add information about wmgt

services-user-guide/wmgt.md

@@ -0,0 +1,37 @@
+# wmgt
+
+The wmgt service provides SSH access to machines in various isolated networks. Access is protected by MFA.
+
+To use the service use the DNS alias __wmgt.psi.ch__.
+
+```bash
+ssh <user>@wmgt.psi.ch
+```
+
+To directly tunnel to a machine in a protected network to which wmgt gives access to you can use:
+
+```bash
+ssh -J wmgt.psi.ch <your-machine>
+```
+
+If you need to connect through wmgt often, you can add following configuration to your `~/.ssh/config` file. This will give you a persistent connection to wmgt.psi.ch that can be (re)used for multiple connections. (this way you only have to authenticate once with MFA)
+
+```
+Host wmgt-jumpost
+  HostName wmgt.psi.ch
+  ControlMaster auto
+  ControlPath ~/.ssh/mux-%r@%h:%p
+  ControlPersist 8h
+```
+
+Afterwards you can use 
+
+```bash
+ssh -J wmgt-jumpost <your-machine>
+```
+
+to establish the connection.
+
+```{note}
+Be aware, if you are switching networks this persistent connection might get screwed up. In that case you have to find the connection via `ps -ef` and kill it with the `kill` command.
+```