SSH Proxy Jump Host


An SSH Proxy Jump Host is available for users to connect to servers via SSH from off campus networks.  The Proxy Jump server acts like a secure bastion and will require you to use your BlueKey ID, password and MFA.  You will be prompted to enter your Entra ID Password (BlueKey Password) and validate your login with MFA (a request will then be sent to your default MFA option).

 

The proxy jump command is supported by almost all OpenSSH based clients, which includes the standard command line ssh clients on Linux, macOS, and Windows.  To use the proxy you will need to pass the -J flag to tell your client to use a jump server, you then specify username@proxy_jump_server username@target_server.  Specific examples are shown below and assume that you are using Push Notification with the Microsoft Authenticator for MFA.  Note, the FileZilla and Cyberduck file transfer clients do not support proxy jump with MFA and are therefore not compatible when used to connect from an off campus network.  If you require the use of these clients they can be accessed from the campus virtual lab.

 

Using the SSH Proxy Jump Host on: