110 lines
3.8 KiB
Markdown
110 lines
3.8 KiB
Markdown
---
|
||
created: 2024-01-19T13:12:25 (UTC -05:00)
|
||
tags: [Ubiquiti]
|
||
source: https://community.ui.com/questions/SSH-authorizedkeys-USG/f73c36ff-e01c-4ca1-9868-584f31cdb310
|
||
author:
|
||
---
|
||
|
||
- # SSH authorized_keys USG | Ubiquiti Community
|
||
|
||
> ## Excerpt
|
||
> can just, for the life of me not get this to work. I don't have a system json entry in my config.gateway.json... and when i try to add the section [and I add it correctly as JSON object] it just gets the USG stuck in provisioning mode when it tries to pull down...I have tried inserting the code with necessary trailing comma - at the start of the file [after opening bracket... but fails.
|
||
|
||
---
|
||
can just, for the life of me not get this to work. I don't have a system json entry in my config.gateway.json... and when i try to add the section \[and I add it correctly as JSON object\] it just gets the USG stuck in provisioning mode when it tries to pull down...I have tried inserting the code with necessary trailing comma - at the start of the file \[after opening bracket... but fails.
|
||
|
||
```
|
||
{
|
||
"firewall": {
|
||
"name": {
|
||
"WAN_LOCAL": {
|
||
"rule": {
|
||
"4": {
|
||
"action": "accept",
|
||
"description": "SSH to WAN",
|
||
"destination": {
|
||
"address": "*redacted*",
|
||
"port": "22"
|
||
},
|
||
"protocol": "tcp"
|
||
},
|
||
"50": {
|
||
"action": "accept",
|
||
"description": "Allow L2TP",
|
||
"destination": {
|
||
"port": "500,1701,4500"
|
||
},
|
||
"protocol": "udp"
|
||
},
|
||
"51": {
|
||
"action": "accept",
|
||
"description": "Allow ESP",
|
||
"protocol": "esp"
|
||
}
|
||
}
|
||
}
|
||
}
|
||
},
|
||
"vpn": {
|
||
"pptp": {
|
||
"remote-access": {
|
||
"authentication": {
|
||
"local-users": {
|
||
"username": {
|
||
"user1": {
|
||
"password": "*redacted*"
|
||
}
|
||
}
|
||
},
|
||
"mode": "local"
|
||
}
|
||
}
|
||
},
|
||
"ipsec": {
|
||
"auto-firewall-nat-exclude": "disable",
|
||
"ipsec-interfaces": {
|
||
"interface": [
|
||
"eth0"
|
||
]
|
||
},
|
||
"nat-networks": {
|
||
"allowed-network": {
|
||
"0.0.0.0/0": "''"
|
||
}
|
||
},
|
||
"nat-traversal": "enable"
|
||
},
|
||
"l2tp": {
|
||
"remote-access": {
|
||
"authentication": {
|
||
"local-users": {
|
||
"username": {
|
||
"user1": {
|
||
"password": "*redacted*"
|
||
}
|
||
}
|
||
},
|
||
"mode": "local"
|
||
},
|
||
"client-ip-pool": {
|
||
"start": "192.168.1.200",
|
||
"stop": "192.168.1.254"
|
||
},
|
||
"dhcp-interface": "eth0",
|
||
"dns-servers": {
|
||
"server-1": "8.8.8.8",
|
||
"server-2": "8.8.4.4"
|
||
},
|
||
"ipsec-settings": {
|
||
"authentication": {
|
||
"mode": "pre-shared-secret",
|
||
"pre-shared-secret": "*redacted*"
|
||
},
|
||
"ike-lifetime": "3600"
|
||
},
|
||
"mtu": "1492"
|
||
}
|
||
}
|
||
}
|
||
}
|
||
``` |