course? 8
- 9. www.glcnetworks.com Prerequisite ● This presentation some prerequisite knowledge ● We assume you already know: ○ Networking in general ○ Computer network 9
- 11. www.glcnetworks.com 7 OSI layer & protocol 11 ● OSI layer Is a conceptual model from ISO (International Standard Organization) for project OSI (Open System Interconnection) ● When you send a message with a courier, you need to add more info to get your message arrived at the destination (This process is called encapsulation) ● What is protocol ○ Is a set of rules for communication ○ Available on each layer ● Communication consist of series encapsulation ○ SDU: service data unit (before PDU) ○ PDU: protocol data unit (after header is added)
- 12. www.glcnetworks.com Layered model (TCP/IP vs ISO) and encapsulation 12 / datagram
- 13. www.glcnetworks.com Layer 4 header (which one is TCP?) 13
- 14. www.glcnetworks.com Layer 3 header (which one is IPv4?) 14
- 15. www.glcnetworks.com Ethernet header (which is the MTU?) 15
- 17. www.glcnetworks.com Did you notice? ● There is a big overhead on encapsulation process ● More encapsulation means less payload? 17
- 18. www.glcnetworks.com Layers in internet communication 18 Source: APNIC
- 20. www.glcnetworks.com General Security Aspects (CIA) ● Confidentiality. prevents unauthorized use or disclosure of information ● Integrity. safeguards the accuracy and completeness of information ● Availability. authorized users have reliable and timely access to information 20
- 21. www.glcnetworks.com AAA security • Authentication: only registered user can access – What you know: username and password – What you have: token, sms – What you are: retina scan, fingerprint • Authorization: define rights of a user – Access control – Data access control – Restriction – Type of Service • Accounting: recording of what user is doing (useful for billing/reporting) – Traffic volume – Online time – Session – Log: login, logout Mainly implemented using radius www.glcnetworks.com 21
- 22. www.glcnetworks.com Goals of Information Security (CIA) ● Confidentiality. prevents unauthorized use or disclosure of information ● Integrity. safeguards the accuracy and completeness of information ● Availability. authorized users have reliable and timely access to information 22
- 23. www.glcnetworks.com Security mechanism… Source: william stalling, network security essentials
- 24. www.glcnetworks.com Cryptography - encryption ● practice and study of techniques for secure communication in the presence of third parties. ● cryptography is about constructing and analyzing protocols that prevent third parties or the public from reading private messages ● General implementation: ○ Start with asymmetric encryption, to transfer shared-key ○ Switch to symmetric encryption 24 Source: medium/com/hackernoon
- 26. www.glcnetworks.com A bit of history, accessing remote nodes... Remote access protocols ● Command line interface: ○ Lighter, faster ○ Less bandwidth ○ Example: ■ Telnet ■ Rsh (remote shell) ○ Issue: no security (plain text) → alternatives : SSH ● GUI ○ Require higher bandwidth ○ slower ○ Example: ■ VNC ■ Remote desktop 26
- 27. www.glcnetworks.com SSH ● An alternative of insecure protocol (telnet, rsh) ● Open standard: RFC 4250 ● Security feature: ○ Asymmetric encryption for initial connection ○ Symmetric encryption for data exchange ○ Authentication: ■ key-based authentication ■ password-based authentication ● Implementation: ○ Openssh (openbsd community) ○ Solaris SSH ○ Other ssh ○ 27
- 29. www.glcnetworks.com preparation ● SSH client ● SSH parameters ○ SSH address ○ SSH port ○ SSH username ○ SSH password 29
- 31. www.glcnetworks.com Interested? Just come to our training... ● Topics are arranged in systematic and logical way ● You will learn from experienced teacher ● Not only learn the materials, but also sharing experiences, best-practices, and networking 31
- 32. www.glcnetworks.com End of slides ● Thank you for your attention ● Please submit your feedback: http://bit.ly/glcfeedback ● Find our further event on our website : https://www.glcnetworks.com/en/ ● Like our facebook page: https://www.facebook.com/glcnetworks ● Slide: https://www.slideshare.net/glcnetworks/ ● Discord (bahasa indonesia): (https://discord.gg/6MZ3KUHHBX) ● Recording (youtube): https://www.youtube.com/c/GLCNetworks ● Stay tune with our schedule ● Any questions? 32