It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda SecureEdge

How to Grant SSH Support Access

  • Last updated on

In certain cases, you may have to grant SSH access to the Barracuda SecureEdge site appliance and/or the edge service.

Before You Begin

  • The public IP address of the site must be directly reachable.
  • The Access Control list cannot be 0.0.0.0/0 and the maximum netmask can be up to a /30 network.
  • The access is granted for two hours and can be renewed for another two hours starting from the moment the access has been renewed.

(Optional) Step 1. Create an SSH Key

In certain cases, you might have to create an SSH key yourself. However, in most cases, you can also use the key provided by Barracuda Networks Support.

  1. Download and install PuTTYgen from https://www.putty.org/.
  2. Open PuTTYgen.
  3. Click Generate.
    generate.png
  4. Move the mouse over the specified area to generate randomness.
    generate_move.png
  5. Save the public and the private key for future reference.
    save.png
  6. Click Save public key and save it on your computer. 
  7. Click Save private key and save it on your computer. 
  8. Copy the public key from the text box to your clipboard.
    example_key.png

    Copy only the highlighted part of the key as displayed in the picture above. Do not copy rsa-key-20210218.

Step 2. Grant Support SSH Access to a Site

Follow this step to grant support access to the site only. To grant access to both the site and the edge service, follow Step 2 and Step 3.

  1. Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.

  2. In the left menu, click the Tenants/Workspaces icon.
  3. From the drop-down menu, select the workspace containing your site.
    Workspace-Testing.png
  4. Go to Infrastructure > Sites.
  5. Select the site you want to grant access to from the list of sites.
    site-page.png
  6. The site menu opens. 
  7. In the top-right corner of the window, click Support Access.
     support access.png
  8. The Support Access window opens. Specify values for the following:
    • Support ACL – Enter a comma-separated list of the networks you want to allow SSH access to the site. The Access Control list cannot be 0.0.0.0/0 and the maximum netmask can be up to a /30 network.
    • SSH Public Key – Enter the OpenSSH public key you want to allow SSH access to the site. 
      support_key.png
  9. Click Save.

SSH access is granted to site from the specified list of networks with the specified SSH public key. If you also want to grant SSH access to the edge service, continue with Step 3. If you want to grant SSH access for the site only, you are now finished.

Step 3. Grant Support SSH Access to an Edge Service in Microsoft Azure

To grant support access to an Azure edge service, you must enable the configuration in this step and in Step 4. To grant support access to an on-premises edge service, go to Step 4. 

  1. Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.

  2. In the left menu, click the Tenants/Workspaces icon.
  3. From the drop-down menu, select the workspace containing your site.
  4. Go to Infrastructure > Edge Services.
  5. Select the edge service your site of Step 2 is connected to.
  6. You are redirected to the managed app in Microsoft Azure. Log in with your Microsoft Azure credentials.
  7. The managed application blade opens.
  8. Click Support access.
    AZ-ManApp.png
  9. The Support Access blade opens. In the Support ACL field, enter the same comma-separated list of the networks you entered in Step 2.
    sup_acl.png
  10. Click Review + submit.
  11. The Review + create blade opens. Click Submit.
    submit_90.png

Step 4. Grant Support SSH Access in the SecureEdge Service

Note: To grant support access to an Azure edge service, you must first perform Step 3. To grant support access to an on-premises edge service, Step 3 is not required.

  1. Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.

  2. In the left menu, click the Tenants/Workspaces icon.
  3. From the drop-down menu, select the workspace containing your site.
  4. In the left menu, click the Infrastructure icon, and select Edge Services.
    inf_es.png
  5. Select the edge service you want to grant access to from the list of edge services.
  6. The edge service menu opens. 
  7. In the top-right corner, click Support Access. The Support Access window opens.
  8. Specify values for the following:
    • Support ACL – Enter a comma-separated list of the networks you want to allow SSH access to the edge service. The Access Control list cannot be 0.0.0.0/0 and the maximum netmask can be up to a /30 network.
    • SSH Public Key – Enter the OpenSSH public key you want to allow SSH access to the edge service. 
      support_key.png
  9. Click Save.

SSH access is granted to the edge service from the specified list of networks with the specified SSH public key.