Knock or wake a host before connecting

Both settings are in the host editor under Advanced.

Knock first

For a firewall that keeps the SSH port shut until it sees a sequence of connection attempts (knockd and the like), fill in Port knocking: the ports in order, separated by spaces, with :udp after a UDP one.

7000 8000:udp 9000

Sternway knocks before every connection. Behind a jump host, the jump host knocks, using TCP only.

Caution

A knock sequence isn’t a password. Anyone watching the network can see it.

Wake the host first

For a machine with Wake-on-LAN turned on in its firmware:

1. Fill in Wake-on-LAN MAC address. The host gets a Wake (Wake-on-LAN) action.
2. To wake it on every connection, turn on Wake before connecting. Sternway sends the packet and waits until the SSH port answers.

The packet goes out on your device’s network, so it reaches the same local network, or another subnet whose router forwards it. For that, set Wake-on-LAN broadcast address to the subnet’s broadcast address.