Find the perfect gift for the grad in your life with Graduation gifts that connects us from AT&T.
Need help with your equipment?
FamousNerdMan's profile

Contributor

 • 

1 Message

Wednesday, June 28th, 2017 4:20 AM

Cannot forward SSH (port 22) on Arris BGW210-700 gateway

I have a home server running SSH that I like to log in from externally, when I'm away from home. I have tried forwarding port 22 (listed as SSH Server) on the Firewall -> NAT/Gaming tab, but it seems this gateway is running its own SSH server. When I don't have the SSH port forwarding set up, it lets me connect to the built-in SSH server. I can't find any documentation on this built-in SSH server, and I also have looked through the entire UI looking for a way to disable it, to no avail. Even the Device -> Remote Access tab, which appears to be promising, uses a different port other than 22, and it's disabled by default. No matter what I do - even if I set up the port forwarding, any connection attempt to port 22 from the WAN side of the gateway will always connect to its own built-in SSH server rather than just forward the traffic to my server inside the LAN. Is there a way I can disable this behavior?

Community Support

 • 

232.1K Messages

7 years ago

I apologize. This is outside our scope of support. If you would like advanced support please contact our Connectech. You can do so by going here http://soc.att.com/2tsPskf

 

-ATTU-verseCare 

Tutor

 • 

4 Messages

6 years ago

I solved this issue by changing my Linux server to listen on port 2222:

 

1. As root vi /etc/ssh/sshd_config
2. Locate the following line:
# Port 22
3. Remove # and change 22 to your desired port number.
4. Restart the sshd service by running the following command:
service sshd restart

5.  Create a custom rule on the NAT/Gaming tab for port 2222 to route to your server

Contributor

 • 

3 Messages

6 years ago

I have the exact same problem. I have executed the steps here but I still can't initiate an ssh session from outside the network. Did you do something else not listed on the steps? 

Tutor

 • 

4 Messages

6 years ago

Run this command on your server to see if the port is changed , I  changed to 2222:

netstat -na | grep 2222
tcp 0 0 0.0.0.0:2222 0.0.0.0:* LISTEN 
tcp6 0 0 :::2222 :::* LISTEN 

 

On a computer on the same network try SSH to see if it works.

ssh -p 2222 user@host

 

If you can't connect from the outside network, check the router port forwarding settings see example pic:

http://jerryjjansen.com/wp-content/uploads/2015/01/ATT-ARRIS-1.jpg

 

where port should be 2222 and device your server IP. Hope that helps!

 

Contributor

 • 

3 Messages

6 years ago

I can ssh into the server if I'm on the local network. And I get this with the command:

tcp 0 0 0.0.0.0:2222 0.0.0.0:* LISTEN 
tcp 0 0 192.168.1.68:2222 192.168.1.70:34740 ESTABLISHED
tcp6 0 0 :::2222 :::* LISTEN 

So that is working correctly. 

 

On the router I have this configuration:

ModemConf.png

 

Do I need to restart the router or something?

1 Attachment

Tutor

 • 

4 Messages

6 years ago

Yes you can try restart the router doesn't hurt.

Contributor

 • 

3 Messages

6 years ago

I was able to make it work.

 

It turns out that the port forwarding is a 2-step process. Besides adding the custom service to the service list as shown in my previous post, I had to add the entry into the NAT/Gaming section and assign it to my server device.

 

NAT-Gaming.png

 

This 2-step process was not very clear for me but now I know this is how it is done.

 

I also enabled IPv6 on my ssh server along with the port change. I did this by adding the following below the port configuration to the /etc/ssh/sshd_config file:

 

AddressFamily any
ListenAddress 0.0.0.0
ListenAddress ::

Now I can access from outside my server.

 

Thanks for helping!

1 Attachment

New Member

 • 

1 Message

4 years ago

I know I'm late but:

I'm pretty sure AT&T router manufacturers use a linux distro that already forwards 22 for itself.

 

You can try connecting with PuTTY and instead of a timeout, you will get a connection refused.

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.