Remote Access to OpenWrt (first ssh, then webinterface)

[lleachii]

@yaravawiba

What are your hTTPd settings?

I don't use SSL, my settings won't help.

@guidosarducci

Instead, for example, one can configure Single Packet Authorization using the OpenWrt fwknopd service, which can temporarily open your SSH port in a secure manner.

This is an excellent suggestion for those who can use it in their setup. I cannot, the port must be open per stasndard.

@slh

Just as an alternative suggestion, while I've used ssh tunnels in the past, I strongly recommend a full fledged VPN solution (e.g. strongswan, wireguard, OpenVPN, ...) these days - it's just much more convenient.

This is my recommendation. I use Wireguard myself. The SSH is not for regular use (although, it's a good poor-man's VPN when accessing my network from the office).

[jeff]

on either using a VPN ("road-warrior" setup, which is different than what many discuss on this board) or a ssh-tunneled remote-desktop or VNC connection as soon as you have multiple, services that you need to work with, especially when those services interact with each other.

[yaravawiba]

@jeff

on either using a VPN ("road-warrior" setup, which is different than what many discuss on this board) or a ssh-tunneled remote-desktop or VNC connection as soon as you have multiple, services that you need to work with, especially when those services interact with each other.

Hmm, so I can access both the router configuration and transmission on the router using VPN. Welpt, guess like I'm starting this configuration over from here: https://wiki.openwrt.org/doc/howto/openvpn-streamlined-server-setup

Thanks guys!