1

Im trying to make SSH logins require 2 factor auth but only on one port.

So port 1 is open only to a list of ip's managed by iptables. and only requires password / key

port 2 is open to all, But requires 2 factor auth.

Is this setup possible or would 2 sshd's need to be running

1 Answer 1

5

You would need 2 sshd's to be running. I use exactly this setup on border/bastion hosts.

2
  • 1
    Here's a good article on the subject: kudos.be/multiple_sshd Dec 15, 2013 at 16:05
  • yes, two seperate sshd daemons running helps with availability (accessability w/ sshd), as one will be up if the other goes down. iptables off the secondary daemon/port to only the source ips u need.
    – nandoP
    Dec 15, 2013 at 16:21

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .