堡垒机客户端远程连接

import paramiko

# 堡垒机配置
jump_host = {
    'hostname': 'jump.example.com',
    'port': 22,
    'username': 'jump_user',
    'password': 'jump_password'
}

# 目标系统配置
target_host = {
    'hostname': 'target.example.com',
    'port': 22,
    'username': 'target_user',
    'password': 'target_password'
}

# 创建SSH客户端
ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())

# 连接堡垒机
ssh.connect(**jump_host)

# 创建代理跳板
transport = ssh.get_transport()
dest_addr = (target_host['hostname'], target_host['port'])
local_addr = ('localhost', 2222)
channel = transport.open_channel("direct-tcpip", dest_addr, local_addr)

# 连接目标系统
target_ssh = paramiko.SSHClient()
target_ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
target_ssh.connect('localhost', port=2222, username=target_host['username'], password=target_host['password'])

# 执行命令
stdin, stdout, stderr = target_ssh.exec_command('ls -l')
print(stdout.read().decode())

# 关闭连接
target_ssh.close()
ssh.close()