> For the complete documentation index, see [llms.txt](https://docs.verge.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.verge.io/knowledge-base/zh/networking/enabling-system-ssh.md).

# 启用系统 SSH 访问

{% hint style="info" %}
**要点**

* SSH 访问 VergeOS 系统通常并非必需，因为通过 UI 可提供完整访问。
* SSH 仅应在特定硬件诊断或其他特殊情况下启用。
* 尽管 VergeOS 采用了许多安全防护措施，但在任何系统上开启 SSH 都可能引入漏洞。
  {% endhint %}

{% hint style="danger" %}
**重要的 SSH 安全操作步骤**

* 始终使用受源代码管理的外部规则，严格限制 SSH 访问仅限于受信任的地址。
* SSH 访问应临时启用；会话结束后再次禁用规则。
  {% endhint %}

## 启用 SSH 访问的步骤

系统安装期间，会自动创建并禁用 SSH 访问规则。

1. **启用核心网络规则：** 进入核心网络仪表板，修改 ***"SSH 访问"*** 规则，选择 **已启用** 选项并 **提交** 以保存更改。 ![ssh-rule-core.png](/files/3706d475fbfc5d37748ea2600fe46424e3527904)
2. **向外部网络规则添加源控制：** 进入外部网络仪表板，修改 ***"SSH 访问"*** 规则为 **配置特定的源 IP 地址和/或地址范围，以严密控制访问**.
3. **启用外部网络规则：** 选择 **已启用** 选项并 **提交** 以保存更改。\
   **例如：外部网络规则：** ![ssh-rule-external.png](/files/d51c4f4d6e69d94b8b6d3bd32a5e6bdad2ef5d54)
4. **应用规则** 适用于两个网络。

## 警告

{% hint style="danger" %}

* VergeOS 是一个专用内核，带有只读覆盖层。请勿安装额外的 Debian 软件包或应用程序，因为它们可能与 VergeOS 的运行发生冲突，并导致系统故障或数据丢失。此外，多余的程序会在重启时被清除。
* 在通过命令行进行任何修改之前，请先与 VergeOS 支持部门确认。因未经授权的命令行更改而产生的问题由客户自行承担全部责任。
  {% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.verge.io/knowledge-base/zh/networking/enabling-system-ssh.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.