Your could do this with the following: * ssh to bastion using your keys, and include a port forward from localhost to target * ssh to forwarded port on localhost using target key. Note that if this is for automation of tasks, you may need to keep the first connection going while starting the second. Once the second connection is going, the first one will not close fully until the tunnel is no longer in use. Thanks, Jok