SSH virtual server without SSH proxy

[davidfisher]

Hi

Can the bigip proxy ssh traffic without the ssh proxy applied to the VS?

I see some other options are using forwarding VS or performance VS but those expose the backend node IP address.

[davidfisher]

I am trying this document to config it, but this only works with ssh proxy, cant find any documentation to do it without it..

https://techdocs.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-imple...

[Lidev]

Hi Davidfisher,

To my kkowledge, you have no choice but to use ssh proxy to do this.

Regards

[davidfisher]

In my lab i am trying to do login into bigip2 using a SSH vs on bigip1 . .i cant figure out which keys go where . .

Multiple keys need to be added but the guide is very confusing with its steps.

So i have

PC ---> ssh VS on bigip1 ---> ssh bigip2.

I understand i need to add PC public key to bigip2 authorized keys, but i cant find nor create that dir using mkdir..

And then I need to add pub key of bigip1 to proxy client auth in ssh proxy I guess and public key of PC to bigip1 as well?

And what goes into the real server key option?