堡垒机-跳板

1.生成密钥对（需要多少对，生成几次）

ssh-keygen -q -t rsa -N "" -f  /root/.ssh/id_rsa 

2.堡垒机配置

#!/bin/bash

stty intr undef
echo ""
echo ""
echo -e "q or exit for QUIT"
echo ""
echo "Welcome To Jumphost!"

usage () {
        echo "Error, Please Input Again. "
        chkip
}
exit() {
        exit 0
        trap "bye bye!" 11
}

chkip () {
        read -p "Please Enter A Remote IP:" IP
        [ "$IP" == "exit" ]|| [ "$IP" == "q" ] && exit
        echo -e "$IP" | grep -q '[^0-9.]' && usage
        [ "$IP" == "" ] && usage
        [ $(echo -e "${IP//./
}" | wc -l) -ne 4 ] && usage
        for i in ${IP//./ } ; do
                [ $((i/8)) -lt 32 ] || usage
        done
        link
}

link() {
        echo "ssh to $IP"
        ssh -p36899 root@$IP
        chkip
}


chkip
stty intr ^c

cleans() {
        echo "user cancelled, exit... "
}

trap "{ cleans;  }" 1 2 3 6 9 15

3.服务器端限制只允许堡垒机IP登录

echo "sshd:堡垒机IP地址" >> /etc/hosts.allow
echo "sshd:all" >> /etc/hosts.deny

 效果图示：