{"componentChunkName":"component---src-templates-manual-template-tsx","path":"/manuals/client-user/44/tunneling.html","webpackCompilationHash":"d1750f6cc413894a8b5c","result":{"data":{"promoBlocks":{"edges":[{"node":{"contentful_id":"47glnSpWzXeFylv2vfQEF8","internal":{"type":"ContentfulPromotionBlock"},"title":{"internal":{"type":"ContentfulHeading"},"contentful_id":"7KIOfSfgwJnCXuvRN6CfrP","textContent":"Standing privileges are a risk with PAM","color":"black","size":"medium"},"subTitle":null,"content":{"nodeType":"document","internal":{"content":"{\"nodeType\":\"document\",\"data\":{},\"content\":[{\"nodeType\":\"paragraph\",\"content\":[{\"nodeType\":\"text\",\"value\":\"Start your journey towards a just-in-time (JIT) model with zero standing privileges (ZSP). Read 'Remove Standing Privileges Through a Just-In-Time PAM Approach' by Gartner , courtesy of SSH.COM.\\n \\n\",\"marks\":[],\"data\":{}}],\"data\":{}}]}"}},"callToAction":{"internal":{"type":"ContentfulButton"},"contentful_id":"19EUesynV2Z7HHcuJk0BAS","content":"Download Gartner research","internalLink":null,"externalLink":"https://info.ssh.com/gartner_research_privileged_access_management","assetLink":null,"anchor":null},"picture":{"internal":{"type":"ContentfulAsset"},"contentful_id":"2ClylmBswcfDx4XdO7NTmL","title":"ICON Gartner ZSP","description":"","file":{"url":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png","contentType":"image/png"},"fluid":{"aspectRatio":1,"src":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=3000&q=50","srcSet":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=750&h=750&q=50 750w,\n//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=1500&h=1500&q=50 1500w,\n//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=1601&h=1601&q=50 1601w","sizes":"(max-width: 3000px) 100vw, 3000px"},"fixed":{"width":3000,"height":3000,"src":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=3000&q=50","srcSet":""}},"centered":true,"indentMainContent":null,"transparentBackground":null,"imageScale":70,"imagePadding":null,"name":"WIKI migration side promo block2","product":null,"funnel":null,"topic":null,"keywords":null,"type":null,"priority":null,"globalOverride":null}},{"node":{"contentful_id":"6dfNaA1UlY4bADKQk6awhs","internal":{"type":"ContentfulPromotionBlock"},"title":{"internal":{"type":"ContentfulHeading"},"contentful_id":"49Tb2wSR21P5C2cpcgMZ3","textContent":"Get Multi-cloud PAM software - for free!","color":"black","size":"medium"},"subTitle":null,"content":{"nodeType":"document","internal":{"content":"{\"data\":{},\"content\":[{\"data\":{},\"content\":[{\"data\":{},\"marks\":[],\"value\":\"PrivX® Free replaces your in-house jump hosts and combines your AWS, GCP and Azure access into one multi-cloud solution.\\n \\n\",\"nodeType\":\"text\"}],\"nodeType\":\"paragraph\"}],\"nodeType\":\"document\"}"}},"callToAction":{"internal":{"type":"ContentfulButton"},"contentful_id":"1dmQ13jyyZ46ID07eVNVFb","content":"PrivX Free","internalLink":null,"externalLink":"https://info.ssh.com/privx-free-access-management-software","assetLink":null,"anchor":null},"picture":{"internal":{"type":"ContentfulAsset"},"contentful_id":"4UUYdjING8micwZQur5o6d","title":"ICON computer (search)","description":"","file":{"url":"//images.ctfassets.net/0lvk5dbamxpi/4UUYdjING8micwZQur5o6d/1b378a0f4646075c7a4788f1afffbabe/ICON_computer__search_.svg","contentType":"image/svg+xml"},"fluid":{"aspectRatio":null,"src":null,"srcSet":null,"sizes":null},"fixed":{"width":null,"height":null,"src":null,"srcSet":null}},"centered":true,"indentMainContent":null,"transparentBackground":null,"imageScale":70,"imagePadding":null,"name":"WIKI migration side promo block1","product":null,"funnel":null,"topic":null,"keywords":null,"type":null,"priority":null,"globalOverride":null}}]}},"pageContext":{"isCreatedByStatefulCreatePages":false,"body":"
\n\n\n\n \n \n \n \n \n
\"SSH\n \n  \n \n \"\"
\n\n\n\n\n \n \n\n \n \n
\"\"\n \n \n \n \n
\"\"
\n
\n\n\n\n\"\"\n\n\n\n\n\n\n\"\" \n\n
\n
\n \n \n \n \n\n
\"\"\n \n \n \n \n \n\t\n\t\n\t
\n\n\n\n
\"Previous\"\n\"Next\"\n\"Up\"\n[Contents]\n[Index]\n
\n

