Most often it makes more sense to map the same ports on every intermediate machine. 1Host super 2 Hostname super.machine.location.is 3 IdentityFile ~/.ssh/mykey 4 User myuser 5 LocalForward 8001 localhost:8001 6 LocalForward 8002 localhost:8002 7 LocalForward 8003 localhost:8003 8 LocalForward 8004 localhost:8004 This is good for interactive sessions with multiple servers. For single servers, reverse proxy tunnels are more efficient.