首页 > 代码库 > 堡垒机-跳板

堡垒机-跳板

2024-08-06 01:01:29   220人阅读

1.生成密钥对（需要多少对，生成几次）

1 ssh-keygen -q -t rsa -N "" -f  /root/.ssh/id_rsa

2.堡垒机配置

 1 1.编写脚本控制堡垒机工作模式： 2 #!/bin/bash 3  4 stty intr undef 5 echo "" 6 echo "" 7 echo -e "q for QUIT\t\texit for QUIT" 8 echo "" 9 10 11 usage () {12         echo "Error, Please Input Again. "13         chkip14 }15 exit() {16         exit 017         trap "bye bye!" 1118 }19 20 chkip () {21         read -p "Please Enter A Remote IP:" IP22         [ "$IP" == "exit" ]|| [ "$IP" == "q" ] && exit23         echo -e "$IP" | grep -q ‘[^0-9.]‘ && usage24         [ "$IP" == "" ] && usage25         [ $(echo -e "${IP//./\n}" | wc -l) -ne 4 ] && usage26         for i in ${IP//./ } ; do27                 [ $((i/8)) -lt 32 ] || usage28         done29 }30 31 chkip32         echo "ssh to $IP"33         ssh -p port root@$IP34 35 stty intr ^c36 37 cleans() {38         echo "user cancelled, exit... "39 }40 41 trap "{ cleans;  }" 1 2 3 6 9 1542 43 44 45 2.在堡垒机所在用户下添加环境变量，使其登陆后直接执行上述脚本46 47 vim /home/mc-ops/.bash_profile    #添加如下内容48 49 export PATH50 sh ~/“上述脚本名字”51 echo "Good Bye!"52 logout53 54 55 3.把生成的密钥对拷贝到堡垒机所在用户的.ssh 目录公钥更名为authorized_keys

3.服务器端限制只允许堡垒机IP登录

1 echo "sshd:堡垒机IP地址" >> /etc/hosts.allow2 echo "sshd:all" >> /etc/hosts.deny

 效果图示：

堡垒机-跳板


联系
我们