How to change SSH server port

SSH service by default runs on port 22. You can change the port that your SSH service runs if you're behind a firewall that only allows other ports.

You can also change the port that your SSH server runs on to reduce automated attacks to the common SSH port, especially if it's directly exposed to the internet.

SSH can configured to run on ports other than 22 by configuring the Port option in the sshd configuration file.

1. Launch your preferred terminal application.
2. Check if the port you plan to assign to your SSH server is not already in use.

   $ ss -natp | grep 2022
   $

3. Edit sshd configuration file with your favourite text editor.

   $ sudo vi /etc/ssh/sshd_config

4. Search for Port option and set the value to the port you desire.

   Port 2022

   Make sure the line does not begin with # as it implies the line is commented and will be ignored.

5. Configure firewall to allow access to the configured port (optional, if firewall is enabled).

   $ sudo ufw allow 2022/tcp # Ubuntu/Debian
   $ sudo firewall-cmd --add-port=2022/tcp --permanent && sudo firewall-cmd --reload # CentOS / Red Hat
   success
   success

6. Configure selinux to allow SSH to run on the configured port (optional, if selinux is used).

   $ sudo semanage port -a -t ssh_port_t -p tcp 2022

   semanage can be installed on CentOS or Red Hat systems using the following command:

   $ sudo yum install --assumeyes policycoreutils-python

7. Restart sshd service.

   $ sudo systemctl restart sshd

   Related: How to start, restart and stop SSH service

8. Check if sshd is now running on the configured port.

   $ ss -tlnp | grep 2022
   LISTEN     0      128          *:2022                     *:*
   LISTEN     0      128         :::2022                    :::*