\n
\n    About This Document>>
\n    Installing SSH Tectia Client >>
\n    Getting Started >>
\n    Configuring SSH Tectia Client >>
\n        Defining Profile Settings >>
\n            Defining Connection Settings
\n            Selecting Ciphers
\n            Selecting Authentication Methods
\n            Selecting Colors
\n            Defining Keyboard Settings
\n            Using Keymap Editor
\n            Tunneling Applications
\n            Defining File Transfer Settings
\n            Defining Favorites
\n        Defining Global Settings >>
\n        Editing the Configuration Files >>
\n        Using Command-Line Options
\n        Customizing the User Interface>>
\n    Connecting to a Remote Host Computer>>
\n    Transferring Files>>
\n    Tunneling Applications>>
\n    GUI Reference>>
\n    Troubleshooting >>
\n    Command-Line Tools >>
\n\n
\n\n

Tunneling Applications

\n\n

\n\n\n

\n\n\n\n\n

Tunneling, or port forwarding, is a way of forwarding otherwise unsecured TCP \ntraffic through an encrypted Secure Shell tunnel. You can secure for example \nPOP3, SMTP, and HTTP connections that would otherwise be unsecured. \n\n

Note: The client-server applications using the tunnel will carry out \ntheir own authentication procedures (if any) the same way they would without the \nencrypted tunnel.\n\n

For a more thorough explanation of tunneling, see SSH Tectia \nClient/Server Product Description. For practical tunneling \nexamples, see Sections How to Set Up Tunneling for E-Mail and How to Set Up Tunneling for FTP.\n\n

Tunneling settings are configured using the Tunneling page of \nthe Settings dialog. Any changed tunneling settings will take effect the \nnext time you log in. \n\n

\n
\n\"client-tunneling-page-27.gif\"\n\n
Figure : The Tunneling page of the Settings dialog
\n\n
\n
\n\n\n

The outgoing and incoming tunnel settings are configured using the \nOutgoing and Incoming tabs of the Tunneling page. \n\n

\n\n

Outgoing

\n\n

\n\n\n\n\n

\n\n\n

Outgoing tunnels protect TCP connections that your local computer \nforwards from a specified local port to the specified port on the remote \nhost computer you are connected to. \n\n

\n
\n\"client-tunneling-imap-28.gif\"\n\n
Figure : Tunneling an IMAP connection for secure e-mail
\n\n
\n
\n\n\n

It is also possible to forward the connection beyond the remote host \ncomputer. However, the connection is encrypted only between the client \n(local computer) and the Secure Shell server. See Figure \nForwarding to a third host. \n\n

\n\n
\n\"client-forwardingtoathirdhost-29.gif\"\n\n
Figure : Forwarding to a third host \n
\n\n\n\n
\n
\n\n\n

Click the Outgoing tab to edit outgoing tunnel definitions. \n\n

The following fields are used to define an outgoing tunnel. These values \ncan be edited by clicking Add or Edit on the Outgoing \npage of the Settings dialog.\n\n

    \n\n

    \n\n

  • Name

    The name of the tunnel definition. You can use this field to type in a \ndescriptive name that will help you to recognize this tunnel definition \nlater on.\n\n

    \n\n

  • Listen Port

    \n\n\n\n\n\n

    This is the number of the local port that the tunnel listens to, or captures.\n\n

    \n\n\n\n\n

    Note: The protocol or application that you wish to create the \ntunnel for may have a fixed port number (for example 143 for IMAP) that \nit needs to use to connect successfully. Other protocols or applications \nmay require an offset (for example 5900 for VNC) that you will have to \ntake into an account. \n\n

    \n\n

  • Destination Host

    This field defines the destination host for the port forwarding. The \ndefault value is localhost. \n\n

    Note: The value of localhost is resolved after the \nSecure Shell connection has been established, so here localhost \nrefers to the remote host computer you have connected to.\n\n

    \n\n

  • Destination Port

    \n\n\n\n

    The destination port defines the port that is used for the forwarded \nconnection on the destination host.\n\n

    \n\n

  • Allow Local Connections Only

    Leave a check mark in this box if you want to allow only local \nconnections to be made. This means that other computers will not be able \nto use the tunnel created by you. By default, only local connections are \nallowed. This is the right choice for most situations. You should \ncarefully consider the security implications if you decide to also allow \noutside connections.\n\n

    \n\n

  • Type

    Select the type of the tunnel from the drop-down list. Valid choices are \nTCP and FTP. \n\n

