SSH RSA key for your router

[@ModestTim]

Would be really cool to see the ssh-copy-id command supported to copy a key to the router!

[@drumaddict89]

+1 for support for ecdsa (and maybe also ed25519) optional support for authenticator apps would be a KILLER feature out of the box! there could also be the possibility to "export" a QR code to the CLI (which ALSO could be used for WIREGUARD peers export - like on a normal shell)

[@MustaMT]

We do like this type of content. However, you guys by now know which product video I'm waiting for 😁 starts with wifi ends with 6e.. I hope these clues are good enough haha

[@hit-757]

Hi, do you plan to implement ecdsa and ed25519 in RouterOS7?

[@stormeporm]

That and OpenSSH FIDO devices so -sk keys

[@SiBex_ovh]

Suggestion: When U2F keys ? When 2FA in VPNs? When WinBox will use U2F/2FA and log connection to log.txt for easier reports ?

[@maigonis.elleris]

I would liek to see videos on automation, like Ansible for example.

[@alexkota9318]

i am add ssh-keygen esxi to ssh key mikrotik and can,t open ssh esxi in mikrotik new terminal can you help me ?

[@viniciusstucki]

Keep doing this great vídeos!!!

[@_Steven_S]

I don't remember it being that straightforward the last time I deployed my new key to v6. No trailing whitespace or newlines and a sacrifice to the Mikrotik gods IIRC.

[@sebastian.vargas]

Hi! Question, I load the ssh key but when I want to access the router via ssh it asks me for the password, I put the password and it enters but there will be some way to access without asking for the password

[@eromerog]

Me pasa igual, no doy con el problema

[@BrettStrydom]

doesnt seem to be the same today. When I run the commands, I get .pem files.

[@Anavllama]

Okay I use my windows PC to access routers via winbox. Would I use putty to generate key pairs for each MT device and if so, would I only have access to terminal view (CLI) or would I reach winbox??

[@diegocoirolo2249]

Which Linux distro are use in this video?

[@kirksteinklauber260]

very nice!!! thanks for this helpful video. Quick question: is it possible to enforce from a workstation to use a password and ssh key pair to have a kind of dual factor authentication? I mean to access the router is required to have both: the password and the ssh key in order to access it remotely (if any of these 2 conditions are not met, then the user shouldn't be able to access it). Pls advise. Thanks!!

[@RB01-lite]

For SSH it is not possible, but if you are accessing your device remotely it is highly advisable, you use a VPN, which can provide the security you are looking for. OpenVPN for example requires a certificate (same public-private key principles as RSA key) and additionally a password to connect.

[@j4c0r4m0s]

Howto keygen for mikrotik v6 in debian 12 ?

[@wreckedzilla]

noice! :p Dru best! never tried to copy winbox to winbox 😮 R1 and R2 identities would be 😎

[@drumaddict89]

WB to WB copy works well on windows and wine(linux) never got it running smoothly on macos though.

[@HadiSedqi]

Thanks, how can i login from winbox to ubuntu server by this way? Do you have a learn for this?

[@mikrotik]

You are probably better off logging in directly into your server, but you can do it through your router too. Just look into SSH keys for ubuntu.

[@JasonsLabVideos]

Good content !

[@jeyssongome992]

Deben tener un programa q sean compatibles las ips de los router de casa con los acces point ip estatica estoy a pronto de comprarles una ap clientes. 30 dbi, y probar si deja la intermitencia q tengo no migren toda vidad a 5ghz y dejen mas pmt .. 2 ghz

[@stevebot]

Littering your private key file all over your devices is not good form and does not scale for management. How about adding agent forwarding as an option? Another nice security feature would be something akin to sudo or Cisco's enable command. Root login directly from the network is another poor security item.

[@RB01-lite]

Private key is only held on one device, public key can be safely shared.

[@nageebka2013]

نحن نتحدث العربية نحتاج شرح عربي تكرما ملايين يستخدمون مايكروتك

[@mohammedkhalil655]

تعلم انكليزي

[@nativeme2143]

Unfortunatly useless for me. :( My company uses more secure ed25519 which Mikrotik doesn't support .

[@tcpipdotcom]

RouterOS 7.7 -> ssh - added support for Ed25519 key exchange;

[@tcpipdotcom]

Ok, my bad... This is about ed25519 key exchange., but no way to set up as a user or host key :(

[@braveheartingux]

Done exactly like in video but still asking for a password for the both way ssh access !!!! ROS 7.16.1 Only happens when want two way ssh access from two routers EDIT. Issue occurs when both routers have same ssh users , if different , then all good. Problem lies that you can not import second router ssh user which not exists in the first router and vice versa,. Workaround is to create both users in both routers, and then disable one which not needed in each router