38 lines
1.0 KiB
Markdown
38 lines
1.0 KiB
Markdown
# wmgt.psi.ch
|
|
|
|
The wmgt service provides SSH access to machines in various isolated networks. Access is protected by MFA.
|
|
|
|
To use the service use the DNS alias __wmgt.psi.ch__.
|
|
|
|
```bash
|
|
ssh <user>@wmgt.psi.ch
|
|
```
|
|
|
|
To directly tunnel to a machine in a protected network to which wmgt gives access to you can use:
|
|
|
|
```bash
|
|
ssh -J wmgt.psi.ch <your-machine>
|
|
```
|
|
|
|
If you need to connect through wmgt often, you can add following configuration to your `~/.ssh/config` file. This will give you a persistent connection to wmgt.psi.ch that can be (re)used for multiple connections. (this way you only have to authenticate once with MFA)
|
|
|
|
```
|
|
Host wmgt-jumpost
|
|
HostName wmgt.psi.ch
|
|
ControlMaster auto
|
|
ControlPath ~/.ssh/mux-%r@%h:%p
|
|
ControlPersist 8h
|
|
```
|
|
|
|
Afterwards you can use
|
|
|
|
```bash
|
|
ssh -J wmgt-jumpost <your-machine>
|
|
```
|
|
|
|
to establish the connection.
|
|
|
|
```{note}
|
|
Be aware, if you are switching networks this persistent connection might get screwed up. In that case you have to find the connection via `ps -ef` and kill it with the `kill` command.
|
|
```
|