It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen WAN

How to Grant SSH Support Access

  • Last updated on

In certain cases, you may have to grant SSH access to the Barracuda CloudGen WAN site appliance and/or the Barracuda CloudGen WAN gateway.

Before You Begin

  • The public IP address of the site must be directly reachable.
  • The Access Control list cannot be 0.0.0.0/0 and the maximum netmask can be up to a /30 network.
  • The access is granted for two hours and can be renewed for another two hours starting from the moment the access has been renewed.

(Optional) Step 1. Create an SSH Key

In certain cases, you might have to create an SSH key yourself. However, in most cases, you can also use the key provided by Barracuda Support.

  1. Download and install PuTTYgen from https://www.putty.org/.
  2. Open PuTTYgen.
  3. Click Generate.
    generate.png
  4. Move the mouse over the specified area to generate randomness.
    generate_move.png
  5. Save the public and the private key for future reference.
    save.png
  6. Click Save public key and save it on your computer. 
  7. Click Save private key and save it on your computer. 
  8. Copy the public key from the text box to your clipboard.
    example_key.png

    Copy only the highlighted part of the key as displayed in the picture above. Do not copy rsa-key-20210218.

Step 2. Grant Support SSH Access to a Site

Follow this step to grant support access to the site only. To grant access to both the site and the gateway, follow Step 2 and Step 3.

  1. Go to https://cloudgenwan.barracudanetworks.com/  and log in with your existing Barracuda Cloud Control account.
  2. At the top, select the virtual WAN where the site is connected to.
  3. Click SITES.
  4. Select the site you want to grant access to from the list of sites.
    sites.png
  5. The site menu opens. 
  6. Click SUPPORT ACCESS.
  7. The Support Access window opens. Specify values for the following:
    • Support ACL - Enter a comma-separated list of the networks you want to allow SSH access to the site/gateway. The Access Control list cannot be 0.0.0.0/0 and the maximum netmask can be up to a /30 network.
    • SSH Public Key - Enter the OpenSSH public key you want to allow SSH access to the site/gateway. 
      key_cgw.png
  8. Click SAVE .

SSH access is granted to site/gateway from the specified list of networks with the specified SSH public key. If you also want to grant SSH access to the gateway, continue with Step 3. If you want to grant SSH access for the site only, you are now finished.

Step 3. Grant Support SSH Access to a Gateway

To grant support access to a gateway, you must enable the configuration in Step 2 in addition to configuration of this Step 3.

  1. Go to https://cloudgenwan.barracudanetworks.com/  and log in with your existing Barracuda Cloud Control account.
  2. At the top, select the virtual WAN where the site is connected to.
  3. Click GATEWAYS.
  4. Click on the name of the gateway your site of Step 2 is connected to.
    gw1.png
  5. You are redirected to the managed app in Microsoft Azure. Log in with your Microsoft Azure credentials.
  6. The managed application blade opens.
  7. Click Support access.
    mapp.png
  8. The Support Access blade opens.
    • Support ACLEnter the same comma-separated list of the networks you entered in Step 2.
      sup_acl.png
  9. Click Review + submit.
  10. The Review + create blade opens.
    submit.png
  11. Click Submit.

Last updated on