SSH 隧道接入

Question

Good Day

I work for an ISP and we basically manage all our switches and routers via the CLI from a Jumpbox.

I would like to automate some of my work on these devices by writing Python scripts, etc.

However, this Jumpbox (Linux), is quite old and the Python version is old. I cannot add Ansible, Netmiko, etc. Plus I'm not an Admin for that box so can't upgrade it.

My question is, if I set up my own Linux VM with all the required tools, how would I be able to access these routers and switches from my local Linux VM?

I tried setting up a Local/Remote/Dynamic SSH Tunnel to the Jumpbox, but I always end up on the Jumpbox SSH session itself.

Answer 1

You can use the jumpbox as a bastion host. Copy your public keys to both hosts (the jumpbox and the devices) and in your inventory file use the ansible_ssh_common_args option to set it up, like this:

[switches]
switch-01 ansible_host=192.168.0.1 ansible_ssh_common_args='-o ProxyCommand="ssh -W %h:%p -q user@ip-bastion"'

Note: you must be running Ansible version 2.

Best regards.