ASA: SCP Through a Bastion to an Unmanaged Server
Last Updated:
Okta Classic Engine
Okta Identity Engine
Advanced Server Access
Overview
With a bastion, users can log in to a non-ASA managed server. This article shows how to copy files to the unmanaged server.
Applies To
- Advanced Server Access (ASA)
- Client (sft)
- Bastion (sftd)
- Linux Server (local account)
Solution
A tunnel needs to be created to scp the files to the unmanaged server. Following are the steps:
- Create the tunnel (Any unused port can be used, for example, 8787).
sft ssh -L 8787:<Unmanaged_target_server>:22 <Bastion>
- The files can be copied through another terminal session once the tunnel is created. The port specified in the command below needs to match the one above 8787.
scp -P 8787 <file> <target_server_local_account>@127.0.0.1:
