Tugzrida · October 16, 2022 00:55
diff --git a/authorized_keys_jumpbox b/authorized_keys_jumpbox
 command="echo 'Dialout only'",restrict,port-forwarding,permitlisten="localhost:jumpbox_port",permitopen="[100::]:1" ssh_key
diff --git a/dialout.service b/dialout.service
 [Unit]
 Description=Remote access to local ssh daemon
 After=network.target

 [Service]
 Environment="AUTOSSH_GATETIME=0"
 Environment="AUTOSSH_PORT=0"
 ExecStart=/usr/bin/autossh -o ServerAliveInterval=60 -o ServerAliveCountMax=2 -i /path/to/key -o ExitOnForwardFailure=yes -o VerifyHostKeyDNS=yes -N -R jumpbox_port:127.0.0.1:22 user@jumpbox
 Restart=always
 RestartSec=10

 [Install]
 WantedBy=multi-user.target
diff --git a/ssh_config_client b/ssh_config_client
 Host remote_device
 User user
 ProxyCommand ssh -W 127.0.0.1:jumpbox_port jumpbox
diff --git a/sshd_config_jumpbox b/sshd_config_jumpbox
 ClientAliveInterval 60
 ClientAliveCountMax 2
	[Unit]
	Description=Remote access to local ssh daemon
	After=network.target

	[Service]
	Environment="AUTOSSH_GATETIME=0"
	Environment="AUTOSSH_PORT=0"
	ExecStart=/usr/bin/autossh -o ServerAliveInterval=60 -o ServerAliveCountMax=2 -i /path/to/key -o ExitOnForwardFailure=yes -o VerifyHostKeyDNS=yes -N -R jumpbox_port:127.0.0.1:22 user@jumpbox
	Restart=always
	RestartSec=10

	[Install]
	WantedBy=multi-user.target
	Host remote_device
	User user
	ProxyCommand ssh -W 127.0.0.1:jumpbox_port jumpbox