How to Enable SSH on Ubuntu

- March 02, 2025

Introduction

Secure Shell (SSH) is a protocol that allows users to remotely access and manage their Ubuntu systems securely. Whether you're a system administrator or a developer, enabling SSH on Ubuntu is essential for remote server management, secure file transfers, and automation. In this guide, we will explore the step-by-step process to enable SSH on Ubuntu, configure it securely, and troubleshoot common issues.

Prerequisites

Before enabling SSH on Ubuntu, ensure you have:

A system running Ubuntu (20.04, 22.04, or later).
Sudo privileges to install and configure packages.
A stable internet connection.

Step 1: Installing OpenSSH Server

By default, Ubuntu does not come with an SSH server installed. To install OpenSSH Server, follow these steps:

Install SSH Server

sudo apt update
sudo apt install openssh-server -y

Verify Installation

After installation, verify if SSH is installed correctly:

sudo systemctl status ssh

If the service is active and running, SSH is successfully installed.

Step 2: Enabling and Starting SSH

To ensure SSH starts on boot, enable it using:

sudo systemctl enable ssh
sudo systemctl start ssh

To check if SSH is running, execute:

sudo systemctl status ssh

Step 3: Allow SSH Through the Firewall

Ubuntu's UFW (Uncomplicated Firewall) may block SSH connections. To allow SSH, run:

sudo ufw allow ssh
sudo ufw enable
sudo ufw status

Ensure SSH traffic is allowed in the firewall rules.

Step 4: Configuring SSH for Security

For enhanced security, modify the SSH configuration file:

sudo nano /etc/ssh/sshd_config

Key Security Configurations:

Change Default SSH Port (Avoid Port 22 to reduce brute-force attacks):
```
Port 2222
```
Disable Root Login:
```
PermitRootLogin no
```
Allow Only Specific Users:
```
AllowUsers your_username
```
Disable Password Authentication (Use SSH Keys Instead):
```
PasswordAuthentication no
```

Save and exit the file (CTRL+X, then Y, then ENTER). Restart SSH service:

sudo systemctl restart ssh

Step 5: Connecting to Ubuntu via SSH

Once SSH is enabled and configured, you can connect remotely:

ssh username@your_server_ip

If using a custom port:

ssh -p 2222 username@your_server_ip

Step 6: Setting Up SSH Key Authentication (Optional but Recommended)

SSH keys offer enhanced security compared to password authentication. To set up SSH key authentication:

Generate SSH Key on Client Machine

ssh-keygen -t rsa -b 4096

Save the key and copy it to the Ubuntu server:

ssh-copy-id username@your_server_ip

If ssh-copy-id is unavailable, manually copy the key:

cat ~/.ssh/id_rsa.pub | ssh username@your_server_ip 'mkdir -p ~/.ssh && cat >> ~/.ssh/authorized_keys'

Troubleshooting Common SSH Issues

SSH Connection Refused

Ensure SSH is installed and running: sudo systemctl status ssh
Check firewall rules: sudo ufw status
Confirm SSH is listening on the correct port: sudo netstat -tulpn | grep ssh

SSH Hangs on Connection

Verify correct IP and username.
Use verbose mode: ssh -v username@your_server_ip
Check /var/log/auth.log for SSH logs.

FAQ

1. How do I disable SSH access temporarily?

Run:

sudo systemctl stop ssh

To re-enable, run:

sudo systemctl start ssh

2. How do I change the SSH port?

Modify /etc/ssh/sshd_config, change Port 22 to a custom value, then restart SSH:

sudo systemctl restart ssh

3. Can I use SSH without a password?

Yes, set up SSH key authentication and disable password login in /etc/ssh/sshd_config.

External Resources

Conclusion

Enabling SSH on Ubuntu is a crucial step for remote server management. By following this guide, you can install, configure, secure, and troubleshoot SSH effectively. For maximum security, always use SSH keys, change the default port, and disable root login. Thank you for reading the huuphan.com page!

Search This Blog