We have bastion server B. We need to SSH from A through B to C, using private key (we use keepass with keeAgent).
In the bastion I have: AllowTcpForwarding yes
.
I tried to use proxyCammand
:
Host app
Hostname *.*.*.*
User my-user
Port 22
ProxyCommand ssh -W %h:%p bast
Host bast
Hostname *.*.*.*
# ForwardAgent no
User my-user
ssh app
manages to enter the bastion server and falls when trying to connect the private server. The error is:
channel 0: open failed: connect failed: Connection timed out
stdio forwarding failed
ssh_exchange_identification: Connection closed by remote host
On the /var/log/secure
log in bastion I see:
error: connect_to *.*.*.* port 22: failed.
-v
flags to yourssh
command. Also: I find theProxyJump
directive more flexible and easier to use than theProxyCommand
-vvv
. Also, I see no logs on server "app".ssh my-user@*.*.*.*
to the ip-address of host "app", right?