Jumping Through an SSH JumpServer To Access Hosts In a Private Network

SSH bastion host is useful to jump through a proxy or firewall to reach hosts in a private network.

By Author

The SSH protocol has a very useful feature called a jump server, or bastion host, which allows an SSH client to connect to other hosts through an SSH server. For example, you might have a server that is accessible from the Internet and serves as a gateway between external hosts and internal private networks.

One of the best things about this feature is that you don’t have to make any changes to the jump server or target host. All you need is the ability to login to the jump server, and the configuration is done entirely on the client side.

SSH Client Configuration

On your ssh client machine, the ~.ssh/config file is convenient for setting up the clients, although it can be done at the command-line.

This is an example of a config file (you can have as many sections as you need):

     1  Host sib05vm1
     2          User root
     3          HostName 10.0.98.1
     4          IdentityFile ~/.ssh/id_rsa
     5          AddKeysToAgent yes
     6          ForwardAgent yes
     7          ProxyCommand ssh 16.103.41.192 -W…