# Mender-connect local ssh

**URL:** <https://hub.mender.io/t/mender-connect-local-ssh/4092>\
**Category:** General Discussions\
**Created:** [September 17, 2021, 7:53am UTC](https://hub.mender.io/t/mender-connect-local-ssh/4092 "2021-09-17T07:53:49Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Austriker](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/austriker/32/511_2.png) [@Austriker](https://hub.mender.io/u/Austriker)\
**Post date:** [September 17, 2021, 7:53am UTC](https://hub.mender.io/t/mender-connect-local-ssh/4092/1 "2021-09-17T07:53:49Z")

</div>

Hi,

We have some devices that could be in a blank area without any internet access. We are looking at improcing device security. Is it possible to access the device using mender-connect without any internet access on the same local network ?

Cheers

---

<div class="post-metadata">

**Author:** ![lramirez](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/lramirez/32/1195_2.png) [@lramirez](https://hub.mender.io/u/lramirez)\
**Post date:** [September 21, 2021, 3:49am UTC](https://hub.mender.io/t/mender-connect-local-ssh/4092/2 "2021-09-21T03:49:40Z")

</div>

Hi @Austriker,

Mender-connect gets its credentials and connection parameters from the mender-client. If you are able to deploy from your on-premise server running on the LAN without internet connection, you should be able to use the mender-connect service as well. The requirement is the server can exchange data with the device.

Regards

---

<div class="post-metadata">

**Author:** ![Austriker](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/austriker/32/511_2.png) [@Austriker](https://hub.mender.io/u/Austriker)\
**Post date:** [September 21, 2021, 1:30pm UTC](https://hub.mender.io/t/mender-connect-local-ssh/4092/3 "2021-09-21T13:30:38Z")

</div>

> [@lramirez](#):
>
> Mender-connect gets its credentials and connection parameters from the mender-client. If you are able to deploy from your on-premise server running on the LAN without internet connection, you should be able to use the mender-connect service as well. The requirement is the server can exchange data with the device.
> 
> Regards

Hi @lramirez,

Thank you for your answer. Unfortunately we use hosted mender. We are looking at our options to handle support access but our devices can be in areas where internet is not always available.

Is there any plans to handle that kind of case ?

Cheers

---

<div class="post-metadata">

**Author:** ![lramirez](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/lramirez/32/1195_2.png) [@lramirez](https://hub.mender.io/u/lramirez)\
**Post date:** [September 21, 2021, 2:49pm UTC](https://hub.mender.io/t/mender-connect-local-ssh/4092/4 "2021-09-21T14:49:38Z")

</div>

Hi @Austriker,

At this point I don’t think it is possible, but let me ping my peer @eystein as he could give us more inputs.

Regards,  
Luis

---

<div class="post-metadata">

**Author:** ![eystein](https://avatars.discourse-cdn.com/v4/letter/e/e5b9ba/32.png) [@eystein](https://hub.mender.io/u/eystein)\
**Post date:** [September 21, 2021, 5:08pm UTC](https://hub.mender.io/t/mender-connect-local-ssh/4092/5 "2021-09-21T17:08:26Z")

</div>

@Austriker this might be related to a roadmap feature, though it looks like some variation of it.

Remote terminal isn’t like SSH, in that it doesn’t open any ports on the device (for security and enable connectivity remotely).

To clarify your scenario, you want Remote terminal access to all your devices. But in addition you want the Remote terminal to be available on the local network directly as well, as the local network may not be connected to the Internet?

---

<div class="post-metadata">

**Author:** ![Austriker](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/austriker/32/511_2.png) [@Austriker](https://hub.mender.io/u/Austriker)\
**Post date:** [September 24, 2021, 2:37pm UTC](https://hub.mender.io/t/mender-connect-local-ssh/4092/6 "2021-09-24T14:37:40Z")

</div>

@eystein Yes indeed I want to be able to access the device on the local network in case the internet access is not available or when mender client is failing (which we already experienced).

But I want to have this access secured properly. eg something like this maybe ? [If You're Not Using SSH Certificates You're Doing SSH Wrong | Smallstep Blog](https://smallstep.com/blog/use-ssh-certificates/)
