# wmgt.psi.ch

The wmgt service provides SSH access to machines in various isolated networks. Access is protected by MFA.

To use the service use the DNS alias __wmgt.psi.ch__.

```bash
ssh <user>@wmgt.psi.ch
```

To directly tunnel to a machine in a protected network to which wmgt gives access to you can use:

```bash
ssh -J wmgt.psi.ch <your-machine>
```

If you need to connect through wmgt often, you can add following configuration to your `~/.ssh/config` file. This will give you a persistent connection to wmgt.psi.ch that can be (re)used for multiple connections. (this way you only have to authenticate once with MFA)

```
Host wmgt-jumpost
  HostName wmgt.psi.ch
  ControlMaster auto
  ControlPath ~/.ssh/mux-%r@%h:%p
  ControlPersist 8h
```

Afterwards you can use 

```bash
ssh -J wmgt-jumpost <your-machine>
```

to establish the connection.

```{note}
Be aware, if you are switching networks this persistent connection might get screwed up. In that case you have to find the connection via `ps -ef` and kill it with the `kill` command.
```