I have two networks, each with a bastion host and a webapp host behind it. I've set up my ~/.ssh/config
with ProxyCommand
so I can log in to either webapp host from my local machine with just one ssh
command, like this:
Host example.production
Hostname 54.0.10.1
Host example.production.web
Hostname 10.0.10.1
ProxyCommand ssh example.production nc %h %p 2> /dev/null
Host example.demo
Hostname 54.0.20.1
Host example.demo.web
Hostname 10.0.10.1
ProxyCommand ssh example.demo nc %h %p 2> /dev/null
The problem is that both webapp hosts are 10.0.10.1
(in different networks), so ssh complains that the ECDSA key does not match. Is there anything I can do to indicate that these are two separate machines, with separate ECDSA keys?