# Current state of pivoting through a jumpbox

**URL:** <https://forum.ansible.com/t/current-state-of-pivoting-through-a-jumpbox/16470>\
**Category:** Ansible Project\
**Created:** [October 8, 2014, 6:13pm UTC](https://forum.ansible.com/t/current-state-of-pivoting-through-a-jumpbox/16470 "2014-10-08T18:13:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![andrew2](https://avatars.discourse-cdn.com/v4/letter/a/58956e/32.png) [@andrew2](https://forum.ansible.com/u/andrew2)\
**Post date:** [October 8, 2014, 6:13pm UTC](https://forum.ansible.com/t/current-state-of-pivoting-through-a-jumpbox/16470/1 "2014-10-08T18:13:38Z")

</div>

Hi everyone,

First-time poster here. I’d like to have Ansible on one subnet pivot through a jumpbox to a different subnet (technically a separate datacenter) for provisioning a host.

I found posts such as this:

[https://groups.google.com/forum/#!searchin/ansible-project/jumpbox/ansible-project/-whVJFjYESg/LTf6dRzoFUsJ](https://groups.google.com/forum/#!searchin/ansible-project/jumpbox/ansible-project/-whVJFjYESg/LTf6dRzoFUsJ)

and this:

[http://alexbilbie.com/2014/07/using-ansible-with-a-bastion-host/](http://alexbilbie.com/2014/07/using-ansible-with-a-bastion-host/)

The machine being provisioned has an internal IP and provisioning fails with ‘FAILED: [Errno 101] Network is unreachable’. This makes sense since these are separate networks and we don’t use a VPN. What confuses me is why Ansible isn’t pivoting.

This is maybe a complicated setup (and an edge-case at that), so any advice as to alternative methods will also be taken into consideration. Maybe there’s even an “accepted” way to do this that I don’t know about. We are also open to simply having an Ansible provisioning box at our secondary location.

Best regards,

Andrew

---

<div class="post-metadata">

**Author:** ![user32](https://avatars.discourse-cdn.com/v4/letter/u/43a26b/32.png) [@user32](https://forum.ansible.com/u/user32)\
**Post date:** [January 23, 2015, 9:15am UTC](https://forum.ansible.com/t/current-state-of-pivoting-through-a-jumpbox/16470/2 "2015-01-23T09:15:48Z")

</div>

Andrew, try to create public SSH bastions for every Amazon VPC you have at the moment. So you will have an ability to provision any private node over appropriate Bastion from Ansible playbook.

The ony problem will be to tell Ansible to reload ssh\_config on-the-fly if you would like to generate it from playbook and use at farther steps of the same playbook.