How to setup a bastion host

A bastion host is a special-purpose computer on a network specifically designed and configured to withstand attacks, so named by analogy to the bastion, a military fortification.

Setting up a bastion host inside an on-prem network

1- Prepare either a dedicated machine or a VM (bastion host)

2- Install any of the following operating systems: Debian/Fedora/Ubuntu

3- Setup a VPN access to the host

4- Provide access to the host via SSH

5- Provide all of that access information through the Pentest Checklist

Here is a quick diagram to explain the role and function of the bastion host