From d125f4d96762711b4a39607498080958303e042b Mon Sep 17 00:00:00 2001
From: lousab <lousab@batcave01.phx2.fedoraproject.org>
Date: Jul 08 2016 20:01:39 +0000
Subject: Adding PuTTY How to and ProxyCommand graphical explanation


---

diff --git a/sshaccess.rst b/sshaccess.rst
index b73043b..df4e90b 100644
--- a/sshaccess.rst
+++ b/sshaccess.rst
@@ -71,6 +71,39 @@ modifying the second Host line::
 
   Host *.phx2.fedoraproject.org 10.5.125.* 10.5.126.* 10.5.127.* *.vpn.fedoraproject.org puppet01 noc01 # list all hosts here
 
+How ProxyCommand works?
+
+A connection is established to the bastion host
+
++-------+            +--------------+
+|  you  | ---ssh---> | bastion host |
++-------+            +--------------+
+Bastion host establish a connction to the target server
+
++--------------+                +--------+
+| bastion host | -------> | server |
++--------------+                +--------+
+Your client then connects through the Bastion and reaches the target server
+
++-----+                  +--------------+                +--------+
+| you |                  | bastion host |                | server |
+|     | ===ssh=over=bastion============================> |        |
++-----+                  +--------------+                +--------+
+
+PuTTY SSH configuration
+=======================
+
+You can configure Putty the same way by doing this:
+
+0.In the session section type batcave01.phx2.fedoraproject.org port 22
+1.In Connection:Data enter your FAS_USERNAME
+2.In Connection:Proxy add the proxy settings
+.ProxyHostname is bastion.fedoraproject.org
+.Port 22
+.Username FAS_USERNAME
+.Proxy Command plink %user@%proxyhost %host:%port
+3.In Connection:SSH:Auth remember to insert the same key file for authentication you have used on FAS profile 
+
 SSH Agent forwarding
 ====================