The SSH hopper machine accepts SSH connections from anywhere on the Internet. Once successfully logged in to the hopper machine, you can establish secure connections to other CIT Unix systems via SSH. For graphical applications on Unix, X11 tunneling can also be used.

The SSH hopper is a good option for making secure connections if your machine doesn't support VPN or you don't have it installed.

Individuals with user IDs defined in SFAM and who are enrolled in Two-Step Login can connect to the hopper machine. SFAM is the Server Farm Accounts, not Kerberos or Active Directory. 

To obtain an SFAM ID send an email to systems-support@cornell.edu.

Make an SSH Connection Using the Hopper Machine

The following procedure illustrates an example using a sample SSH client. The actual steps and program options may be different, depending on the SSH client you use. The example below uses PuTTY.

1. If necessary, download and install an SSH client. (An SSH client is available from putty.org.)
2. Start the SSH client.
3. Select hopper and click Open.
   
4. The first time you connect, a PuTTY Security Alert window will display. Click Accept.
   
5. In the PuTTY window, next to the login as line, enter your NetID and press enter on your keyboard.
   
6. Next to the Password line, enter your password and press enter on your keyboard.
   
7. Next to the Passcode or option (1-4) line, enter the number corresponding to the two-factor authentication method you will use and press enter on your keyboard. 
   
8. Authenticate with (Duo) two-factor authentication. If successful, PuTTY will display as shown below. 
   
9. At the prompt, enter the ssh command for the server you want to connect to, for example, ssh wherever.cit.cornell.edu.