- On you windows 11 machine, look for "Optional Features" and install OpenSSH Client"
- Press the
Windows + R
keys to open the Run dialog. Typeservices.msc
and press Enter to open the Services management console. Find the OpenSSH Authentication Agent service in the list and double-click on it to open its properties. In theStartup type
drop-down list, selectAutomatic
. Click on theStart
button to start the service. Click on theOK
button to save your changes and close the properties window. After completing these steps, the ssh-agent service should be running on your system and you should be able to use it to store your private SSH key in memory.
- Open a CMD window as Administrator
- Create a new RSA key (ed25519 is not supported by Asus-RT-AC86U) by typing:
ssh-keygen -t rsa -b 8192 -C "MyMachineName-julie-yyyy-mm-dd"
Replace MyMachineName, julie and yyyy-mm-dd by their effective values (the comment as the end appear in the key and help to identify it) Enter a passphrase that you save in your password manager (e.g. Keypass) with username MyMachineName-julie-yyyy-mm-dd and a generated password of length 47 with Upper/Lower/Digit (to avoid conflicts with special characters like @ = when the password is used in URL)
- Open the file C:\Users\julie.ssh\id_rsa.pub and copy the content
- Go to the the UI of the router http://192.168.1.1/Advanced_System_Content.asp and paste the key on a new line in the field Authorized Key. Note: you may have different keys. One key per line.
- Add your private key to the ssh-agent by running the command:
ssh-add C:\Users\julie\.ssh\id_rsa
Optional: You can use the ssh-agent service to store your private SSH key in memory on Windows 11. ssh-agent is a program that runs in the background and acts as a holding area for your decrypted private keys, so you don’t have to enter your passphrase every time you use the key.
- log on using ssh to your router
cd /jffs/scripts
curl --silent -LJO https://raw.githubusercontent.com/Jambo15/Asus-RT-AC86U/main/ddns-start
curl --silent -LJO https://raw.githubusercontent.com/Jambo15/Asus-RT-AC86U/main/.ddns_confidential
- edit /jffs/scripts/.ddns_confidential and update with the desired access information
chmod u+rw,u-x,go-rwx /jffs/scripts/.ddns_confidential
chmod u+rwx,go-rwx /jffs/scripts/ddns-start