topic can you connect via ssh to a router to itself by passing by another ? in Network Security

can you connect via ssh to a router to itself by passing by another ?

lucadiasmadeira — Mon, 17 Jan 2022 09:31:52 GMT

I am trying to test if our ssh parameters are correct on our cisco routers, and my coworker tried something I'm not sure is working :

connect from router A to router B via ssh, and form there connect from router B to router A via ssh

A -ssh-> B -ssh-> A

is it possible ? I need to know since my coworker doesn't try any other way to test if our ssh parameters are correct.

Re: can you connect via ssh to a router to itself by passing by anothe

Marvin Rhoads — Mon, 17 Jan 2022 12:34:06 GMT

Sure it's possible.

As long as there are no ACLs on router A's vty lines that would prevent the incoming session from router B.

Re: can you connect via ssh to a router to itself by passing by anothe

Marius Gunnerud — Tue, 18 Jan 2022 15:50:40 GMT

Router A would initially see the IP you are trying to SSH to as directly connected, so you would need to setup VRFs on the router to separate the routing domains. That is if you want to force the traffic via another router.