Tutorials · DevOps & Containers
How to Open a Device Web Page Through an SSH Tunnel
Reach the web interface of a switch, NVR or container on a remote site without opening a firewall port: forward it through SSH.
Before you start
- SSH access to a host on the remote site (jump host, gateway or edge server)
Step by step
Local port forward
Forward a port on your laptop to the device's web port through the SSH host.
ssh -L 8443:192.168.10.50:443 admin@site1-edge # then open https://localhost:8443
Several devices at once
Add one -L per device, each on its own local port.
ssh -L 8443:10.1.99.2:443 -L 9000:10.1.30.10:80 admin@site1-edgeDynamic (SOCKS) proxy
For many devices, start a SOCKS proxy and point a dedicated browser profile at localhost:1080.
ssh -D 1080 -N admin@site1-edgeKeep it running
-N opens no shell; -f puts the tunnel in the background. Close it when you are done.
ssh -f -N -L 8443:192.168.10.50:443 admin@site1-edgeClean up
Tunnels are temporary. Kill them after the job and never leave a permanent forward without monitoring.
Commands are generic, industry-standard examples. Exact syntax and menu names vary by model and firmware; check your device's manual on the Documentation page.
Pro tips
- Bind tunnels to 127.0.0.1 only (the default) so others on your network cannot use them.
- Some web UIs check the Host header: if a page loads blank, try the device IP in a hosts-file alias.
FAQ
Frequently asked questions
Is this safe?
Yes: the traffic is encrypted inside SSH and no port is opened on the site's firewall.
Keep learning
Related guides
SSH jump host
Read more →Access CCTV remotely without port forwarding
Read more →How to Use SSH Keys Instead of Passwords for Network Devices and Servers
Passwords can be guessed, phished and reused. Create an SSH key pair, install the public key on gateways, edge servers and Linux hosts, then turn password logins off.
Read more →How to Reach Remote Sites Safely With an SSH Jump Host
Do not expose SSH on every device. Put one hardened jump host (bastion) in front of the management network and reach everything else through it.
Read more →Docker Basics on a NavEdge Edge Server: Run Your First Container
NavEdge edge servers run on-site applications in Docker containers. Learn the five commands you need: pull, run, ps, logs and restart policies.
Read more →Stuck on a step?
Ask Navijin technical support or an authorised partner for help with your configuration.