Skip to content

Commit 32d473e

Browse files
final mike edits
1 parent 116616c commit 32d473e

File tree

1 file changed

+4
-7
lines changed

1 file changed

+4
-7
lines changed

src/content/docs/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access.mdx

Lines changed: 4 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -200,10 +200,7 @@ Failure to connect to your SSH endpoint could be the result of multiple variable
200200

201201
### 1. Review Access policies
202202

203-
A user may be blocked by an Access policy from reaching an SSH target because:
204-
205-
- An Access policy exists that denies that user access, or
206-
- No explicit allow Access policy exists and Access is set to deny the user by default.
203+
A user may be blocked by an Access policy from reaching an SSH target because no explicit allow Access policy exists and Access is set to deny the user by default.
207204

208205
:::note[Access policies and infrastructure applications]
209206

@@ -241,7 +238,7 @@ You will need Cloudflare dashboard access and log view [permissions](/cloudflare
241238

242239
3. Review the **Decision**. If the **Decision** is `Access denied`, select the application and copy the name under App.
243240

244-
If the decision is `Access granted`, Access policies are not interfering with your connection attempts and your connection issue is due to the Cloudflare Tunnel, the SSH server, or the `sshd_config` file.
241+
If the decision is `Access granted`, Access policies are not interfering with your connection attempts and your connection issue is due to the Cloudflare Tunnel, the target SSH machine, or the `sshd_config` file.
245242

246243
4. Go to **Access** > **Applications**.
247244

@@ -251,7 +248,7 @@ You will need Cloudflare dashboard access and log view [permissions](/cloudflare
251248

252249
7. Go to [**Policies**](/cloudflare-one/policies/access/policy-management/#test-your-policies) to review what criteria may be blocking the user.
253250

254-
By editing a [policy](/cloudflare-one/policies/access/) that is explicitly blocking the user or adding a new policy to explicitly allow the user, the connection issue should be resolved. After saving your policy changes, attempt to connect to the target machine as the end user.
251+
By adding an Access [policy](/cloudflare-one/policies/access/) to allow the user, the connection issue should be resolved. After saving your policy changes, attempt to connect to the target machine as the end user.
255252

256253
If you are still having connection issues after auditing your Access policies, review tunnel health in the following step.
257254

@@ -446,7 +443,7 @@ The next steps will walk you through a troubleshooting regimen. You will tempora
446443

447444
:::caution[You may lose access to your SSH server]
448445

449-
These troubleshooting steps could result in you being locked out of your SSH server because your existing auth may rely on existing configuration that is not in the [example file](#review-your-sshd_config-file-for-misconfigurations). Proceed with utmost caution.
446+
These troubleshooting steps could result in you being locked out of your SSH server because your current SSH session may rely on existing configuration that is not in the [example file](#review-your-sshd_config-file-for-misconfigurations). Proceed with utmost caution.
450447

451448
:::
452449

0 commit comments

Comments
 (0)