Community discussions

MikroTik App
  4. RouterOS
  5. Scripting

SFTP Upload

Post Reply
 
User avatar
LucZWFM
Member Candidate
Member Candidate
Topic Author
Posts: 130
Joined: Tue Dec 26, 2017 10:47 pm
Location: Bergen op Zoom, The Netherlands

SFTP Upload

Mon Aug 19, 2019 9:45 am

Hi,

Is there a way to upload files from RouterOS via SFTP?
I have tried what I have found on the forum but nothing seems to work.
/tool fetch should be able to do it it seems, but I can not get it to work.

Any idea's?

Thanks!
Top
 
upnort
newbie
Posts: 49
Joined: Wed Aug 15, 2018 2:03 am

Re: SFTP Upload

Wed Aug 21, 2019 6:43 am

I use the following in Linux systems:

scp "$NAME_OF_FILE" $SSH_OPTIONS username@router_ip_address:"$NAME_OF_FILE"

After uploading, when using winbox look in Files or in a terminal, /file print.

I don't use Windows, but PuTTY or WinSCP likely support something similar.
Top
 
User avatar
eworm
Forum Guru
Forum Guru
Posts: 1071
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:
Contact eworm

Re: SFTP Upload

Thu Aug 22, 2019 12:06 am

Hi,

Is there a way to upload files from RouterOS via SFTP?
I have tried what I have found on the forum but nothing seems to work.
/tool fetch should be able to do it it seems, but I can not get it to work.

Any idea's?

Thanks!
Yes, it works. Show your commands and what happens...

RouterOS SFTP client is picky about authentication. I had to disable everything but password authentication on SSH server side.
mikrotik scp/sftp client to transfer file between MT
Top
 
User avatar
eworm
Forum Guru
Forum Guru
Posts: 1071
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:
Contact eworm

Re: SFTP Upload

Thu Aug 22, 2019 12:08 am

I use the following in Linux systems:
That's the wrong way. He want to upload from RouterOS, not to.
Top
 
upnort
newbie
Posts: 49
Joined: Wed Aug 15, 2018 2:03 am

Re: SFTP Upload

Thu Aug 22, 2019 12:52 am

That's the wrong way. He want to upload from RouterOS, not to.
Oops. Didn't read -- too much frustration with my own fledgling efforts at scripting. :)
Top
 
skdd
just joined
Posts: 9
Joined: Wed Feb 07, 2018 5:07 pm

Re: SFTP Upload

Sat Aug 24, 2019 3:00 pm

Speaking about SFTP, I have such strange issue, situation:
  • Synology FTP, SFTP server
  • everything works ok when connecting from PC
  • on RB1100AH, SFTP upload works flawlessly, no high CPU load
  • latest 6.45.3
Issue:
  1. on RB960PGS, CRS328, SFTP upload ends with "failure: connection timeout", CPU load 100%, profiler shows that ssh component "eats" 96% cpu. Same situation if /system ssh login to synology is used, first response after 35sec, high CPU load
  2. same devices, FTP works flawlessly
  3. on cAP AC, high CPU load only on one CPU (about 80%), first response from /system ssh login after 25sec, SFTP upload ends with "failure: connection timeout"
Anyone else experiencing such issue?
Top
 
User avatar
eworm
Forum Guru
Forum Guru
Posts: 1071
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:
Contact eworm

Re: SFTP Upload

Mon Aug 26, 2019 4:47 pm

Anyone else experiencing such issue?
No, even my old RB751 (mpisbe 400MHz) can connect via SFTP. (I do not run my SSH server on Synology NAS, though.)
Top
 
User avatar
LucZWFM
Member Candidate
Member Candidate
Topic Author
Posts: 130
Joined: Tue Dec 26, 2017 10:47 pm
Location: Bergen op Zoom, The Netherlands

Re: SFTP Upload

Sat Aug 31, 2019 4:02 pm

Please keep on topic, tnx
Top
 
User avatar
SiB
Forum Guru
Forum Guru
Posts: 1888
Joined: Sun Jan 06, 2013 11:19 pm
Location: Poland

Re: SFTP Upload

Sun Sep 01, 2019 2:05 am

Please keep on topic, tnx
What you do in this case? Just open case in forum and do nothing ? Even no screenshot.

.
I have not any problems like CPU 100%, etc. I can login as /system ssh to >10 ssh hosts from few different RB platforms.

