topic Re: Possible to store foreign ssh key on the firewall (for key-based scp transfer)? in General Topics

Possible to store foreign ssh key on the firewall (for key-based scp transfer)?

dsegel — Thu, 18 Aug 2016 15:44:54 GMT

I want to be able to use scp from the firewall to transfer a config file to a remote server without entering a password. So I need to store the remote user's public ssh key in the equivalent of an authorized_keys file on the firewall. Is this possible?

What I'm trying to do is schedule an automatic pull of the running-config.xml down to a server. I want to do this like this:

ssh 10.2.1.254 scp export configuration to isg@sauron.shs.ucd:. from running-config.xml

10.2.1.254 is my firewall. I have the key set up in the other direction so the ssh command goes through without a password, but the reverse direction (the scp command) doesn't work without a password.

Re: Possible to store foreign ssh key on the firewall (for key-based scp transfer)?

BPry — Thu, 18 Aug 2016 21:15:58 GMT

Wouldn't this be easier to accomplish under a API script that is set to execute at a determined time. This is what I'm doing for our equipment.

Re: Possible to store foreign ssh key on the firewall (for key-based scp transfer)?

dsegel — Thu, 18 Aug 2016 21:29:36 GMT

Yeah, that looks like what I want. I'm new to PAN and just didn't know how this kind of thing should be handled. I found a reference so I'm good to go.

Thanks.