Normally you have a setup like:
Workstation -> Firewall -> Server
Were your Workstation cannot contact Server directly, but has to use log in into Firewall first in order to contact Server. In this "easy" setup you can use this setting on your workstation:
Host server ProxyCommand ssh firewall nc %h %p
Now my question:
The setup that was forced upon me is more difficult:
Workstation -> Intermediate <- Server
- I.e. my Workstation can log in into Intermediate and Server can log in into Intermediate.
- Intermediate cannot open a TCP connection to Server, but the other direction is possible.
- I cannot open a TCP connection in either direction between my Workstation and the Server. The packets simply won't be routed in the VLAN.
- I can "physically" access the Server, but I'd like to sit at my Workstation.
Now, how can I SSH from my machine to the server?