Using the Pull Method instead of SSH
- The LucidView Enforcer script by default uses a pull method whereby changes are requested from the portal API and downloaded to the Mikrotik router. SSH is blocked on the lvcloud input by default.
- SSH updates CAN be enabled by disabling the firewall rule on the input that blocks SSH on the lvcloud interface. This is the legacy interface and is not recommended for most users as you rightly point out, ssh access is a security risk, hence why we don’t recommend or enable it by default.
If you are concerned about the ssh user account created by the script you are welcome to disable it as SSH is not used or required by default.