Multiple proxy jumps

[zabojpetr]

Hi,

I want to connect to server through multiple jump servers, but without success. When I use only one jump server everything works well.

My config file looks something like this:

Host jump-foo
  HostName ssh.boo.foo
  User ZabojP
  IdentityFile C:\Users\zabojp\.ssh\id_rsa

Host jump-inet
  HostName jump-inet.boo.foo
  User ZabojP
  ProxyJump jump-foo
  IdentityFile C:\Users\zabojp\.ssh\id_rsa

Host jump-ciirc
  HostName vpn.ciirc.cz
  Port 2282
  User zabojp
  ProxyJump jump-inet

Host jump-ciirc-woj
  HostName vpn.ciirc.cz
  Port 2282
  User zabojp

Host CIIRC
  HostName tdp.ciirc.cz
  Port 22207
  User zabojp
  ProxyJump jump-ciirc
  LocalForward 25432 localhost:5432
  LocalForward 22222 localhost:22
  LocalForward 23000 localhost:3000
  LocalForward 28090 localhost:8090
  LocalForward 28080 localhost:8080
  LocalForward 28000 localhost:8000
  LocalForward 29000 10.41.192.203:8000
  LocalForward 29001 10.41.192.204:3000
  LocalForward 21883 10.41.192.204:1883
  DynamicForward 21080
  IdentityFile C:\Users\zabojp\.ssh\id_rsa
  RequestTTY yes
  RemoteCommand bash -l

Host CIIRC-woj
  HostName tdp.ciirc.cz
  Port 22207
  User zabojp
  ProxyJump jump-ciirc-woj
  LocalForward 25432 localhost:5432
  LocalForward 22222 localhost:22
  LocalForward 23000 localhost:3000
  LocalForward 28090 localhost:8090
  LocalForward 28080 localhost:8080
  LocalForward 28000 localhost:8000
  LocalForward 29000 10.41.192.203:8000
  LocalForward 29001 10.41.192.204:3000
  LocalForward 21883 10.41.192.204:1883
  DynamicForward 21080
  IdentityFile C:\Users\zabojp\.ssh\id_rsa
  RequestTTY yes
  RemoteCommand bash -l

Host *
  ForwardAgent No

You can see, that I have some connection with suffix -woj it means without jump server, it can be used out of VPN.

Host and status:

Host	Cyberduck	Open SSH
jump-foo	✅	✅
jump-inet	✅	✅
jump-ciirc	❌	✅
CIIRC	❌	✅
jump-ciirc-woj	✅	✅
CIIRC-woj	✅	✅

Where open ssh means calling ssh <Host>
How I can connect to server with multiple jump host?

[dkocher]

In #12672.

[zabojpetr]

I am sorry, I search only in discussion.