Reach SSH and control panels without publishing them broadly
Goal
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
Step-by-step
01
Prefer LAN access
If you administer only from home, do not forward management ports at all.
02
Use a VPN for remote admin
A VPN provides a private path back to the LAN without publishing each service separately.
03
Use SSH keys
Key-based authentication reduces password exposure and supports stronger policies.
04
Whitelist when possible
Restrict management services to known source networks.
05
Keep emergency access documented
Know how to recover locally if a firewall or VPN change locks you out.
Verify before moving on
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
Troubleshooting
If a command or screen differs from the lesson, stop and verify the version you are using before forcing a change.
What you learned
You now understand the purpose of this part of the system and have a concrete result you can verify before continuing to the next lesson.