7.2. Using SSH to Connect Directly to a Gateway

7.2.1. Prerequisites

7.2.2. SSH security configuration

SSH provides a secure, encrypted means of directly logging into a remote device. This section outlines the steps necessary to configure your account for SSH access to a Cascade Gateway.

Note

Only “developer” or “EvalKit” Cascade Gateways have SSH enabled as it is a handy tool when debugging an app. Production Gateways intended for live deployments do not have SSH enabled, to prevent unauthorized access in the field.

Note

During the Cascade Edge-as-a-Service evaluation period, Rigado is using the service “One Time Secret” to distribute SSH passwords. Future releases will utilize RSA public/private keys.

When Rigado provisions Cascade Gateways to your Edge Direct account, an SSH password is generated and shared through One Time Secret. This password is common to all gateways provisioned to your Edge Direct account.

You will receive an email with a one-time-use web address that will reveal the password.

Note

Be sure to check your junk or spam email folders. Should you not find the email, please contact Rigado through our support channel at support@rigado.com and we will re-send the password through One Time Secret.

7.2.3. Gateway Access

To SSH into the gateway, you need three pieces of information:

  1. The IP address, or serial number of the gateway if your computer has “multicast DNS” enabled. See Determining a Gateway’s IP Address for more detail.
  2. The username of the gateway is admin by default.
  3. The password, as described above.

Note

In order to SSH into the gateway, you will need to be on the same subnet as the gateway unless it is assigned a routable IP address.

For example, if the gateway’s IP address is 10.0.1.18:

$ ssh admin@10.0.1.18
admin@10.0.1.18's password:
Welcome to Ubuntu Core 16 (GNU/Linux 4.4.117+ armv7l)
 * Ubuntu Core:     https://www.ubuntu.com/core
 * Community:       https://forum.snapcraft.io
 * Snaps:           https://snapcraft.io

This Ubuntu Core machine is a tiny, transactional edition of Ubuntu,
designed for appliances, firmware and fixed-function VMs.

If all the software you care about is available as snaps, you are in
the right place. If not, you will be more comfortable with classic
deb-based Ubuntu Server or Desktop, where you can mix snaps with
traditional debs. It's a brave new world here in Ubuntu Core!

Please see 'snap --help' for app installation and updates.
admin@C031031821-00036:~$

The snap list command is useful to see exactly which apps and versions are loaded:

admin@C031031821-00036:~$ snap list
Name                   Version     Rev   Tracking  Developer         Notes
bluez                  5.47-1-dev  146   edge      canonical         -
cascade                16-0.17     28    stable    rigadobrandstore  gadget
cascade-configuration  10          7     stable    rigadobrandstore  -
cascade-kernel         4.4-18      23    stable    canonical         kernel
core                   16-2.32.8   4651  stable    canonical         core
modem-manager          1.6.12-2    129   stable    canonical         -
network-manager        1.2.2-15    265   stable    canonical         -
pivot-agent            0.8         31    stable    ce-partners       -
rigado-deviceops       1.0.15      50    stable    rigadobrandstore  -
rigado-edge-connect    1.0.4       13    stable    rigadobrandstore  -
rigado-fw-loader       0.1         1     stable    rigadobrandstore  -
rigado-network-config  1.0.0       39    stable    rigadobrandstore  -
wifi-ap                18          210   stable    canonical         -