Articles in this section

How to change the SSH port number on a Linux server

Kuzma Ivanov
Updated
kb: how-to Plesk for Linux ABT: Group A

Applicable to:

  • Plesk for Linux

Question

How to change the SSH port number on a Linux server?

Answer

  1. Connect to the server via SSH.

  2. Open the SSH configuration file /etc/ssh/sshd_config in any text editor. In this example we are using the vi editor:

    # vi /etc/ssh/sshd_config

  3. Modify the file according to your needs using one of these steps:

    Warning: Be careful when modifying the file. The incorrect SSH configuration may lead to server inaccessibility via SSH.

    • Set up one custom SSH port

      Remove the hash "#" in the line #Port 22 and specify your custom SSH port, which will be used instead of standard SSH port 22.
      Example:

      CONFIG_TEXT: Port 2222

    • Set up several SSH ports

      Remove the hash "#" in the line #Port 22 and additionally add your custom SSH port on the next line. In this case, SSH connections will be available on both ports.
      Example:

      CONFIG_TEXT: Port 22
      Port 2222

  4. Save the changes and close the file.

  5. Restart the sshd service to apply the changes:

    # service sshd restart

    Note: The new port must be opened in server firewall. Visit this KB article to find out how.

    Note: If port is changed on a SELinux system, it is needed to tell SELinux about this change:
    # semanage port -a -t ssh_port_t -p tcp #PORTNUMBER

 

Additional step if the Fail2Ban ssh jail is enabled on the server

 

If the Fail2Ban ssh jail is enabled on the server, modify its configuration to meet new changes:

  1. Log in to Plesk.

  2. Go to Tools & Settings > IP Address Banning (Fail2Ban) > switch to the Jails tab and click ssh.


    Screenshot_2019-01-10_IP_Address_Banning_-_Plesk_Onyx_17_8_11.png

  3. On the ssh page, click Change Settings and change the port value from ssh to your new custom SSH port (In this example, it is 2222). Once done, apply the changes.

    Note: If the default port (22) and custom port are used, add them as "port=2222".


    Screenshot_2019-01-10_ssh_-_Plesk_Onyx_17_8_11.png

 

Was this article helpful?

Comments

1 comment
Date Votes
  • Avatar
    Brawler DA SILVA MARQUES

    The SSH Terminal detects the custom address and port of the SSH daemon .
    To update it manually, modify the sshd configuration settings and execute the following commands in the terminal:
    /usr/local/psa/admin/sbin/modules/ssh-terminal/installer --update-configuration
    systemctl restart plesk-ssh-terminal.service
     

    0

Please sign in to leave a comment.