But SFTP traffic is not working properly.
Checked: v6.45.3 and v6.45.5

Downloading/Uploading by Command:
Code: Select all
/tool fetch upload=yes url="sftp://xx.xx.xx.xx/home/users/sibex/file.txt.rsc" src-path="/file.txt.rsc" user="sibex" password="**alphanumeric**"
status: failed
failure: closing connection: <> xx.xx.xx.xx:22 (9) (6)
3th biggest hosting company in PL on server side, logs below, commend his admins: "Both sides not finish crypto and not start checking auth (like login and pass)":
Code: Select all
Aug 31 23:09:52 23207 sshd[18688]: Received disconnect from yy.yy.yy.yy:11:  [preauth]
I grab traffic sniffer communication to my hosting provider xx.xx.xx.xx:22 and open it at wireshark. SSH communication is stops, remote server send FIN and communication is break before checking login and password.
Screenshot_12.jpg
I try download the file from hosting and fail in the same scenario.

I cannot determine what of logging topic can increase debug logs for the fetch tool.

[Ticket#2019090122001146] RE: SFTP Upload at ROSv6.45.3 and 6.45.5 from stable c [...]
You do not have the required permissions to view the files attached to this post.
Top
 
User avatar
eworm
Forum Guru
Forum Guru
Posts: 1071
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:
Contact eworm

Re: SFTP Upload

Mon Sep 02, 2019 1:53 pm

Try this for verbose logging:
Code: Select all
/system logging add topic=ssh,!packet
Top
 
User avatar
SiB
Forum Guru
Forum Guru
Posts: 1888
Joined: Sun Jan 06, 2013 11:19 pm
Location: Poland

Re: SFTP Upload

Mon Sep 02, 2019 3:56 pm

Screenshot_15.jpg
14:54:19 ssh,debug transport state: 0 --> 1
14:54:19 ssh,debug transport state: 1 --> 2
14:54:19 ssh,debug client version: SSH-2.0-OpenSSH
14:54:19 ssh,debug transport state: 2 --> 3
14:54:19 ssh,debug host key algo: ssh-dss,ssh-rsa,ssh-dss
14:54:19 ssh,debug kex algo: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
14:54:19 ssh,debug enc algo CS: aes128-ctr,aes192-ctr,aes256-ctr
14:54:19 ssh,debug mac algo CS: hmac-sha1,hmac-ripemd160
14:54:19 ssh,debug comp algo CS: none,zlib@openssh.com
14:54:19 ssh,debug packet follows: 0
14:54:19 ssh,debug agreed on: diffie-hellman-group-exchange-sha256 ssh-rsa aes128-ctr aes128-ctr hmac-sha1 hmac-sha1 none none
14:54:21 ssh,debug transport state: 3 --> 4
14:54:21 ssh,debug requesting auth methods
14:54:21 ssh,debug auth methods: publickey,keyboard-interactive
14:54:21 ssh,debug doing keyboard-interactive authorization
14:54:22 ssh,debug got 1 prompts
14:54:22 ssh,debug keyboard interactive without pty not possible
14:54:22 ssh,debug code 0x0300000b closing..
14:54:22 ssh,debug transport state: 4 --> 0
14:54:22 ssh,debug closing connection: <> xx.xx.xx.xx:22 (9)
You do not have the required permissions to view the files attached to this post.
Top
 
User avatar
eworm
Forum Guru
Forum Guru
Posts: 1071
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:
Contact eworm

Re: SFTP Upload

Mon Sep 02, 2019 8:42 pm

As posted in third post in this thread... RouterOS is picky about authentication methods.
Can you configure SSH server to disable all but password authentication? Follow the link above for details.
Top
 
skdd
just joined
Posts: 9
Joined: Wed Feb 07, 2018 5:07 pm

Re: SFTP Upload

Wed Sep 11, 2019 3:30 pm

As posted in third post in this thread... RouterOS is picky about authentication methods.
Can you configure SSH server to disable all but password authentication? Follow the link above for details.
maybe is picky, but same ROS on arm platform (RB1100) working flawlessly, CRS328 failed with log below
Try this for verbose logging:
Code: Select all
/system logging add topic=ssh,!packet
mt01.PNG
mt02.jpg
You do not have the required permissions to view the files attached to this post.
Top
 
User avatar
eworm
Forum Guru
Forum Guru
Posts: 1071
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:
Contact eworm

Re: SFTP Upload

Wed Sep 11, 2019 4:40 pm

The device from last log successfully authorized, so looks like different issue.
Top
 
User avatar
SiB
Forum Guru
Forum Guru
Posts: 1888
Joined: Sun Jan 06, 2013 11:19 pm
Location: Poland

Re: SFTP Upload

Thu Sep 12, 2019 10:16 am

Support give me this info
.
Hello,
you can use publickey and keyboard-interactive thus it's not "only" password authentication.
Best regards,
.
In your example it's true.
Top
Post Reply

Who is online

Users browsing this forum: alixviral and 33 guests
  4. RouterOS
  5. Scripting