Hi,
Sorry for the late answer, I was in professionnal travel.
First to be sure the port 22 is well opened on my server I did Get-NetTCPConnection -LocalPort 22 from my server :
PS C:\Windows\System32> Get-NetTCPConnection -LocalPort 22
LocalAddress LocalPort RemoteAddress RemotePort State AppliedSetting OwningProcess
------------ --------- ------------- ---------- ----- -------------- -------------
:: 22 :: 0 Listen 5516
0.0.0.0 22 0.0.0.0 0 Listen 5516
PS C:\Windows\System32>
PS C:\Windows\System32>
Now nmap -a (Both server and client on my RE7000 AP). I use this confirguration for 2 years now, without problems, by this configuration I mean my server connected to my RE7000 and my clients connected everywhere.
WARNING: Could not import all necessary Npcap functions. You may need to upgrade to the latest version from https://npcap.com. Resorting to connect() mode -- Nmap may not function completely
Starting Nmap 7.98 ( https://nmap.org ) at 2025-10-26 12:22 +0100
NSE: Loaded 158 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 12:22
Completed NSE at 12:22, 0.00s elapsed
Initiating NSE at 12:22
Completed NSE at 12:22, 0.00s elapsed
Initiating NSE at 12:22
Completed NSE at 12:22, 0.00s elapsed
Initiating Ping Scan at 12:22
Scanning 192.168.1.100 [2 ports]
Completed Ping Scan at 12:22, 0.02s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 12:22
Completed Parallel DNS resolution of 1 host. at 12:22, 0.01s elapsed
Initiating Connect Scan at 12:22
Scanning serveur-nas-3.home (192.168.1.100) [1000 ports]
Discovered open port 445/tcp on 192.168.1.100
Discovered open port 135/tcp on 192.168.1.100
Discovered open port 443/tcp on 192.168.1.100
Discovered open port 21/tcp on 192.168.1.100
Discovered open port 1723/tcp on 192.168.1.100
Discovered open port 139/tcp on 192.168.1.100
Discovered open port 3389/tcp on 192.168.1.100
Discovered open port 8080/tcp on 192.168.1.100
Discovered open port 22/tcp on 192.168.1.100
Discovered open port 2179/tcp on 192.168.1.100
Discovered open port 992/tcp on 192.168.1.100
Discovered open port 5555/tcp on 192.168.1.100
Discovered open port 5357/tcp on 192.168.1.100
Discovered open port 5985/tcp on 192.168.1.100
Discovered open port 8200/tcp on 192.168.1.100
Completed Connect Scan at 12:23, 35.06s elapsed (1000 total ports)
Initiating Service scan at 12:23
I use my server as remote disk, using SFTP, so as SFTP is based on SSH, and use port 22, I can confirme my server has port 22 opened, server firewall well configured. I use my server for 2 years now without any problems.
here is the returns of commands using SSH with (both server and client on the OpenWRT AP) :
root@OpenWrt:~# ubus call system board
{
"kernel": "6.6.93",
"hostname": "OpenWrt",
"system": "ARMv8 Processor rev 4",
"model": "Bananapi BPI-R3",
"board_name": "bananapi,bpi-r3",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "24.10.2",
"revision": "r28739-d9340319c6",
"target": "mediatek/filogic",
"description": "OpenWrt 24.10.2 r28739-d9340319c6",
"builddate": "1750711236"
}
}
root@OpenWrt:~# cat /etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd08:2b23:34e5::/48'
option packet_steering '1'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan1'
list ports 'lan2'
list ports 'lan3'
list ports 'lan4'
list ports 'sfp2'
config interface 'lan'
option device 'br-lan'
option proto 'dhcp'
config device
option name 'br-wan'
option type 'bridge'
list ports 'eth1'
list ports 'wan'
config device
option name 'eth1'
option macaddr '72:6e:76:35:3f:ac'
config device
option name 'wan'
option macaddr '72:6e:76:35:3f:ac'
config interface 'Adminitration'
option proto 'static'
option device 'wan'
option ipaddr '192.168.2.1'
option netmask '255.255.255.0'
option gateway '192.168.1.1'
root@OpenWrt:~# cat /etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option path 'platform/soc/18000000.wifi'
option band '2g'
option channel 'auto'
option htmode 'HT20'
option cell_density '0'
config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'OpenWrt'
option encryption 'none'
config wifi-device 'radio1'
option type 'mac80211'
option path 'platform/soc/18000000.wifi+1'
option band '5g'
option channel 'auto'
option htmode 'VHT80'
option cell_density '0'
config wifi-iface 'default_radio1'
option device 'radio1'
option network 'lan'
option mode 'ap'
option ssid 'OpenWrt'
option encryption 'none'
root@OpenWrt:~# cat /etc/config/dhcp
config dnsmasq
option domainneeded '1'
option boguspriv '1'
option filterwin2k '0'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option nonegcache '0'
option cachesize '1000'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option nonwildcard '1'
option localservice '1'
option ednspacket_max '1232'
option filter_aaaa '0'
option filter_a '0'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option dhcpv6 'hybrid'
option ra 'hybrid'
list ra_flags 'managed-config'
list ra_flags 'other-config'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
config dhcp 'Adminitration'
option interface 'Adminitration'
option start '100'
option limit '150'
option leasetime '12h'
option force '1'
root@OpenWrt:~# cat /etc/config/firewall
config defaults
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'
root@OpenWrt:~#
nmap -a (both server and client on the OpenWRT AP) :
WARNING: Could not import all necessary Npcap functions. You may need to upgrade to the latest version from https://npcap.com. Resorting to connect() mode -- Nmap may not function completely
Starting Nmap 7.98 ( https://nmap.org ) at 2025-10-26 12:17 +0100
NSE: Loaded 158 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 12:17
Completed NSE at 12:17, 0.00s elapsed
Initiating NSE at 12:17
Completed NSE at 12:17, 0.00s elapsed
Initiating NSE at 12:17
Completed NSE at 12:17, 0.00s elapsed
Initiating Ping Scan at 12:17
Scanning 192.168.1.100 [2 ports]
Completed Ping Scan at 12:17, 0.00s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 12:17
Completed Parallel DNS resolution of 1 host. at 12:17, 0.00s elapsed
Initiating Connect Scan at 12:17
Scanning serveur-nas-3.home (192.168.1.100) [1000 ports]
Discovered open port 8080/tcp on 192.168.1.100
Discovered open port 443/tcp on 192.168.1.100
Discovered open port 139/tcp on 192.168.1.100
Discovered open port 21/tcp on 192.168.1.100
Discovered open port 3389/tcp on 192.168.1.100
Discovered open port 445/tcp on 192.168.1.100
Discovered open port 1723/tcp on 192.168.1.100
Discovered open port 135/tcp on 192.168.1.100
Discovered open port 5985/tcp on 192.168.1.100
Discovered open port 2179/tcp on 192.168.1.100
Discovered open port 5555/tcp on 192.168.1.100
Discovered open port 992/tcp on 192.168.1.100
Discovered open port 8200/tcp on 192.168.1.100
Completed Connect Scan at 12:17, 35.05s elapsed (1000 total ports)
Initiating Service scan at 12:17
According to it port 22 is not opened in the server.
All devices are in the same sub-network.
