This question already has an answer here:
I would like to be able to establish an SSH connection to a remote server, through an IPSec tunnel. So I need to use the local endpoint as an intermediate hop to achieve this.
The following command already works fine:
ssh -tt smals ssh -tt lpextapp050a
smalsis the name of the intermediate server, as defined in my
lpextapp050ais the name of the destination server, as defined in the
So I tried translating this into a configuration for my
.ssh/config as follows:
Host lpextapp050a User <username> ProxyCommand ssh root@smals -W lpextapp050a:22
However, attempting to connect with
ssh lpextapp050a gives me this error:
channel 0: open failed: administratively prohibited: open failed stdio forwarding failed ssh_exchange_identification: Connection closed by remote host
Google seemed to indicate I needed to check the
PermitOpen settings of the sshd on
smals, but those are correctly set, ie. they are not present in the settings file. I tried specifically setting them, which did not change anything.
Does anyone have an idea what I'm doing wrong?