SecureCRT thru Windows Jump Server

[inajmi]

Hi Team

Today a new firewall policy was applied and i lost the ability to ssh into my server directly. Now i need to RDP into a Windows Server and from there i have to use SSH.

Is there any way where I can use SecureCRT to tunnel the SSH thru the windows JS.


Thanks

[berdmann]

inajmi,

As long as the Windows Server is an SSH2 server and supports port forwarding, you can likely use a Dependent Session to connect to your server through the Windows server.

Please refer to our YouTube video, "SecureCRT Dependent Sessions (Jump host)", for additional information:

https://youtu.be/XHOVTuv-LKY

[inajmi]

AFAIK the windows jump server has no ssh server in it. Is there any other way?

Thanks

[berdmann]

Hi inajmi,

Can you please elaborate on how you are connecting from the Windows Server to the destination host?

You said that you are RDP into the Windows machine? Are you running SecureCRT on the Windows Server?

[inajmi]

At this point I am using putty on the windows server. I will be installing Secure CRT on the Windows Server shortly if approved.

Thanks

[berdmann]

Hi inajmi,

The use of SecureCRT is not allowed in terminal server or similar environments where the Software is located on a central server and accessed by multiple computers or client accounts unless authorized by VanDyke Software, Inc. If you desire authorization to use the Software in a terminal server environment, please send your request to licensing@vandyke.com

[inajmi]

Hi

Thanks for letting me know. I will ask the team not to install it.

In any case, is it possible to tunnel the ssh thru windows Jump Server.


Thanks

[berdmann]

Hi inajmi,

I am not sure what it is that you are trying to accomplish.

You said that you are connecting to the Windows server via RDP and that you are currently using Putty to connect to the desired remote host from there.

It sounds like you are wanting to replace Putty with SecureCRT in order to connect to the desired remote host, after RDP'ing to the Windows server. Is this correct?

If so, you will need to send a request to licensing@vandyke.com to run SecureCRT on a terminal server.

If not, can you please elaborate on what it is you are trying to accomplish with SecureCRT?

[inajmi]

Hi Britney

What I want to achieve is to connect to the Linux Server using SecureCRT on my MAC by tunneling it thru the windows server.

I am not planning to replace putty on the JS (Windows Server)

Thanks

[berdmann]

Hi inajmi,

There is not a way to use SecureCRT to tunnel through your RDP connection to the Windows machine.

The only way that you would be able to use SecureCRT to connect to the Linux server through the Windows Server would be to install an SSH server, such as VShell (our secure shell server) on the Windows machine.

I hope this information is helpful. Have a great day!

[slouw]

This feature
https://youtu.be/XHOVTuv-LKY
is SO COOL!!!!

[jdev]

Originally Posted by slouw

This feature
https://youtu.be/XHOVTuv-LKY
is SO COOL!!!!

Thanks for sharing your excitement about the Dependent Sessions feature in SecureCRT.

--Jake

[slouw]

I have a jump host which is a Cisco device
SSH has to eminate from there on a certain VRF
It would seem to me this feature cannot accommodate such a requirement....?

[cboyack]

Originally Posted by slouw

I have a jump host which is a Cisco device
SSH has to eminate from there on a certain VRF
It would seem to me this feature cannot accommodate such a requirement....?

Hi slouw,

What exact error are you encountering in your attempts to have a session connected to this jump host operate as a dependent session?

Does the Cisco device support/allow SSH port forwarding?

In terms of controlling with VRF to use for establishing forwarded connections, that isn't something that can even be conveyed from an SSH client to an SSH server.

Since it's not likely possible to control the emanating VRF with port forwarding, it's likely that you won't be able to use dependent sessions; you'll likely have to use SecureCRT's Logon Actions to drive a simple "Expect/Send" command sequence to get you connected to the secondary host. For an example of how this can be accomplished, please visit this existing post.

[jdurrett]

One possible solution requires that you have an ssh service running on your local system.


1. Laptop with ssh service (unblocked by firewall or anti-virus rules)

2. Connect RDP to virtual desktop
From Virtual desktop, use putty to connect back to your laptop and setup reverse port forward

In PuTTY go to Settings -> Connection -> SSH -> Tunnels. You can add port forwards there. For reverse forward, enter source port, and destination, but choose 'Remote' instead of 'Local'.

In your case, put 6000 in to source port, localhost:7000 in the Destination, and choose Remote.

3. Laptop: Create in Global Options Firewall rule with port that is acting as forward
4. create session that uses your proxy tunnel, destination is the system downstream from the RDP box that you want to reach.
Login.

Cheers.