Skip to main content

Connect to Server Farm Machine: SSH via Hopper

This article applies to: Managed Servers


The SSH hopper machine accepts SSH connections from anywhere on the Internet. Once successfully logged in to the hopper machine, you can establish secure connections to other CIT Unix systems via SSH. For graphical applications on Unix, X11 tunneling can also be used.

The SSH hopper is a good option for making secure connections if your machine doesn't support VPN or you don't have it installed.

Individuals with user IDs defined in SFAM and who possess a SecurID key fob can connect to the hopper machine. SFAM is the Server Farm Accounts, not Kerberos or Active Directory. The SecurID key fob is a Two-Factor Authentication mechanism.

To obtain an SFAM ID or key fob send email to systems-support@cornell.edu.

Make an SSH Connection Using the Hopper Machine

The following procedure illustrates an example using a sample SSH client. The actual steps and program options may be different, depending on the SSH client you use.

  1. If necessary, download and install an SSH client. (An SSH client is available from putty.org.)
  2. Start the SSH client.
  3. Click Quick Connect.

    sshconnect
  4. In Connect to Remote Host window, in the Host Name box, enter the name of the hopper machine, hopperrdp.cit.cornell.edu. In the User Name box, enter your NetID, and then click Connect.

  5. In the Host Identification window, click Yes. (You'll only see this window the first time you connect.)

  6. In the Enter Password window, enter your LDAP password.
  7. After you enter your password, the SSH Client prompts you to enter your passcode. Your passcode is your PIN number followed by the number from your SecureID keyfob. Do not put a space between the numbers. Continue with Step 10.
    Note: If you do not have a PIN, enter just the number from your SecurID keyfob. You'll be prompted to create a PIN. Continue with Step 8.

  8. If you need to set up a PIN, you'll be asked if you're ready to enter a new PIN. Enter Y. Next you'll be prompted to enter a PIN and then to confirm it. Your PIN should be 4-8 digits long.

  9. After you enter your PIN, the SSH Client prompts you to enter a new passcode. Your passcode is your PIN number followed by the number from your SecureID keyfob. Do not put a space between the numbers.

  10. The SSH Client displays PASSCODE accepted. At the prompt, enter the ssh command for the server you want to connect to, for example, ssh wherever.cit.cornell.edu.

Was this page helpful?

Your feedback helps improve the site.

Comments?