SSH access to Sonicwall NSa 2650

julian1

Hi Community,

thanks for reading!

We are using a HA cluster of two NSa 2650 appliances in our branches. They are all centrally managed by a GMS installation but we also would like to use SSH to connect to the appliances directly. We have enabled SSH management on the X0 interface (LAN) but connect to the appliances from this zone by SSH. Neither to the virtual IP nor to one of the physical IPs of the appliances.

For the virtual IP Putty says "connection refused" immeadetly, for the physical IPs it says "Connection timed out" after some minutes.

There is also an access rule that allows SSH management from the LAN zone to the virtual and physical IPs.

Is there anything else that must be set?

Regards,

Julian

Arkwright

There needs to be an access rule that allows port 22 [or whatever port you're using] and have "Management" ticked. This is usually created automatically by enabling the management service on the interface.

BWC

Hi @julian1 you enabled ssh on the X0 Interface and checked "Allow Management on Primary/Secondary IPv4 Address" in the HA Monitoring Settings for X0? SSH Port is still 22 in the Appliance -> Base Settings?

I checked on a running HA cluster (NSA 4600) and this how it's done.

--Michael@BWC

julian1

https://community.sonicwall.com/technology-and-support/discussion/comment/12792#Comment_12792

@BWC Thanks, we already had this but there was the a tick missing in the access rule.