update gateway documentation

This commit is contained in:
2023-10-30 11:43:50 +01:00
parent 4709f049d6
commit dd4b3f22c3
2 changed files with 9 additions and 6 deletions
+8 -1
View File
@@ -2,7 +2,14 @@
The purpose of the ssh gateways is to give access to protected networks and resources (for a finite period of time).
Users are only supposed to use ssh to connect and on the gateways. They are also supposed to only use the ssh command to further connect to other machines. It is not intended that users keep state on the gateways (e.g. screen/tmux sessions)
Users are only supposed to use ssh to connect to the gateways as well as them to further connect to other machines. Never the less, for ease of use, there are some protocols/ports that can directly be accessed from the ssh gateway. These ports include: 5900 VNC, 3389 RDP, ICMP/PING.
Therefore direct portforwarding on those ports will work.
```
ssh -L 3389:machine-you-want-to-connect:3389 protected-network-gw
```
It is not intended that users keep state on the gateways (e.g. screen/tmux sessions)
Depending on the gateway the user authenticates via password or password/MFA combination.