4 ms·
If the ssh gateway OP mentions is just a ssh server, a ProxyCommand should be used, and the gateway should be transparent after that. Host rcpu-tun U
by jxy 6y ago
If the ssh gateway OP mentions is just a ssh server, a ProxyCommand should be used, and the gateway should be transparent after that.
Host rcpu-tun
User YOURLOGIN
IdentityFile ~/.ssh/YOURSECRET
ProxyCommand ssh -q -W HOSTBEHINDFW:22 -l PROXYLOGIN SSHGATEWAY
HostName HOSTBEHINDFW
- deleted 6y ago[deleted]
- wahern 6y agossh -W requires that the gateway support port forwarding, which is probably disabled if its enforcing interactive logins. (-W also implicitly sets -T, though I don't know if that would fail the login or not.) Likewise, -J is shorthand for a ProxyCommand that runs nc on the gateway, which also won't work if the gateway requires interactive (i.e. TTY interposed) logins. (EDIT: Looking at the OpenSSH source code, -J is shorthand for generating a ProxyCommand using ssh -W. Either it was refactored to use -W after -W was added, or I'm misremembering how -J used to work.)