question

cesar avatar image
cesar asked

SSH to cerbo on Internet

Can I connect to cerbo gx using SSH through Internet or just ssh on LAN?

For remote access tried IP and port in remote support tunnel + root user and password but it doesn't work.

screenshot-20220802-004610-chrome.jpg

I'm doubting if it is possible remote ssh or just LAN ssh?

remote consoleconnection issuessh
2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

4 Answers
kevgermany avatar image
kevgermany answered ·

From an ex-it guy point of view, it should work on an internet connection from a putty terminal if your keys are set up correctly.

2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

kevgermany avatar image
kevgermany answered ·

@Cesar moved to modifications, better chance of a knowledgeable answer there.

2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

nickdb avatar image
nickdb answered ·

I wouldn't make the device directly internet facing, you would be opening yourself up to inquisitive members of the public and I doubt the cerbo is that "hardened".

That said, if you enable ssh, you can NAT from your router to the GX (most routers allow you to forward public traffic to a LAN device), dynamic DNS will make it easier to find if your WAN address is dynamically assigned.

As mentioned, if you can access it, so can anyone else.

You would be better off enabling a vpn on your router (or getting one that can) and access the cerbo securely, that way.

2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

johanndo avatar image
johanndo answered ·

There are many ways to access the device via ssh, with or without VRM.

In my opinion, the best you could do is, to have a secure VPN to your router, so you can connect over the Internet with your device like being on your LAN, this gives you access to all of your ressources, not just the Cerbo.


You could also use port forwarding of your router to your Cerbo IP and ssh port, eventually using dynamic DNS if you don't have a fixed ip address.


To access the Cerbo via VRM, remote support must be enabled and remote console on WAN too, never used this yet. You need shared keys for authentication.

2 comments
2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

cesar avatar image cesar commented ·
It seems the IP address and port showed in console is just for internal use of Victron. I couldn't access ssh using that information. VPN is a good idea, I will try that. Thanks.
1 Like 1 ·
nickdb avatar image nickdb ♦♦ cesar commented ·
Correct, that ip isn’t for us mortals.
1 Like 1 ·

Related Resources

Additional resources still need to be added for this topic

Click here for information about enabling SSH  

Remote Console on VRM - Troubleshooting