Files
gitea-pages/services/user-guide/wmgt.md
2024-08-08 17:16:50 +02:00

1.0 KiB

wmgt.psi.ch

The wmgt service provides SSH access to machines in various isolated networks. Access is protected by MFA.

To use the service use the DNS alias wmgt.psi.ch.

ssh <user>@wmgt.psi.ch

To directly tunnel to a machine in a protected network to which wmgt gives access to you can use:

ssh -J wmgt.psi.ch <your-machine>

If you need to connect through wmgt often, you can add following configuration to your ~/.ssh/config file. This will give you a persistent connection to wmgt.psi.ch that can be (re)used for multiple connections. (this way you only have to authenticate once with MFA)

Host wmgt-jumpost
  HostName wmgt.psi.ch
  ControlMaster auto
  ControlPath ~/.ssh/mux-%r@%h:%p
  ControlPersist 8h

Afterwards you can use

ssh -J wmgt-jumpost <your-machine>

to establish the connection.

Be aware, if you are switching networks this persistent connection might get screwed up. In that case you have to find the connection via `ps -ef` and kill it with the `kill` command.