    \n\n\n\n\n\n

    \n\n\n\n

\n\n\n

\n\n

Incoming

\n\n

\n\n\n\n\n

\n\n\n

Incoming tunnels protect TCP connections that the remote host forwards \nfrom a specified remote port to the specified port on your local \ncomputer. Click the Incoming tab to edit incoming tunnel \ndefinitions. \n\n

\n
\n\"client-tunneling-http-30.gif\"\n\n
Figure : Redirecting the HTTP connection to a remote host port 8080 to your local computer port 80
\n\n
\n
\n\n\n

The following fields are used to define an incoming tunnel. These values \ncan be edited by clicking Add or Edit.\n\n

    \n\n

    \n\n

  • Name

    The name of the tunnel definition. You can use this field to type in a \ndescriptive name that will help you to recognize this tunnel definition \nlater on.\n\n

    \n\n

  • Listen Port

    \n\n\n\n\n

    The port that the tunnel listens to, or captures from the remote host \ncomputer. \n\n

    Note: Privileged ports (below 1024) can be forwarded only when \nlogging in with root privileges on the remote host computer.\n\n

    \n\n

  • Destination Host

    This field defines the destination host for the port forwarding. The \ndefault value is localhost.\n\n

    Note: Here localhost refers to your local computer. \nAlso note that if the connection from the remote host computer is \nforwarded beyond your local computer, that connection is unsecured.\n\n

    \n\n

  • Destination Port

    The destination port defines the port that is used for the forwarded \nconnection on the destination host.\n\n

    \n\n\n\n

    \n\n

  • Type

    Select the type of the tunnel from the drop-down list. Valid choices are \nTCP and FTP. \n\n

    \n\n\n\n\n\n

    \n\n\n\n

\n\n\n

\n\n

Configuring Tunnels

\n\n

The following buttons are available for configuring outgoing and incoming tunnels.\n\n

    \n\n

    \n\n

  • Add

    Click Add to add a tunnel definition. An Add New \nTunnel dialog opens, allowing you to define the name, type, listen \nport, destination host, and destination port for the port forwarding. \nWith outgoing tunnels you can also define whether you allow local \nconnections only.\n\n

    \n\n\n\n\n

    Note: If you are tunneling an FTP connection, you must set the \ntunnel type as FTP. \n\n

    \n\n\n\n\n\n\n\n\n

    If the Secure Shell server and the FTP server are located on separate host \ncomputers, FTP tunneling works only if FTP is set to run in passive mode. \nIf the Secure Shell server and the FTP server are located on the same \ncomputer, tunneling works regardless of whether FTP is running in passive \nor active mode.\n\n

    \n\n

  • Edit

    Select a tunnel definition from the list and click Edit to edit \na tunnel. An Edit Tunnel dialog opens, allowing you to edit the \nname, listen port, destination host, and destination port of the \noutgoing tunnel. With outgoing tunnels you can also define whether you \nallow local connections only.\n\n

    \n\n

  • Remove

    Select a tunnel definition from the list and click Remove to \nremove a tunnel. Note that the selected tunnel will be removed \nimmediately, with no confirmation dialog.\n\n

    \n\n\n\n

\n\n\n

\n\n

X11 Tunneling

\n\n

\n\n\n

\n\n\n\n\n\n\n

SSH Tectia Client can securely tunnel (forward) X11 graphic connections from the \nremote host computer to an X Windows server running on the local computer. \n\n

\n\n\n

Note: You must also be running an X emulator such as \neXceed or Reflection X in passive mode on the Windows \ncomputer for X11 tunneling to work. \n\n

To tunnel (forward) X11 traffic, do the following: \n\n

    \n\n
  1. Install an X server (X emulation) program on Windows \n(eXceed, Reflection X, or the like). \n\n\n
  2. Start SSH Tectia Client. \n\n\n
  3. Select the Edit -> Settings... -> Tunneling \noption and make sure that the Tunnel X11 connections \ncheck box is selected. \n\n\n
  4. Save your settings for SSH Tectia Client. \n\n\n
  5. Quit the client, start it again and log into the remote host. \n\n\n
  6. Start the X server (X emulation) program. \n\n\n
  7. To test the tunneling, run xterm or xclock from \nSSH Tectia Client. \n\n\n\n\n
\n\n\n

\n\n\n

\n\"Previous\"\n\"Next\"\n\"Up\"\n[Contents]\n[Index]\n

\n
\n[ Contact Information | Support | Feedback | SSH Home Page | SSH Products ]\n

\nCopyright © 2010 SSH Communications Security Corp.
\nThis software is protected by international copyright laws. All rights reserved.
\nCopyright Notice\n\n

\n\n\n\n 		\"\"
\n\n
\n\n\n\n
","head":"\nSSH: Tunneling Applications \n\n\n","url":"/manuals/client-user/44/tunneling.html"}}}