To gain remote access to a machine behind a NAT, you have quite a few options. Some of the better ones include: Open a static port at the router. Use a VPN. Both of these top options require some preplanning. Sometimes I want a method that is considerably more temporary or ad-hoc, so heres another option: Initiate a reverse tunnel to any old SSH host and expose a public port via the GatewayPorts option. I like this third option for several reasons: It doesn’t require you to open any static ...