Bering-uClibc 7.x - User Guide - Advanced Topics - Setting Up rtty to access the console from a web browser

From bering-uClibc
Jump to: navigation, search
Setting Up rtty to access the console from a web browser
Prev Bering-uClibc 7.x - User Guide Next


This chapter introduces the rtty tool to get console access to a LEAF router from a web browser.

A possible scenario could be that you are sitting in an office, a hotel room or whatever without the possibility to establish a ssh connection to your LEAF router but at least can connect to the web with http to your own web server.

The rttytool is a combination of the rtty client running on a LEAF router and a rttys"server" running on your web server.

The server notes are only a short example, how it works from localhost, hopefully you'll get the picture what's needed to add it to your web server. The client running on your LEAF router will be explained in more detail.

Setting up a rttys server

Setting up the rttysserver requires mysql/mariadb on your server.

To set up the server side download rtty from and untar the tarball.

Next prepare your database:

On database instance, login to database console as root:

mysql -u root -p

Create database user which will be used by rttys, authenticated by password. This example uses 'rttys' as password. Please use a secure password for your instance.


Create database with UTF-8 charset and collation. Make sure to use utf8mb4 charset instead of utf8 as the former supports all Unicode characters (including emojis) beyond Basic Multilingual Plane. Also, collation chosen depending on your expected content. When in doubt, use either unicode_ci or general_ci.

CREATE DATABASE rttys CHARACTER SET 'utf8mb4' COLLATE 'utf8mb4_unicode_ci';

Grant all privileges on the database to database user created above.


Quit from database console by exit.

Change into the new directory and run:

./rttys token

Note the token given for next step and the client setup on the LEAF router.

To start the server side running

./rttys run -t [yourtoken]

You should be now able to connect to rttys server from you browser:


Setting up the rtty client on a LEAF router

Installing and configuring rtty.lrp add rtty.lrp to leaf.cfg and reboot your LEAF router.

Configure rtty in /etc/default/rtty

In /etc/default/rttyset your rttys server address, add the token and the hostname:

# IP address of the rttys Server
# Token on your remote rttys server
# Set your hostname

Configure root access via rtty

To allow root login from rttys into the LEAF router it is necessary to add pts ports (pseudo terminal ports) to /etc/securetty.


Configure shorewall

To connect rtty from the LEAF router to your rttys server you need to open the port 5912 from your firewall to the zone where the webserver is located running rtty. This could be the local zone (as in the example below), the DMZ or on the net depending on your needs. change /etc/shorewall/rules and add

# enable rtty (assuming the rttys server is in local zone)
ACCEPT fw loc tcp 5912

Restart shorewall with

shorewall restart


From your browser pointing to http://localhost:5913/ refresh the list of rtty clients and access the devcies's shell. Login and enjoy.

Prev Up Next